last executing test programs: 17m49.254450363s ago: executing program 4 (id=39): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) llistxattr(0x0, &(0x7f0000000240)=""/48, 0x30) 17m48.008054856s ago: executing program 4 (id=42): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) 17m47.516300085s ago: executing program 4 (id=46): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_bridge\x00'}) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) 17m43.988255155s ago: executing program 4 (id=53): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r5 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r5, 0x0, 0x14) close_range(r4, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) 17m42.499262143s ago: executing program 4 (id=60): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) r4 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e20, 0x0, @empty, 0x9}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x7}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000, @loopback}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0585611, &(0x7f00000000c0)={0x0, 0xb, 0x0, "3e58f67896b2f2098200902177392faff604cb7ef87e7610bc39ef64257f5d33"}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x0, 0x83, 0x2, 0x3, 0x200007f, 0xa9, 0x4d, 0x6, 0x5f, 0x9, 0x15, 0xffff2d37, 0xff7fff01, 0x6, 0x5, 0x7, 0x5, 0x6, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0x10, 0x5, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x20003, 0x8, 0x4c74, 0x10000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x18e, 0x200006, 0x6, 0x454c, 0x6, 0x80004, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x0, 0x8, 0x8000, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432f6, 0xc8, 0xf1, 0xe, 0x2bf, 0x6c7, 0x2, 0xfffffffc, 0x5, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x1, 0x66abcbd2, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0xfffff575, 0x5f31, 0xd, 0x4e0, 0x381, 0x4, 0xb, 0x4, 0x9, 0x8, 0x5, 0x6, 0x47, 0x6, 0x1, 0xfe000000, 0x8, 0x2, 0x4, 0x9, 0x3, 0x3, 0x4000009, 0x6, 0x0, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffd, 0x100, 0x4, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0xfffffffa, 0xb, 0x5, 0x2, 0x2, 0x400003, 0x20000008, 0x4, 0x6d01, 0x6, 0x4038, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x4, 0x1000, 0x5, 0xb1, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xffffffff, 0x5, 0x1c, 0x120000, 0x200807ff, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb35, 0x7, 0xb, 0x5, 0x4, 0x6, 0x6, 0x0, 0xb9, 0xce4, 0x1ff, 0x2, 0x4184, 0x5, 0x3, 0x2, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2000002, 0x14c, 0x60a7, 0x6, 0x1, 0xffffffff, 0x80000000, 0x5, 0x5, 0xc8, 0x1, 0xfffff000, 0xffff, 0x0, 0x7e, 0x100, 0x9622, 0x7, 0xaf, 0x20000008, 0x5, 0x226, 0xffffffff, 0x5, 0x0, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x530e, 0x6c1b, 0x0, 0x4, 0x5, 0x803, 0xd7, 0x200, 0xb, 0xfff]}, 0x45c) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) 17m41.225813641s ago: executing program 4 (id=62): socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000003, 0x28851, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000019640)={0x0, 0x0, 0x0, &(0x7f000001a000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x100000000000f7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="e400000000000000000000000700000094040000865400000003051005c3e45b3e088e6f722b0df22b3c00126eacb1ceb7f260dab33486c73af20b59020788c2fdffc9060c47629611bad4427b49310104076002042a03051106b63d39a9a516678325f283800b5d83237b00000000ac1414aaac1414bbe0000002ffffffff00000000ac14142de0000002890327440c7b302e7dc6a00000000807174bac1414aae00000027f0000017f000001ac1e10018317eaac1e0101ac1414aaffffffff64010101e0000001831b0b640101017f00000164010102ffffffffac1414aae0000001000000000014000000000000001a0100000100000008000000000000009ee7"], 0x100}, 0x0) ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f00000000c0)={0x1, 0x1, 0xfffffffa}) keyctl$revoke(0x3, r2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) 17m25.594047803s ago: executing program 32 (id=62): socket$alg(0x26, 0x5, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1000003, 0x28851, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = add_key$user(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x1}, &(0x7f0000000080)='\x00', 0x1, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000019640)={0x0, 0x0, 0x0, &(0x7f000001a000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x100000000000f7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, 0x0, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48000}, 0x8000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x100}, 0x0) ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f00000000c0)={0x1, 0x1, 0xfffffffa}) keyctl$revoke(0x3, r2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x7) ioctl$sock_ax25_SIOCADDRT(r5, 0x890b, &(0x7f00000000c0)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x0, [@default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}) 11m29.187579298s ago: executing program 3 (id=666): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000240), 