last executing test programs: 11m53.091232914s ago: executing program 32 (id=771): r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, &(0x7f0000006ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002100)=""/1, 0x1}, 0x8}], 0x40001b0, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="0216000002"], 0x10}}, 0x0) 6m18.383179456s ago: executing program 33 (id=1802): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) memfd_create(0x0, 0x0) ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000d53000/0x2000)=nil, 0x2000, 0x3000002, 0x20012, 0xffffffffffffffff, 0x100000000) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x5) setsockopt$inet_tcp_int(r2, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r2, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000000c0)=[{0x0}], 0x1}}], 0x1, 0x20008000) r3 = socket$netlink(0x10, 0x3, 0x0) connect$netlink(r3, &(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc) sendmsg$NL80211_CMD_SET_MCAST_RATE(r3, &(0x7f0000000440)={&(0x7f0000000280), 0xc, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000227bd7000ffdbdf255c00000008000300", @ANYRES32=0x0, @ANYBLOB="0800430b0000000000006b00f000000008006b001c02000008006b003c00000008006b000a0000"], 0x44}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff9e440b4", "881aae83544dfa6412f91b9057e3f415", "01019002", "9ecb592c6ee49fbd"}, 0x28) socket$kcm(0x10, 0xe90d7e3c28e7031, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(0xffffffffffffffff, 0x80049367, &(0x7f0000000240)) creat(&(0x7f00000001c0)='./file0\x00', 0x8) dup(0xffffffffffffffff) 6m15.344427848s ago: executing program 34 (id=1816): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, 0x0, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x4, 0x10, &(0x7f0000000000)="8b480485ba1db7113174de71d883b3b0") sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x6, &(0x7f0000000140)={0x14, {{0x29, 0x0, 0x8000000, @private2}}}, 0x88) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$igmp6(0xa, 0x3, 0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f0000000800)={'sit0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0xb6, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x200, 0x29, 0x63, 0x90, 0x10, 0x1a86, 0x752d, 0x2d4d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xe9, 0x11, 0xbd}}]}}]}}, 0x0) syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) 5m36.569012965s ago: executing program 35 (id=1907): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) epoll_create1(0x80000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x60600, 0x0) write(r1, &(0x7f0000000280)="410adc721b1ca19aa997f2bc0795ac01e9424d6c2d95aa117256a66b49e885fb54260d5be52b7a8836807f69ad98c20b285746369a2296055a5012bb7582c9d313f5439a606ca9634c0de29a6da2546747d3c51bb63474f5ab5e1a94bf626499085301377c0cc1c2d30869127798facd493a3486978bf74d7177ee993b6407aad4fe87a31b98d6c21a49b3f4858354020d915fe14f059dafefe7281c4303f578cebcacad91f757e8c9339a", 0xab) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x600, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}}, @common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe760]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x660) ioctl$TCSETSF(0xffffffffffffffff, 0x5404, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) timer_create(0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) 4m42.805040297s ago: executing program 36 (id=2035): fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000340)={0x0, 0xaee2, 0x3c00, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x1223}}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x240000c0) fchdir(0xffffffffffffffff) mknod$loop(0x0, 0x0, 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) 4m34.832807917s ago: executing program 37 (id=2055): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000040)='.\x00', 0x449) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) inotify_add_watch(r1, &(0x7f00000001c0)='./file0\x00', 0x80000006) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x201, 0x4800003e, r3, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x108242, 0x106) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_udp(0xa, 0x2, 0x0) close(0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b00000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='\a'], 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000000a499d0000000000000000020000010900010073797a31000000000800"], 0x54}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r8, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c895}, 0x20000000) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xab, 0xaf, 0xb5, 0x20, 0x481, 0x9f2e, 0x755b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0x6f, 0x0, 0x0, 0xe0, 0x1, 0x3, 0x2}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 4m24.758091131s ago: executing program 38 (id=2073): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 4m1.983168377s ago: executing program 39 (id=2103): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x262200, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r6}, 0x10) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x10, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000000000000000000b00000000020000000000"], 0x0, 0x34, 0x0, 0xa}, 0x28) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r2, &(0x7f00000002c0)={0xf0006000}) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xfc}}, 0x14) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) close(r7) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3) 3m25.482934852s ago: executing program 40 (id=2139): arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa6}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x1e, 0x1, 0x0) listen(r2, 0x5) syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="a800000000010104000000000000000002000001240001801400018008000100e000000108000200e00000010c000280050001000000000008000840"], 0xa8}, 0x1, 0x0, 0x0, 0x400d0}, 0x0) 3m23.960530842s ago: executing program 9 (id=2175): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 3m19.934915107s ago: executing program 9 (id=2180): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x10, 0x2, &(0x7f0000000100)=@raw=[@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x2f}, @jmp={0x5, 0x0, 0x9, 0x0, 0x6, 0xfffffffffffffe88}], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8d, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b59500000000000000000a000000", @ANYRES32, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c0000140001"], 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4008040) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)={0x24, 0x0, 0x2, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x5}}, ["", "", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8800) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl(r2, 0x1, &(0x7f00000001c0)="0feb79dba4d547dbfc1dd208eaa30956048fec8af59ac89db5fa9990264676e2986faafd3ea5dae7bc92a1bc24e351e85f1d5bd5ddeaca8f55b490bd77a9bdc487") socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @broadcast}}, 0x80000001, 0x7ff, 0x24e, 0x80000000, 0x5}, &(0x7f0000000300)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT_TABLE(0xffffffffffffffff, 0x0, 0xcf, &(0x7f00000000c0)=0xff, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r5, &(0x7f0000000540)={@val={0x0, 0x800}, @val={0x1, 0x5, 0x6, 0x3, 0x80, 0x5}, @mpls={[], @ipv6=@icmpv6={0x2, 0x6, "a88a5c", 0x38, 0x3a, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x26}, {[], @dest_unreach={0x1, 0x5, 0x0, 0x6, '\x00', {0x4, 0x6, "31ef2d", 0x2, 0x0, 0x1, @private0, @mcast1, [@hopopts]}}}}}}, 0x6e) unshare(0x20000400) socket(0xa, 0x3, 0x87) 3m18.918584599s ago: executing program 9 (id=2181): r0 = io_uring_setup(0x6afe, &(0x7f0000000a80)={0x0, 0xa949, 0x1000, 0xfffffffd, 0x179}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) eventfd2(0x65c, 0x80000) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x200a, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r5, &(0x7f0000000000), 0x0, 0x4044081, 0x0, 0x0) recvfrom(r5, 0x0, 0x0, 0x40000061, 0x0, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="738834385b8a630f73567facf7fcbe38a1cdd985453e263d6f56bc574452941934aa008bffa462f6d4346b341f700bd5d1a749f13df2262b7b4036d15619d4d746084d226866e3a7904b1fdb3dbee8ceb1c4342f6267ac0f2e808664217f31", 0x5f}], 0x1) shutdown(r1, 0x0) recvmsg(r5, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000400)=[@enter_looper], 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001000)={0x0, 0x20, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000500000000007c0008807800008006000500002000004800098028000080060001000a0000001400020000000000000000000000ffffac1414bb050003000200000000000080010001000200000008000200e00000010500030000000000240001"], 0xd0}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r10 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x45, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) sendmsg$NFT_BATCH(r5, 0x0, 0x80) close_range(r0, 0xffffffffffffffff, 0x0) 3m18.424874972s ago: executing program 41 (id=2156): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) r0 = syz_open_dev$usbfs(0x0, 0x76, 0x101301) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x92e2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/xfrm_stat\x00') read$FUSE(r3, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f000001c380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="58000000070a010100000000000000000300000324000580080001400000001a080001400000005e08000140000000000800024000325b5300000208000b4000000004"], 0x58}, 0x1, 0x0, 0x0, 0x8c0}, 0x4000) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)=""/18, 0x12) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) open(&(0x7f0000000840)='./file1\x00', 0x2800, 0x71) syz_io_uring_submit(0x0, 0x0, 0x0) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r4, 0x8994, &(0x7f0000000000)={'bond0\x00', @ifru_hwaddr=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 3m16.339972371s ago: executing program 9 (id=2185): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f00030000000800260008"], 0x40}}, 0x0) 3m14.962147054s ago: executing program 9 (id=2187): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000005e00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x78, 0x0, 0x6, {0xfeffffffffffffff, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0x0, r3, r4, 0x3, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$tcp_congestion(r5, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r5, r1) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0x541b, &(0x7f0000000000)={0xffffffffffffffff}) close_range(r6, 0xffffffffffffffff, 0x0) 3m13.619612164s ago: executing program 1 (id=2189): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[], 0x0) 3m13.208766801s ago: executing program 9 (id=2190): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x1c3, 0x12) 3m9.500295714s ago: executing program 1 (id=2192): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2f, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x1, "a324647ae3941d1747380b57bb23a78bd1175c15533631d10cd068c525e1cdf1", "6868aaf371b13a6a21324c50a094ab38785b31fe60b985a578ad106fd0eafef54485b61e1df4a065c451bf0f24279510", "7d8608ddf3268d2045b27ebf8ee672bc4421549386a5a5903b20b9f4", {"96775e3b6484c1851f6984768a7bb2fb", "412a7c8e5fffae9a88c46a3056c4319a"}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, '\x00', 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x7, 0x0, 0x3}}}}}}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac9", 0x3}], 0x1}}], 0x1, 0x4000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0xffffffff9673e35d]}}) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f000000e280)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xc3d, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x1, 0x6, 0x431, 0x7, 0x6, 0x40, 0x10001, 0xfff}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80015}, 0x4000) sendmsg$inet(r4, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) 3m8.059202542s ago: executing program 1 (id=2193): r0 = io_uring_setup(0x6afe, &(0x7f0000000a80)={0x0, 0xa949, 0x1000, 0xfffffffd, 0x179}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) eventfd2(0x65c, 0x80000) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e22, 0x200a, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}, 0x6}, 0x1c) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r5, &(0x7f0000000000), 0x0, 0x4044081, 0x0, 0x0) recvfrom(r5, 0x0, 0x0, 0x40000061, 0x0, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100)="738834385b8a630f73567facf7fcbe38a1cdd985453e263d6f56bc574452941934aa008bffa462f6d4346b341f700bd5d1a749f13df2262b7b4036d15619d4d746084d226866e3a7904b1fdb3dbee8ceb1c4342f6267ac0f2e808664217f31", 0x5f}], 0x1) shutdown(r1, 0x0) recvmsg(r5, &(0x7f0000001800)={0x0, 0x0, 0x0}, 0x1) ioctl$KVM_RUN(r4, 0xae80, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000400)=[@enter_looper], 0x0, 0x0, 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r8, &(0x7f0000001000)={0x0, 0x20, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000500000000007c0008807800008006000500002000004800098028000080060001000a0000001400020000000000000000000000ffffac1414bb050003000200000000000080010001000200000008000200e00000010500030000000000240001"], 0xd0}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) r10 = dup3(r7, r6, 0x0) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f00000003c0)={0x45, 0x0, &(0x7f0000000240)=[@acquire], 0x0, 0x0, 0x0}) close_range(r0, 0xffffffffffffffff, 0x0) 3m6.210412775s ago: executing program 1 (id=2195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) 3m4.970298119s ago: executing program 1 (id=2197): syz_clone(0x50004400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r0], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x0) 3m3.967322252s ago: executing program 1 (id=2198): socket$nl_generic(0x10, 0x3, 0x10) openat$mixer(0xffffffffffffff9c, 0x0, 0x101403, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = dup(r2) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0x8000000}) r4 = bpf$MAP_CREATE(0x3f000000, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r5, 0x0, 0xffffffff}, 0x18) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0xffffffff, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x50) 2m57.100251919s ago: executing program 42 (id=2190): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) ioctl$TIOCMGET(0xffffffffffffffff, 0x541e, &(0x7f0000000040)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r1, &(0x7f00000000c0)=0x1c3, 0x12) 2m48.30152234s ago: executing program 43 (id=2198): socket$nl_generic(0x10, 0x3, 0x10) openat$mixer(0xffffffffffffff9c, 0x0, 0x101403, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGRAB(0xffffffffffffffff, 0x40044590, &(0x7f00000001c0)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = dup(r2) ioctl$USBDEVFS_GET_SPEED(r3, 0x551f) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000000c0)={0x0, 0xc000}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0x8000000}) r4 = bpf$MAP_CREATE(0x3f000000, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x4}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mem_disconnect\x00', r5, 0x0, 0xffffffff}, 0x18) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x1, 0x0, &(0x7f0000000000)="ff", 0x0, 0xffffffff, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4000}, 0x50) 1m58.209190858s ago: executing program 7 (id=2296): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 1m57.405971422s ago: executing program 7 (id=2298): r0 = socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x3c}, @remote, @remote, 0x9, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r3}) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000100)=0x9, 0x4) sendto$packet(r0, &(0x7f0000000380)="02034a64022895f20506ab5a048a2a", 0xf, 0x0, &(0x7f0000000140)={0x11, 0x17, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 1m56.612001794s ago: executing program 7 (id=2299): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, 0x0, 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000080)={0x1f}, 0x0, 0x0) 1m56.203226918s ago: executing program 3 (id=2300): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r2, &(0x7f0000000380)=@abs, &(0x7f00000000c0)=0x6e, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = eventfd(0x5) r8 = eventfd(0x3) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000100)={r7, 0x7, 0x0, r5}) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000140)={r8, 0x9}) r9 = dup3(r4, r6, 0x0) fstatfs(r3, &(0x7f00000003c0)=""/253) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="0000040000000b0f0667"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f0000000200)=0x80) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000300012800b00010065727370616e000020000280040012000500160002000000060018"], 0x50}}, 0x0) 1m53.56982699s ago: executing program 3 (id=2303): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000016038308c5109a8146e40102230109022d0001000000000904000003030000000905be3b"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x10, 0x8, 0xf8, 0xf, 0x0, 0x1d}}}, 0x0) 1m53.139320942s ago: executing program 7 (id=2305): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_io_uring_setup(0xa0, &(0x7f0000000240)={0x0, 0x89b8, 0x8, 0x0, 0x133}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1m51.82991034s ago: executing program 7 (id=2308): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10) 1m51.484237734s ago: executing program 3 (id=2310): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/oops_count', 0x26243, 0x103) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWTABLE={0xc4, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_USERDATA={0xad, 0x6, "c2796f79958f7e0d246b638e9b7810eefc3d86ff073d44ad2e4639ff87b4dc4213e9cc83a83190f3727fdca908ebd86ed58f7cd50e2a272360eb2475720ff1f5fc5328d9819d753dac63964354bb389080c7a61f6cdbba2442c48630516f352ae949b7b43c15c967217676febf03980847d7fdc50d175d88d0db263fce189ad1a340f76308924500a1d045909356382a2b4269600ad7ce6e71636645630f5e990b01a0e586046aa980"}]}, @NFT_MSG_DELCHAIN={0x20, 0x5, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}], {0x14}}, 0x10c}}, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m51.06215471s ago: executing program 7 (id=2312): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="dc05ee057ada978f61034835c9655cc8f5553beda9f730e151772060ac74b31cd73d524a83d2278bcacaf9ccf186df9ce51f99f2e19707bd19279dea3a989ab3c0bcffcfba1b5cdd4eb33ba40f0198d12e4108f58d9942e2a7a2efac7ed3d4a8ba0211be34077582823b52cea03ece14b22f2f5754", @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r1) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x3, 0x54}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000100000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) close(r2) 1m49.812179596s ago: executing program 3 (id=2314): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xb90}, 0x1, 0x0, 0x0, 0x400c010}, 0x20004000) recvmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001680)=""/4084, 0xff4}], 0x1}, 0x12041) 1m48.418401748s ago: executing program 3 (id=2316): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x14, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 1m45.960452868s ago: executing program 3 (id=2320): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 1m35.137377753s ago: executing program 44 (id=2312): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="dc05ee057ada978f61034835c9655cc8f5553beda9f730e151772060ac74b31cd73d524a83d2278bcacaf9ccf186df9ce51f99f2e19707bd19279dea3a989ab3c0bcffcfba1b5cdd4eb33ba40f0198d12e4108f58d9942e2a7a2efac7ed3d4a8ba0211be34077582823b52cea03ece14b22f2f5754", @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r1) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x3, 0x54}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000100000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) close(r2) 1m31.092778142s ago: executing program 8 (id=2348): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r2, 0x0) connect$unix(r1, &(0x7f0000932000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4$unix(r2, &(0x7f0000000380)=@abs, &(0x7f00000000c0)=0x6e, 0x800) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = eventfd(0x5) r8 = eventfd(0x3) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000100)={r7, 0x7, 0x0, r5}) ioctl$KVM_IRQFD(r6, 0x4020ae76, &(0x7f0000000140)={r8, 0x9}) r9 = dup3(r4, r6, 0x0) fstatfs(r3, &(0x7f00000003c0)=""/253) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="0000040000000b0f0667"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$TIOCSSOFTCAR(r9, 0x541a, &(0x7f0000000200)=0x80) 1m30.677259661s ago: executing program 45 (id=2320): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, 0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) 1m27.211092307s ago: executing program 8 (id=2352): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp6\x00') r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0), 0x0) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000080)={0x1f}, 0x0, 0x0) 1m25.538017052s ago: executing program 8 (id=2355): openat$mice(0xffffffffffffff9c, 0x0, 0x41) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000000c0), 0x214004, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1m24.660344273s ago: executing program 8 (id=2356): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004f1ffff030b00000c006dcb1a", @ANYRES32=0x0, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x0, 0x2e, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000005680), 0x0, 0x40000040, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), 0x0}, 0x20) ftruncate(0xffffffffffffffff, 0x2007ffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x3) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7}, 0x1c) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[], 0x0) 1m23.651021126s ago: executing program 8 (id=2358): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={0x0, &(0x7f0000000480)=""/107, 0x137, 0x6b, 0x1, 0x80, 0x10000}, 0x28) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000080)=0x6, 0x26) recvmmsg(r0, &(0x7f0000000300), 0x40000000000049e, 0x1000000000fe, 0x0) 1m22.278820641s ago: executing program 8 (id=2361): socket(0x1e, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x3c) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000100)="89818dbd36a27fdbefbd00632b", 0xd, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 1m5.902127882s ago: executing program 46 (id=2361): socket(0x1e, 0x2, 0x0) socket$kcm(0x2, 0x5, 0x84) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x3c) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c00000000000000000000000000000000000000000000000000000001"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000100)="89818dbd36a27fdbefbd00632b", 0xd, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 31.782661627s ago: executing program 6 (id=2426): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x10) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r5, 0x0) 21.788836293s ago: executing program 6 (id=2439): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x9800) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000400000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000100000000030073797a320000000014000000110001", @ANYRESOCT=r0, @ANYRES64=r2, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES32=r2, @ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a3000000000"], 0x88}}, 0x0) statx(r0, 0x0, 0x400, 0x400, 0x0) r4 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGFEATURE(r4, 0xc0404807, &(0x7f0000000080)={0x5, "da8019dea5c88d695f73e31c18f0c7c7fdac910ee2000e08b73b53930efb1a00"}) 18.217066138s ago: executing program 6 (id=2446): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x100) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r0, 0xc0505405, &(0x7f00000000c0)={{0x3, 0x2, 0xffff042c, 0x2, 0xf}, 0x3, 0x334, 0x2}) 17.53583574s ago: executing program 6 (id=2449): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0x0, 0x8000) creat(&(0x7f0000000040)='./file0\x00', 0x0) fanotify_mark(r4, 0x1, 0x1, 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 15.154291329s ago: executing program 2 (id=2453): syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)="da467702e2520108dcebc5560e4f93142974b51221138c2cdf5b4d5781", 0x1d}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) write$P9_RSTATu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x232) sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 13.835455306s ago: executing program 2 (id=2455): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={0x0, 0x80}, 0x1, 0x7}, 0x0) 13.140551642s ago: executing program 2 (id=2456): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x9800) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000400000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000100000000030073797a320000000014000000110001", @ANYRESOCT=r0, @ANYRES64=r2, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES32=r2, @ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) statx(r0, 0x0, 0x400, 0x400, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000080)={0x5, "da8019dea5c88d695f73e31c18f0c7c7fdac910ee2000e08b73b53930efb1a00"}) 12.79443438s ago: executing program 6 (id=2457): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(0xffffffffffffffff, 0x0, 0x1) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0xc8) 10.466231007s ago: executing program 5 (id=2464): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.742103341s ago: executing program 2 (id=2467): syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x50) times(0x0) r3 = gettid() timer_create(0x1, &(0x7f0000000900)={0x0, 0x21, 0x4, @tid=r3}, &(0x7f00000008c0)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) preadv(r4, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/188, 0xbc}], 0x1, 0x7, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) 9.272650621s ago: executing program 6 (id=2469): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32], 0x50) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00') r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x46}}, 0x14) read$FUSE(r2, &(0x7f00000060c0)={0x2020}, 0x2020) 8.056074133s ago: executing program 4 (id=2470): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x10, 0x8, 0xf8, 0xf, 0x0, 0x1d}}}, 0x0) 7.033004925s ago: executing program 5 (id=2473): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0xa) ioctl$TCFLSH(r1, 0x540b, 0x0) 6.434252176s ago: executing program 5 (id=2475): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = eventfd(0x5) r3 = eventfd(0x3) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000100)={r2, 0x7, 0x0, r1}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={r3, 0x9}) dup3(r0, 0xffffffffffffffff, 0x0) 5.952559366s ago: executing program 0 (id=2476): sendmsg$NL80211_CMD_SET_WDS_PEER(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1cdfff", @ANYRES16], 0x1c}, 0x1, 0x0, 0x0, 0x200488c1}, 0x850) syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa", @ANYRES32=0x41424344], 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a98", 0x3, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = dup(r3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x3, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.6138785s ago: executing program 5 (id=2477): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x9800) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0xf, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000400000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000100000000030073797a320000000014000000110001", @ANYRESOCT=r0, @ANYRES64=r2, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRES32=r2, @ANYRES32=r1], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) statx(r0, 0x0, 0x400, 0x400, 0x0) r3 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2) ioctl$HIDIOCGFEATURE(r3, 0xc0404807, &(0x7f0000000080)={0x5, "da8019dea5c88d695f73e31c18f0c7c7fdac910ee2000e08b73b53930efb1a00"}) 4.73646444s ago: executing program 0 (id=2478): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0xf, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xffe, 0x6, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xf, 0x2, 0x1}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f00000002c0)=ANY=[@ANYBLOB="00116a"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4.66266352s ago: executing program 4 (id=2479): syz_usb_connect(0x0, 0x24, 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) readahead(0xffffffffffffffff, 0x0, 0x1) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200040c1}, 0x8004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000040)=0x9) ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000080)=0xc8) 4.070763711s ago: executing program 2 (id=2480): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000600)=""/79, 0x0, 0x10000}) r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd0"], 0x0) syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0) 3.456229749s ago: executing program 0 (id=2481): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_io_uring_setup(0xa0, &(0x7f0000000240)={0x0, 0x89b8, 0x8, 0x0, 0x133}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r2, 0xc000000, &(0x7f0000000000), 0x0, 0x12}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 1.802393632s ago: executing program 4 (id=2482): openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x41) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') r1 = syz_open_procfs(0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000000c0), 0x214004, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 1.709991305s ago: executing program 0 (id=2483): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000404c05f20dafd60000000109022400010000000009040000010300010009210101000122050009"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000657"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000e40)={0x84, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRESOCT=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.114075325s ago: executing program 4 (id=2484): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100), &(0x7f0000000180)=0x6e, 0x800) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f00000000c0)='./file0\x00', 0x0, 0x4000, r0}, 0x18) bind$inet6(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000200)='/dev/comedi3\x00', 0x4000, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000000001e5ff0000400000000000000001000084060000000000000001"], 0x0, 0x42}, 0x20) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2842, 0x0) close(0x3) socket$igmp6(0xa, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x8, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x20080) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/kexec_crash_size', 0x1, 0xf) unshare(0x40280) setns(0xffffffffffffffff, 0x0) umount2(&(0x7f0000000000)='.\x00', 0x2) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000340)={r2, 0x0, {0x0, 0x0, 0x0, 0x100000000000006, 0x4000000000000ffe, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x4, 0xfcd1]}}) ioctl$LOOP_GET_STATUS(r1, 0x4c03, &(0x7f0000000280)) 1.078623634s ago: executing program 5 (id=2485): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8080, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000000)) r1 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x1) ioctl$TCFLSH(r1, 0x540b, 0x0) 594.159912ms ago: executing program 0 (id=2486): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000181200", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004f1ffff030b00000c006dcb1a", @ANYRES32=0x0, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/14], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x0, 0x2e, &(0x7f00000001c0)=ANY=[@ANYRESHEX=r2, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x18) recvmmsg(0xffffffffffffffff, &(0x7f0000005680), 0x0, 0x40000040, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), 0x0}, 0x20) ftruncate(0xffffffffffffffff, 0x2007ffa) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800000009) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x3) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) r5 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0xa}, 0x7}, 0x1c) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000004c0)=ANY=[], 0x0) 566.023691ms ago: executing program 4 (id=2487): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x8101, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = eventfd(0x5) r3 = eventfd(0x3) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000100)={r2, 0x7, 0x0, r1}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000140)={r3, 0x9}) dup3(r0, 0xffffffffffffffff, 0x0) 531.68811ms ago: executing program 5 (id=2488): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x12, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES32]) 436.360917ms ago: executing program 2 (id=2489): r0 = syz_usb_connect(0x2, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x10, 0x8, 0xf8, 0xf, 0x0, 0x1d}}}, 0x0) 104.638653ms ago: executing program 0 (id=2490): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000140)="280320000a00140000007ef52f555f2a0c9faaf9ba038035fbf700143baa111f1f858ce6790c1421", 0x28, 0x20000050, &(0x7f0000000080)={0x11, 0x86dd, r2, 0x1, 0xea, 0x6, @random="9f03e65feec9"}, 0x14) 0s ago: executing program 4 (id=2491): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e04"], 0x6) kernel console output (not intermixed with test programs): ing of bearer rejected, failed to enable media [ 845.760584][ T9] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 845.952910][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 845.963536][ T9] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 845.975378][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 845.986655][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 845.997174][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 846.163135][ T9] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 846.173057][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 846.181710][ T9] usb 9-1: Product: syz [ 846.185997][ T9] usb 9-1: Manufacturer: syz [ 846.190995][ T9] usb 9-1: SerialNumber: syz [ 846.236674][T10654] usb 1-1: bad CDC descriptors [ 846.288869][ T9] usb 9-1: config 0 descriptor?? [ 846.525545][ T9] radio-si470x 9-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 846.535601][ T9] radio-si470x 9-1:0.0: probe with driver radio-si470x failed with error -5 [ 846.871351][ T9] usb 9-1: USB disconnect, device number 3 [ 847.941563][ T5812] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 847.957307][ T5812] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 847.967680][ T5812] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 847.983729][ T5812] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 847.998809][ T5812] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 848.957550][T11755] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 849.347793][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 849.354673][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 849.369219][ T5434] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 849.617721][ T5434] usb 7-1: Using ep0 maxpacket: 32 [ 849.644799][ T5434] usb 7-1: config 0 has an invalid interface number: 250 but max is 2 [ 849.654212][ T5434] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 849.664995][ T5434] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 849.674074][ T5434] usb 7-1: config 0 has no interface number 0 [ 849.751662][ T5434] usb 7-1: New USB device found, idVendor=0408, idProduct=3090, bcdDevice=a6.3f [ 849.761266][ T5434] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 849.769402][ T5434] usb 7-1: Product: syz [ 849.773796][ T5434] usb 7-1: Manufacturer: syz [ 849.778506][ T5434] usb 7-1: SerialNumber: syz [ 849.791331][T11747] chnl_net:caif_netlink_parms(): no params data found [ 849.848955][ T5434] usb 7-1: config 0 descriptor?? [ 850.004104][T11760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2074'. [ 850.081369][ T5434] usb 7-1: USB disconnect, device number 4 [ 850.119804][ T5812] Bluetooth: hci3: command tx timeout [ 851.169522][T11766] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2075'. [ 851.373364][T11747] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.382001][T11747] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.389609][T11747] bridge_slave_0: entered allmulticast mode [ 851.398761][T11747] bridge_slave_0: entered promiscuous mode [ 