last executing test programs: 4m30.775201907s ago: executing program 3 (id=24): creat(0x0, 0x4b) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) userfaultfd(0x80801) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x11c0, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r4, &(0x7f00000001c0)={0x11, 0x17, r5, 0x1, 0x7, 0x6, @local}, 0x14) bind$inet(r3, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 4m28.87837423s ago: executing program 3 (id=26): r0 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000580)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/59, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f0000000140)=""/87, &(0x7f0000000480)=""/59, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f00000002c0)={0x1, r3}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffc6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) ioctl$VIDIOC_G_PARM(0xffffffffffffffff, 0xc0cc5615, &(0x7f0000000240)={0x6, @output={0x1000, 0x1, {0x484b, 0x2}, 0x6, 0x40}}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x29, 0x2, {{0x7ff, 0x7, 0xe5, 0x0, 0x1}, 0x55, 0x0, 0xfffffff9, 0x0, 0x6, 0x12, 0x19, 0x16, 0x4, 0x7ff, {0x6, 0xffffffff, 0x1010000, 0x8, 0x0, 0x6}}}}]}, 0x78}}, 0x0) r4 = syz_open_dev$dvb_frontend(0x0, 0x8, 0x101000) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000100)={&(0x7f0000000040)=""/147, 0x93, 0x94, 0xf}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(&(0x7f0000002040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f00000001c0)='./file0\x00') 4m26.822788259s ago: executing program 3 (id=30): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) socket$kcm(0x11, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x1000000000002) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x4000}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x2, 'syz1\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0x40405515, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0x5, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r3, &(0x7f00000005c0)=""/4108, 0x100c) 4m24.77967488s ago: executing program 3 (id=31): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="2e00000025008101040000000000009f1ba1f848430000005e1406ca000000ffffffff25ed5860000a898988a800", 0x2e}], 0x1}, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) 4m23.944220178s ago: executing program 3 (id=35): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x8000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={0x14, 0x2, 0x6, 0x801}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sndctrl(0x0, 0x802, 0x6b929545a606890f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x8000400) socket$alg(0x26, 0x5, 0x0) mount(0x0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x208000, 0x0) syz_usb_connect$uac2(0x2, 0x9a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010102000000200c201810400001020301090288000301018008080b0001010c200609040000000101200009240103000428000408240a05004000020c24030207030503050300010b240603050600"], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}) 4m19.838076611s ago: executing program 3 (id=41): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x80085665, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$igmp6(0xa, 0x3, 0x3a) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r4 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0x6492, 0xc000, 0x8, 0xc1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) io_uring_enter(r4, 0x3215, 0x771f, 0x16, 0x0, 0x0) 4m2.217973605s ago: executing program 32 (id=41): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000100)=0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(0xffffffffffffffff, 0x80085665, 0x0) close(0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_INFO(0xffffffffffffffff, 0x80e85411, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) socket$igmp6(0xa, 0x3, 0x3a) r3 = syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x2a82) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000005c0)={0xffffffffffffffff, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x20, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd6447a4b4e00d9683dda1af1ea09de2b7fb0a0100000000000000000300", "2809e8dbe108598927875397bab22d0000b420a9c81f40f05f819e01177d3d458dac00000000000000000000003b00000000000000000200", "90be8b1c5512406c7f00", [0x4, 0x40000000000000]}}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000001280)={r3, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9603dda1af1ea80000000000000000000000deff00000000000000000000000014a2648f00", "2809e8dbe108038948224ad54afac11d875397bdb22d0000b420a1a93c7540f4767f9e01177d3dd40600000061ac00", "90be8b1c55f96400", [0x800]}}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r3) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) r4 = io_uring_setup(0xb, &(0x7f0000000040)={0x0, 0x6492, 0xc000, 0x8, 0xc1}) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x20) io_uring_enter(r4, 0x3215, 0x771f, 0x16, 0x0, 0x0) 13.558977384s ago: executing program 0 (id=570): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000040)) r2 = syz_open_dev$sndpcmp(&(0x7f0000000140), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r2, 0xc06c4124, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) 12.843080795s ago: executing program 1 (id=575): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, 0x40, 0x107, 0x70bd2b, 0x25dfdbfa, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x99, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0x4, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) prlimit64(r3, 0xb, &(0x7f0000000100)={0x4, 0x4}, &(0x7f0000001000)) socket$l2tp(0x2, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r3, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socket(0x800000018, 0x1, 0x0) 12.745632955s ago: executing program 0 (id=576): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$alg(0x26, 0x5, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0xff5d, &(0x7f0000000240)=0x7834bcc6) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000003c0)=0x11) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000000000000a000800060001003a00000008000a00", @ANYRES32], 0x24}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000004000071efeffffff00000000017c0000040042801400018010000400cab1893a20b8d2a93521800a04000280141511b5250edf7fed8a42dd8103d02b0e42800c"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) memfd_secret(0x80000) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r7, 0xc0d05604, &(0x7f0000000240)={0x1, @sdr={0x56555959, 0xfffffff7}}) ioctl$sock_SIOCGIFBR(r1, 0x8940, &(0x7f00000006c0)=@generic={0x1, 0x4, 0x7}) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) syz_emit_ethernet(0xfdef, &(0x7f0000000080)=ANY=[], 0x0) 9.039810866s ago: executing program 0 (id=586): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x20000050) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000084) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9c8af77a75979705a", 0xd) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 8.596395252s ago: executing program 1 (id=589): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 8.200125188s ago: executing program 1 (id=590): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x8000000, 0x0, 0x400c880}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000280)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="400b1f00000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.856151074s ago: executing program 4 (id=595): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 5.783118648s ago: executing program 4 (id=596): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x40800) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = accept(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r4}, 0x20) recvmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/12], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './bus'}, 0x9) sendmsg$nl_generic(r7, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000840)={0xb4, 0x81f, 0x20, 0x70bd28, 0x2ddfdbfa, {0x90}, [@typed={0x3, 0x94, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0xc, 0x86, 0x0, 0x1, [@typed={0x8, 0x7c, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x3a, 0x0}}]}, @typed={0x85, 0x45, 0x0, 0x0, @ipv4=@empty}]}, 0xb4}}, 0x0) r8 = openat$cgroup(r7, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r8, 0x34, 0x1, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200009e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 5.716915975s ago: executing program 0 (id=597): r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000a00)={0x2c, &(0x7f00000003c0)={0x60, 0x5, 0xa8, {0xa8, 0x7, "bb34187852e39b3c72ec5af885d7f735887ccae95a5d99695b103723baa2da9b9c79ed76b25e18f0a94add9cca30903c641f3ff5a4792018c022be20c5797933f0882592f94aeba4f40e8733494da642649b284e7f46ec093f5e0733397f2024147af5c74526fbfc984a305d1ef011d6166ff78eea26bf1e0b2d9f2f27b28bedf50b6c8a4f8b5424020c7e49fc03e93210e43f0a4f21f7fd31a21ba2d0a49a99326c9167cd0e"}}, 0x0, &(0x7f0000000940)={0x0, 0xf, 0x18, {0x5, 0xf, 0x18, 0x2, [@ssp_cap={0xc, 0x10, 0xa, 0xf, 0x0, 0xd, 0x0, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x2, 0x1}]}}, &(0x7f0000000980)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x3, 0x2, 0x5, "dde4af09", "ad833ab9"}}, &(0x7f00000009c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x18, 0xff, 0x9, 0x7, 0x1}}}, &(0x7f0000000ec0)={0x84, &(0x7f0000000a40)={0x40, 0xd, 0xab, "7cf389ab23d23930745eb723c485122fbacc73287538b9d30021b879758902d9bce52f51dfb97dd16a5ac01885de19e7706bd7d206ec50a8292747e4861f3697e381b9c213179e85ed496eaeb9e25fd1ce1ec124d187dab7dbb908c333494c6aeaaffb2a3a79458c50b4ae4b966bad48ae9ee779f25ef9c75f7edcf0711fb9b8b10614765464019b171e95db8b2856f772ae3cbfd3a5a9a090e973239da32afdc7d5482998a78505b8e9d2"}, 0x0, &(0x7f0000000b40)={0x0, 0x8, 0x1}, &(0x7f0000000b80)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, &(0x7f0000000c80)={0x40, 0xb, 0x2, ':r'}, &(0x7f0000000cc0)={0x40, 0xf, 0x2, 0x7ff}, &(0x7f0000000d00)={0x40, 0x13, 0x6, @multicast}, 0x0, &(0x7f0000000d80)={0x40, 0x19, 0x2, "eb7a"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x40, &(0x7f0000000640)=ANY=[@ANYRES16=r0, @ANYBLOB="7b6b6bdda4458ad2d55cbad8867662a44fb7ffc86e4afe48877731d10f18a6f3310a953265a4c4f64d20a72cee93bdbe33084f2b8e4fae796156ebb35664fe35be24b6b0fbb8b90b0fa8e0c45f2837a037e2de6b618e80d279984b089230"]) 5.712047347s ago: executing program 1 (id=598): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, 0x40, 0x107, 0x70bd2b, 0x25dfdbfa, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x99, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0x4, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) prlimit64(r3, 0xb, &(0x7f0000000100)={0x4, 0x4}, &(0x7f0000001000)) socket$l2tp(0x2, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r3, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socket(0x800000018, 0x1, 0x0) 4.029334775s ago: executing program 1 (id=600): syz_usb_connect$midi(0x5, 0x31, &(0x7f00000002c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x582, 0x3b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x13, 0x10, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0x40, [], [{{0x9, 0x5, 0xc, 0x2, 0x20, 0x8, 0x3, 0xe, {0x4}}}]}}}}}]}}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x9, &(0x7f00000004c0)=@string={0x9, 0x3, "9bc464bc716ac1"}}, {0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x40d}}, {0x4d, &(0x7f00000005c0)=@string={0x4d, 0x3, "6b5edc86cdae679a9fe62c29443bc7a2ed9e26a341ba7a110f6d43f96a7e284b57cf55ebb31973b519aa128a51bcf843277b1b179dd9e9f32230e997c9eee40fb6401e3144f2818dfb3982"}}]}) bind$alg(0xffffffffffffffff, 0x0, 0x0) 4.008925373s ago: executing program 4 (id=601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = syz_io_uring_setup(0x4000eff, 0x0, 0x0, &(0x7f0000000140), &(0x7f0000000040)) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f00000008c0), r2) r3 = syz_genetlink_get_family_id$nbd(0x0, r2) sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYBLOB="210027bd78"], 0x34}}, 0x4044006) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fffff}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r0, 0x1, 0x21, 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400048000000000000000008500000096000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007e00000095"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 3.067078544s ago: executing program 0 (id=603): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be6", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 2.735436297s ago: executing program 0 (id=606): sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4008810}, 0x20000050) sendmsg$FOU_CMD_DEL(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000084) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="4a2b5af6b9c8af77a75979705a", 0xd) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085", 0xcb}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[]) 2.711336398s ago: executing program 2 (id=607): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}}, 0x0) 2.467467682s ago: executing program 2 (id=608): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xfffffffe}, 0x1c) msgget$private(0x0, 0x100) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x6) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000000c0)=0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$kcm(0x10, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d0027", 0x23}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket(0x1d, 0x5, 0x7ffffffc) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r7 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.idle_time\x00', 0x275a, 0x0) write$binfmt_misc(r8, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f00000002c0)={r8, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad44afac11d875397bdb22d0000b420a1a93c5240f45f819ef6167d3d458dd4992861ac00", "f4bd00ac6700000000000000000000c2888e7d52164ec480e79200000100", [0x0, 0x2000000000001]}}) ioctl$XFS_IOC_SCRUBV_METADATA(r3, 0xc0285840, &(0x7f0000000000)={0xd22, 0x200, 0x5, 0x0, 0x3, 0x0, 0x0, 0xffffffffffffffff}) 2.389354034s ago: executing program 4 (id=609): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$sequencer(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x34, 0x40, 0x107, 0x70bd2b, 0x25dfdbfa, {0x4, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x99, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0x4, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x14) prlimit64(r3, 0xb, &(0x7f0000000100)={0x4, 0x4}, &(0x7f0000001000)) socket$l2tp(0x2, 0x2, 0x73) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000004c0)={0x38, 0x1403, 0x1, 0x70bd2d, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) prlimit64(r3, 0xc, &(0x7f0000000180)={0x8, 0x6}, &(0x7f0000000f80)) connect$inet(0xffffffffffffffff, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r1, 0x80045104, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x94) socket(0x800000018, 0x1, 0x0) 2.263050993s ago: executing program 2 (id=610): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x40800) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r4 = accept(r2, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x12, 0x4, 0x4, 0xa4}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000080), &(0x7f00000002c0)=@tcp=r4}, 0x20) recvmsg$can_bcm(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x10060) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800"/12], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_test', 0x141a82, 0x0) write$binfmt_script(r7, &(0x7f0000000340)={'#! ', './bus'}, 0x9) sendmsg$nl_generic(r7, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000840)={0xb4, 0x81f, 0x20, 0x70bd28, 0x2ddfdbfa, {0x90}, [@typed={0x3, 0x94, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0xc, 0x86, 0x0, 0x1, [@typed={0x8, 0x7c, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x3a, 0x0}}]}, @typed={0x85, 0x45, 0x0, 0x0, @ipv4=@empty}]}, 0xb4}}, 0x0) r8 = openat$cgroup(r7, &(0x7f0000000440)='syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r8, 0x34, 0x1, 0x7, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r6, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200009e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 998.969246ms ago: executing program 4 (id=611): syz_open_dev$vim2m(0x0, 0x2000000f5, 0x2) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}}) 921.048498ms ago: executing program 2 (id=612): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000c40)={0x0, &(0x7f0000000880)=[@wr_crn={0x67, 0x20, {0x0, 0x5}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @control_area=0x60, 0x7, 0x7f, 0x30ff7b6d}}, @code={0xa, 0x64, {"c4422193b40e0200000064450fc79800000000f2430f2c000f010ac481a9de7900b9800000c00f3235001000000f30660fd300c74424002a000000c7442402de0f4104ff2c2466450fc7b5040000000fc71cf8"}}, @wr_crn={0x67, 0x20, {0x8, 0x4}}, @nested_amd_clgi={0x17f, 0x10}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0xfffffffffffff001}, @cpuid={0x64, 0x18, {0x648f, 0x3}}, @nested_load_syzos={0x136, 0x38, {0x3, 0x2, [@nested_create_vm={0x12d, 0x18, 0x1}]}}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_clgi={0x17f, 0x10}, @set_irq_handler={0xc8, 0x20, {0x80, 0x1}}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0xc, 0xa85f}}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_amd_invlpga={0x17d, 0x20, {0x7000, 0x971e}}, @code={0xa, 0x56, {"66b837000f00d8b9800000c00f3235000400000f30420fc76c679cb9800000c00f3235008000000f30c441e1ebf90f07c48143d0cf470f01ca420f073e4e0fc7aa34c2d3da"}}, @nested_amd_stgi={0x17e, 0x10}, @in_dx={0x69, 0x20, {0xd7af, 0x3}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x6f, 0x6, 0x4b, 0x3}}, @nested_vmlaunch={0x12f, 0x18, 0x6}, @wrmsr={0x65, 0x20, {0xad8, 0x6}}, @nested_amd_inject_event={0x180, 0x38, {0x1, 0xc9, 0x5, 0xfff, 0x3}}, @nested_amd_clgi={0x17f, 0x10}], 0x36a}) ioctl$KVM_SET_CPUID(r1, 0x4008ae8a, &(0x7f0000000c80)={0x2, 0x0, [{0xc0000001, 0x8, 0x3ff, 0x9, 0xad}, {0xa, 0x80000001, 0x2, 0x4, 0x4}, {0x80000008, 0x7, 0xc6b9, 0x5, 0x6}]}) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r3 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e25, 0x2, @empty, 0x40003ff}, 0x1b) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3d3ef75ddacbd12bc6fdb90900148e2c57f4fc14a68710211fd0e993aeed30e2a4efc363f1756d1afd06bcf7341a2a458b698e7fa99ec13abd52a4d18e9e6f209567e926fe78228725ba20bedf127c1aa1e6cd8e62f844a6749aa786b6e21c100a280de10dafe05c65e4a54a4fc80a7e084835bfd7c793089e6b639ddb2afa623b8a60f9b6bb0e108b302d43f0ce3f0584c6b167b1367538fc4b60841af4410ff38ffee04d129f536b6a705c0f6d24b67c084843d3a38dbb7ac03e4b6ae179717047daf45e9dad438b", @ANYRES64=r3, @ANYRES32=r0], 0x0, 0x28, 0x0, 0x0, 0xffffff45}, 0x28) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r5, 0x84, 0x1c, &(0x7f0000000380), 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x149a82, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a000006090002"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x2e, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES32=r4, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002800500190084000000"], 0x48}}, 0x4084) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0xc, &(0x7f0000000d00)=ANY=[@ANYBLOB="18000000000000000000000000000000d6000100250000008510000001000000950000000000000018120000", @ANYRES32], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r4, @ANYRES32=0x0, @ANYBLOB="9b0076786c616e00"/22], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4048045) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000001c0)={0x0, &(0x7f0000000180)}) syz_usb_connect$uac1(0x0, 0x0, 0x0, 0x0) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000240)={'ni_at_a2150\x00', [0xb013, 0x7, 0x3, 0xdd6, 0x88d7, 0x8f, 0xffffffff, 0x8012, 0x1006, 0xffffffff, 0x40008, 0x7, 0x1000000b, 0x3, 0x0, 0xfffffffd, 0x8, 0x6, 0x9, 0x57, 0x4, 0x3, 0x7, 0xa, 0x4, 0x1, 0xb0c4, 0x800, 0x20004, 0x400002, 0x22]}) 920.140293ms ago: executing program 1 (id=613): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x18, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x100080}, [@generic={0x73, 0x1, 0x1, 0x37}]}, &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x56, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) syz_emit_ethernet(0x5e, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) unshare(0x20060400) fsync(0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[], [], 0x2c}) fcntl$getown(0xffffffffffffffff, 0x9) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="0b036c00e0ff64000200475400f6a13bb10000000800894f4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14) r5 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r5, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1}) 687.515602ms ago: executing program 2 (id=614): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r2, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 170.307514ms ago: executing program 4 (id=615): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000004000000000000000300000784"], 0x0, 0x5, 0x0, 0x0, 0x41100, 0x9}, 0x94) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3ea35512) r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="540000001200b7a339f2d30afddbdf4d200f070700000000000025862f00000001ffffffc3000000060000000087c32be6", @ANYRES32=0x0, @ANYBLOB="de00fbffa611195cc93f034708000000080003"], 0x54}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) 0s ago: executing program 2 (id=616): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)}], 0x1, 0x0, 0x0, 0x2000000}}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.209' (ED25519) to the list of known hosts. [ 81.120201][ T5787] cgroup: Unknown subsys name 'net' [ 81.372026][ T5787] cgroup: Unknown subsys name 'cpuset' [ 81.415891][ T5787] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.344731][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.739409][ T5806] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.740628][ T5806] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.760266][ T5812] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.776272][ T5810] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.803347][ T5815] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.811495][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.811676][ T5810] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.823590][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.824421][ T5818] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.834552][ T5818] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.844141][ T5818] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.846733][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.847053][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.859325][ T5818] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.943188][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.950165][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.951455][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.955633][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.984055][ T5815] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.996684][ T5806] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.002779][ T5806] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.025604][ T5121] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.026627][ T5121] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.033864][ T5121] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.048467][ T5121] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.127988][ T828] cfg80211: failed to load regulatory.db [ 87.227513][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 87.261134][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 87.357332][ T5803] chnl_net:caif_netlink_parms(): no params data found [ 87.379700][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 87.473198][ T5805] chnl_net:caif_netlink_parms(): no params data found [ 87.784873][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.784955][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.787273][ T5801] bridge_slave_0: entered allmulticast mode [ 87.790028][ T5801] bridge_slave_0: entered promiscuous mode [ 87.800030][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.800151][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.800312][ T5804] bridge_slave_0: entered allmulticast mode [ 87.804363][ T5804] bridge_slave_0: entered promiscuous mode [ 87.862779][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.862896][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.863001][ T5801] bridge_slave_1: entered allmulticast mode [ 87.864484][ T5801] bridge_slave_1: entered promiscuous mode [ 87.871115][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.871261][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.871433][ T5804] bridge_slave_1: entered allmulticast mode [ 87.874174][ T5804] bridge_slave_1: entered promiscuous mode [ 87.880907][ T5803] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.881046][ T5803] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.881204][ T5803] bridge_slave_0: entered allmulticast mode [ 87.884427][ T5803] bridge_slave_0: entered promiscuous mode [ 87.891007][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.891127][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.891294][ T5802] bridge_slave_0: entered allmulticast mode [ 87.893865][ T5802] bridge_slave_0: entered promiscuous mode [ 87.896488][ T5812] Bluetooth: hci0: command tx timeout [ 87.969856][ T5803] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.970041][ T5803] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.970517][ T5803] bridge_slave_1: entered allmulticast mode [ 87.973199][ T5803] bridge_slave_1: entered promiscuous mode [ 87.975220][ T5812] Bluetooth: hci2: command tx timeout [ 87.985235][ T5812] Bluetooth: hci4: command tx timeout [ 88.020091][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.020191][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.020334][ T5802] bridge_slave_1: entered allmulticast mode [ 88.022010][ T5802] bridge_slave_1: entered promiscuous mode [ 88.024929][ T5805] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.025010][ T5805] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.026185][ T5805] bridge_slave_0: entered allmulticast mode [ 88.028862][ T5805] bridge_slave_0: entered promiscuous mode [ 88.099489][ T5805] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.099598][ T5805] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.099895][ T5805] bridge_slave_1: entered allmulticast mode [ 88.101413][ T5805] bridge_slave_1: entered promiscuous mode [ 88.110856][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.118504][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.136280][ T5812] Bluetooth: hci1: command tx timeout [ 88.136387][ T5812] Bluetooth: hci3: command tx timeout [ 88.180802][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.184299][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.191605][ T5803] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.197903][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.253487][ T5803] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.258768][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.262511][ T5805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.325678][ T5805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.327655][ T5801] team0: Port device team_slave_0 added [ 88.329838][ T5804] team0: Port device team_slave_0 added [ 88.383775][ T5801] team0: Port device team_slave_1 added [ 88.386609][ T5804] team0: Port device team_slave_1 added [ 88.389339][ T5803] team0: Port device team_slave_0 added [ 88.393051][ T5802] team0: Port device team_slave_0 added [ 88.441710][ T5803] team0: Port device team_slave_1 added [ 88.443611][ T5802] team0: Port device team_slave_1 added [ 88.455975][ T5805] team0: Port device team_slave_0 added [ 88.509788][ T5805] team0: Port device team_slave_1 added [ 88.510736][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.510747][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.510763][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.513078][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.513094][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.513122][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.588174][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.588191][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.588216][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.590729][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.590744][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.590768][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.592245][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.592257][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.592281][ T5803] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.594942][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.594954][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.594978][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.655487][ T5803] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.655506][ T5803] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.655530][ T5803] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.657123][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.657138][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.657162][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.658627][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.658639][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.658663][ T5805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.700858][ T5805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.700876][ T5805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.700901][ T5805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.876234][ T5801] hsr_slave_0: entered promiscuous mode [ 88.878728][ T5801] hsr_slave_1: entered promiscuous mode [ 88.898208][ T5804] hsr_slave_0: entered promiscuous mode [ 88.899691][ T5804] hsr_slave_1: entered promiscuous mode [ 88.900765][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 88.900860][ T5804] Cannot create hsr debugfs directory [ 88.984102][ T5802] hsr_slave_0: entered promiscuous mode [ 88.986720][ T5802] hsr_slave_1: entered promiscuous mode [ 88.987716][ T5802] debugfs: 'hsr0' already exists in 'hsr' [ 88.987740][ T5802] Cannot create hsr debugfs directory [ 88.998311][ T5803] hsr_slave_0: entered promiscuous mode [ 88.999592][ T5803] hsr_slave_1: entered promiscuous mode [ 89.000493][ T5803] debugfs: 'hsr0' already exists in 'hsr' [ 89.000516][ T5803] Cannot create hsr debugfs directory [ 89.063777][ T5805] hsr_slave_0: entered promiscuous mode [ 89.067103][ T5805] hsr_slave_1: entered promiscuous mode [ 89.068927][ T5805] debugfs: 'hsr0' already exists in 'hsr' [ 89.068953][ T5805] Cannot create hsr debugfs directory [ 89.975801][ T59] Bluetooth: hci0: command tx timeout [ 90.055348][ T5812] Bluetooth: hci2: command tx timeout [ 90.055950][ T59] Bluetooth: hci4: command tx timeout [ 90.215223][ T5812] Bluetooth: hci1: command tx timeout [ 90.215398][ T59] Bluetooth: hci3: command tx timeout [ 90.367781][ T5801] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.404967][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.413123][ T5801] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.439615][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.442142][ T5801] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.489833][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.509176][ T5801] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.542842][ T5801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.667897][ T5803] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.709647][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 90.712518][ T5803] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.731915][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 90.735601][ T5803] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.769607][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 90.802012][ T5803] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.830060][ T5803] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 90.970882][ T5802] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.998206][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.008251][ T5802] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.042178][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.049653][ T5802] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.079618][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.104269][ T5802] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.138882][ T5802] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.301014][ T5804] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.328329][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.344952][ T5804] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.370150][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.374839][ T5804] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.422976][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.450162][ T5804] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.483018][ T5804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.569228][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.639270][ T5805] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.673110][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 91.686380][ T5805] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.729423][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 91.733020][ T5805] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.770028][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 91.781308][ T5805] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.819286][ T5805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 91.861080][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.906107][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.906261][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.914350][ T5803] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.964043][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.964185][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.040438][ T5803] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.055277][ T59] Bluetooth: hci0: command tx timeout [ 92.088633][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.102624][ T1421] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.102788][ T1421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.136020][ T5812] Bluetooth: hci2: command tx timeout [ 92.136119][ T59] Bluetooth: hci4: command tx timeout [ 92.153326][ T1421] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.153494][ T1421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.254016][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.293472][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.293695][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.295548][ T5812] Bluetooth: hci1: command tx timeout [ 92.295637][ T59] Bluetooth: hci3: command tx timeout [ 92.313605][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.391601][ T170] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.391813][ T170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.532023][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.618394][ T170] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.618630][ T170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.662463][ T5805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.697502][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.697705][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.834563][ T5805] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.883788][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.937096][ T1365] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.951930][ T1365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.043413][ T1421] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.045620][ T1421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.447749][ T5803] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.528111][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.881334][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.882336][ T5803] veth0_vlan: entered promiscuous mode [ 93.933201][ T5801] veth0_vlan: entered promiscuous mode [ 93.933696][ T5802] veth0_vlan: entered promiscuous mode [ 93.959187][ T5803] veth1_vlan: entered promiscuous mode [ 93.994749][ T5801] veth1_vlan: entered promiscuous mode [ 94.001925][ T5802] veth1_vlan: entered promiscuous mode [ 94.014635][ T5805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.128054][ T5803] veth0_macvtap: entered promiscuous mode [ 94.131324][ T5804] veth0_vlan: entered promiscuous mode [ 94.135450][ T59] Bluetooth: hci0: command tx timeout [ 94.167686][ T5801] veth0_macvtap: entered promiscuous mode [ 94.170539][ T5803] veth1_macvtap: entered promiscuous mode [ 94.172578][ T5802] veth0_macvtap: entered promiscuous mode [ 94.203995][ T5801] veth1_macvtap: entered promiscuous mode [ 94.214132][ T5802] veth1_macvtap: entered promiscuous mode [ 94.215655][ T59] Bluetooth: hci4: command tx timeout [ 94.215684][ T59] Bluetooth: hci2: command tx timeout [ 94.226073][ T5804] veth1_vlan: entered promiscuous mode [ 94.299208][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.302560][ T5805] veth0_vlan: entered promiscuous mode [ 94.329121][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.332805][ T5803] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.351002][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.375301][ T59] Bluetooth: hci1: command tx timeout [ 94.375351][ T5812] Bluetooth: hci3: command tx timeout [ 94.380162][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.420681][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.421367][ T5805] veth1_vlan: entered promiscuous mode [ 94.424967][ T1365] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.447488][ T149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.461417][ T149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.487023][ T149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.498247][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.508136][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.586709][ T5804] veth0_macvtap: entered promiscuous mode [ 94.588702][ T67] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.591741][ T67] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.650168][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.734502][ T5804] veth1_macvtap: entered promiscuous mode [ 94.749124][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.753892][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.809114][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.279096][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.304590][ T5805] veth0_macvtap: entered promiscuous mode [ 95.322985][ T1365] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.323007][ T1365] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.328179][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.376419][ T5805] veth1_macvtap: entered promiscuous mode [ 95.410945][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.411032][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.411048][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.412947][ T4490] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.430276][ T4490] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.463155][ T4490] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.522641][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.522664][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.596403][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.772487][ T1429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.772511][ T1429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.783033][ T5805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.964740][ T1429] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.048968][ T1429] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.055015][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.055461][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.095227][ T1429] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.121506][ T1429] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.273481][ T1429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.273504][ T1429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.941120][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.941144][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.303173][ T1421] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.303195][ T1421] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.352909][ T5820] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 97.512202][ T5926] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 97.534391][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.578839][ T5820] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 97.578873][ T5820] usb 2-1: config 0 has no interface number 0 [ 97.578924][ T5820] usb 2-1: config 0 interface 41 has no altsetting 0 [ 97.612338][ T5820] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 97.612374][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.612397][ T5820] usb 2-1: Product: syz [ 97.612412][ T5820] usb 2-1: Manufacturer: syz [ 97.612427][ T5820] usb 2-1: SerialNumber: syz [ 97.737742][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 97.752659][ T9] usb 4-1: config 0 has no interfaces? [ 97.768151][ T5820] usb 2-1: config 0 descriptor?? [ 97.894042][ T9] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 97.894078][ T9] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 97.894101][ T9] usb 4-1: Manufacturer: syz [ 98.321043][ T9] usb 4-1: config 0 descriptor?? [ 98.508739][ T1429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.508755][ T1429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.926729][ T5820] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 98.983195][ T5928] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.343703][ T1421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.343726][ T1421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.454357][ T5820] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 100.454391][ T5820] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 100.455019][ T5820] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 100.691468][ T5820] usb 2-1: USB disconnect, device number 2 [ 101.770330][ T5813] usb 4-1: USB disconnect, device number 2 [ 104.616903][ T5820] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 105.336520][ T5820] usb 1-1: device not accepting address 2, error -71 [ 105.603978][ T5962] Zero length message leads to an empty skb [ 105.663134][ T5965] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10'. [ 106.251281][ T5968] ======================================================= [ 106.251281][ T5968] WARNING: The mand mount option has been deprecated and [ 106.251281][ T5968] and is ignored by this kernel. Remove the mand [ 106.251281][ T5968] option from the mount to silence this warning. [ 106.251281][ T5968] ======================================================= [ 107.305088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.085107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.685096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.705093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.715091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.725095][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.735107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.745097][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.755096][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 111.765093][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 112.715404][ T5885] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.886825][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 112.890402][ T5885] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 112.890425][ T5885] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.937372][ T5886] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 113.193703][ T5886] usb 1-1: unable to get BOS descriptor or descriptor too short [ 113.204361][ T5886] usb 1-1: not running at top speed; connect to a high speed hub [ 113.254879][ T5886] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 113.254911][ T5886] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 113.373346][ T5886] usb 1-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 113.373387][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.373409][ T5886] usb 1-1: Product: syz [ 113.373425][ T5886] usb 1-1: Manufacturer: syz [ 113.373439][ T5886] usb 1-1: SerialNumber: syz [ 113.562539][ T5885] pvrusb2: Hardware description: Terratec Grabster AV400 [ 113.562644][ T5885] pvrusb2: ********** [ 113.562653][ T5885] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 113.562700][ T5885] pvrusb2: Important functionality might not be entirely working. [ 113.562814][ T5885] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 113.562826][ T5885] pvrusb2: ********** [ 113.838535][ T2366] pvrusb2: Invalid write control endpoint [ 116.859571][ T5886] usb 1-1: 3:0: cannot get min/max values for control 2 (id 3) [ 116.859597][ T5886] usb 1-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 116.859608][ T5886] usb 1-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 117.316314][ T828] usb 2-1: USB disconnect, device number 3 [ 117.580395][ T2366] pvrusb2: Invalid write control endpoint [ 117.580408][ T2366] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 117.580413][ T2366] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 117.580418][ T2366] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 117.580424][ T2366] pvrusb2: Device being rendered inoperable [ 117.608466][ T2366] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 117.608528][ T2366] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 117.896057][ T2366] pvrusb2: Attached sub-driver cx25840 [ 117.896077][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 117.896083][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 118.142337][ T6017] netlink: 32 bytes leftover after parsing attributes in process `syz.3.26'. [ 118.212687][ T6017] process 'syz.3.26' launched './file2' with NULL argv: empty string added [ 118.703886][ T6026] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'. [ 120.539108][ T828] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 120.673843][ T6034] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.705680][ T828] usb 2-1: Using ep0 maxpacket: 8 [ 120.719678][ T828] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 120.719709][ T828] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.719729][ T828] usb 2-1: Product: syz [ 120.719743][ T828] usb 2-1: Manufacturer: syz [ 120.719757][ T828] usb 2-1: SerialNumber: syz [ 120.862348][ T828] usb 2-1: config 0 descriptor?? [ 120.932993][ T5886] usb 1-1: USB disconnect, device number 4 [ 121.139884][ T828] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 121.150221][ T828] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 121.201152][ T828] usb 2-1: USB disconnect, device number 4 [ 121.537466][ T6040] netlink: 10 bytes leftover after parsing attributes in process `syz.3.31'. [ 121.760725][ T6041] random: crng reseeded on system resumption [ 121.780588][ T6041] Restarting kernel threads ... [ 121.782189][ T6041] Done restarting kernel threads. [ 125.385878][ T10] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 125.458488][ T6059] sctp: [Deprecated]: syz.1.37 (pid 6059) Use of int in max_burst socket option. [ 125.458488][ T6059] Use struct sctp_assoc_value instead [ 125.540081][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 125.540655][ T10] usb 4-1: not running at top speed; connect to a high speed hub [ 125.543897][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.543914][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.548657][ T10] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 125.548687][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.548706][ T10] usb 4-1: Product: syz [ 125.548720][ T10] usb 4-1: Manufacturer: syz [ 125.548735][ T10] usb 4-1: SerialNumber: syz [ 126.014705][ T10] usb 4-1: can't set config #1, error -71 [ 126.190872][ T10] usb 4-1: USB disconnect, device number 3 [ 126.771437][ T37] audit: type=1326 audit(1776606808.674:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.2.