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f00000010c0)) mount$9p_fd(0x0, 0x0, 0x0, 0x2004000, 0x0) r4 = socket(0x2c, 0x3, 0x0) r5 = epoll_create1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r7 = open_tree(r6, &(0x7f0000000640)='\x00', 0x89901) move_mount(r7, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000100)) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@ptr={0x10, 0x0, 0x0, 0x2, 0x3}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @ptr]}, {0x0, [0x5f, 0x30, 0x61]}}, &(0x7f00000001c0)=""/3, 0x41, 0x3, 0x1, 0xa, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r9}, 0x94) 11m27.95996365s ago: executing program 3 (id=670): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x4500}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)=ANY=[], 0x20) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xff, 0x0, 0x205}, 0xc) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x4000, @empty, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0xff00) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc00006000000080002000500000014000600ff01000a00f2f3f31f000a0000000001060001"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, 0x0, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x24008000}, 0x4040000) 11m27.602671588s ago: executing program 3 (id=672): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) recvfrom(r1, 0x0, 0x0, 0x40000102, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket(0x10, 0x803, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x80044dff, 0x1000000000000) write$uinput_user_dev(r2, 0x0, 0x0) 11m26.563587621s ago: executing program 3 (id=677): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000480)='nv', 0x2) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) r4 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000000)=0xc, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r5, 0x84, 0x17, &(0x7f00000002c0)={0x0, 0x9, 0xe4, "fb81b0e1ea8978abbcd409eb48ffc222f3ae8ae5c18287f79f8b31c2c284a2e0f4a2631f0cce9bbbbeae1ffb53a7302b951f790647e47a1f208221c75d5c393ea4a016a7ec69a9c1331b9da5f8f61b245ab115bb96390eab5df4f78dc8a2e3f49f108972b0df6cfb3a804a3e73eda6284bb9c798a192f4b11711fa21a8dacd5e7ba5a0fc2fc51d503ab81acd4481557aba401f2c7f0297490de6dfa3395cfdbcc55092e1f4f3212bbfae20ea74a8664b9b676ec9761291163ed78843d418288c46aee7c2ae07fac914ccc0b0d0dd8a9a6a1a2da568f934c77cec9d82074dd00e9809807a"}, 0xec) 11m25.168120376s ago: executing program 3 (id=680): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$VT_DISALLOCATE(r0, 0x5608) sched_setscheduler(0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f00000010c0)) mount$9p_fd(0x0, 0x0, 0x0, 0x2004000, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@access_uid}], [], 0x6b}}) r6 = socket(0x2c, 0x3, 0x0) r7 = epoll_create1(0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000000)='net/sctp\x00') r9 = open_tree(r8, &(0x7f0000000640)='\x00', 0x89901) move_mount(r9, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)) r10 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@ptr={0x10, 0x0, 0x0, 0x2, 0x3}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @ptr]}, {0x0, [0x5f, 0x30, 0x61]}}, &(0x7f00000001c0)=""/3, 0x41, 0x3, 0x1, 0xa, 0x10000}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r11}, 0x94) 11m22.841249678s ago: executing program 3 (id=684): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r2, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000040), 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, 0x0, 0x0) 11m6.986867411s ago: executing program 33 (id=684): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r2, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r2, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000000)={0x28, 0x2, r3, r2, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000040), 0x0, 0x0) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r6, 0x4008af60, &(0x7f0000000040)={@my=0x1}) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, 0x0, 0x0) 13.128501857s ago: executing program 2 (id=1652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 12.136845225s ago: executing program 2 (id=1653): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x2, 0x7e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) 7.797957677s ago: executing program 2 (id=1658): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000480)='nv', 0x2) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) r5 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000000)=0xc, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000002c0)={r7, 0x9, 0xe4, "fb81b0e1ea8978abbcd409eb48ffc222f3ae8ae5c18287f79f8b31c2c284a2e0f4a2631f0cce9bbbbeae1ffb53a7302b951f790647e47a1f208221c75d5c393ea4a016a7ec69a9c1331b9da5f8f61b245ab115bb96390eab5df4f78dc8a2e3f49f108972b0df6cfb3a804a3e73eda6284bb9c798a192f4b11711fa21a8dacd5e7ba5a0fc2fc51d503ab81acd4481557aba401f2c7f0297490de6dfa3395cfdbcc55092e1f4f3212bbfae20ea74a8664b9b676ec9761291163ed78843d418288c46aee7c2ae07fac914ccc0b0d0dd8a9a6a1a2da568f934c77cec9d82074dd00e9809807a"}, 0xec) 7.564863698s ago: executing