851.540285][T11747] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.547919][T11747] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.555779][T11747] bridge_slave_1: entered allmulticast mode [ 851.564528][T11747] bridge_slave_1: entered promiscuous mode [ 851.930083][T11747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.059373][T11747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.206761][ T5812] Bluetooth: hci3: command tx timeout [ 852.315519][T11747] team0: Port device team_slave_0 added [ 852.332768][T11747] team0: Port device team_slave_1 added [ 852.481834][T11747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.488998][T11747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.518126][T11747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.541576][T11747] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.548741][T11747] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.576584][T11747] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 853.035367][T11747] hsr_slave_0: entered promiscuous mode [ 853.045219][T11747] hsr_slave_1: entered promiscuous mode [ 853.053389][T11747] debugfs: 'hsr0' already exists in 'hsr' [ 853.059277][T11747] Cannot create hsr debugfs directory [ 853.102591][T11772] 9pnet_fd: Insufficient options for proto=fd [ 853.195710][T11771] netfs: Couldn't get user pages (rc=-14) [ 853.240953][ T30] audit: type=1800 audit(1755772963.507:241): pid=11771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2077" name="/" dev="9p" ino=2 res=0 errno=0 [ 854.276010][ T5812] Bluetooth: hci3: command tx timeout [ 854.564536][T11747] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 854.641893][T11747] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 854.752892][T11747] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 854.831568][T11747] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 856.359464][ T5812] Bluetooth: hci3: command tx timeout [ 856.577310][T10976] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 856.591762][T10976] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 856.602737][T10976] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 856.626776][T10976] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 856.652876][T10976] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 856.667714][T11747] 8021q: adding VLAN 0 to HW filter on device bond0 [ 856.902544][T11790] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2084'. [ 856.977652][T11747] 8021q: adding VLAN 0 to HW filter on device team0 [ 857.072664][ T723] bridge0: port 1(bridge_slave_0) entered blocking state [ 857.080367][ T723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 857.186973][ T723] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.195217][ T723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 857.722952][T11747] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 858.634209][T11801] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2086'. [ 858.764660][ T5812] Bluetooth: hci5: command tx timeout [ 859.188295][T11786] chnl_net:caif_netlink_parms(): no params data found [ 859.733268][T11809] 9pnet_fd: Insufficient options for proto=fd [ 860.831793][ T5812] Bluetooth: hci5: command tx timeout [ 861.215642][T11747] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.301892][ T5864] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 861.939143][ T5864] usb 7-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 861.948641][ T5864] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.957147][ T5864] usb 7-1: Product: syz [ 861.961628][ T5864] usb 7-1: Manufacturer: syz [ 861.966430][ T5864] usb 7-1: SerialNumber: syz [ 861.984332][T11786] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.992254][T11786] bridge0: port 1(bridge_slave_0) entered disabled state [ 861.999816][T11786] bridge_slave_0: entered allmulticast mode [ 862.008812][T11786] bridge_slave_0: entered promiscuous mode [ 862.106691][T11786] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.114624][T11786] bridge0: port 2(bridge_slave_1) entered disabled state [ 862.125778][T11786] bridge_slave_1: entered allmulticast mode [ 862.134844][T11786] bridge_slave_1: entered promiscuous mode [ 862.553119][ T5864] usb 7-1: config 0 descriptor?? [ 862.725247][T11786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 862.823738][ T5864] comedi comedi4: This driver needs USB 2.0 to operate. Aborting... [ 862.832324][ T5864] usbduxfast 7-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 862.863726][T11786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 862.929291][ T5812] Bluetooth: hci5: command tx timeout [ 863.084045][T11786] team0: Port device team_slave_0 added [ 863.194830][ T5864] usb 7-1: USB disconnect, device number 5 [ 863.241826][T11786] team0: Port device team_slave_1 added [ 863.569604][T11786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.576955][T11786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.603794][T11786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.884894][T11786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.892263][T11786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 863.919994][T11786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 864.613952][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2093'. [ 864.652724][T11786] hsr_slave_0: entered promiscuous mode [ 864.662355][T11786] hsr_slave_1: entered promiscuous mode [ 864.670867][T11786] debugfs: 'hsr0' already exists in 'hsr' [ 864.676707][T11786] Cannot create hsr debugfs directory [ 865.001055][ T5812] Bluetooth: hci5: command tx timeout [ 865.774124][T11747] veth0_vlan: entered promiscuous mode [ 865.963151][T11747] veth1_vlan: entered promiscuous mode [ 866.664451][T11747] veth0_macvtap: entered promiscuous mode [ 866.700744][T11836] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2096'. [ 866.952751][T11747] veth1_macvtap: entered promiscuous mode [ 867.047679][T10976] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 867.084660][T10976] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 867.098845][T10976] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 867.121544][T10976] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 867.138861][T10976] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 867.626705][T11747] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 867.694342][T11786] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 867.801117][T11786] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 867.866684][T11786] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 867.893765][T11786] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 868.038839][T11747] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.135664][T11843] 9pnet_fd: Insufficient options for proto=fd [ 868.270935][ T1869] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.427319][ T57] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.539148][ T57] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.631451][ T57] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.240349][ T5812] Bluetooth: hci7: command tx timeout [ 869.735922][T11786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 870.072032][T11786] 8021q: adding VLAN 0 to HW filter on device team0 [ 870.086712][T11837] chnl_net:caif_netlink_parms(): no params data found [ 870.179623][ T4208] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.180784][T10654] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 870.187324][ T4208] bridge0: port 1(bridge_slave_0) entered forwarding state [ 870.485982][T10654] usb 7-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 870.496652][T10654] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.505228][T10654] usb 7-1: Product: syz [ 870.509780][T10654] usb 7-1: Manufacturer: syz [ 870.522928][T10654] usb 7-1: SerialNumber: syz [ 870.638337][T10654] usb 7-1: config 0 descriptor?? [ 870.723200][ T4208] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.730838][ T4208] bridge0: port 2(bridge_slave_1) entered forwarding state [ 870.771442][T10654] comedi comedi4: This driver needs USB 2.0 to operate. Aborting... [ 870.780289][T10654] usbduxfast 7-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 870.936172][T11786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 870.947769][T11786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 871.010987][T10654] usb 7-1: USB disconnect, device number 6 [ 871.310396][ T5812] Bluetooth: hci7: command tx timeout [ 872.785429][T11837] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.792921][T11837] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.801174][T11837] bridge_slave_0: entered allmulticast mode [ 872.810101][T11837] bridge_slave_0: entered promiscuous mode [ 873.032664][T11837] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.041194][T11837] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.048861][T11837] bridge_slave_1: entered allmulticast mode [ 873.057714][T11837] bridge_slave_1: entered promiscuous mode [ 873.390427][ T5812] Bluetooth: hci7: command tx timeout [ 873.497575][T11837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 873.604819][T11837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 874.061469][T11837] team0: Port device team_slave_0 added [ 874.136246][T11837] team0: Port device team_slave_1 added [ 874.601201][T11885] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.797679][T11837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.806238][T11837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.837303][T11837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.935068][T11837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.942936][T11837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 874.969520][T11837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.229270][T11786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 875.425371][T11837] hsr_slave_0: entered promiscuous mode [ 875.440610][T11837] hsr_slave_1: entered promiscuous mode [ 875.448684][T11837] debugfs: 'hsr0' already exists in 'hsr' [ 875.455007][T11837] Cannot create hsr debugfs directory [ 875.501451][T10988] Bluetooth: hci7: command tx timeout [ 876.916315][ T5812] Bluetooth: hci4: command 0x0406 tx timeout [ 876.926514][T11786] veth0_vlan: entered promiscuous mode [ 877.628417][T11786] veth1_vlan: entered promiscuous mode [ 877.762961][ T3004] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.946661][ T3004] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.029632][T11837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 878.168133][ T3004] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.227411][T11837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 878.319592][ T3004] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.434424][T11837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 878.632038][T11837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 879.253386][T11786] veth0_macvtap: entered promiscuous mode [ 879.397205][ T3004] bridge_slave_1: left allmulticast mode [ 879.403243][ T3004] bridge_slave_1: left promiscuous mode [ 879.409554][ T3004] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.473675][ T3004] bridge_slave_0: left allmulticast mode [ 879.479474][ T3004] bridge_slave_0: left promiscuous mode [ 879.486456][ T3004] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.423516][ T3004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.494730][ T3004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 880.598779][ T3004] bond0 (unregistering): Released all slaves [ 880.719145][T11786] veth1_macvtap: entered promiscuous mode [ 880.967576][ T3004] tipc: Left network mode [ 881.319730][T11786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 881.683579][T11786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 881.857237][ T3004] hsr_slave_0: left promiscuous mode [ 881.910334][ T3004] hsr_slave_1: left promiscuous mode [ 881.919211][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.927769][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 882.103306][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 882.111351][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 882.313462][ T3004] veth1_macvtap: left promiscuous mode [ 882.319133][ T3004] veth0_macvtap: left promiscuous mode [ 882.325128][ T3004] veth1_vlan: left promiscuous mode [ 882.330683][ T3004] veth0_vlan: left promiscuous mode [ 883.662958][ T3004] team0 (unregistering): Port device team_slave_1 removed [ 883.691300][ T3004] team0 (unregistering): Port device team_slave_0 removed [ 884.396903][T11182] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.461183][T11182] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.505204][T11898] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 884.666494][ T2986] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.056565][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.064906][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.640722][ T9051] usb 1-1: USB disconnect, device number 41 [ 885.751339][T11898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 885.759365][T11898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 885.803770][T11837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 886.221307][T11837] 8021q: adding VLAN 0 to HW filter on device team0 [ 886.346653][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 886.354208][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 886.466869][ T1869] bridge0: port 2(bridge_slave_1) entered blocking state [ 886.474638][ T1869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 889.616574][ T5812] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 889.666715][ T5812] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 889.682862][ T5812] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 889.742901][ T5812] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 889.754275][ T5812] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 890.333475][ T2986] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.403723][T11934] binder: 11921:11934 unknown command 0 [ 890.409488][T11934] binder: 11921:11934 ioctl c0306201 800003c0 returned -22 [ 890.558970][ T2986] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 890.659294][T11837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 890.806892][ T2986] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.006408][ T2986] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 891.834531][ T2986] bridge_slave_1: left allmulticast mode [ 891.840594][ T2986] bridge_slave_1: left promiscuous mode [ 891.846930][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 891.871155][ T5812] Bluetooth: hci2: command tx timeout [ 891.881735][ T2986] bridge_slave_0: left allmulticast mode [ 891.887787][ T2986] bridge_slave_0: left promiscuous mode [ 891.894524][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.594444][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 892.682104][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 892.704777][ T2986] bond0 (unregistering): Released all slaves [ 893.095422][T11837] veth0_vlan: entered promiscuous mode [ 893.362281][T11837] veth1_vlan: entered promiscuous mode [ 893.733159][ T2986] hsr_slave_0: left promiscuous mode [ 893.762162][ T2986] hsr_slave_1: left promiscuous mode [ 893.771239][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 893.778905][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.858241][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 893.867672][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 893.954653][ T5812] Bluetooth: hci2: command tx timeout [ 893.981269][ T2986] veth1_macvtap: left promiscuous mode [ 893.987024][ T2986] veth0_macvtap: left promiscuous mode [ 893.993145][ T2986] veth1_vlan: left promiscuous mode [ 893.998729][ T2986] veth0_vlan: left promiscuous mode [ 895.082550][ T2986] team0 (unregistering): Port device team_slave_1 removed [ 895.143739][ T2986] team0 (unregistering): Port device team_slave_0 removed [ 895.461168][T11924] chnl_net:caif_netlink_parms(): no params data found [ 895.901537][T11837] veth0_macvtap: entered promiscuous mode [ 895.995271][T11837] veth1_macvtap: entered promiscuous mode [ 896.070670][ T5812] Bluetooth: hci2: command tx timeout [ 896.298536][T11837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 896.452274][T11837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 896.609545][ T723] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.694928][ T723] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.771069][ T723] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 896.836490][ T723] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 898.042428][T11924] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.050833][T11924] bridge0: port 1(bridge_slave_0) entered disabled state [ 898.058484][T11924] bridge_slave_0: entered allmulticast mode [ 898.069221][T11924] bridge_slave_0: entered promiscuous mode [ 898.128166][T11924] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.135979][T11924] bridge0: port 2(bridge_slave_1) entered disabled state [ 898.143991][T11924] bridge_slave_1: entered allmulticast mode [ 898.154485][T11924] bridge_slave_1: entered promiscuous mode [ 898.168037][ T5812] Bluetooth: hci2: command tx timeout [ 898.275826][T11924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 898.337352][T11924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 898.686635][ T723] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 898.695139][ T723] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 898.835836][T11924] team0: Port device team_slave_0 added [ 898.899049][T11924] team0: Port device team_slave_1 added [ 899.061844][ T5434] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 899.172297][ T723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 899.180453][ T723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 899.314520][ T5434] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 899.327227][ T5434] usb 10-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 899.337071][ T5434] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 899.374956][T11924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 899.382433][T11924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 