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9974c819 code=0x7ffc0000 [ 126.771497][ T37] audit: type=1326 audit(1776606808.684:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.2.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9974c819 code=0x7ffc0000 [ 127.108797][ T37] audit: type=1326 audit(1776606809.024:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.2.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f0c9974c819 code=0x7ffc0000 [ 127.108854][ T37] audit: type=1326 audit(1776606809.024:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.2.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9974c819 code=0x7ffc0000 [ 127.108898][ T37] audit: type=1326 audit(1776606809.024:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.2.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9974c819 code=0x7ffc0000 [ 127.186418][ T6073] netlink: 32 bytes leftover after parsing attributes in process `syz.1.40'. [ 127.304477][ T37] audit: type=1326 audit(1776606809.104:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.2.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f0c9974c819 code=0x7ffc0000 [ 127.362351][ T37] audit: type=1326 audit(1776606809.234:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.2.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9974c819 code=0x7ffc0000 [ 127.362423][ T37] audit: type=1326 audit(1776606809.274:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6068 comm="syz.2.39" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c9974c819 code=0x7ffc0000 [ 129.215601][ T6064] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 129.909498][ T6064] usb 2-1: Using ep0 maxpacket: 8 [ 130.079058][ T6064] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.079099][ T6064] usb 2-1: config 0 has no interfaces? [ 131.118358][ T6064] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 131.118403][ T6064] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.118491][ T6064] usb 2-1: Product: syz [ 131.118509][ T6064] usb 2-1: Manufacturer: syz [ 131.118525][ T6064] usb 2-1: SerialNumber: syz [ 132.196984][ T6064] usb 2-1: config 0 descriptor?? [ 133.696288][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.696397][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.794558][ T6064] usb 2-1: can't set config #0, error -71 [ 133.826396][ T6064] usb 2-1: USB disconnect, device number 5 [ 133.856257][ T5814] udevd[5814]: setting mode of /dev/bus/usb/002/005 to 020664 failed: No such file or directory [ 133.856438][ T5814] udevd[5814]: setting owner of /dev/bus/usb/002/005 to uid=0, gid=0 failed: No such file or directory [ 137.655069][ T6113] sctp: [Deprecated]: syz.2.50 (pid 6113) Use of int in max_burst socket option. [ 137.655069][ T6113] Use struct sctp_assoc_value instead [ 144.305202][ T5886] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 144.455688][ T5886] usb 3-1: Using ep0 maxpacket: 8 [ 144.462399][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.462430][ T5886] usb 3-1: config 0 has no interfaces? [ 144.473732][ T5886] usb 3-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 144.473761][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.473780][ T5886] usb 3-1: Product: syz [ 144.473794][ T5886] usb 3-1: Manufacturer: syz [ 144.473808][ T5886] usb 3-1: SerialNumber: syz [ 144.522394][ T5886] usb 3-1: config 0 descriptor?? [ 144.817077][ T59] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 144.848953][ T59] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 144.851887][ T59] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 144.975386][ T59] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.976186][ T59] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.020967][ T6154] sctp: [Deprecated]: syz.1.63 (pid 6154) Use of int in max_burst socket option. [ 145.020967][ T6154] Use struct sctp_assoc_value instead [ 145.051252][ T5886] usb 3-1: USB disconnect, device number 2 [ 145.238819][ T6161] overlayfs: missing 'lowerdir' [ 147.096632][ T59] Bluetooth: hci5: command tx timeout [ 147.354842][ T6175] overlayfs: overlapping lowerdir path [ 149.185226][ T59] Bluetooth: hci5: command tx timeout [ 150.536126][ T6186] fuse: Unknown parameter 'fd0x0000000000000007' [ 151.494743][ T59] Bluetooth: hci5: command tx timeout [ 151.612987][ T6179] mmap: syz.4.71 (6179) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 153.537805][ T59] Bluetooth: hci5: command tx timeout [ 157.255355][ T6025] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 157.361427][ T6155] chnl_net:caif_netlink_parms(): no params data found [ 157.405149][ T6025] usb 2-1: Using ep0 maxpacket: 8 [ 157.408053][ T6025] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.408084][ T6025] usb 2-1: config 0 has no interfaces? [ 157.412729][ T6025] usb 2-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 157.412759][ T6025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.412788][ T6025] usb 2-1: Product: syz [ 157.412801][ T6025] usb 2-1: Manufacturer: syz [ 157.412814][ T6025] usb 2-1: SerialNumber: syz [ 157.514149][ T6025] usb 2-1: config 0 descriptor?? [ 157.665632][ T6000] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 157.760639][ T6025] usb 2-1: USB disconnect, device number 6 [ 157.947845][ T6000] usb 3-1: Using ep0 maxpacket: 16 [ 157.977506][ T6000] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 157.977537][ T6000] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.977556][ T6000] usb 3-1: config 0 has no interface number 0 [ 157.980329][ T6000] usb 3-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28 [ 157.980373][ T6000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.980393][ T6000] usb 3-1: Product: syz [ 157.980406][ T6000] usb 3-1: Manufacturer: syz [ 157.980420][ T6000] usb 3-1: SerialNumber: syz [ 157.994561][ T6000] usb 3-1: config 0 descriptor?? [ 158.573002][ T6000] uvcvideo 3-1:0.105: probe with driver uvcvideo failed with error -22 [ 159.091126][ T6000] usb 3-1: USB disconnect, device number 3 [ 159.849210][ T6239] sctp: [Deprecated]: syz.0.90 (pid 6239) Use of int in max_burst socket option. [ 159.849210][ T6239] Use struct sctp_assoc_value instead [ 161.701236][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.511483][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.590811][ T6155] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.592345][ T6155] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.592602][ T6155] bridge_slave_0: entered allmulticast mode [ 166.616669][ T6155] bridge_slave_0: entered promiscuous mode [ 166.621885][ T6155] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.622151][ T6155] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.654806][ T6155] bridge_slave_1: entered allmulticast mode [ 166.665560][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 166.669484][ T6155] bridge_slave_1: entered promiscuous mode [ 166.748280][ T6155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.753902][ T6155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.815155][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 166.817531][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 166.817558][ T10] usb 5-1: config 0 has no interfaces? [ 166.820657][ T10] usb 5-1: New USB device found, idVendor=15c2, idProduct=003b, bcdDevice=66.3e [ 166.820686][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.820707][ T10] usb 5-1: Product: syz [ 166.820722][ T10] usb 5-1: Manufacturer: syz [ 166.820739][ T10] usb 5-1: SerialNumber: syz [ 166.890790][ T6155] team0: Port device team_slave_0 added [ 166.902779][ T6155] team0: Port device team_slave_1 added [ 166.955794][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.955814][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.955843][ T6155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.958621][ T6155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.958634][ T6155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.958659][ T6155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.982370][ T10] usb 5-1: config 0 descriptor?? [ 168.218364][ T6025] usb 5-1: USB disconnect, device number 2 [ 168.611964][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.195231][ T6025] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 169.258040][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.345163][ T6025] usb 3-1: Using ep0 maxpacket: 16 [ 169.346963][ T6025] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.346985][ T6025] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.346998][ T6025] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 169.347024][ T6025] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 169.347038][ T6025] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.432159][ T6025] usb 3-1: config 0 descriptor?? [ 170.799607][ T6155] hsr_slave_0: entered promiscuous mode [ 170.812568][ T6155] hsr_slave_1: entered promiscuous mode [ 170.823189][ T6155] debugfs: 'hsr0' already exists in 'hsr' [ 170.823224][ T6155] Cannot create hsr debugfs directory [ 171.159035][ T6025] HID 045e:07da: Invalid code 65791 type 1 [ 171.337458][ T6025] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input5 [ 173.876874][ T6025] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 174.631620][ T6025] usb 3-1: USB disconnect, device number 4 [ 176.171268][ T6338] warning: `syz.0.115' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 183.775229][ T6025] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 183.927203][ T6025] usb 5-1: Using ep0 maxpacket: 32 [ 183.950119][ T6025] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 183.950150][ T6025] usb 5-1: config 0 has no interface number 0 [ 183.970393][ T6025] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 183.970429][ T6025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.970452][ T6025] usb 5-1: Product: syz [ 183.970468][ T6025] usb 5-1: Manufacturer: syz [ 183.970484][ T6025] usb 5-1: SerialNumber: syz [ 184.028204][ T67] bridge_slave_1: left allmulticast mode [ 184.028305][ T67] bridge_slave_1: left promiscuous mode [ 184.028928][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.516115][ T6393] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 185.020921][ T6025] usb 5-1: config 0 descriptor?? [ 185.085941][ T6025] usb 5-1: can't set config #0, error -71 [ 185.117223][ T67] bridge_slave_0: left allmulticast mode [ 185.117256][ T67] bridge_slave_0: left promiscuous mode [ 185.117549][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.160882][ T6025] usb 5-1: USB disconnect, device number 3 [ 187.665856][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.726782][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.767683][ T67] bond0 (unregistering): Released all slaves [ 188.371433][ T6064] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 188.881734][ T6064] usb 2-1: Using ep0 maxpacket: 16 [ 188.902340][ T6064] usb 2-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 188.902404][ T6064] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 188.902435][ T6064] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 188.902455][ T6064] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 188.902479][ T6064] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 189.063446][ T6064] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 189.063483][ T6064] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 189.063505][ T6064] usb 2-1: Manufacturer: syz [ 189.185229][ T5886] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 189.258731][ T6064] usb 2-1: config 0 descriptor?? [ 189.366605][ T5886] usb 1-1: Using ep0 maxpacket: 32 [ 189.403769][ T5886] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 189.403805][ T5886] usb 1-1: config 0 has no interface number 0 [ 189.433504][ T5886] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 189.433539][ T5886] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.433561][ T5886] usb 1-1: Product: syz [ 189.433576][ T5886] usb 1-1: Manufacturer: syz [ 189.433592][ T5886] usb 1-1: SerialNumber: syz [ 189.477085][ T5886] usb 1-1: config 0 descriptor?? [ 189.648922][ T6064] rc_core: IR keymap rc-hauppauge not found [ 189.648947][ T6064] Registered IR keymap rc-empty [ 189.649610][ T6064] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 189.675858][ T6064] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 189.702302][ T6064] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 189.745416][ T6064] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input6 [ 189.927562][ T6064] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 189.949099][ T6064] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 189.965423][ T6064] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 189.985423][ T6064] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 190.005367][ T6064] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 190.026438][ T6064] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 190.032469][ T5886] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 190.032500][ T5886] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 190.045501][ T6064] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 190.065395][ T6064] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 190.085366][ T6064] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 190.105413][ T6064] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 190.196126][ T6064] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 190.196155][ T6064] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 190.250448][ T6064] usb 2-1: USB disconnect, device number 7 [ 193.130508][ T6456] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 193.354240][ T5886] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 193.354546][ T5886] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 194.761221][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.761292][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.768454][ T6467] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 194.899314][ T6064] usb 1-1: USB disconnect, device number 5 [ 196.889316][ T5466] 8021q: adding VLAN 0 to HW filter on device eth1 [ 197.182458][ T6155] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 197.382761][ T6155] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 199.119334][ T6517] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 201.228061][ T6155] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 201.296366][ T6155] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 202.645062][ T6538] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 203.859022][ T6155] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 204.361106][ T6155] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 204.769505][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 204.923743][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 205.045439][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 205.460032][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 205.547067][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.318626][ T6000] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 207.484877][ T6571] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 208.086946][ T67] hsr_slave_0: left promiscuous mode [ 208.190060][ T67] hsr_slave_1: left promiscuous mode [ 208.191460][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.191572][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.196630][ T6571] slcan: can't register candev [ 208.274785][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.274815][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.344185][ T67] veth1_macvtap: left promiscuous mode [ 208.344490][ T67] veth0_macvtap: left promiscuous mode [ 208.344813][ T67] veth1_vlan: left promiscuous mode [ 208.346924][ T67] veth0_vlan: left promiscuous mode [ 208.837862][ T6000] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 209.050016][ T6000] usb 3-1: unable to get BOS descriptor or descriptor too short [ 209.050736][ T6000] usb 3-1: not running at top speed; connect to a high speed hub [ 209.052087][ T6000] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 209.052103][ T6000] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 209.054909][ T6000] usb 3-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 209.054928][ T6000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.054941][ T6000] usb 3-1: Product: syz [ 209.054950][ T6000] usb 3-1: Manufacturer: syz [ 209.054959][ T6000] usb 3-1: SerialNumber: syz [ 209.269073][ T67] team0 (unregistering): Port device team_slave_1 removed [ 209.310095][ T67] team0 (unregistering): Port device team_slave_0 removed [ 210.296561][ T59] Bluetooth: hci0: command tx timeout [ 210.593825][ T6000] usb 3-1: 3:0: cannot get min/max values for control 2 (id 3) [ 210.593848][ T6000] usb 3-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 210.593859][ T6000] usb 3-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 211.183812][ T5466] 8021q: adding VLAN 0 to HW filter on device eth2 [ 213.116292][ T59] Bluetooth: hci1: command 0x0406 tx timeout [ 213.116339][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 213.123065][ T5818] Bluetooth: hci2: command 0x0406 tx timeout [ 213.123127][ T5818] Bluetooth: hci4: command 0x0406 tx timeout [ 213.134678][ T5817] Bluetooth: hci0: command tx timeout [ 213.148201][ T6064] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 213.345243][ T6064] usb 1-1: Using ep0 maxpacket: 16 [ 213.347561][ T6064] usb 1-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 213.347628][ T6064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 213.347668][ T6064] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 213.347689][ T6064] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 213.347712][ T6064] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.355906][ T6064] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 213.355939][ T6064] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 213.355959][ T6064] usb 1-1: Manufacturer: syz [ 213.522678][ T6064] usb 1-1: config 0 descriptor?? [ 213.837408][ T6000] usb 3-1: USB disconnect, device number 6 [ 213.996643][ T6633] hfsplus: unable to find HFS+ superblock [ 214.897423][ T5814] udevd[5814]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 215.175727][ T5815] Bluetooth: hci0: command tx timeout [ 215.337113][ T6064] rc_core: IR keymap rc-hauppauge not found [ 215.337130][ T6064] Registered IR keymap rc-empty [ 215.337675][ T6064] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.369245][ T6064] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 215.454526][ T6064] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 216.663791][ T6064] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 216.684830][ T6648] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 216.980766][ T6064] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 216.995245][ T6064] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 217.019347][ T6064] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 217.038252][ T6064] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 217.055422][ T6064] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 217.075203][ T6064] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 217.117107][ T6064] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 217.135208][ T6064] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 217.155285][ T6064] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 217.175210][ T6064] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 217.200712][ T6064] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 217.200741][ T6064] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 217.263280][ T6064] usb 1-1: USB disconnect, device number 6 [ 217.295329][ T6025] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 217.445250][ T5812] Bluetooth: hci0: command tx timeout [ 220.170132][ T6025] usb 5-1: Using ep0 maxpacket: 32 [ 220.182625][ T6025] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 220.182656][ T6025] usb 5-1: config 0 has no interface number 0 [ 220.238498][ T6025] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 220.238534][ T6025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.238556][ T6025] usb 5-1: Product: syz [ 220.238572][ T6025] usb 5-1: Manufacturer: syz [ 220.238589][ T6025] usb 5-1: SerialNumber: syz [ 220.642194][ T6025] usb 5-1: config 0 descriptor?? [ 221.304625][ T6025] usb 5-1: can't set config #0, error -71 [ 221.330584][ T6025] usb 5-1: USB disconnect, device number 4 [ 223.663243][ T5466] 8021q: adding VLAN 0 to HW filter on device eth3 [ 223.692003][ T6691] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 224.213724][ T6559] chnl_net:caif_netlink_parms(): no params data found [ 224.525223][ T5954] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 224.675127][ T5954] usb 3-1: Using ep0 maxpacket: 16 [ 224.677072][ T5954] usb 3-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 224.677115][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 224.677133][ T5954] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 224.677145][ T5954] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 224.677159][ T5954] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 224.683338][ T5954] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 224.683396][ T5954] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 224.683420][ T5954] usb 3-1: Manufacturer: syz [ 224.848931][ T5954] usb 3-1: config 0 descriptor?? [ 226.342378][ T6714] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 226.501772][ T5954] rc_core: IR keymap rc-hauppauge not found [ 226.501797][ T5954] Registered IR keymap rc-empty [ 226.503275][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.526222][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.550475][ T5954] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 226.555363][ T5954] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8 [ 226.604300][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.661021][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.679981][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.699827][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.715549][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.741157][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.756245][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.784579][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.806788][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.825186][ T5954] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 226.937124][ T5954] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 226.937153][ T5954] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 227.019701][ T5954] usb 3-1: USB disconnect, device number 7 [ 227.355137][ T5885] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 227.545214][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 227.570285][ T5885] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 227.570319][ T5885] usb 5-1: config 0 has no interface number 0 [ 227.596253][ T5885] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 227.596291][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.596313][ T5885] usb 5-1: Product: syz [ 227.596328][ T5885] usb 5-1: Manufacturer: syz [ 227.596343][ T5885] usb 5-1: SerialNumber: syz [ 227.806761][ T5885] usb 5-1: config 0 descriptor?? [ 228.025162][ T5954] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 228.222930][ T5954] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 228.223099][ T5954] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.261942][ T5885] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 228.261978][ T5885] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 228.302012][ T5954] usb 3-1: config 0 descriptor?? [ 228.332572][ T5954] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 228.800202][ T5954] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 229.347751][ T5954] gspca_cpia1: usb_control_msg 02, error -71 [ 229.348173][ T5954] gspca_cpia1: usb_control_msg 05, error -71 [ 229.348187][ T5954] cpia1 3-1:0.0: unexpected systemstate: 00 [ 229.392876][ T5954] usb 3-1: USB disconnect, device number 8 [ 230.477159][ T5885] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 230.477500][ T5885] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 230.741283][ T5466] 8021q: adding VLAN 0 to HW filter on device eth4 [ 230.741818][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.742028][ T6559] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.742216][ T6559] bridge_slave_0: entered allmulticast mode [ 230.779251][ T6559] bridge_slave_0: entered promiscuous mode [ 230.901318][ T6064] usb 5-1: USB disconnect, device number 5 [ 231.300857][ T6559] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.301290][ T6559] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.375716][ T6559] bridge_slave_1: entered allmulticast mode [ 231.526019][ T6559] bridge_slave_1: entered promiscuous mode [ 233.360914][ T6754] overlayfs: failed to resolve './file1': -2 [ 237.085150][ T6025] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 237.275323][ T6025] usb 5-1: Using ep0 maxpacket: 16 [ 237.287421][ T6025] usb 5-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config [ 237.316960][ T6025] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.317000][ T6025] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 237.317022][ T6025] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 237.317045][ T6025] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 237.388397][ T6559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.398495][ T6559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.407469][ T6025] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 237.407491][ T6025] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 237.407504][ T6025] usb 5-1: Manufacturer: syz [ 237.440583][ T6025] usb 5-1: config 0 descriptor?? [ 237.838262][ T6025] rc_core: IR keymap rc-hauppauge not found [ 237.838279][ T6025] Registered IR keymap rc-empty [ 237.839016][ T6025] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 237.855220][ T6025] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 237.886321][ T6559] team0: Port device team_slave_0 added [ 237.893574][ T6025] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 237.921712][ T6025] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 237.964012][ T6025] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.000700][ T6025] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.033543][ T6025] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.040142][ T6559] team0: Port device team_slave_1 added [ 238.047357][ T6025] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.068288][ T6025] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.090534][ T6025] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.105170][ T6025] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.125207][ T6025] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.145183][ T6025] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.165416][ T6025] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 238.199915][ T6025] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 238.199980][ T6025] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 238.276596][ T6025] usb 5-1: USB disconnect, device number 6 [ 238.936431][ T37] audit: type=1800 audit(1776606920.764:10): pid=6780 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.220" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 239.029826][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.029846][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.029875][ T6559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.062025][ T6559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.062044][ T6559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 239.062070][ T6559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.273548][ T6780] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 239.304929][ T6780] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 239.316098][ T6780] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 239.665145][ T6025] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 239.816038][ T6025] usb 2-1: Using ep0 maxpacket: 32 [ 239.818670][ T6025] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 239.818702][ T6025] usb 2-1: config 0 has no interface number 0 [ 239.862610][ T6025] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 239.862644][ T6025] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.862666][ T6025] usb 2-1: Product: syz [ 239.862834][ T6025] usb 2-1: Manufacturer: syz [ 239.862850][ T6025] usb 2-1: SerialNumber: syz [ 239.913747][ T6025] usb 2-1: config 0 descriptor?? [ 240.545929][ T6025] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 240.545965][ T6025] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 242.455284][ T6559] hsr_slave_0: entered promiscuous mode [ 242.469352][ T6559] hsr_slave_1: entered promiscuous mode [ 242.500146][ T6559] debugfs: 'hsr0' already exists in 'hsr' [ 242.500168][ T6559] Cannot create hsr debugfs directory [ 242.553988][ T6025] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 242.554190][ T6025] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 243.705731][ T67] bridge_slave_1: left allmulticast mode [ 243.705764][ T67] bridge_slave_1: left promiscuous mode [ 243.733122][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.853522][ T67] bridge_slave_0: left allmulticast mode [ 243.853553][ T67] bridge_slave_0: left promiscuous mode [ 243.853813][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.881405][ T6000] usb 2-1: USB disconnect, device number 8 [ 246.861186][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 247.061587][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 247.137936][ T67] bond0 (unregistering): Released all slaves [ 247.258934][ T6025] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 247.415327][ T6025] usb 3-1: Using ep0 maxpacket: 32 [ 247.454496][ T6025] usb 3-1: config 0 has an invalid interface number: 85 but max is 0 [ 247.454528][ T6025] usb 3-1: config 0 has no interface number 0 [ 247.454575][ T6025] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 247.454602][ T6025] usb 3-1: config 0 interface 85 has no altsetting 0 [ 247.491924][ T6025] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 247.491959][ T6025] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.491978][ T6025] usb 3-1: Product: syz [ 247.491994][ T6025] usb 3-1: Manufacturer: syz [ 247.492010][ T6025] usb 3-1: SerialNumber: syz [ 247.548687][ T6025] usb 3-1: config 0 descriptor?? [ 247.625449][ T67] hsr_slave_0: left promiscuous mode [ 247.666084][ T67] hsr_slave_1: left promiscuous mode [ 247.668481][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.707203][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.081093][ T6025] appletouch 3-1:0.85: Geyser mode initialized. [ 248.129453][ T6025] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input10 [ 