program 0 (id=1659): socket$inet6(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x101800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd2(0x180, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000000000000002"]) 7.337514571s ago: executing program 0 (id=1662): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x700, 0xe, 0x0, &(0x7f0000000380)="e460cdfbef2408000008019386dd", 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r2 = syz_io_uring_setup(0x4aa, &(0x7f0000000380)={0x0, 0xf89d, 0x10100, 0x30000000, 0x13a}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x8126}}) io_uring_enter(r2, 0x38c5, 0x2000000, 0x0, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r8) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000140)={0x4200, 0x3, 0x5}, 0x10) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=none') pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000000140)) 6.852733689s ago: executing program 1 (id=1663): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r4 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x0, 0x5c8c, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80, 0x80, 0x0, 0x1ff}}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x1f, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) r5 = syz_open_dev$dri(0x0, 0x1, 0x12000) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0}) ptrace$peek(0x2, r1, &(0x7f00000001c0)) r6 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r6, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u32=0x0}}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='module_request\x00', r0}, 0x10) 5.869136329s ago: executing program 0 (id=1664): mount$9p_fd(0x0, 0x0, 0x0, 0x420, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0xfffffffd) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioperm(0x9, 0x9, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x6, 0x1, @tid=r1}, &(0x7f0000bbdffc)=0x0) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a030600000000000000000a0000090900010073797a31000000000900020073797a32000000003800048034000180090001007866726d000000002400028008000140000000000500030001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000019200)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) r5 = msgget(0x2, 0x760) msgsnd(r5, &(0x7f0000000940)=ANY=[@ANYBLOB="0200bbce"], 0x8, 0x0) 5.605479037s ago: executing program 1 (id=1665): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x80001, {0x0, 0x180, 0x20fe, 0x0, 0x87, 0xd615, 0x9, 0x9, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) 3.668854075s ago: executing program 1 (id=1666): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x29, 0x9, 0xffffffff8aa2edc4, 0x0, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x9}}, 0x50) mkdir(&(0x7f00000004c0)='./bus\x00', 0x8) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.477323734s ago: executing program 2 (id=1667): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) ioperm(0x0, 0x2, 0x7e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20) 3.43652334s ago: executing program 0 (id=1668): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d0000008500000050000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'lo\x00'}) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0x5, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 3.336815358s ago: executing program 1 (id=1669): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x7}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88f5}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x844}, 0x200080c0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000880)={0x8, @pix_mp={0x5, 0xd05, 0x3447504d, 0x5, 0xc, [{0x11ef04b4, 0x5}, {0x100, 0xffffffff}, {0x6, 0x6}, {0x1, 0x4}, {0x7ff, 0x6}, {0x6, 0x1ff}, {0x718, 0x2}, {0x6dd1655b, 0x100}], 0x8, 0x89, 0x7a6cad60eeb5a3da, 0x0, 0x6}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000180)=0x15) mount(&(0x7f0000000100)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000300)='btrfs\x00', 0x5, 0x0) 1.79017187s ago: executing program 1 (id=1670): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) pipe(0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x200006, 0x8, &(0x7f0000006680)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x88fd537e5e114b6f, 0x12, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0xa13ca8e5839881af, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 1.693206854s ago: executing program 0 (id=1671): socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xffffffffffffffff}, 0x18) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xffb0}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xd, 0x9, 0x0, 0x0, 0xffffff13}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x9}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x4, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x5, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.557777399s ago: executing program 1 (id=1672): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="50000000080211000001ffffffffffff0802110000000000000000000000000064000100000602020202020201010b"], 