899.411599][T11924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.475789][ T5434] usb 10-1: config 0 descriptor?? [ 899.483988][T11980] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 899.641616][T11924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 899.648901][T11924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 899.675401][T11924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 900.040867][ T5434] elan 0003:04F3:0755.000E: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.9-1/input0 [ 900.266090][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2117'. [ 900.317896][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2117'. [ 900.396789][T11924] hsr_slave_0: entered promiscuous mode [ 900.407737][T11924] hsr_slave_1: entered promiscuous mode [ 901.845587][ T9051] usb 10-1: USB disconnect, device number 2 [ 901.939402][T12000] binder: BINDER_SET_CONTEXT_MGR already set [ 901.946101][T12000] binder: 11999:12000 ioctl 4018620d 80004a80 returned -16 [ 902.032834][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2121'. [ 902.292286][T11924] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 902.402226][T11924] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 902.433259][T11924] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 902.523750][T11924] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 903.339672][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2126'. [ 903.501884][T12019] bond0: (slave bond_slave_0): Releasing backup interface [ 903.707618][T11924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.939287][T11924] 8021q: adding VLAN 0 to HW filter on device team0 [ 904.063829][T11182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.072523][T11182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 904.192833][T11898] bridge0: port 1(bridge_slave_0) entered blocking state [ 904.200495][T11898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 904.338841][T11898] bridge0: port 2(bridge_slave_1) entered blocking state [ 904.346536][T11898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 904.455589][T11182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 904.464479][T11182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.249334][T11924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 906.540659][ T9051] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 906.568305][ T3084] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 906.643280][T11924] veth0_vlan: entered promiscuous mode [ 906.722973][T11924] veth1_vlan: entered promiscuous mode [ 906.800512][ T3084] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 906.812226][ T3084] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 906.821943][ T3084] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.850789][ T9051] usb 3-1: config 0 has no interfaces? [ 906.856804][ T9051] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 906.866358][ T9051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.942741][T11924] veth0_macvtap: entered promiscuous mode [ 906.973922][ T3084] usb 4-1: config 0 descriptor?? [ 906.985498][T12042] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 907.000540][ T9051] usb 3-1: config 0 descriptor?? [ 907.094015][T11924] veth1_macvtap: entered promiscuous mode [ 907.298718][T12041] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 907.308727][T12041] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 907.331373][T11924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 907.395026][T11924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 907.467493][ T723] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.516453][ T3084] elan 0003:04F3:0755.000F: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0 [ 907.531689][ T9] usb 3-1: USB disconnect, device number 21 [ 907.537851][ T3004] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.588087][ T723] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.640897][ T723] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 907.671348][T12042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2132'. [ 907.722820][T12042] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2132'. [ 908.472460][ T3084] usb 4-1: USB disconnect, device number 9 [ 909.478337][T12066] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2139'. [ 910.744575][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 910.751716][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 911.751804][T12091] misc userio: The device must be registered before sending interrupts [ 913.917284][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 913.925650][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 914.124423][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 914.133490][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 915.802356][T12123] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2156'. [ 924.342301][T12162] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2170'. [ 925.361920][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 925.469358][T10988] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 925.516218][T10988] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 925.527076][T10988] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 925.553340][T10988] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 925.581710][T10988] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 925.604320][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 925.618574][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 925.630964][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 925.644842][ T9] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 925.654453][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.713696][ T9] usb 2-1: config 0 descriptor?? [ 926.394648][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 926.402486][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 926.410420][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 926.418047][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 926.432620][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 926.442243][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 926.450058][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 926.457763][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 926.465831][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 926.473721][ T9] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0 [ 926.794465][ T9] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 926.973292][ T9] usb 2-1: USB disconnect, device number 16 [ 926.984056][ T9312] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 927.221238][ T9312] usb 10-1: device descriptor read/64, error -71 [ 927.492285][ T9312] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 927.578012][T12167] chnl_net:caif_netlink_parms(): no params data found [ 927.670375][ T9312] usb 10-1: device descriptor read/64, error -71 [ 927.782267][ T9312] usb usb10-port1: attempt power cycle [ 927.790713][T10988] Bluetooth: hci0: command tx timeout [ 928.150877][ T9312] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 928.224197][ T9312] usb 10-1: device descriptor read/8, error -71 [ 928.470524][ T9312] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 928.548084][ T9312] usb 10-1: device descriptor read/8, error -71 [ 928.672365][ T9312] usb usb10-port1: unable to enumerate USB device [ 928.847886][T12167] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.857188][T12167] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.865163][T12167] bridge_slave_0: entered allmulticast mode [ 928.873904][T12167] bridge_slave_0: entered promiscuous mode [ 928.897077][T12167] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.906050][T12167] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.913891][T12167] bridge_slave_1: entered allmulticast mode [ 928.922955][T12167] bridge_slave_1: entered promiscuous mode [ 929.081759][T12167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 929.115366][T12167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 929.225566][T12167] team0: Port device team_slave_0 added [ 929.265980][T12167] team0: Port device team_slave_1 added [ 929.542353][T12167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 929.549693][T12167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.576530][T12167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 929.812984][T12167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 929.820313][T12167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 929.846915][T12167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 929.920472][T10988] Bluetooth: hci0: command tx timeout [ 930.090203][T12167] hsr_slave_0: entered promiscuous mode [ 930.099357][T12167] hsr_slave_1: entered promiscuous mode [ 930.107504][T12167] debugfs: 'hsr0' already exists in 'hsr' [ 930.118674][T12167] Cannot create hsr debugfs directory [ 931.761646][T12196] binder: 12193:12196 unknown command 0 [ 931.767461][T12196] binder: 12193:12196 ioctl c0306201 800003c0 returned -22 [ 931.950826][T10988] Bluetooth: hci0: command tx timeout [ 932.631867][T12167] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 932.757711][T12167] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 932.896352][T12167] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 933.013921][T12167] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 934.030683][T10988] Bluetooth: hci0: command tx timeout [ 934.334222][ T5434] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 934.388866][T12167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 934.572243][T12167] 8021q: adding VLAN 0 to HW filter on device team0 [ 934.586782][ T5434] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.601131][ T5434] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.611258][ T5434] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 934.627357][ T5434] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 934.637645][ T5434] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.701530][T11182] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.708981][T11182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 934.848413][T11182] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.855914][T11182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 934.902697][ T5434] usb 4-1: config 0 descriptor?? [ 935.449262][ T5434] hid_parser_main: 1 callbacks suppressed [ 935.449346][ T5434] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 935.464024][ T5434] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 935.471894][ T5434] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 935.479444][ T5434] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 935.487189][ T5434] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 935.495172][ T5434] plantronics 0003:047F:FFFF.0011: unknown main item tag 0x0 [ 935.705322][ T5434] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 935.728982][ T5434] usb 4-1: USB disconnect, device number 10 [ 935.828561][ T5812] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 935.899587][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 935.909789][ T5812] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 935.936701][ T5812] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 935.981823][ T5812] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 936.526230][ T1869] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.703511][ T1869] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.841798][ T1869] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.042188][ T1869] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.058108][ T9312] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 937.251282][ T9312] usb 2-1: device descriptor read/64, error -71 [ 937.491448][ T9312] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 937.626592][T12228] block device autoloading is deprecated and will be removed. [ 937.660631][ T9312] usb 2-1: device descriptor read/64, error -71 [ 937.786205][ T9312] usb usb2-port1: attempt power cycle [ 938.054082][T12217] chnl_net:caif_netlink_parms(): no params data found [ 938.127248][T10988] Bluetooth: hci1: command tx timeout [ 938.251079][ T9312] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 938.399012][ T9312] usb 2-1: device descriptor read/8, error -71 [ 938.806813][ T9312] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 938.857507][ T1869] bond0 (unregistering): (slave team0): Releasing backup interface [ 938.872548][ T9312] usb 2-1: device descriptor read/8, error -71 [ 938.898558][ T1869] team0: left promiscuous mode [ 938.942097][ T1869] bond0 (unregistering): Released all slaves [ 938.981892][ T9312] usb usb2-port1: unable to enumerate USB device [ 939.338382][T12167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 939.352739][ T1869] tipc: Left network mode [ 939.776040][ T1869] hsr_slave_0: left promiscuous mode [ 939.799712][ T1869] hsr_slave_1: left promiscuous mode [ 939.868860][ T1869] veth1_macvtap: left promiscuous mode [ 939.875558][ T1869] veth0_macvtap: left promiscuous mode [ 939.881675][ T1869] veth1_vlan: left promiscuous mode [ 939.887235][ T1869] veth0_vlan: left promiscuous mode [ 940.217291][T10988] Bluetooth: hci1: command tx timeout [ 941.987056][ T1869] IPVS: stop unused estimator thread 0... [ 942.270865][T10988] Bluetooth: hci1: command tx timeout [ 942.448516][T12243] binder: 12241:12243 unknown command 0 [ 942.455380][T12243] binder: 12241:12243 ioctl c0306201 800003c0 returned -22 [ 942.548040][T12217] bridge0: port 1(bridge_slave_0) entered blocking state [ 942.556783][T12217] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.564553][T12217] bridge_slave_0: entered allmulticast mode [ 942.573335][T12217] bridge_slave_0: entered promiscuous mode [ 942.853545][T12217] bridge0: port 2(bridge_slave_1) entered blocking state [ 942.861436][T12217] bridge0: port 2(bridge_slave_1) entered disabled state [ 942.869029][T12217] bridge_slave_1: entered allmulticast mode [ 942.877710][T12217] bridge_slave_1: entered promiscuous mode [ 943.271694][T12217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.399400][T12217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 943.991048][T12217] team0: Port device team_slave_0 added [ 944.071013][T12217] team0: Port device team_slave_1 added [ 944.351812][T10988] Bluetooth: hci1: command tx timeout [ 944.684852][T12217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.692405][T12217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.718890][T12217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 945.231851][T12217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 945.239006][T12217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.265512][T12217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.980568][T12167] veth0_vlan: entered promiscuous mode [ 946.144341][T12217] hsr_slave_0: entered promiscuous mode [ 946.154215][T12217] hsr_slave_1: entered promiscuous mode [ 946.162561][T12217] debugfs: 'hsr0' already exists in 'hsr' [ 946.168436][T12217] Cannot create hsr debugfs directory [ 946.238261][T12167] veth1_vlan: entered promiscuous mode [ 947.046161][T12167] veth0_macvtap: entered promiscuous mode [ 947.224893][T12167] veth1_macvtap: entered promiscuous mode [ 947.599560][T12167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 947.824452][T12167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 948.004684][ T3984] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.100452][ T3004] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.121924][T11898] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 948.330821][T11898] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.224050][T12217] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 950.367642][T12217] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 950.502125][T12217] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 950.631878][T12217] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 952.936512][T12217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 953.297896][T12217] 8021q: adding VLAN 0 to HW filter on device team0 [ 953.445137][ T3004] bridge0: port 1(bridge_slave_0) entered blocking state [ 953.452612][ T3004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 953.623472][ T3984] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.630929][ T3984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 954.582368][ T5812] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 954.603557][ T5812] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 954.648234][ T5812] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 954.820702][ T5812] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 954.838025][ T5812] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 956.990516][T10976] Bluetooth: hci4: command tx timeout [ 957.957236][T12280] chnl_net:caif_netlink_parms(): no params data found [ 958.738627][T12217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.080693][T10976] Bluetooth: hci4: command tx timeout [ 959.533927][ T2986] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 959.875466][ T2986] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.005021][T11182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.017824][T11182] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.268882][ T2986] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.503867][ T2986] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 960.914697][ T723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 960.922978][ T723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 961.151318][T10976] Bluetooth: hci4: command tx timeout [ 961.264802][T12280] bridge0: port 1(bridge_slave_0) entered blocking state [ 961.273131][T12280] bridge0: port 1(bridge_slave_0) entered disabled state [ 961.281192][T12280] bridge_slave_0: entered allmulticast mode [ 961.290916][T12280] bridge_slave_0: entered promiscuous mode [ 961.513006][T12280] bridge0: port 2(bridge_slave_1) entered blocking state [ 961.520534][T12280] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.528253][T12280] bridge_slave_1: entered allmulticast mode [ 961.537115][T12280] bridge_slave_1: entered promiscuous mode [ 961.751248][ T2986] bridge_slave_1: left