248.513599][ T6025] usb 3-1: USB disconnect, device number 9 [ 248.798702][ T6852] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 250.231538][ T6025] appletouch 3-1:0.85: input: appletouch disconnected [ 251.016376][ T6869] syz.4.248 uses old SIOCAX25GETINFO [ 251.566848][ T6867] netlink: 'syz.4.248': attribute type 10 has an invalid length. [ 251.639001][ T67] team0 (unregistering): Port device team_slave_1 removed [ 251.695693][ T67] team0 (unregistering): Port device team_slave_0 removed [ 251.927095][ T6867] veth0_vlan: left promiscuous mode [ 251.929343][ T6867] veth0_vlan: entered promiscuous mode [ 251.932253][ T6867] team0: Device veth0_vlan failed to register rx_handler [ 255.201805][ T6874] faux_driver regulatory: loading /lib/firmware/regulatory.db.p7s failed with error -4 [ 255.201848][ T6874] faux_driver regulatory: Direct firmware load for regulatory.db.p7s failed with error -4 [ 255.201868][ T6874] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db.p7s [ 255.208053][ T37] audit: type=1800 audit(1776606937.114:11): pid=6874 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.2.249" name="regulatory.db.p7s" dev="sda1" ino=449 res=0 errno=0 [ 255.563198][ T6896] loop8: detected capacity change from 0 to 7 [ 255.826822][ T5954] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 255.844032][ T6874] syz.2.249 (6874) used greatest stack depth: 15688 bytes left [ 255.869324][ T6896] Dev loop8: unable to read RDB block 7 [ 255.869381][ T6896] loop8: unable to read partition table [ 255.869644][ T6896] loop8: partition table beyond EOD, truncated [ 255.869682][ T6896] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 255.996562][ T5954] usb 5-1: Using ep0 maxpacket: 32 [ 256.002683][ T5954] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 256.002704][ T5954] usb 5-1: config 0 has no interface number 0 [ 256.002730][ T5954] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 256.002747][ T5954] usb 5-1: config 0 interface 85 has no altsetting 0 [ 256.005631][ T5954] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 256.005660][ T5954] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.005680][ T5954] usb 5-1: Product: syz [ 256.005694][ T5954] usb 5-1: Manufacturer: syz [ 256.005708][ T5954] usb 5-1: SerialNumber: syz [ 256.023708][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.023781][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.068869][ T5954] usb 5-1: config 0 descriptor?? [ 257.548584][ T5954] appletouch 5-1:0.85: Geyser mode initialized. [ 257.564368][ T5954] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input11 [ 257.752052][ T6909] Bluetooth: MGMT ver 1.23 [ 257.778755][ T5954] usb 5-1: USB disconnect, device number 7 [ 258.073258][ T5954] appletouch 5-1:0.85: input: appletouch disconnected [ 260.365124][ T6025] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 260.520604][ T6025] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 260.520626][ T6025] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.542765][ T6025] usb 5-1: config 0 descriptor?? [ 260.571966][ T6025] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 260.996687][ T6025] cpia1 5-1:0.0: unexpected state after lo power cmd: 01 [ 261.203632][ T6025] gspca_cpia1: usb_control_msg 01, error -71 [ 261.205421][ T6025] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 261.283150][ T6025] usb 5-1: USB disconnect, device number 8 [ 265.605157][ T6025] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 265.837659][ T6025] usb 5-1: Using ep0 maxpacket: 32 [ 265.840075][ T6025] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 265.840105][ T6025] usb 5-1: config 0 has no interface number 0 [ 265.849139][ T6025] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 265.849186][ T6025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.849205][ T6025] usb 5-1: Product: syz [ 265.849220][ T6025] usb 5-1: Manufacturer: syz [ 265.849233][ T6025] usb 5-1: SerialNumber: syz [ 265.950889][ T6025] usb 5-1: config 0 descriptor?? [ 265.974477][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 266.029223][ T5815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 266.036213][ T5815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 266.049957][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 266.051009][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 266.551907][ T6025] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 266.551940][ T6025] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 267.505235][ T7008] sctp: [Deprecated]: syz.0.275 (pid 7008) Use of int in max_burst socket option. [ 267.505235][ T7008] Use struct sctp_assoc_value instead [ 268.110703][ T6025] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 268.110914][ T6025] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 268.375108][ T5815] Bluetooth: hci5: command tx timeout [ 268.655513][ T6025] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 268.817008][ T6025] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 268.817030][ T6025] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.837433][ T6025] usb 1-1: config 0 descriptor?? [ 268.877168][ T6025] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 269.272681][ T6025] cpia1 1-1:0.0: unexpected state after lo power cmd: 01 [ 269.473569][ T6025] gspca_cpia1: usb_control_msg 01, error -71 [ 269.473594][ T6025] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 269.480875][ T10] usb 5-1: USB disconnect, device number 9 [ 270.164875][ T6025] usb 1-1: USB disconnect, device number 7 [ 270.535199][ T5815] Bluetooth: hci5: command tx timeout [ 272.517903][ T7040] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 272.721904][ T5815] Bluetooth: hci5: command tx timeout [ 273.822824][ T7040] can0: slcan on ttyS3. [ 274.278255][ T7040] can0 (unregistered): slcan off ttyS3. [ 274.991635][ T5815] Bluetooth: hci5: command tx timeout [ 275.746095][ T6000] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 275.832948][ T7058] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 275.905082][ T6000] usb 3-1: Using ep0 maxpacket: 16 [ 275.907634][ T6000] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 275.910823][ T6000] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 275.910852][ T6000] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.910872][ T6000] usb 3-1: Product: syz [ 275.910887][ T6000] usb 3-1: Manufacturer: syz [ 275.910900][ T6000] usb 3-1: SerialNumber: syz [ 275.987622][ T6000] usb 3-1: config 0 descriptor?? [ 276.044295][ T6000] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 276.044336][ T6000] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 276.076585][ T7062] loop8: detected capacity change from 0 to 7 [ 276.143261][ T7062] Dev loop8: unable to read RDB block 7 [ 276.143315][ T7062] loop8: unable to read partition table [ 276.143653][ T7062] loop8: partition table beyond EOD, truncated [ 276.143696][ T7062] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 277.312160][ T6000] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 277.330520][ T5954] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 277.493149][ T5954] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 277.493184][ T5954] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.506765][ T5954] usb 5-1: config 0 descriptor?? [ 277.542780][ T5954] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 277.948102][ T5954] cpia1 5-1:0.0: unexpected state after lo power cmd: 01 [ 278.016365][ T6990] chnl_net:caif_netlink_parms(): no params data found [ 278.213660][ T5954] gspca_cpia1: usb_control_msg 01, error -71 [ 278.213685][ T5954] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 278.242917][ T5954] usb 5-1: USB disconnect, device number 10 [ 278.357593][ T7088] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 278.755638][ T7088] can0: slcan on ttyS3. [ 279.205308][ T7082] can0 (unregistered): slcan off ttyS3. [ 279.486630][ T6000] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 279.486667][ T6000] em28xx 3-1:0.0: board has no eeprom [ 279.640325][ T6990] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.640461][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.640706][ T6990] bridge_slave_0: entered allmulticast mode [ 279.665442][ T6000] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 279.665473][ T6000] em28xx 3-1:0.0: dvb set to bulk mode. [ 279.666300][ T31] em28xx 3-1:0.0: Binding DVB extension [ 279.737005][ T6990] bridge_slave_0: entered promiscuous mode [ 279.781897][ T6000] usb 3-1: USB disconnect, device number 10 [ 279.814284][ T6000] em28xx 3-1:0.0: Disconnecting em28xx [ 280.272426][ T31] em28xx 3-1:0.0: Registering input extension [ 280.306453][ T6000] em28xx 3-1:0.0: Closing input extension [ 280.450327][ T6990] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.450473][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.450729][ T6990] bridge_slave_1: entered allmulticast mode [ 280.498878][ T6990] bridge_slave_1: entered promiscuous mode [ 281.688664][ T7117] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 281.688917][ T7099] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 281.688954][ T7099] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 281.688973][ T7099] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 282.815322][ T6990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.847610][ T6990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.926663][ T6000] em28xx 3-1:0.0: Freeing device [ 283.358571][ T6064] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 283.505503][ T5885] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 283.876743][ T6064] usb 2-1: Using ep0 maxpacket: 16 [ 283.968678][ T6064] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 283.991532][ T6064] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 283.991564][ T6064] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.991584][ T6064] usb 2-1: Product: syz [ 283.991597][ T6064] usb 2-1: Manufacturer: syz [ 283.991611][ T6064] usb 2-1: SerialNumber: syz [ 284.036856][ T6064] usb 2-1: config 0 descriptor?? [ 284.052909][ T6064] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 284.052944][ T6064] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 284.055187][ T5885] usb 5-1: Using ep0 maxpacket: 32 [ 284.057556][ T5885] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 284.057584][ T5885] usb 5-1: config 0 has no interface number 0 [ 284.057633][ T5885] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 284.057663][ T5885] usb 5-1: config 0 interface 85 has no altsetting 0 [ 284.060918][ T5885] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 284.060947][ T5885] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.060969][ T5885] usb 5-1: Product: syz [ 284.060983][ T5885] usb 5-1: Manufacturer: syz [ 284.060999][ T5885] usb 5-1: SerialNumber: syz [ 284.177579][ T5885] usb 5-1: config 0 descriptor?? [ 284.437031][ T6990] team0: Port device team_slave_0 added [ 284.532694][ T6990] team0: Port device team_slave_1 added [ 284.642682][ T5885] appletouch 5-1:0.85: Geyser mode initialized. [ 284.658484][ T5885] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input13 [ 284.743373][ T6064] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 285.224289][ C0] appletouch 5-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 285.224427][ T5954] usb 5-1: USB disconnect, device number 11 [ 285.755099][ T7147] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 286.238501][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.238521][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.238550][ T6990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.543750][ T6064] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 286.543788][ T6064] em28xx 2-1:0.0: board has no eeprom [ 286.601323][ T149] bridge_slave_1: left allmulticast mode [ 286.601348][ T149] bridge_slave_1: left promiscuous mode [ 286.601786][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.750477][ T149] bridge_slave_0: left allmulticast mode [ 286.750510][ T149] bridge_slave_0: left promiscuous mode [ 286.750955][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.760203][ T5954] appletouch 5-1:0.85: input: appletouch disconnected [ 286.875221][ T6064] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 286.875252][ T6064] em28xx 2-1:0.0: dvb set to bulk mode. [ 286.876297][ T6025] em28xx 2-1:0.0: Binding DVB extension [ 286.982435][ T6064] usb 2-1: USB disconnect, device number 9 [ 287.056165][ T7163] loop8: detected capacity change from 0 to 7 [ 287.063407][ T7163] Dev loop8: unable to read RDB block 7 [ 287.063462][ T7163] loop8: unable to read partition table [ 287.063695][ T7163] loop8: partition table beyond EOD, truncated [ 287.063717][ T7163] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 287.084266][ T6064] em28xx 2-1:0.0: Disconnecting em28xx [ 287.239461][ T6025] em28xx 2-1:0.0: Registering input extension [ 287.253055][ T6064] em28xx 2-1:0.0: Closing input extension [ 287.697540][ T7171] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 288.860202][ T6064] em28xx 2-1:0.0: Freeing device [ 288.985113][ T6025] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 289.146405][ T6025] usb 5-1: Using ep0 maxpacket: 16 [ 289.152780][ T6025] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 289.175753][ T6025] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 289.175788][ T6025] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.175811][ T6025] usb 5-1: Product: syz [ 289.175827][ T6025] usb 5-1: Manufacturer: syz [ 289.175842][ T6025] usb 5-1: SerialNumber: syz [ 289.272872][ T6025] usb 5-1: config 0 descriptor?? [ 289.323331][ T6025] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 289.323356][ T6025] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 289.637111][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.768415][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.895774][ T6025] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 289.983344][ T149] bond0 (unregistering): Released all slaves [ 290.251745][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 290.251759][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 290.251776][ T6990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.715235][ T6025] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 291.715270][ T6025] em28xx 5-1:0.0: board has no eeprom [ 291.836436][ T6025] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 291.836471][ T6025] em28xx 5-1:0.0: dvb set to bulk mode. [ 291.837988][ T5954] em28xx 5-1:0.0: Binding DVB extension [ 291.930105][ T6025] usb 5-1: USB disconnect, device number 12 [ 291.964208][ T6025] em28xx 5-1:0.0: Disconnecting em28xx [ 293.045751][ T7216] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 293.049861][ T6990] hsr_slave_0: entered promiscuous mode [ 293.059454][ T6990] hsr_slave_1: entered promiscuous mode [ 293.065367][ T6990] debugfs: 'hsr0' already exists in 'hsr' [ 293.065396][ T6990] Cannot create hsr debugfs directory [ 293.311137][ T5954] em28xx 5-1:0.0: Registering input extension [ 293.316191][ T6025] em28xx 5-1:0.0: Closing input extension [ 293.360914][ T6025] em28xx 5-1:0.0: Freeing device [ 293.677716][ T7227] capability: warning: `syz.1.333' uses deprecated v2 capabilities in a way that may be insecure [ 293.813761][ T7227] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 293.813793][ T7227] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 295.541195][ T7229] vhci_hcd: connection closed [ 296.611307][ T7227] vhci_hcd vhci_hcd.0: Device attached [ 296.627176][ T7231] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 296.627194][ T7231] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 296.629222][ T7244] vhci_hcd: connection closed [ 296.669629][ T7231] vhci_hcd vhci_hcd.0: Device attached [ 296.679777][ T56] vhci_hcd vhci_hcd.1: stop threads [ 296.688748][ T56] vhci_hcd vhci_hcd.1: release socket [ 296.688887][ T56] vhci_hcd