0x48) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200004a000000c0001"], 0x3c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 1.541843049s ago: executing program 2 (id=1673): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, "fbddf0", 0x8, 0x3a, 0xff, @empty, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x4, 0x9}}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x5, 0xb68, 0xfffffffffffffeb9, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xe}, 0x48) 291.623078ms ago: executing program 0 (id=1674): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x80, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000440)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x80001, {0x0, 0x180, 0x20fe, 0x0, 0x87, 0xd615, 0x9, 0x9, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) 0s ago: executing program 2 (id=1675): syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x398, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000480)='nv', 0x2) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) setsockopt$inet_sctp_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x5, 0x0, 0x81, 0xffffffff}) r5 = socket$netlink(0x10, 0x3, 0xb) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r5, 0x10e, 0x1, &(0x7f0000000000)=0xc, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000002c0)={r7, 0x9, 0xe4, "fb81b0e1ea8978abbcd409eb48ffc222f3ae8ae5c18287f79f8b31c2c284a2e0f4a2631f0cce9bbbbeae1ffb53a7302b951f790647e47a1f208221c75d5c393ea4a016a7ec69a9c1331b9da5f8f61b245ab115bb96390eab5df4f78dc8a2e3f49f108972b0df6cfb3a804a3e73eda6284bb9c798a192f4b11711fa21a8dacd5e7ba5a0fc2fc51d503ab81acd4481557aba401f2c7f0297490de6dfa3395cfdbcc55092e1f4f3212bbfae20ea74a8664b9b676ec9761291163ed78843d418288c46aee7c2ae07fac914ccc0b0d0dd8a9a6a1a2da568f934c77cec9d82074dd00e9809807a"}, 0xec) kernel console output (not intermixed with test programs): er: syz [ 702.174865][ T9450] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 703.203037][ T9450] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 705.425431][ T9747] fuse: Bad value for 'fd' [ 705.942184][ T5925] usb 3-1: Invalid firmware size=18. [ 706.271526][ T5925] usb 3-1: USB disconnect, device number 28 [ 707.073421][ T9450] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 707.243452][ T9450] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 707.713429][ T5790] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 707.881939][ T5790] usb 2-1: too many configurations: 171, using maximum allowed: 8 [ 707.917241][ T5790] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 707.917275][ T5790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 707.917295][ T5790] usb 2-1: Product: syz [ 707.917309][ T5790] usb 2-1: Manufacturer: syz [ 707.917324][ T5790] usb 2-1: SerialNumber: syz [ 707.954220][ T5790] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 708.152390][ T31] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 709.647907][ T31] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 709.648395][ T31] ath9k_htc: Failed to initialize the device [ 709.743043][ T9] usb 2-1: USB disconnect, device number 39 [ 709.795661][ T9] usb 2-1: ath9k_htc: USB layer deinitialized [ 710.304429][ T9] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 710.463392][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 710.467190][ T9450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 710.468484][ T9] usb 1-1: config 8 has an invalid interface number: 160 but max is 0 [ 710.468549][ T9] usb 1-1: config 8 has no interface number 0 [ 710.468588][ T9] usb 1-1: config 8 interface 160 has no altsetting 0 [ 710.470755][ T9] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=82.ee [ 710.470772][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 710.470783][ T9] usb 1-1: Product: syz [ 710.470791][ T9] usb 1-1: Manufacturer: syz [ 710.470799][ T9] usb 1-1: SerialNumber: syz [ 710.586751][ T9450] 8021q: adding VLAN 0 to HW filter on device team0 [ 710.639920][ T9448] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 710.700675][ T6878] bridge0: port 1(bridge_slave_0) entered blocking state [ 710.711672][ T6878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 710.730192][ T9448] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 710.835788][ T9448] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 715.491878][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 715.492044][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 715.680446][ T9] usb 1-1: Invalid firmware size=18. [ 715.853736][ T7351] usb 1-1: USB disconnect, device number 36 [ 717.749041][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 717.752124][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 717.762205][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 717.774045][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 717.774906][ T5814] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 718.133468][ T7351] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 718.313553][ T7351] usb 3-1: Using ep0 maxpacket: 8 [ 718.316256][ T7351] usb 3-1: config 8 