allmulticast mode [ 961.765838][ T2986] bridge_slave_1: left promiscuous mode [ 961.772714][ T2986] bridge0: port 2(bridge_slave_1) entered disabled state [ 961.973210][ T2986] bridge_slave_0: left allmulticast mode [ 961.979102][ T2986] bridge_slave_0: left promiscuous mode [ 961.986032][ T2986] bridge0: port 1(bridge_slave_0) entered disabled state [ 962.590230][T12319] binder: 12314:12319 unknown command 0 [ 962.596130][T12319] binder: 12314:12319 ioctl c0306201 800003c0 returned -22 [ 962.959449][T10988] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 962.971716][ T2986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 962.990089][T10988] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 963.018750][T10988] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 963.033125][ T2986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 963.053090][ T2986] bond0 (unregistering): Released all slaves [ 963.121443][T10988] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 963.173570][T10988] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 963.230979][T10988] Bluetooth: hci4: command tx timeout [ 963.633380][T12280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 964.071440][T12280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 964.208279][T12326] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2205'. [ 964.266109][ T2986] hsr_slave_0: left promiscuous mode [ 964.280834][ T2986] hsr_slave_1: left promiscuous mode [ 964.289587][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 964.297340][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 964.310735][ T2986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 964.322183][ T2986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 964.356400][ T2986] veth1_macvtap: left promiscuous mode [ 964.362792][ T2986] veth0_macvtap: left promiscuous mode [ 964.368709][ T2986] veth1_vlan: left promiscuous mode [ 964.374356][ T2986] veth0_vlan: left promiscuous mode [ 965.351241][T10976] Bluetooth: hci6: command tx timeout [ 965.431063][ T2986] team0 (unregistering): Port device team_slave_1 removed [ 965.509538][ T2986] team0 (unregistering): Port device team_slave_0 removed [ 966.361662][T12280] team0: Port device team_slave_0 added [ 966.455839][T12280] team0: Port device team_slave_1 added [ 966.468614][ T9] usb 4-1: new full-speed USB device number 11 using dummy_hcd [ 966.684074][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 966.696396][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 966.708546][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 966.792288][ T9] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 966.802234][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.810541][ T9] usb 4-1: Product: syz [ 966.814816][ T9] usb 4-1: Manufacturer: syz [ 966.819517][ T9] usb 4-1: SerialNumber: syz [ 966.922061][ T9] usb 4-1: config 0 descriptor?? [ 966.953392][T12217] veth0_vlan: entered promiscuous mode [ 966.974127][T12280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.985373][T12280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.017866][T12280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.058403][ T9] streamzap 4-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 967.171497][ T9] usb 4-1: USB disconnect, device number 11 [ 967.262346][T12280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.269613][T12280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.299696][T12280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.390995][T10976] Bluetooth: hci6: command tx timeout [ 967.403533][T12217] veth1_vlan: entered promiscuous mode [ 967.945317][ T3072] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.041680][T12280] hsr_slave_0: entered promiscuous mode [ 968.051194][T12280] hsr_slave_1: entered promiscuous mode [ 968.059100][T12280] debugfs: 'hsr0' already exists in 'hsr' [ 968.065589][T12280] Cannot create hsr debugfs directory [ 968.123074][ T3072] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.375561][ T3072] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.728706][T12338] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2210'. [ 968.755045][ T3072] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.813402][T12217] veth0_macvtap: entered promiscuous mode [ 968.877895][T12217] veth1_macvtap: entered promiscuous mode [ 969.217141][T12217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 969.343945][T12217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 969.472532][T10976] Bluetooth: hci6: command tx timeout [ 969.519097][T11951] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 969.531750][ T3072] bridge_slave_1: left allmulticast mode [ 969.542686][ T3072] bridge_slave_1: left promiscuous mode [ 969.549035][ T3072] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.572315][ T3072] bridge_slave_0: left allmulticast mode [ 969.578160][ T3072] bridge_slave_0: left promiscuous mode [ 969.585084][ T3072] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.101437][ T3072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 970.147381][ T3072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 970.203112][ T3072] bond0 (unregistering): Released all slaves [ 970.317443][ T57] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.442606][T12321] chnl_net:caif_netlink_parms(): no params data found [ 970.490674][ T57] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.499721][ T57] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 971.389513][ T3072] hsr_slave_0: left promiscuous mode [ 971.456797][ T3072] hsr_slave_1: left promiscuous mode [ 971.464402][ T3072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 971.472488][ T3072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 971.521947][ T3072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 971.529685][ T3072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 971.550940][T10976] Bluetooth: hci6: command tx timeout [ 971.591364][ T3072] veth1_macvtap: left promiscuous mode [ 971.597079][ T3072] veth0_macvtap: left promiscuous mode [ 971.603099][ T3072] veth1_vlan: left promiscuous mode [ 971.608611][ T3072] veth0_vlan: left promiscuous mode [ 972.172546][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 972.179106][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 972.752593][ T3072] team0 (unregistering): Port device team_slave_1 removed [ 972.782256][ T3072] team0 (unregistering): Port device team_slave_0 removed [ 973.761016][T12280] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 973.877956][T12280] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 974.092279][T12280] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 974.177222][T12280] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 974.191996][T10988] Bluetooth: hci3: command 0x0406 tx timeout [ 974.323293][T12364] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2215'. [ 974.376241][T12363] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2214'. [ 974.443286][T12321] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.453916][T12321] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.461752][T12321] bridge_slave_0: entered allmulticast mode [ 974.470887][T12321] bridge_slave_0: entered promiscuous mode [ 974.626413][T12321] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.634320][T12321] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.642035][T12321] bridge_slave_1: entered allmulticast mode [ 974.651491][T12321] bridge_slave_1: entered promiscuous mode [ 975.211235][T12321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 975.426183][T12321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 975.780461][T12321] team0: Port device team_slave_0 added [ 975.859536][T12321] team0: Port device team_slave_1 added [ 975.900956][T12375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2218'. [ 976.316851][T12280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 976.415509][T12321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.422781][T12321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.449097][T12321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 976.597839][T12280] 8021q: adding VLAN 0 to HW filter on device team0 [ 976.691844][ T3072] bridge0: port 1(bridge_slave_0) entered blocking state [ 976.699353][ T3072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 976.763344][T12321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.770801][T12321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.797125][T12321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.812524][ T9312] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 976.929761][ T3072] bridge0: port 2(bridge_slave_1) entered blocking state [ 976.937407][ T3072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 977.051779][ T9312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 977.062831][ T9312] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 977.074794][ T9312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 977.086040][ T9312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 977.096123][ T9312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 977.314306][ T9312] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 977.325598][ T9312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 977.334766][ T9312] usb 4-1: Product: syz [ 977.339135][ T9312] usb 4-1: Manufacturer: syz [ 977.344433][ T9312] usb 4-1: SerialNumber: syz [ 977.358734][ T9312] usb 4-1: config 0 descriptor?? [ 977.673442][ T9312] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 977.683987][ T9312] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 978.001992][T12321] hsr_slave_0: entered promiscuous mode [ 978.012378][T12321] hsr_slave_1: entered promiscuous mode [ 978.048119][ T9312] usb 4-1: USB disconnect, device number 12 [ 978.449573][ T1869] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.680424][ T1869] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 978.926588][ T1869] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.109239][ T1869] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.326914][T10988] Bluetooth: hci5: command 0x0406 tx timeout [ 980.097841][ T1869] bridge_slave_1: left allmulticast mode [ 980.103900][ T1869] bridge_slave_1: left promiscuous mode [ 980.112070][ T1869] bridge0: port 2(bridge_slave_1) entered disabled state [ 980.245838][ T1869] bridge_slave_0: left allmulticast mode [ 980.251911][ T1869] bridge_slave_0: left promiscuous mode [ 980.258271][ T1869] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.155648][ T1869] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 981.225790][ T1869] bond0 (unregistering): Released all slaves [ 982.022089][ T1869] hsr_slave_0: left promiscuous mode [ 982.053403][ T1869] hsr_slave_1: left promiscuous mode [ 982.062470][ T1869] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 982.070221][ T1869] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 982.139042][ T1869] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 982.146999][ T1869] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 982.211267][ T1869] veth1_macvtap: left promiscuous mode [ 982.217024][ T1869] veth0_macvtap: left promiscuous mode [ 982.227682][ T1869] veth1_vlan: left promiscuous mode [ 982.237829][ T1869] veth0_vlan: left promiscuous mode [ 982.935367][ T1869] team0 (unregistering): Port device team_slave_1 removed [ 983.007524][ T1869] team0 (unregistering): Port device team_slave_0 removed [ 983.179957][T12321] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 983.307379][T12280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 983.335516][T12321] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 983.501949][T12321] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 983.691596][T12321] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 984.294232][T12280] veth0_vlan: entered promiscuous mode [ 984.498972][T12280] veth1_vlan: entered promiscuous mode [ 984.789364][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 984.797758][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.008294][ T1869] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 985.016556][ T1869] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 985.023386][T12414] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2224'. [ 985.063451][T12280] veth0_macvtap: entered promiscuous mode [ 985.180496][T12280] veth1_macvtap: entered promiscuous mode [ 985.455864][T12280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 985.538492][T12321] 8021q: adding VLAN 0 to HW filter on device bond0 [ 985.603345][T12280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 985.740606][ T3072] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.808250][ T1869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.874766][T12321] 8021q: adding VLAN 0 to HW filter on device team0 [ 985.928838][ T1869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.950347][ T1869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 985.996561][ T1869] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.004050][ T1869] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.150858][ T1869] bridge0: port 2(bridge_slave_1) entered blocking state [ 986.158407][ T1869] bridge0: port 2(bridge_slave_1) entered forwarding state [ 986.916126][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2226'. [ 987.257310][ T9312] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 987.313344][T12433] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 987.500306][ T9312] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 987.512022][ T9312] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 987.524954][ T9312] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 987.536308][ T9312] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 987.546559][ T9312] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 987.779429][ T9312] usb 6-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 987.789148][ T9312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 987.798300][ T9312] usb 6-1: Product: syz [ 987.802793][ T9312] usb 6-1: Manufacturer: syz [ 987.807597][ T9312] usb 6-1: SerialNumber: syz [ 987.963040][ T9312] usb 6-1: config 0 descriptor?? [ 988.230584][ T9312] radio-si470x 6-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 988.240518][ T9312] radio-si470x 6-1:0.0: probe with driver radio-si470x failed with error -5 [ 988.565783][T12321] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 988.637701][ T9312] usb 6-1: USB disconnect, device number 26 [ 988.831054][ T5864] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 989.041067][ T5864] usb 8-1: Using ep0 maxpacket: 32 [ 989.080648][ T5864] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 989.092941][ T5864] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 989.225052][ T5864] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 989.235429][ T5864] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 989.246103][ T5864] usb 8-1: Product: syz [ 989.250746][ T5864] usb 8-1: Manufacturer: syz [ 989.336472][ T5864] hub 8-1:4.0: USB hub found [ 989.591424][T12455] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2232'. [ 989.722808][T12457] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2233'. [ 989.784654][ T5864] hub 8-1:4.0: config failed, can't read hub descriptor (err -22) [ 989.873174][ T5864] usb 8-1: USB disconnect, device number 7 [ 991.063684][T12321] veth0_vlan: entered promiscuous mode [ 991.133534][T12475] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2237'. [ 991.198093][T12321] veth1_vlan: entered promiscuous mode [ 991.658681][T12321] veth0_macvtap: entered promiscuous mode [ 991.741447][T12321] veth1_macvtap: entered promiscuous mode [ 991.754373][T12481] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 991.948135][T12321] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 992.149040][T12321] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 992.280019][ T1869] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.298327][ T1869] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.347245][ T1869] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.433371][ T1869] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 992.861452][ T5864] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 992.976808][ T1869] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 992.988273][ T1869] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.155880][ T5864] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 993.167048][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 993.178977][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 993.195625][ T5864] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 993.207328][ T5864] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 993.288207][ T723] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 993.298699][ T723] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 993.348880][ T5864] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 993.358763][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 993.367215][ T5864] usb 4-1: Product: syz [ 993.371891][ T5864] usb 4-1: Manufacturer: syz [ 993.376765][ T5864] usb 4-1: SerialNumber: syz [ 993.483166][ T5864] usb 4-1: config 0 descriptor?? [ 993.710410][ T3084] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 993.741636][ T5864] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 993.751608][ T5864] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 993.951992][ T3084] usb 6-1: Using ep0 maxpacket: 32 [ 993.984385][ T3084] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.996082][ T3084] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.036928][ T5864] usb 4-1: USB disconnect, device number 13 [ 994.061075][ T9312] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 994.084218][ T3084] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 994.094840][ T3084] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 994.104492][ T3084] usb 6-1: Product: syz [ 994.108857][ T3084] usb 6-1: Manufacturer: syz [ 994.169171][ T3084] hub 6-1:4.0: USB hub found [ 994.278615][ T9312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.291044][ T9312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.301428][ T9312] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 