vhci_hcd.1: disconnect device [ 296.718653][ T56] vhci_hcd vhci_hcd.1: stop threads [ 296.718681][ T56] vhci_hcd vhci_hcd.1: release socket [ 296.718723][ T56] vhci_hcd vhci_hcd.1: disconnect device [ 296.981304][ T149] hsr_slave_0: left promiscuous mode [ 297.026540][ T5820] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 297.034163][ T149] hsr_slave_1: left promiscuous mode [ 297.059797][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.084020][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.702667][ T7273] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 299.816767][ T149] team0 (unregistering): Port device team_slave_1 removed [ 299.889308][ T149] team0 (unregistering): Port device team_slave_0 removed [ 299.995107][ T5885] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 300.015126][ T5820] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 300.147993][ T5885] usb 2-1: Using ep0 maxpacket: 8 [ 300.153903][ T5885] usb 2-1: unable to get BOS descriptor or descriptor too short [ 300.175241][ T5820] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 300.175274][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.175955][ T5885] usb 2-1: config 2 has an invalid descriptor of length 186, skipping remainder of the config [ 300.175981][ T5885] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 300.181430][ T5885] usb 2-1: New USB device found, idVendor=99fa, idProduct=8988, bcdDevice=4d.bc [ 300.181463][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.181486][ T5885] usb 2-1: Product: syz [ 300.181502][ T5885] usb 2-1: Manufacturer: syz [ 300.181519][ T5885] usb 2-1: SerialNumber: syz [ 300.196769][ T5820] usb 5-1: config 0 descriptor?? [ 300.231105][ T5820] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 300.611779][ T5820] cpia1 5-1:0.0: unexpected state after lo power cmd: 01 [ 300.809766][ T5820] gspca_cpia1: usb_control_msg 01, error -71 [ 300.809790][ T5820] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 300.861034][ T5820] usb 5-1: USB disconnect, device number 13 [ 302.572667][ T7307] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 304.578863][ T5885] usb 2-1: USB disconnect, device number 10 [ 304.593939][ T7327] netlink: 12 bytes leftover after parsing attributes in process `syz.0.358'. [ 305.654136][ T7350] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 307.085990][ T7373] netlink: 12 bytes leftover after parsing attributes in process `syz.2.372'. [ 307.165060][ T5885] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 307.315149][ T5885] usb 2-1: Using ep0 maxpacket: 32 [ 307.318432][ T5885] usb 2-1: unable to get BOS descriptor or descriptor too short [ 307.319966][ T5885] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32 [ 307.356918][ T5885] usb 2-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 307.356951][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.356971][ T5885] usb 2-1: Product: 幫蛜껍驧⤬㭄ꋇ黭ꌦ멁ᅺ洏弄繪䬨콗ᦳ땳ꨙ訒뱑䏸笧᜛〢韩࿤䂶ㄞ趁㧻 [ 307.356992][ T5885] usb 2-1: Manufacturer: Ѝ [ 307.357009][ T5885] usb 2-1: SerialNumber: syz [ 307.437050][ T7367] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 308.701438][ T7384] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 308.751284][ T5885] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 308.751349][ T5885] usb 2-1: MIDIStreaming interface descriptor not found [ 309.090358][ T5885] usb 2-1: USB disconnect, device number 11 [ 310.402959][ T7406] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 312.563841][ T7415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.383'. [ 312.823148][ T6983] udevd[6983]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 314.255032][ T7433] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 316.875048][ T5886] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 317.483786][ T7454] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 317.806656][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.806738][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.828067][ T5886] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 317.828101][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.867058][ T5886] usb 3-1: config 0 descriptor?? [ 317.890768][ T5886] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 318.354074][ T5886] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 318.652083][ T6990] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 318.770411][ T5886] gspca_cpia1: usb_control_msg 02, error -71 [ 318.783267][ T5886] gspca_cpia1: usb_control_msg 05, error -71 [ 318.783289][ T5886] cpia1 3-1:0.0: unexpected systemstate: 00 [ 318.820871][ T6990] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 318.851980][ T6990] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 319.080259][ T5886] usb 3-1: USB disconnect, device number 11 [ 319.966150][ T7479] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 320.134132][ T6990] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 320.148804][ T6990] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 320.349082][ T6990] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 320.351456][ T6990] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 320.404879][ T6990] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 320.655710][ T7501] netlink: 28 bytes leftover after parsing attributes in process `syz.4.407'. [ 321.717430][ T7504] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 322.526005][ T6990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.179088][ T7529] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 324.137530][ T6990] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.307401][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.308163][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.785079][ T5820] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 327.368123][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 327.405311][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 327.421122][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 327.439429][ T5812] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 327.459491][ T5812] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 330.295395][ T7562] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 330.519279][ T6025] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 330.523713][ T5815] Bluetooth: hci0: command tx timeout [ 331.187502][ T7572] netlink: 28 bytes leftover after parsing attributes in process `syz.4.424'. [ 331.679585][ T7581] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 332.583216][ T7581] slcan: can't register candev [ 332.645007][ T5815] Bluetooth: hci0: command tx timeout [ 334.705874][ T5815] Bluetooth: hci0: command tx timeout [ 336.303004][ T7608] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 336.856230][ T5815] Bluetooth: hci0: command tx timeout [ 338.307570][ T7624] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 338.595151][ T6025] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 338.730483][ T7546] chnl_net:caif_netlink_parms(): no params data found [ 338.755165][ T6025] usb 5-1: Using ep0 maxpacket: 8 [ 340.543638][ T6025] usb 5-1: unable to get BOS descriptor or descriptor too short [ 340.544696][ T6025] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 340.544738][ T6025] usb 5-1: can't read configurations, error -71 [ 340.978031][ T7546] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.979292][ T7546] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.979617][ T7546] bridge_slave_0: entered allmulticast mode [ 341.103855][ T7546] bridge_slave_0: entered promiscuous mode [ 341.280207][ T7546] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.280355][ T7546] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.280782][ T7546] bridge_slave_1: entered allmulticast mode [ 341.326986][ T7546] bridge_slave_1: entered promiscuous mode [ 343.186567][ T7663] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 343.360684][ T7546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.007616][ T7546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.338462][ T7546] team0: Port device team_slave_0 added [ 344.360470][ T7546] team0: Port device team_slave_1 added [ 344.709756][ T7690] binder: 7685:7690 ioctl c0285840 200000000000 returned -22 [ 344.743532][ T7689] loop5: detected capacity change from 0 to 7 [ 345.260452][ T7689] Dev loop5: unable to read RDB block 7 [ 345.260787][ T7689] loop5: unable to read partition table [ 345.262621][ T7689] loop5: partition table beyond EOD, truncated [ 345.262696][ T7689] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 346.059946][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.059974][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.060033][ T7546] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.073636][ T7546] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.073654][ T7546] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 346.073680][ T7546] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.872447][ T5885] kernel read not supported for file /video7 (pid: 5885 comm: kworker/1:4) [ 348.699491][ T7546] hsr_slave_0: entered promiscuous mode [ 348.703498][ T7546] hsr_slave_1: entered promiscuous mode [ 348.708711][ T7546] debugfs: 'hsr0' already exists in 'hsr' [ 348.708740][ T7546] Cannot create hsr debugfs directory [ 348.778880][ T5886] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 348.974730][ T5886] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 348.974764][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.009645][ T5886] usb 1-1: config 0 descriptor?? [ 349.022072][ T5886] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 349.420222][ T5886] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 349.617895][ T10] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 349.793535][ T10] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 349.793557][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.793571][ T10] usb 5-1: config 0 has no interface number 0 [ 349.793621][ T10] usb 5-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 349.793650][ T10] usb 5-1: config 0 interface 41 has no altsetting 0 [ 349.858776][ T5886] gspca_cpia1: usb_control_msg 02, error -71 [ 349.869671][ T5886] gspca_cpia1: usb_control_msg 05, error -71 [ 349.869690][ T5886] cpia1 1-1:0.0: unexpected systemstate: 00 [ 349.893912][ T10] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 349.893947][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.893966][ T10] usb 5-1: Product: syz [ 349.893981][ T10] usb 5-1: Manufacturer: syz [ 349.893995][ T10] usb 5-1: SerialNumber: syz [ 350.010609][ T10] usb 5-1: config 0 descriptor?? [ 350.018485][ T5886] usb 1-1: USB disconnect, device number 9 [ 350.041867][ T10] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 350.352041][ T149] bridge_slave_1: left allmulticast mode [ 350.352073][ T149] bridge_slave_1: left promiscuous mode [ 350.352448][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.457715][ T149] bridge_slave_0: left allmulticast mode [ 350.457747][ T149] bridge_slave_0: left promiscuous mode [ 350.459755][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.777408][ T7759] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 353.071519][ T5954] usb 5-1: USB disconnect, device number 17 [ 353.393422][ T6036] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 354.245351][ T6036] usb 2-1: Using ep0 maxpacket: 16 [ 354.696284][ T7777] genirq: Flags mismatch irq 7. 00202080 (ttyS3) vs. 00202000 (at-a2150c) [ 354.867146][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.029049][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.101373][ T149] bond0 (unregistering): Released all slaves [ 355.955140][ T6025] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 356.152729][ T6025] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 356.152763][ T6025] usb 1-1: config 1 has no interface number 0 [ 356.152821][ T6025] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 356.152848][ T6025] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 356.152876][ T6025] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.157241][ T6025] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 356.157273][ T6025] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.157295][ T6025] usb 1-1: Product: syz [ 356.157308][ T6025] usb 1-1: Manufacturer: syz [ 356.157321][ T6025] usb 1-1: SerialNumber: syz [ 356.179420][ T7789] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 356.542635][ T6036] usb 2-1: device descriptor read/all, error -71 [ 357.223566][ T149] hsr_slave_0: left promiscuous mode [ 357.309547][ T149] hsr_slave_1: left promiscuous mode [ 357.311267][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.439632][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.942794][ T6025] usb 1-1: Error in usbnet_get_endpoints (-71) [ 358.982051][ T6025] usb 1-1: USB disconnect, device number 10 [ 360.633796][ T149] team0 (unregistering): Port device team_slave_1 removed [ 362.067567][ T149] team0 (unregistering): Port device team_slave_0 removed [ 362.195134][ T6036] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 362.358133][ T6036] usb 5-1: unable to get BOS descriptor or descriptor too short [ 362.358930][ T6036] usb 5-1: not running at top speed; connect to a high speed hub [ 362.360486][ T6036] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 362.360511][ T6036] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 362.363748][ T6036] usb 5-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 362.363779][ T6036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.363802][ T6036] usb 5-1: Product: syz [ 362.363828][ T6036] usb 5-1: Manufacturer: syz [ 362.363842][ T6036] usb 5-1: SerialNumber: syz [ 362.525172][ T6025] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 362.763218][ T6025] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 362.763240][ T6025] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.809923][ T6036] usb 5-1: 3:0: cannot get min/max values for control 2 (id 3) [ 362.809959][ T6036] usb 5-1: Warning! Unlikely small volume range (=1), linear volume or custom curve? [ 362.809978][ T6036] usb 5-1: [3] FU [LFE Playback Volume] ch = 1, val = 0/1/1 [ 362.814226][ T6025] usb 2-1: config 0 descriptor?? [ 362.853298][ T6025] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 363.251366][ T6025] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 363.655533][ T6025] gspca_cpia1: usb_control_msg 02, error -71 [ 363.659532][ T6025] gspca_cpia1: usb_control_msg 05, error -71 [ 363.659550][ T6025] cpia1 2-1:0.0: unexpected systemstate: 00 [ 363.691223][ T6025] usb 2-1: USB disconnect, device number 14 [ 364.097800][ T6036] usb 5-1: USB disconnect, device number 18 [ 364.728401][ T6987] udevd[6987]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 366.088058][ T7893] 9p: Bad value for 'rfdno' [ 366.451431][ T7899] binder: 7897:7899 unknown command 0 [ 366.451457][ T7899] binder: 7897:7899 ioctl c0306201 200000000080 returned -22 [ 367.046855][ T7917] binder: 7912:7917 ioctl c0285840 200000000000 returned -22 [ 367.343042][ T7916] loop5: detected capacity change from 0 to 7 [ 367.604116][ T7916] Dev loop5: unable to read RDB block 7 [ 367.604339][ T7916] loop5: unable to read partition table [ 367.606173][ T7916] loop5: partition table beyond EOD, truncated [ 367.606420][ T7916] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 370.068248][ T6036] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 370.230300][ T6036] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 370.230334][ T6036] usb 5-1: config 0 has no interface number 0 [ 370.230387][ T6036] usb 5-1: config 0 interface 41 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 370.230412][ T6036] usb 5-1: config 0 interface 41 has no altsetting 0 [ 370.233537][ T6036] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 370.233570][ T6036] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.233594][ T6036] usb 5-1: Product: syz [ 370.233608][ T6036] usb 5-1: Manufacturer: syz [ 370.233624][ T6036] usb 5-1: SerialNumber: syz [ 370.349538][ T6036] usb 5-1: config 0 descriptor?? [ 370.354290][ T6036] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -22 [ 372.990671][ T5820] usb 5-1: USB disconnect, device number 19 [ 373.408196][ T7995] loop5: detected capacity change from 0 to 7 [ 373.452763][ T7996] binder: 7993:7996 ioctl c0285840 200000000000 returned -22 [ 373.551700][ T7995] Dev loop5: unable to read RDB block 7 [ 373.551944][ T7995] loop5: unable to read partition table [ 373.562313][ T7995] loop5: partition table beyond EOD, truncated [ 373.562700][ T7995] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 376.639240][ T8011] lo speed is unknown, defaulting to 1000 [ 376.639360][ T8011] lo speed is unknown, defaulting to 1000 [ 376.647491][ T8011] lo speed is unknown, defaulting to 1000 [ 376.650194][ T8011] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 376.650236][ T8011] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 376.650279][ T8011] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 376.659341][ T8011] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 376.677169][ T8011] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 376.820563][ T7546] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 376.822490][ T8011] lo speed is unknown, defaulting to 1000 [ 377.017470][ T7546] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 377.017700][ T8011] lo speed is unknown, defaulting to 1000 [ 377.020817][ T8011] lo speed is unknown, defaulting to 1000 [ 377.022303][ T7546] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 377.300838][ T7546] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 377.302022][ T8011] lo speed is unknown, defaulting to 1000 [ 377.306548][ T8011] lo speed is unknown, defaulting to 1000 [ 377.329623][ T7546] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 377.433684][ T8036] overlayfs: failed to resolve './file1': -2 [ 377.549513][ T7546] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 377.553170][ T7546] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 377.675078][ T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 377.681131][ T8039] 9p: Bad value for 'rfdno' [ 377.852797][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 377.878246][ T10] usb 1-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 377.878310][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.878341][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 377.878367][ T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 377.878392][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 377.883508][ T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 377.883550][ T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 377.883573][ T10] usb 1-1: Manufacturer: syz [ 378.099323][ T10] usb 1-1: config 0 descriptor?? [ 378.188147][ T7546] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 378.425852][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 378.608232][ T9] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 378.608267][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.665150][ T9] usb 2-1: config 0 descriptor?? [ 378.716362][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 378.745099][ T10] rc_core: IR keymap rc-hauppauge not found [ 378.745123][ T10] Registered IR keymap rc-empty [ 378.745428][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.774819][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 378.898893][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.922601][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.001120][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 379.085672][ T9] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 379.093497][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input16 [ 379.277526][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 379.317400][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 379.335682][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 379.367858][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 379.385327][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 379.407418][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 379.434085][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 379.447132][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 379.465642][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 379.489676][ T9] gspca_cpia1: usb_control_msg 02, error -71 [ 379.491112][ T9] gspca_cpia1: usb_control_msg 05, error -71 [ 379.491131][ T9] cpia1 2-1:0.0: unexpected systemstate: 00 [ 379.494517][ T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 379.631894][ T9] usb 2-1: USB disconnect, device number 15 [ 379.644794][ T10] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 379.644823][ T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 379.893602][ T10] usb 1-1: USB disconnect, device number 11 [ 380.239373][ T8059] nbd: must specify at least one socket [ 380.308074][ T7546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.569581][ T7546] 8021q: adding VLAN 0 to HW filter on device team0 [ 380.590519][ T1429] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.590778][ T1429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 380.642764][ T3535] bridge0: port 2(bridge_slave_1) entered blocking state [ 380.642957][ T3535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.045081][ T10] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 383.195056][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 383.198357][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 383.200141][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 32 [ 383.251177][ T10] usb 2-1: New USB device found, idVendor=0582, idProduct=003b, bcdDevice= 0.40 [ 383.251211][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.251232][ T10] usb 2-1: Product: 幫蛜껍驧⤬㭄ꋇ黭ꌦ멁ᅺ洏弄繪䬨콗ᦳ땳ꨙ訒뱑䏸笧᜛〢韩࿤䂶ㄞ趁㧻 [ 383.251254][ T10] usb 2-1: Manufacturer: Ѝ [ 383.251289][ T10] usb 2-1: SerialNumber: syz [ 383.354093][ T8077] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 383.597612][ T10] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 383.597679][ T10] usb 2-1: MIDIStreaming interface descriptor not found [ 383.789529][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 383.854627][ T7546] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.988229][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 383.990759][ T9] usb 1-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config [ 383.990819][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 383.990850][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 383.990874][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 383.990899][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 383.992605][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 383.992634][ T9] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 383.992657][ T9] usb 1-1: Manufacturer: syz [ 384.082772][ T9] usb 1-1: config 0 descriptor?? [ 384.123254][ T10] usb 2-1: USB disconnect, device number 16 [ 384.292487][ T8107] siw: device registration error -23 [ 385.285470][ T8111] 9p: Bad value for 'rfdno' [ 385.849621][ T9] rc_core: IR keymap rc-hauppauge not found [ 385.849646][ T9] Registered IR keymap rc-empty [ 385.849814][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 385.865140][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 385.910164][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 385.920087][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input17 [ 385.950315][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 385.965476][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 385.987581][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 386.005252][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 386.031189][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 386.051380][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 386.065152][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 386.096332][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 386.117805][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 386.135395][ T9] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 386.159507][ T7546] ------------[ cut here ]------------ [ 386.159523][ T7546] kcov->t != t [ 386.159529][ T7546] WARNING: kernel/kcov.c:483 at kcov_task_exit+0xf5/0x160, CPU#0: syz-executor/7546 [ 386.159583][ T7546] Modules linked in: [ 386.159604][ T7546] CPU: 0 UID: 0 PID: 7546 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 386.159629][ T7546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 386.159697][ T7546] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 386.159731][ T7546] Code: 10 00 00 48 8b bb 90 00 00 00 e8 36 68 55 00 48 89 df 5b 41 5e 41 5f e9 49 25 5b 00 7c 1c 5b 41 5e 41 5f e9 7d cb 69 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 9b 64 68 09 48 89 df be 03 00 [ 386.159749][ T7546] RSP: 0018:ffffc900047bfae0 EFLAGS: 00010206 [ 386.159768][ T7546] RAX: bc1a2b74e43dad00 RBX: ffff8880324c1800 RCX: 0000000000000000 [ 386.159783][ T7546] RDX: 0000000014dee08c RSI: ffffffff8ba73040 RDI: 00000000ffffffff [ 386.159798][ T7546] RBP: ffffc900047bfc28 R08: ffffffff8b2cf750 R09: ffffffff8dfc80c0 [ 386.159814][ T7546] R10: dffffc0000000000 R11: fffffbfff1f1717f R12: dffffc0000000000 [ 386.159828][ T7546] R13: 0000000000000009 R14: ffff8880324c1808 R15: ffff88802717dc40 [ 386.159843][ T7546] FS: 0000555560314500(0000) GS:ffff888126109000(0000) knlGS:0000000000000000 [ 386.159862][ T7546] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 386.159876][ T7546] CR2: 00007f84736b3e9c CR3: 000000003bd26000 CR4: 00000000003526f0 [ 386.159895][ T7546] Call Trace: [ 386.159900][ T7546] [ 386.159908][ T7546] do_exit+0x150/0x22c0 [ 386.159927][ T7546] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 386.159946][ T7546] ? lockdep_hardirqs_on+0x7a/0x110 [ 386.159963][ T7546] ? __pfx_do_exit+0x10/0x10 [ 386.159977][ T7546] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 386.159990][ T7546] ? reacquire_held_locks+0x104/0x190 [ 386.160007][ T7546] ? rt_spin_lock+0x1e0/0x400 [ 386.160021][ T7546] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 386.160038][ T7546] do_group_exit+0x21b/0x2d0 [ 386.160054][ T7546] ? rt_spin_unlock+0x160/0x200 [ 386.160068][ T7546] get_signal+0x125c/0x1310 [ 386.160114][ T7546] arch_do_signal_or_restart+0xbc/0x830 [ 386.160150][ T7546] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 386.160179][ T7546] ? sock_ioctl+0x5c9/0x7f0 [ 386.160218][ T7546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.160233][ T7546] exit_to_user_mode_loop+0x86/0x480 [ 386.160247][ T7546] ? rcu_is_watching+0x15/0xb0 [ 386.160265][ T7546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.160279][ T7546] do_syscall_64+0x33e/0xf80 [ 386.160296][ T7546] ? clear_bhb_loop+0x40/0x90 [ 386.160311][ T7546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.160324][ T7546] RIP: 0033:0x7f2d04dbc4ab [ 386.160337][ T7546] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 386.160348][ T7546] RSP: 002b:00007ffc6c9d89d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.160361][ T7546] RAX: ffffffffffffffed RBX: 0000000000000005 RCX: 00007f2d04dbc4ab [ 386.160370][ T7546] RDX: 00007ffc6c9d8a30 RSI: 0000000000008933 RDI: 0000000000000005 [ 386.160378][ T7546] RBP: 0000000000000003 R08: 0000000000000000 R09: 00000000fffffff9 [ 386.160388][ T7546] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffc6c9d8ab0 [ 386.160399][ T7546] R13: 00007ffc6c9d8ba0 R14: 00007f2d05b64620 R15: 00007ffc6c9d8ba0 [ 386.160418][ T7546] [ 386.160425][ T7546] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 386.160436][ T7546] CPU: 0 UID: 0 PID: 7546 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 386.160451][ T7546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 386.160458][ T7546] Call Trace: [ 386.160464][ T7546] [ 386.160469][ T7546] vpanic+0x56c/0xa60 [ 386.160484][ T7546] ? __pfx__printk+0x10/0x10 [ 386.160500][ T7546] ? __pfx_vpanic+0x10/0x10 [ 386.160511][ T7546] ? is_bpf_text_address+0x292/0x2b0 [ 386.160526][ T7546] ? is_bpf_text_address+0x26/0x2b0 [ 386.160545][ T7546] panic+0xc5/0xd0 [ 386.160557][ T7546] ? __pfx_panic+0x10/0x10 [ 386.160581][ T7546] __warn+0x315/0x4c0 [ 386.160594][ T7546] ? kcov_task_exit+0xf5/0x160 [ 386.160613][ T7546] ? kcov_task_exit+0xf5/0x160 [ 386.160642][ T7546] __report_bug+0x29a/0x540 [ 386.160661][ T7546] ? kcov_task_exit+0xf5/0x160 [ 386.160679][ T7546] ? __pfx___report_bug+0x10/0x10 [ 386.160694][ T7546] ? try_to_take_rt_mutex+0x840/0xb00 [ 386.160712][ T7546] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 386.160725][ T7546] ? __pfx_rtlock_slowlock_locked+0x10/0x10 [ 386.160741][ T7546] ? rt_spin_lock+0x1e0/0x400 [ 386.160754][ T7546] ? rt_spin_lock+0x1e0/0x400 [ 386.160767][ T7546] ? kcov_task_exit+0xf5/0x160 [ 386.160785][ T7546] report_bug+0x16a/0x220 [ 386.160800][ T7546] ? kcov_task_exit+0xf5/0x160 [ 386.160817][ T7546] ? kcov_task_exit+0xf7/0x160 [ 386.160835][ T7546] handle_bug+0x9c/0x200 [ 386.160853][ T7546] exc_invalid_op+0x1a/0x50 [ 386.160876][ T7546] asm_exc_invalid_op+0x1a/0x20 [ 386.160888][ T7546] RIP: 0010:kcov_task_exit+0xf5/0x160 [ 386.160907][ T7546] Code: 10 00 00 48 8b bb 90 00 00 00 e8 36 68 55 00 48 89 df 5b 41 5e 41 5f e9 49 25 5b 00 7c 1c 5b 41 5e 41 5f e9 7d cb 69 09 cc 90 <0f> 0b 90 4c 89 f7 5b 41 5e 41 5f e9 9b 64 68 09 48 89 df be 03 00 [ 386.160918][ T7546] RSP: 0018:ffffc900047bfae0 EFLAGS: 00010206 [ 386.160928][ T7546] RAX: bc1a2b74e43dad00 RBX: ffff8880324c1800 RCX: 0000000000000000 [ 386.160937][ T7546] RDX: 0000000014dee08c RSI: ffffffff8ba73040 RDI: 00000000ffffffff [ 386.160945][ T7546] RBP: ffffc900047bfc28 R08: ffffffff8b2cf750 R09: ffffffff8dfc80c0 [ 386.160954][ T7546] R10: dffffc0000000000 R11: fffffbfff1f1717f R12: dffffc0000000000 [ 386.160963][ T7546] R13: 0000000000000009 R14: ffff8880324c1808 R15: ffff88802717dc40 [ 386.160976][ T7546] ? rt_spin_lock+0x1e0/0x400 [ 386.160993][ T7546] do_exit+0x150/0x22c0 [ 386.161013][ T7546] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 386.161029][ T7546] ? lockdep_hardirqs_on+0x7a/0x110 [ 386.161046][ T7546] ? __pfx_do_exit+0x10/0x10 [ 386.161059][ T7546] ? rt_mutex_slowunlock+0x4a7/0x8b0 [ 386.161071][ T7546] ? reacquire_held_locks+0x104/0x190 [ 386.161088][ T7546] ? rt_spin_lock+0x1e0/0x400 [ 386.161102][ T7546] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 386.161119][ T7546] do_group_exit+0x21b/0x2d0 [ 386.161134][ T7546] ? rt_spin_unlock+0x160/0x200 [ 386.161148][ T7546] get_signal+0x125c/0x1310 [ 386.161178][ T7546] arch_do_signal_or_restart+0xbc/0x830 [ 386.161198][ T7546] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 386.161215][ T7546] ? sock_ioctl+0x5c9/0x7f0 [ 386.161245][ T7546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.161288][ T7546] exit_to_user_mode_loop+0x86/0x480 [ 386.161313][ T7546] ? rcu_is_watching+0x15/0xb0 [ 386.161342][ T7546] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.161365][ T7546] do_syscall_64+0x33e/0xf80 [ 386.161390][ T7546] ? clear_bhb_loop+0x40/0x90 [ 386.161406][ T7546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.161418][ T7546] RIP: 0033:0x7f2d04dbc4ab [ 386.161430][ T7546] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 386.161440][ T7546] RSP: 002b:00007ffc6c9d89d0 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 386.161452][ T7546] RAX: ffffffffffffffed RBX: 0000000000000005 RCX: 00007f2d04dbc4ab [ 386.161461][ T7546] RDX: 00007ffc6c9d8a30 RSI: 0000000000008933 RDI: 0000000000000005 [ 386.161469][ T7546] RBP: 0000000000000003 R08: 0000000000000000 R09: 00000000fffffff9 [ 386.161476][ T7546] R10: 0000000000000002 R11: 0000000000000246 R12: 00007ffc6c9d8ab0 [ 386.161484][ T7546] R13: 00007ffc6c9d8ba0 R14: 00007f2d05b64620 R15: 00007ffc6c9d8ba0 [ 386.161502][ T7546] [ 386.161770][ T7546] Kernel Offset: disabled