has an invalid interface number: 160 but max is 0 [ 718.316286][ T7351] usb 3-1: config 8 has no interface number 0 [ 718.316321][ T7351] usb 3-1: config 8 interface 160 has no altsetting 0 [ 718.320001][ T7351] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=82.ee [ 718.320030][ T7351] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 718.320051][ T7351] usb 3-1: Product: syz [ 718.320065][ T7351] usb 3-1: Manufacturer: syz [ 718.320080][ T7351] usb 3-1: SerialNumber: syz [ 718.497761][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 718.558465][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 718.561613][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 718.566647][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 718.567656][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 720.575069][ T9126] Bluetooth: hci0: command tx timeout [ 721.204052][ T5814] Bluetooth: hci1: command tx timeout [ 723.535264][ T9454] Bluetooth: hci1: command tx timeout [ 723.593455][ T9454] Bluetooth: hci0: command tx timeout [ 724.060907][ T7351] usb 3-1: Invalid firmware size=18. [ 724.361416][ T7351] usb 3-1: USB disconnect, device number 29 [ 725.413505][ T7351] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 725.553437][ T7351] usb 3-1: device descriptor read/64, error -71 [ 725.595731][ T9454] Bluetooth: hci1: command tx timeout [ 725.674817][ T9454] Bluetooth: hci0: command tx timeout [ 725.793413][ T7351] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 725.944272][ T7351] usb 3-1: device descriptor read/64, error -71 [ 726.075546][ T7351] usb usb3-port1: attempt power cycle [ 726.483572][ T7351] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 726.517000][ T7351] usb 3-1: device descriptor read/8, error -71 [ 726.753426][ T7351] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 726.774253][ T7351] usb 3-1: device descriptor read/8, error -71 [ 726.783449][ T977] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 726.883958][ T7351] usb usb3-port1: unable to enumerate USB device [ 726.939465][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 726.939501][ T977] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 726.939542][ T977] usb 1-1: New USB device found, idVendor=04b4, idProduct=de61, bcdDevice= 0.00 [ 726.939565][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.991478][ T977] usb 1-1: config 0 descriptor?? [ 727.743342][ T9454] Bluetooth: hci1: command tx timeout [ 727.753350][ T9454] Bluetooth: hci0: command tx timeout [ 728.859234][ T977] usbhid 1-1:0.0: can't add hid device: -71 [ 728.859378][ T977] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 728.883734][ T977] usb 1-1: USB disconnect, device number 37 [ 730.198883][ T9822] chnl_net:caif_netlink_parms(): no params data found [ 730.993532][ T1017] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 731.243263][ T1017] usb 2-1: Using ep0 maxpacket: 8 [ 731.251852][ T1017] usb 2-1: config 8 has an invalid interface number: 160 but max is 0 [ 731.251883][ T1017] usb 2-1: config 8 has no interface number 0 [ 731.251918][ T1017] usb 2-1: config 8 interface 160 has no altsetting 0 [ 731.268020][ T1017] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=82.ee [ 731.268052][ T1017] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.268071][ T1017] usb 2-1: Product: syz [ 731.268086][ T1017] usb 2-1: Manufacturer: syz [ 731.268099][ T1017] usb 2-1: SerialNumber: syz [ 731.286689][ T9899] Invalid logical block size (8192) [ 736.830738][ T1017] usb 2-1: Invalid firmware size=18. [ 737.192477][ T9] usb 2-1: USB disconnect, device number 40 [ 737.323482][ T7351] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 738.533715][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 739.473444][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 739.476224][ T9] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 739.476253][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.476272][ T9] usb 2-1: config 0 has no interfaces? [ 739.479932][ T9] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 739.479962][ T9] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 739.479982][ T9] usb 2-1: Product: syz [ 739.479996][ T9] usb 2-1: Manufacturer: syz [ 739.480010][ T9] usb 2-1: SerialNumber: syz [ 739.571536][ T9] usb 2-1: config 0 descriptor?? [ 739.698290][ T9822] bridge0: port 1(bridge_slave_0) entered blocking state [ 739.698459][ T9822] bridge0: port 1(bridge_slave_0) entered disabled state [ 739.698735][ T9822] bridge_slave_0: entered allmulticast mode [ 739.746620][ T9822] bridge_slave_0: entered promiscuous mode [ 739.768888][ T9822] bridge0: port 2(bridge_slave_1) entered blocking state [ 739.769127][ T9822] bridge0: port 2(bridge_slave_1) entered disabled state [ 739.769394][ T9822] bridge_slave_1: entered allmulticast mode [ 739.805760][ T9822] bridge_slave_1: entered promiscuous mode [ 739.815535][ T7351] usb 2-1: USB disconnect, device number 41 [ 740.373596][ T9822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 740.432360][ T9822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 