994.314759][ T9312] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 994.327632][ T9312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.394220][ T9312] usb 1-1: config 0 descriptor?? [ 994.633744][ T3084] hub 6-1:4.0: config failed, can't read hub descriptor (err -22) [ 994.734517][ T3084] usb 6-1: USB disconnect, device number 27 [ 994.908865][ T9312] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 994.917728][ T9312] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 994.927393][ T9312] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 994.941198][ T9312] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 994.950570][ T9312] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 994.958239][ T9312] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 995.125088][ T9312] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 995.209357][ T9312] usb 1-1: USB disconnect, device number 42 [ 995.656341][T12513] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2245'. [ 996.502139][T12523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2248'. [ 997.149420][T12530] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 997.936198][ T3084] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 998.147437][ T3084] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 998.159154][ T3084] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 998.171171][ T3084] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 998.182520][ T3084] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 998.192657][ T3084] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 998.281890][ T3084] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 998.291397][ T3084] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 998.299900][ T3084] usb 8-1: Product: syz [ 998.304273][ T3084] usb 8-1: Manufacturer: syz [ 998.309072][ T3084] usb 8-1: SerialNumber: syz [ 998.354267][ T3084] usb 8-1: config 0 descriptor?? [ 998.390461][ T5864] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 998.553579][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 998.579401][ T3084] radio-si470x 8-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 998.589331][ T3084] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -5 [ 998.651077][ T3072] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.659677][ T3072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.712437][ T5864] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.728889][ T5864] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.765075][ T5864] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 998.774767][ T5864] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 998.783540][ T5864] usb 1-1: Product: syz [ 998.788005][ T5864] usb 1-1: Manufacturer: syz [ 998.817589][T11182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 998.830011][T11182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 998.865286][ T5864] hub 1-1:4.0: USB hub found [ 998.866647][ T9312] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 998.971078][ T3084] usb 8-1: USB disconnect, device number 8 [ 999.055032][ T9312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 999.066754][ T9312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 999.077843][ T9312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 999.091274][ T9312] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 999.101287][ T9312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.136147][ T9312] usb 4-1: config 0 descriptor?? [ 999.327407][ T5864] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 999.407707][ T5864] usb 1-1: USB disconnect, device number 43 [ 999.604270][ T9312] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 999.612337][ T9312] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 999.620200][ T9312] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 999.627876][ T9312] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 999.791145][ T9312] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 999.816299][ T9312] usb 4-1: USB disconnect, device number 14 [ 1000.292009][T12560] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2259'. [ 1000.452754][T12565] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2260'. [ 1001.003106][T12570] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1002.070560][ T9312] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1002.247803][ T9312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1002.258658][ T9312] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1002.270768][ T9312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1002.282188][ T9312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1002.292403][ T9312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1002.354168][ T9312] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1002.363927][ T9312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1002.372328][ T9312] usb 4-1: Product: syz [ 1002.376698][ T9312] usb 4-1: Manufacturer: syz [ 1002.381578][ T9312] usb 4-1: SerialNumber: syz [ 1002.392894][ T9312] usb 4-1: config 0 descriptor?? [ 1002.461759][T10654] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1002.652335][ T9312] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1002.662438][ T9312] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 1002.674384][T10654] usb 8-1: Using ep0 maxpacket: 32 [ 1002.706097][T10654] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1002.722931][T10654] usb 8-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1002.814178][T10654] usb 8-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1002.828915][T10654] usb 8-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1002.855796][T10654] usb 8-1: Product: syz [ 1002.862558][T10654] usb 8-1: Manufacturer: syz [ 1002.978468][T10654] hub 8-1:4.0: USB hub found [ 1003.017603][ T9312] usb 4-1: USB disconnect, device number 15 [ 1003.099630][T12590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2273'. [ 1003.420309][T10654] hub 8-1:4.0: config failed, can't read hub descriptor (err -22) [ 1003.484967][T10654] usb 8-1: USB disconnect, device number 9 [ 1003.897429][T12597] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2276'. [ 1004.038033][T12601] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1005.247334][T12617] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2284'. [ 1005.655697][T12620] netlink: 'syz.5.2283': attribute type 4 has an invalid length. [ 1005.775443][T12620] netlink: 'syz.5.2283': attribute type 4 has an invalid length. [ 1006.770766][ T5864] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1006.962770][ T5864] usb 4-1: device descriptor read/64, error -71 [ 1007.210395][ T5864] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1007.440162][ T5864] usb 4-1: device descriptor read/64, error -71 [ 1007.557094][ T5864] usb usb4-port1: attempt power cycle [ 1007.964958][ T5864] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1008.020488][ T5864] usb 4-1: device descriptor read/8, error -71 [ 1008.163797][ T9312] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 1008.280321][ T5864] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1008.352687][ T5864] usb 4-1: device descriptor read/8, error -71 [ 1008.391891][ T9312] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1008.402663][ T9312] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1008.414516][ T9312] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1008.425831][ T9312] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1008.435833][ T9312] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1008.483598][ T5864] usb usb4-port1: unable to enumerate USB device [ 1008.626253][ T9312] usb 8-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1008.636156][ T9312] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1008.644636][ T9312] usb 8-1: Product: syz [ 1008.649008][ T9312] usb 8-1: Manufacturer: syz [ 1008.658812][ T9312] usb 8-1: SerialNumber: syz [ 1008.764061][ T9312] usb 8-1: config 0 descriptor?? [ 1009.040630][ T9312] radio-si470x 8-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1009.052314][ T9312] radio-si470x 8-1:0.0: probe with driver radio-si470x failed with error -5 [ 1009.338421][ T9312] usb 8-1: USB disconnect, device number 10 [ 1010.490081][T12642] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2293'. [ 1011.890997][T12651] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2296'. [ 1014.030433][ T5864] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1014.210777][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 1014.278097][ T5864] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1014.293034][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1014.302896][ T5864] usb 4-1: Product: syz [ 1014.307232][ T5864] usb 4-1: Manufacturer: syz [ 1014.312076][ T5864] usb 4-1: SerialNumber: syz [ 1014.359589][ T5864] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1014.366294][ T5864] r8152-cfgselector 4-1: config 0 descriptor?? [ 1014.740509][ T3084] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1014.946609][ T3084] usb 6-1: device descriptor read/64, error -71 [ 1015.173953][T12661] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2300'. [ 1015.231256][ T3084] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1015.255321][ T5864] r8152-cfgselector 4-1: USB disconnect, device number 20 [ 1015.400152][ T3084] usb 6-1: device descriptor read/64, error -71 [ 1015.522307][ T3084] usb usb6-port1: attempt power cycle [ 1015.910790][ T3084] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1015.963192][ T3084] usb 6-1: device descriptor read/8, error -71 [ 1016.273736][ T3084] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1016.315084][ T3084] usb 6-1: device descriptor read/8, error -71 [ 1016.443480][ T3084] usb usb6-port1: unable to enumerate USB device [ 1016.544022][ T9312] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 1016.755529][ T9312] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1016.766573][ T9312] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 1016.778594][ T9312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 1016.790150][ T9312] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 1016.800244][ T9312] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1016.831085][ T9312] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1016.840626][ T9312] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1016.853109][ T9312] usb 4-1: Product: syz [ 1016.857481][ T9312] usb 4-1: Manufacturer: syz [ 1016.863863][ T9312] usb 4-1: SerialNumber: syz [ 1016.888105][ T9312] usb 4-1: config 0 descriptor?? [ 1017.131154][ T9312] radio-si470x 4-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 1017.141188][ T9312] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 1017.448294][ T9312] usb 4-1: USB disconnect, device number 21 [ 1017.594133][T12676] netlink: 48 bytes leftover after parsing attributes in process `syz.8.2306'. [ 1018.241307][T12681] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2308'. [ 1019.535712][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2312'. [ 1019.545972][T12694] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2312'. [ 1019.900936][ T9312] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1020.084483][ T9312] usb 6-1: Using ep0 maxpacket: 16 [ 1020.157612][ T9312] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1020.167161][ T9312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.175431][ T9312] usb 6-1: Product: syz [ 1020.179718][ T9312] usb 6-1: Manufacturer: syz [ 1020.184591][ T9312] usb 6-1: SerialNumber: syz [ 1020.405168][ T9312] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1020.411880][ T9312] r8152-cfgselector 6-1: config 0 descriptor?? [ 1020.828384][ T9312] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1020.835936][ T9312] r8152-cfgselector 6-1: bad CDC descriptors [ 1020.894107][ T9312] r8152-cfgselector 6-1: USB disconnect, device number 32 [ 1021.950718][ T9312] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1022.123034][ T9312] usb 4-1: Using ep0 maxpacket: 32 [ 1022.224544][ T9312] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.235799][ T9312] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.281507][ T3084] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1022.314979][ T9312] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 1022.324579][ T9312] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 1022.333668][ T9312] usb 4-1: Product: syz [ 1022.338156][ T9312] usb 4-1: Manufacturer: syz [ 1022.440304][ T3084] usb 6-1: device descriptor read/64, error -71 [ 1022.471590][ T9312] hub 4-1:4.0: USB hub found [ 1022.752650][ T3084] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1022.760458][ T9312] hub 4-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 1022.930274][ T3084] usb 6-1: device descriptor read/64, error -71 [ 1023.042839][ T3084] usb usb6-port1: attempt power cycle [ 1023.081148][ T5864] usb 4-1: USB disconnect, device number 22 [ 1023.455624][ T3084] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1023.524974][ T3084] usb 6-1: device descriptor read/8, error -71 [ 1023.814312][ T3084] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1023.879422][ T3084] usb 6-1: device descriptor read/8, error -71 [ 1023.997769][ T3084] usb usb6-port1: unable to enumerate USB device [ 1025.380522][T12721] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2322'. [ 1029.521122][T12748] 9pnet_fd: Insufficient options for proto=fd [ 1030.178010][T12751] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2334'. [ 1033.579877][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1033.586577][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1034.761255][ T723] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 1034.806932][ T723] batadv0: left promiscuous mode [ 1034.823353][ T723] bond0 (unregistering): Released all slaves [ 1035.151295][ T723] tipc: Left network mode [ 1035.774224][ T723] hsr_slave_0: left promiscuous mode [ 1035.854558][ T723] hsr_slave_1: left promiscuous mode [ 1036.182529][T10988] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1036.276204][T10988] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1036.295569][T10988] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1036.322691][T10988] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1036.333510][T10988] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1037.251612][T12776] 9pnet_fd: Insufficient options for proto=fd [ 1038.434615][T10976] Bluetooth: hci2: command tx timeout [ 1038.471593][T12784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2347'. [ 1038.944750][T12772] chnl_net:caif_netlink_parms(): no params data found [ 1039.106333][T12786] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2349'. [ 1039.115661][T12786] netlink: 62 bytes leftover after parsing attributes in process `syz.5.2349'. [ 1042.222265][T10976] Bluetooth: hci2: command tx timeout [ 1043.289481][T10976] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1043.321316][T10976] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1043.351587][T10976] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1043.378030][T10976] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1043.389389][T10976] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1043.997778][ T3084] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1044.319573][T10988] Bluetooth: hci2: command tx timeout [ 1044.349170][ T3084] usb 6-1: Using ep0 maxpacket: 16 [ 1044.452440][ T3084] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 1044.454629][T12807] 9pnet_fd: Insufficient options for proto=fd [ 1044.460933][ T3084] usb 6-1: config 0 has no interface number 0 [ 1044.461064][ T3084] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1044.612642][ T3084] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1044.622370][ T3084] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1044.631559][ T3084] usb 6-1: Product: syz [ 1044.635934][ T3084] usb 6-1: SerialNumber: syz [ 1044.690823][T12772] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.706513][T12772] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.714402][T12772] bridge_slave_0: entered allmulticast mode [ 1044.725714][T12772] bridge_slave_0: entered promiscuous mode [ 1045.025054][ T3084] usb 6-1: config 0 descriptor?? [ 1045.085173][T12772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.092882][T12772] bridge0: port 2(bridge_slave_1) entered disabled state [ 1045.100890][T12772] bridge_slave_1: entered allmulticast mode [ 1045.117852][T12772] bridge_slave_1: entered promiscuous mode [ 1045.137028][ T3084] cm109 6-1:0.8: invalid payload size 208, expected 4 [ 1045.148103][ T3084] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input13 [ 1045.470201][T10988] Bluetooth: hci3: command tx timeout [ 1045.484688][ C1] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1045.494236][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1045.501892][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1045.509254][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1045.520569][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1045.529852][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1045.537339][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1045.544938][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1045.560065][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1045.567599][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1045.575148][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1045.676593][ T3084] usb 6-1: USB disconnect, device number 37 [ 1045.676835][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1045.814320][ T3084] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1046.027074][T12772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1046.165989][T12772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.351337][T10988] Bluetooth: hci2: command tx timeout [ 1046.448223][T12798] chnl_net:caif_netlink_parms(): no params data found [ 1046.634573][T12772] team0: Port device team_slave_0 added [ 1046.733760][T12772] team0: Port device team_slave_1 added [ 