741.086362][ T9956] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 743.257031][ T9822] team0: Port device team_slave_0 added [ 743.318627][ T7066] bridge_slave_1: left allmulticast mode [ 743.318658][ T7066] bridge_slave_1: left promiscuous mode [ 743.318864][ T7066] bridge0: port 2(bridge_slave_1) entered disabled state [ 743.394457][ T7066] bridge_slave_0: left allmulticast mode [ 743.394479][ T7066] bridge_slave_0: left promiscuous mode [ 743.394713][ T7066] bridge0: port 1(bridge_slave_0) entered disabled state [ 743.443460][ T5970] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 743.770823][ T5970] usb 3-1: Using ep0 maxpacket: 8 [ 743.779305][ T5970] usb 3-1: config 8 has an invalid interface number: 160 but max is 0 [ 743.779334][ T5970] usb 3-1: config 8 has no interface number 0 [ 743.779366][ T5970] usb 3-1: config 8 interface 160 has no altsetting 0 [ 743.805725][ T5970] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=82.ee [ 743.805758][ T5970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 743.805777][ T5970] usb 3-1: Product: syz [ 743.805791][ T5970] usb 3-1: Manufacturer: syz [ 743.805805][ T5970] usb 3-1: SerialNumber: syz [ 752.532723][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.532806][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.788253][ T5970] usb 3-1: Invalid firmware size=18. [ 752.828800][ T5970] usb 3-1: USB disconnect, device number 34 [ 753.463949][ T5970] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 753.634445][ T5970] usb 3-1: Using ep0 maxpacket: 32 [ 753.644782][ T5970] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 753.644809][ T5970] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 753.644883][ T5970] usb 3-1: config 0 has no interfaces? [ 753.680662][ T5970] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 753.680694][ T5970] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 753.680711][ T5970] usb 3-1: Product: syz [ 753.680720][ T5970] usb 3-1: Manufacturer: syz [ 753.680727][ T5970] usb 3-1: SerialNumber: syz [ 753.691257][ T5970] usb 3-1: config 0 descriptor?? [ 753.900451][ T1017] usb 3-1: USB disconnect, device number 35 [ 755.041399][T10001] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 755.862242][T10005] mmap: syz.1.970 (10005) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 756.919483][ T7066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 757.016959][ T7066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 757.075300][ T7066] bond0 (unregistering): Released all slaves [ 757.155762][ T9822] team0: Port device team_slave_1 added [ 758.308448][ T9822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 758.308461][ T9822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 758.308477][ T9822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 758.993882][ T7066] hsr_slave_0: left promiscuous mode [ 759.013498][ T7066] hsr_slave_1: left promiscuous mode [ 759.014556][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 759.055060][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 759.523384][ T5970] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 759.673406][ T5970] usb 1-1: Using ep0 maxpacket: 32 [ 759.675439][ T5970] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 759.675456][ T5970] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.675467][ T5970] usb 1-1: config 0 has no interfaces? [ 759.678178][ T5970] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 759.678205][ T5970] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 759.678226][ T5970] usb 1-1: Product: syz [ 759.678239][ T5970] usb 1-1: Manufacturer: syz [ 759.678328][ T5970] usb 1-1: SerialNumber: syz [ 759.753468][ T5970] usb 1-1: config 0 descriptor?? [ 760.519503][ T977] usb 1-1: USB disconnect, device number 39 [ 760.794582][ T7066] team0 (unregistering): Port device team_slave_1 removed [ 760.933383][ T5970] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 760.964279][ T7066] team0 (unregistering): Port device team_slave_0 removed [ 761.073490][ T5970] usb 3-1: device descriptor read/64, error -71 [ 761.823442][ T5970] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 761.976229][ T5970] usb 3-1: device descriptor read/64, error -71 [ 762.473958][ T5970] usb usb3-port1: attempt power cycle [ 762.983435][ T5970] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 763.006590][ T5970] usb 3-1: device descriptor read/8, error -71 [ 763.255909][ T5970] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 763.284281][ T5970] usb 3-1: device descriptor read/8, error -71 [ 763.393914][ T5970] usb usb3-port1: unable to enumerate USB device [ 765.503381][ T5946] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 765.546050][ T9822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 765.546063][ T9822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 765.546080][ T9822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 765.546826][ T9831] chnl_net:caif_netlink_parms(): no params data found [ 765.683470][ T5946] usb 1-1: Using ep0 maxpacket: 8 [ 765.685624][ T5946] usb 