1047.045847][T12772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.059113][T12772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.089305][T12772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1047.245664][T12822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2359'. [ 1047.290952][T12822] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 1047.314706][T12772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.322308][T12772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1047.348460][T12772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1047.554432][T10988] Bluetooth: hci3: command tx timeout [ 1047.972930][T12832] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2361'. [ 1048.142664][T12772] hsr_slave_0: entered promiscuous mode [ 1048.152204][T12772] hsr_slave_1: entered promiscuous mode [ 1048.162628][T12772] debugfs: 'hsr0' already exists in 'hsr' [ 1048.168469][T12772] Cannot create hsr debugfs directory [ 1049.688822][T10976] Bluetooth: hci3: command tx timeout [ 1053.391583][T10988] Bluetooth: hci0: command 0x0406 tx timeout [ 1053.397870][T10988] Bluetooth: hci3: command tx timeout [ 1053.809626][T12798] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.823379][T12798] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.831135][T12798] bridge_slave_0: entered allmulticast mode [ 1053.840075][T12798] bridge_slave_0: entered promiscuous mode [ 1054.227867][T12798] bridge0: port 2(bridge_slave_1) entered blocking state [ 1054.235608][T12798] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.245348][T12798] bridge_slave_1: entered allmulticast mode [ 1054.256270][T12798] bridge_slave_1: entered promiscuous mode [ 1054.997519][T12798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1055.037803][T12798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1055.356113][T12798] team0: Port device team_slave_0 added [ 1055.403631][T12798] team0: Port device team_slave_1 added [ 1055.470777][T12772] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1055.516567][T12772] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1055.611098][T12772] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1055.651052][T12798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1055.663359][T12798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.691442][T12798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.783098][T12772] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1055.847812][T12798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.856297][T12798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.887101][T12798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1056.713527][T12798] hsr_slave_0: entered promiscuous mode [ 1056.723057][T12798] hsr_slave_1: entered promiscuous mode [ 1056.731193][T12798] debugfs: 'hsr0' already exists in 'hsr' [ 1056.737025][T12798] Cannot create hsr debugfs directory [ 1057.572341][T10654] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1057.793011][T10654] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1057.803722][T10654] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1057.819270][T10654] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1057.828709][T10654] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.018579][T10654] usb 6-1: config 0 descriptor?? [ 1058.399133][T12798] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.555054][T12772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.587387][T12798] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.793647][T12798] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.995541][T12798] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.212460][T12772] 8021q: adding VLAN 0 to HW filter on device team0 [ 1059.319635][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.327205][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1059.540232][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.547820][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1060.231369][T12798] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1060.462030][T12798] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1060.652845][ T9] usb 6-1: USB disconnect, device number 38 [ 1060.666193][T12866] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2371'. [ 1060.683234][T12798] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1060.805141][T12798] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1061.238455][T10988] Bluetooth: hci1: command 0x0406 tx timeout [ 1062.775368][T12798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.125774][T12798] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.374467][ T723] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.381972][ T723] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1063.578082][ T723] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.585544][ T723] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1063.729239][T12772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1064.185210][T12798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1066.631576][T10988] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1066.646249][T10988] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1066.676599][T10988] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1066.812401][T10988] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1066.879537][T10988] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1067.784441][T12798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.927544][T10988] Bluetooth: hci7: command tx timeout [ 1069.112929][T12772] veth0_vlan: entered promiscuous mode [ 1069.449455][T12772] veth1_vlan: entered promiscuous mode [ 1070.033125][T12772] veth0_macvtap: entered promiscuous mode [ 1070.215349][T12772] veth1_macvtap: entered promiscuous mode [ 1070.341640][T12895] chnl_net:caif_netlink_parms(): no params data found [ 1070.686439][T12772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.991198][T10988] Bluetooth: hci7: command tx timeout [ 1071.048688][T12772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.268136][ T4016] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.385258][ T2986] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.520888][ T4016] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.662604][ T2986] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.784385][ T4016] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.888869][ T2986] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.977831][ T4016] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.131382][ T4016] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1072.810418][ T4016] bridge_slave_1: left allmulticast mode [ 1072.816282][ T4016] bridge_slave_1: left promiscuous mode [ 1072.823048][ T4016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1072.921396][ T4016] bridge_slave_0: left allmulticast mode [ 1072.927302][ T4016] bridge_slave_0: left promiscuous mode [ 1072.934132][ T4016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.072253][T10988] Bluetooth: hci7: command tx timeout [ 1073.515706][ T4016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1073.539551][ T4016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1073.563657][ T4016] bond0 (unregistering): Released all slaves [ 1073.848851][T12895] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.857739][T12895] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.865845][T12895] bridge_slave_0: entered allmulticast mode [ 1073.891228][T12895] bridge_slave_0: entered promiscuous mode [ 1073.973421][T12895] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.982658][T12895] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.996783][T12895] bridge_slave_1: entered allmulticast mode [ 1074.007182][T12895] bridge_slave_1: entered promiscuous mode [ 1074.068516][T12798] veth0_vlan: entered promiscuous mode [ 1074.509518][ T4016] hsr_slave_0: left promiscuous mode [ 1074.558295][ T4016] hsr_slave_1: left promiscuous mode [ 1074.566993][ T4016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.574804][ T4016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.590617][ T4016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.603333][ T4016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.618476][ T5864] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1074.649490][ T4016] veth1_macvtap: left promiscuous mode [ 1074.655849][ T4016] veth0_macvtap: left promiscuous mode [ 1074.662055][ T4016] veth1_vlan: left promiscuous mode [ 1074.667633][ T4016] veth0_vlan: left promiscuous mode [ 1075.096705][ T5864] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.107249][ T5864] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1075.120312][ T5864] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1075.129647][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1075.158298][T10988] Bluetooth: hci7: command tx timeout [ 1075.202058][ T5864] usb 6-1: config 0 descriptor?? [ 1075.445930][ T4016] team0 (unregistering): Port device team_slave_1 removed [ 1075.537536][ T4016] team0 (unregistering): Port device team_slave_0 removed [ 1075.991505][T12895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.075421][T12798] veth1_vlan: entered promiscuous mode [ 1076.193811][T12895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.577040][T12895] team0: Port device team_slave_0 added [ 1076.633484][T12895] team0: Port device team_slave_1 added [ 1076.811768][T12798] veth0_macvtap: entered promiscuous mode [ 1076.846721][ T4016] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.139483][T12895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1077.147241][T12895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1077.180483][T12895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1077.357036][ T4016] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.429971][ T5864] usb 6-1: USB disconnect, device number 39 [ 1077.454079][T12895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1077.462738][T12895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1077.494318][T12895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.533863][T12798] veth1_macvtap: entered promiscuous mode [ 1077.623123][ T4016] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1077.766398][ T4016] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.115205][T12895] hsr_slave_0: entered promiscuous mode [ 1078.126315][T12895] hsr_slave_1: entered promiscuous mode [ 1078.135625][T12895] debugfs: 'hsr0' already exists in 'hsr' [ 1078.141789][T12895] Cannot create hsr debugfs directory [ 1078.172647][T12798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1078.239717][T12798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1078.348356][ T4208] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.421592][ T4208] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.555094][ T4208] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.583005][ T2986] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1078.705383][ T4016] bridge_slave_1: left allmulticast mode [ 1078.714153][ T4016] bridge_slave_1: left promiscuous mode [ 1078.721257][ T4016] bridge0: port 2(bridge_slave_1) entered disabled state [ 1078.761988][ T4016] bridge_slave_0: left allmulticast mode [ 1078.767992][ T4016] bridge_slave_0: left promiscuous mode [ 1078.775086][ T4016] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.360613][ T4016] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1079.399454][ T4016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1079.438645][ T4016] bond0 (unregistering): Released all slaves [ 1080.278062][ T4016] hsr_slave_0: left promiscuous mode [ 1080.300641][ T4016] hsr_slave_1: left promiscuous mode [ 1080.309007][ T4016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1080.316705][ T4016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1080.364511][ T4016] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1080.373631][ T4016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1080.474962][ T4016] veth1_macvtap: left promiscuous mode [ 1080.481743][ T4016] veth0_macvtap: left promiscuous mode [ 1080.487650][ T4016] veth1_vlan: left promiscuous mode [ 1080.493549][ T4016] veth0_vlan: left promiscuous mode [ 1081.308753][ T4016] team0 (unregistering): Port device team_slave_1 removed [ 1081.336190][ T4016] team0 (unregistering): Port device team_slave_0 removed [ 1081.711983][T10976] Bluetooth: hci4: command 0x0406 tx timeout [ 1082.644698][ T3004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.653817][ T3004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.932751][ T3004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1082.941102][ T3004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1082.973677][T12895] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1083.051623][T12895] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1083.121638][T12895] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1083.181754][T12895] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1084.546504][T12895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1084.748875][T12895] 8021q: adding VLAN 0 to HW filter on device team0 [ 1084.883993][ T2986] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.891730][ T2986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1085.002133][ T2986] bridge0: port 2(bridge_slave_1) entered blocking state [ 1085.009621][ T2986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1087.080301][ T2986] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.088364][ T2986] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.264491][T11898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.272874][T11898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.760782][T13025] syzkaller0: entered promiscuous mode [ 1087.766492][T13025] syzkaller0: entered allmulticast mode [ 1088.077677][T12895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.532196][T12895] veth0_vlan: entered promiscuous mode [ 1088.648835][T12895] veth1_vlan: entered promiscuous mode [ 1089.010965][ T5864] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 1089.057999][T12895] veth0_macvtap: entered promiscuous mode [ 1089.130733][T12895] veth1_macvtap: entered promiscuous mode [ 1089.277249][ T5864] usb 7-1: Using ep0 maxpacket: 16 [ 1089.332722][ T5864] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1089.350346][ T5864] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1089.357220][ T5864] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 1089.369243][ T5864] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1089.481154][T12895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1089.522914][ T5864] usb 7-1: config 0 descriptor?? [ 1089.632591][T12895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1089.746262][ T3004] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.795062][ T9051] usb 6-1: new full-speed USB device number 40 using dummy_hcd [ 1089.865956][ T3004] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.946004][ T3004] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.982143][ T3004] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.996517][ T9051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1090.008184][ T9051] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1090.017617][ T9051] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1090.111225][ T5864] nzxt-smart2 0003:1E71:2009.0014: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.6-1/input0 [ 1090.136055][ T9051] usb 6-1: config 0 descriptor?? [ 1090.143821][T13033] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1090.288864][T13029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.298432][T13029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.629342][T13029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1090.638803][T13029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1090.835203][ T9051] elan 0003:04F3:0755.0015: hidraw1: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1090.979308][T13033] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2409'. [ 1091.020370][ T9312] usb 7-1: USB disconnect, device number 7 [ 1091.075582][T13033] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2409'. [ 1092.696017][ T5864] usb 6-1: USB disconnect, device number 40 [ 1094.661734][ T9312] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 1094.871273][ T9312] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.885385][ T9312] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1094.900030][ T9312] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1094.909332][ T9312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.109553][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1095.117145][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1095.137568][ T9312] usb 5-1: config 0 descriptor?? [ 1095.153442][ T9312] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1096.881041][T11898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.889274][T11898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.951427][ T4016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.959481][ T4016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1097.680555][ T5864] usb 5-1: USB disconnect, device number 35 [ 1098.030304][ T9051] usb 6-1: new full-speed USB device number 41 using dummy_hcd [ 1098.231151][ T9051] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1098.242678][ T9051] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1098.261602][ T9051] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1098.282762][ T9051] usb 6-1: config 0 descriptor?? [ 1098.292122][T13091] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1098.807040][ T9051] elan 0003:04F3:0755.0016: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1098.994851][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2423'. [ 1099.035213][T13091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2423'. [ 1099.368252][T13105] tipc: Started in network mode [ 1099.373957][T13105] tipc: Node identity c6c214383c9a, cluster identity 4711 [ 1099.389141][T13105] tipc: Enabled bearer , priority 0 [ 1099.495195][T13105] syzkaller0: entered promiscuous mode [ 1099.501034][T13105] syzkaller0: entered allmulticast mode [ 1099.516535][ T9051] usb 6-1: USB disconnect, device number 41 [ 1099.696779][T13105] tipc: Resetting bearer [ 1099.737050][T13103] tipc: Resetting bearer [ 1099.785229][T13103] tipc: Disabling bearer [ 1102.048478][ T9312] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1102.273793][ T9312] usb 5-1: too many configurations: 48, using maximum allowed: 8 [ 1102.316680][ T9312] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1102.324616][ T9312] usb 5-1: can't read configurations, error -61 [ 1102.339598][T13121] netlink: 79 bytes leftover after parsing attributes in process `syz.2.2432'. [ 1102.358307][T13121] netlink: 79 bytes leftover after parsing attributes in process `syz.2.2432'. [ 1102.502570][ T9312] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1102.722617][ T9312] usb 5-1: too many configurations: 48, using maximum allowed: 8 [ 1102.768715][ T9312] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1102.776693][ T9312] usb 5-1: can't read configurations, error -61 [ 1102.841291][ T9312] usb usb5-port1: attempt power cycle [ 1103.260747][ T9312] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1103.334067][ T9312] usb 5-1: too many configurations: 48, using maximum allowed: 8 [ 1103.391755][ T9312] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1103.399739][ T9312] usb 5-1: can't read configurations, error -61 [ 1103.582808][ T9312] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1103.660639][ T9312] usb 5-1: too many configurations: 48, using maximum allowed: 8 [ 1103.700956][ T9312] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1103.708839][ T9312] usb 5-1: can't read configurations, error -61 [ 1103.744135][ T9312] usb usb5-port1: unable to enumerate USB device [ 1104.219458][ T9051] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1104.394123][ T9051] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.410276][ T9051] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1104.425320][ T9051] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1104.434784][ T9051] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.633316][ T9051] usb 6-1: config 0 descriptor?? [ 1104.665867][ T9051] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1107.314834][ T9051] usb 6-1: USB disconnect, device number 42 [ 1108.460946][ T9051] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 1108.685180][ T9051] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1108.696780][ T9051] usb 7-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1108.713931][ T9051] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.826299][ T9051] usb 7-1: config 0 descriptor?? [ 1108.843011][T13139] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1109.331563][ T9051] elan 0003:04F3:0755.0017: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.6-1/input0 [ 1109.510176][T13139] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2439'. [ 1109.575072][T13139] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2439'. [ 1111.235457][ T9051] usb 7-1: USB disconnect, device number 8 [ 1111.544114][T13160] 9pnet_fd: Insufficient options for proto=fd [ 1112.370125][T10654] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1112.540476][T10654] usb 3-1: Using ep0 maxpacket: 16 [ 1112.572118][T10654] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1112.580651][T10654] usb 3-1: config 0 has no interface number 0 [ 1112.586979][T10654] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1112.600456][ T9051] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1112.647975][T10654] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1112.657842][T10654] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1112.666339][T10654] usb 3-1: Product: syz [ 1112.670859][T10654] usb 3-1: SerialNumber: syz [ 1112.681045][T10654] usb 3-1: config 0 descriptor?? [ 1112.718411][T10654] cm109 3-1:0.8: invalid payload size 208, expected 4 [ 1112.728273][T10654] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input14 [ 1112.805828][ T9051] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.816536][ T9051] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1112.830414][ T9051] usb 5-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1112.839705][ T9051] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.952833][ T9051] usb 5-1: config 0 descriptor?? [ 1113.131587][ T9051] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1113.176180][ C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1113.185300][ C0] cm109_urb_ctl_callback: 198 callbacks suppressed [ 1113.185376][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1113.199995][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1113.213482][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1113.223903][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1113.232545][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1113.240023][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1113.247425][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1113.255099][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1113.262481][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1113.270024][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1113.318705][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1113.327917][T10654] usb 3-1: USB disconnect, device number 22 [ 1113.353382][T10654] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1115.531094][ T9051] usb 5-1: USB disconnect, device number 40 [ 1117.190270][ T9051] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 1117.267740][T13196] 9pnet_fd: Insufficient options for proto=fd [ 1117.444927][ T9051] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1117.456309][ T9051] usb 3-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1117.465758][ T9051] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.576390][ T9051] usb 3-1: config 0 descriptor?? [ 1117.584178][T13192] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1118.158349][ T9051] elan 0003:04F3:0755.0018: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.2-1/input0 [ 1118.329421][T13192] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2456'. [ 1119.600790][ T3084] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1119.674243][T10654] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1119.793747][ T3084] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.804812][ T3084] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1119.818255][ T3084] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1119.827888][ T3084] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.844180][ T3084] usb 6-1: config 0 descriptor?? [ 1119.877692][T10654] usb 5-1: Using ep0 maxpacket: 16 [ 1119.887024][ T3084] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1119.907296][T10654] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1119.916200][T10654] usb 5-1: config 0 has no interface number 0 [ 1119.922716][T10654] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1119.988787][ T5864] usb 3-1: USB disconnect, device number 23 [ 1120.027650][T10654] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1120.038071][T10654] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1120.046590][T10654] usb 5-1: Product: syz [ 1120.051113][T10654] usb 5-1: SerialNumber: syz [ 1120.142895][T10654] usb 5-1: config 0 descriptor?? [ 1120.174782][T10654] cm109 5-1:0.8: invalid payload size 208, expected 4 [ 1120.186495][T10654] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input15 [ 1120.616837][ C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1120.626657][ C0] cm109_urb_ctl_callback: 106 callbacks suppressed [ 1120.626766][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1120.641831][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1120.649484][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1120.657041][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1120.666384][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1120.674231][T10654] usb 5-1: USB disconnect, device number 41 [ 1120.680803][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1120.680937][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1120.735372][T10654] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1122.070353][T10654] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1122.159506][T13235] 9pnet_fd: Insufficient options for proto=fd [ 1122.228433][T10654] usb 5-1: device descriptor read/64, error -71 [ 1122.515744][T10654] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 1122.622479][ T9312] usb 6-1: USB disconnect, device number 43 [ 1122.712869][T10654] usb 5-1: device descriptor read/64, error -71 [ 1122.844009][T10654] usb usb5-port1: attempt power cycle [ 1123.225925][ T3072] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.236647][T10654] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 1123.346814][T10654] usb 5-1: device descriptor read/8, error -71 [ 1123.381106][ T3072] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.522914][ T3072] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.610706][T10654] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 1123.662439][ T3072] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1123.690098][T10654] usb 5-1: device descriptor read/8, error -71 [ 1123.808763][T10654] usb usb5-port1: unable to enumerate USB device [ 1124.127787][ T3072] bridge_slave_1: left allmulticast mode [ 1124.134158][ T3072] bridge_slave_1: left promiscuous mode [ 1124.140912][ T3072] bridge0: port 2(bridge_slave_1) entered disabled state [ 1124.158081][ T3072] bridge_slave_0: left allmulticast mode [ 1124.170379][ T3072] bridge_slave_0: left promiscuous mode [ 1124.177182][ T3072] bridge0: port 1(bridge_slave_0) entered disabled state [ 1124.702695][ T3072] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1124.791120][ T3072] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1124.852517][ T3072] bond0 (unregistering): Released all slaves [ 1125.130580][ T5864] usb 6-1: new full-speed USB device number 44 using dummy_hcd [ 1125.335051][ T5864] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 1125.346420][ T5864] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 1125.355809][ T5864] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.444068][ T5864] usb 6-1: config 0 descriptor?? [ 1125.471784][T13248] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1125.958443][ T3072] hsr_slave_0: left promiscuous mode [ 1125.977515][ T3072] hsr_slave_1: left promiscuous mode [ 1125.987887][ T3072] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1125.995869][ T3072] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1126.037378][ T3072] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1126.045356][ T3072] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1126.055135][ T5864] elan 0003:04F3:0755.0019: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0 [ 1126.144996][ T3072] veth1_macvtap: left promiscuous mode [ 1126.151091][ T3072] veth0_macvtap: left promiscuous mode [ 1126.157201][ T3072] veth1_vlan: left promiscuous mode [ 1126.162988][ T3072] veth0_vlan: left promiscuous mode [ 1126.408699][T13248] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2477'. [ 1126.710085][ T5864] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1126.910199][ T5864] usb 3-1: Using ep0 maxpacket: 16 [ 1126.939585][ T5864] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 1126.948680][ T5864] usb 3-1: config 0 has no interface number 0 [ 1126.955127][ T5864] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1126.981933][ T5864] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1126.991814][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1127.000753][ T5864] usb 3-1: Product: syz [ 1127.005121][ T5864] usb 3-1: SerialNumber: syz [ 1127.347800][ T3072] team0 (unregistering): Port device team_slave_1 removed [ 1127.405573][ T3072] team0 (unregistering): Port device team_slave_0 removed [ 1127.956680][ T5864] usb 3-1: config 0 descriptor?? [ 1128.022797][T13264] 9pnet_fd: Insufficient options for proto=fd [ 1128.025758][ T5864] cm109 3-1:0.8: invalid payload size 208, expected 4 [ 1128.040289][ T5864] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input16 [ 1128.396866][ C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71 [ 1128.402355][ T9312] usb 3-1: USB disconnect, device number 24 [ 1128.404046][ C1] cm109 3-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19 [ 1128.423726][ T9051] usb 6-1: USB disconnect, device number 44 [ 1128.424903][ T9312] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1129.670731][ T9312] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1129.711333][ T9051] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 1129.841842][ T9312] usb 6-1: Using ep0 maxpacket: 32 [ 1129.861075][ T9051] usb 3-1: device descriptor read/64, error -71 [ 1129.907857][ T9312] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 1129.916229][ T9312] usb 6-1: config 0 has no interface number 0 [ 1129.963085][T10988] ===================================================== [ 1129.970976][T10988] BUG: KMSAN: uninit-value in hci_cmd_complete_evt+0xca3/0xe90 [ 1129.978716][T10988] hci_cmd_complete_evt+0xca3/0xe90 [ 1129.984206][T10988] hci_event_packet+0xce2/0x1e40 [ 1129.989387][T10988] hci_rx_work+0x9a8/0x12b0 [ 1129.994192][T10988] process_scheduled_works+0xb8e/0x1d80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1130.007161][ T9312] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1130.007326][ T9312] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.007462][ T9312] usb 6-1: Product: syz [ 1130.007566][ T9312] usb 6-1: Manufacturer: syz [ 1130.007675][ T9312] usb 6-1: SerialNumber: syz [ 1130.033034][ T9312] usb 6-1: config 0 descriptor?? [ 1130.037504][T10988] worker_thread+0xedf/0x1590 [ 1130.037679][T10988] kthread+0xd59/0xf00 [ 1130.056559][T10988] ret_from_fork+0x1e3/0x310 [ 1130.061455][T10988] ret_from_fork_asm+0x1a/0x30 [ 1130.067454][T10988] [ 1130.069994][T10988] Uninit was stored to memory at: [ 1130.075233][T10988] hci_cmd_complete_evt+0xc9c/0xe90 [ 1130.082215][T10988] hci_event_packet+0xce2/0x1e40 [ 1130.087395][T10988] hci_rx_work+0x9a8/0x12b0 [ 1130.092304][T10988] process_scheduled_works+0xb8e/0x1d80 [ 1130.098091][T10988] worker_thread+0xedf/0x1590 [ 1130.114139][T10988] kthread+0xd59/0xf00 [ 1130.118410][T10988] ret_from_fork+0x1e3/0x310 [ 1130.123280][T10988] ret_from_fork_asm+0x1a/0x30 [ 1130.128272][T10988] [ 1130.130808][T10988] Uninit was stored to memory at: [ 1130.136052][T10988] hci_cmd_complete_evt+0x775/0xe90 [ 1130.141517][T10988] hci_event_packet+0xce2/0x1e40 [ 1130.146704][T10988] hci_rx_work+0x9a8/0x12b0 [ 1130.151668][T10988] process_scheduled_works+0xb8e/0x1d80 [ 1130.157447][T10988] worker_thread+0xedf/0x1590 [ 1130.162465][T10988] kthread+0xd59/0xf00 [ 1130.166708][T10988] ret_from_fork+0x1e3/0x310 [ 1130.168949][ T9312] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1130.171604][T10988] ret_from_fork_asm+0x1a/0x30 [ 1130.171768][T10988] [ 1130.171794][T10988] Uninit was created at: [ 1130.172000][T10988] kmem_cache_alloc_node_noprof+0x818/0xf00 [ 1130.198597][T10988] kmalloc_reserve+0x13c/0x4b0 [ 1130.211772][T10988] __alloc_skb+0x347/0x7d0 [ 1130.216385][T10988] vhci_write+0x125/0x960 [ 1130.223733][T10988] vfs_write+0xbdf/0x15d0 [ 1130.228269][T10988] __ia32_sys_write+0x1f9/0x4d0 [ 1130.233414][T10988] ia32_sys_call+0x35bc/0x4310 [ 1130.238351][T10988] __do_fast_syscall_32+0xb0/0x150 [ 1130.243818][T10988] do_fast_syscall_32+0x38/0x80 [ 1130.248884][T10988] do_SYSENTER_32+0x1f/0x30 [ 1130.253772][T10988] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1130.260461][T10988] [ 1130.262926][T10988] CPU: 1 UID: 0 PID: 10988 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT(none) [ 1130.272830][T10988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1130.283960][T10988] Workqueue: hci2 hci_rx_work [ 1130.288849][T10988] ===================================================== [ 1130.296006][T10988] Disabling lock debugging due to kernel taint [ 1130.302397][T10988] Kernel panic - not syncing: kmsan.panic set ... [ 1130.308989][T10988] CPU: 1 UID: 0 PID: 10988 Comm: kworker/u9:1 Tainted: G B syzkaller #0 PREEMPT(none) [ 1130.320316][T10988] Tainted: [B]=BAD_PAGE [ 1130.324582][T10988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1130.334903][T10988] Workqueue: hci2 hci_rx_work [ 1130.339806][T10988] Call Trace: [ 1130.343212][T10988] [ 1130.346275][T10988] __dump_stack+0x26/0x30 [ 1130.350847][T10988] dump_stack_lvl+0x53/0x270 [ 1130.355653][T10988] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1130.361717][T10988] dump_stack+0x1e/0x25 [ 1130.366126][T10988] vpanic+0x361/0xc50 [ 1130.370344][T10988] panic+0x15d/0x160 [ 1130.374539][T10988] kmsan_report+0x31c/0x320 [ 1130.379335][T10988] ? __msan_warning+0x1b/0x30 [ 1130.384333][T10988] ? hci_cmd_complete_evt+0xca3/0xe90 [ 1130.389905][T10988] ? hci_event_packet+0xce2/0x1e40 [ 1130.395279][T10988] ? hci_rx_work+0x9a8/0x12b0 [ 1130.400248][T10988] ? process_scheduled_works+0xb8e/0x1d80 [ 1130.406236][T10988] ? worker_thread+0xedf/0x1590 [ 1130.411339][T10988] ? kthread+0xd59/0xf00 [ 1130.415773][T10988] ? ret_from_fork+0x1e3/0x310 [ 1130.420750][T10988] ? ret_from_fork_asm+0x1a/0x30 [ 1130.425965][T10988] ? ret_from_fork_asm+0x1a/0x30 [ 1130.431308][T10988] ? add_timer_global+0xbc/0x110 [ 1130.436560][T10988] ? __queue_delayed_work+0x25b/0x390 [ 1130.442155][T10988] ? kmsan_get_metadata+0xfb/0x160 [ 1130.447520][T10988] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1130.453566][T10988] ? kmsan_get_metadata+0xfb/0x160 [ 1130.458922][T10988] __msan_warning+0x1b/0x30 [ 1130.463627][T10988] hci_cmd_complete_evt+0xca3/0xe90 [ 1130.469063][T10988] hci_event_packet+0xce2/0x1e40 [ 1130.474258][T10988] ? __pfx_hci_cmd_complete_evt+0x10/0x10 [ 1130.480231][T10988] hci_rx_work+0x9a8/0x12b0 [ 1130.484972][T10988] ? __pfx_hci_rx_work+0x10/0x10 [ 1130.490114][T10988] process_scheduled_works+0xb8e/0x1d80 [ 1130.495992][T10988] worker_thread+0xedf/0x1590 [ 1130.500954][T10988] kthread+0xd59/0xf00 [ 1130.505225][T10988] ? __pfx_worker_thread+0x10/0x10 [ 1130.510638][T10988] ? __pfx_kthread+0x10/0x10 [ 1130.515568][T10988] ret_from_fork+0x1e3/0x310 [ 1130.520380][T10988] ? __pfx_kthread+0x10/0x10 [ 1130.525276][T10988] ret_from_fork_asm+0x1a/0x30 [ 1130.530340][T10988] [ 1130.533903][T10988] Kernel Offset: disabled [ 1130.538313][T10988] Rebooting in 86400 seconds..