1-1: config 8 has an invalid interface number: 160 but max is 0 [ 765.685651][ T5946] usb 1-1: config 8 has no interface number 0 [ 765.685686][ T5946] usb 1-1: config 8 interface 160 has no altsetting 0 [ 765.688780][ T5946] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=82.ee [ 765.688805][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.688817][ T5946] usb 1-1: Product: syz [ 765.688826][ T5946] usb 1-1: Manufacturer: syz [ 765.688834][ T5946] usb 1-1: SerialNumber: syz [ 766.233416][ T5925] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 768.773334][ T5925] usb 3-1: device descriptor read/64, error -71 [ 769.013389][ T5925] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 769.459761][ T5946] usb 1-1: Invalid firmware size=18. [ 769.834913][ T5946] usb 1-1: USB disconnect, device number 40 [ 771.056874][ T9822] hsr_slave_0: entered promiscuous mode [ 771.057786][ T9822] hsr_slave_1: entered promiscuous mode [ 771.058384][ T9822] debugfs: 'hsr0' already exists in 'hsr' [ 771.058401][ T9822] Cannot create hsr debugfs directory [ 772.726348][ T9831] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.726434][ T9831] bridge0: port 1(bridge_slave_0) entered disabled state [ 772.726574][ T9831] bridge_slave_0: entered allmulticast mode [ 772.730968][ T9831] bridge_slave_0: entered promiscuous mode [ 774.135831][ T9831] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.135989][ T9831] bridge0: port 2(bridge_slave_1) entered disabled state [ 774.136261][ T9831] bridge_slave_1: entered allmulticast mode [ 774.140707][ T9831] bridge_slave_1: entered promiscuous mode [ 774.643409][ T5970] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 774.900999][ T5970] usb 1-1: Using ep0 maxpacket: 8 [ 774.909930][ T5970] usb 1-1: config 8 has an invalid interface number: 160 but max is 0 [ 774.909959][ T5970] usb 1-1: config 8 has no interface number 0 [ 774.910152][ T5970] usb 1-1: config 8 interface 160 has no altsetting 0 [ 774.973630][ T5970] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=82.ee [ 774.973653][ T5970] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 774.973664][ T5970] usb 1-1: Product: syz [ 774.973672][ T5970] usb 1-1: Manufacturer: syz [ 774.973680][ T5970] usb 1-1: SerialNumber: syz [ 779.466241][ T5970] usb 1-1: Invalid firmware size=18. [ 779.472710][ T5970] usb 1-1: USB disconnect, device number 41 [ 780.413417][ T5970] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 780.545039][ T5970] usb 1-1: device descriptor read/64, error -71 [ 780.783380][ T5970] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 780.933406][ T5970] usb 1-1: device descriptor read/64, error -71 [ 781.124188][ T5970] usb usb1-port1: attempt power cycle [ 781.615160][ T5970] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 781.644830][ T5970] usb 1-1: device descriptor read/8, error -71 [ 781.910860][ T5970] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 781.951896][ T5970] usb 1-1: device descriptor read/8, error -71 [ 782.055897][ T5970] usb usb1-port1: unable to enumerate USB device [ 782.912373][ T9126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 782.927641][ T9126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 782.929663][ T9126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 782.933611][ T9126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 782.943668][ T9126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 782.999488][ T5814] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 783.016826][ T9126] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 783.019372][ T9126] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 783.021165][ T9126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 783.021845][ T9126] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 785.035931][ T9454] Bluetooth: hci1: command tx timeout [ 785.737019][ T9454] Bluetooth: hci5: command tx timeout [ 787.116032][ T9454] Bluetooth: hci1: command tx timeout [ 787.753602][ T9454] Bluetooth: hci5: command tx timeout [ 788.694814][ T31] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 788.823446][ T31] usb 2-1: device descriptor read/64, error -71 [ 789.073448][ T31] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 789.203775][ T9454] Bluetooth: hci1: command tx timeout [ 789.233480][ T31] usb 2-1: device descriptor read/64, error -71 [ 789.305913][ T7066] bridge_slave_1: left allmulticast mode [ 789.305945][ T7066] bridge_slave_1: left promiscuous mode [ 789.306233][ T7066] bridge0: port 2(bridge_slave_1) entered disabled state [ 789.344082][ T31] usb usb2-port1: attempt power cycle [ 789.385834][ T7066] bridge_slave_0: left allmulticast mode [ 789.385857][ T7066] bridge_slave_0: left promiscuous mode [ 789.386060][ T7066] bridge0: port 1(bridge_slave_0) entered disabled state [ 789.393557][ T5925] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 789.553382][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 789.555817][ T5925] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 789.555846][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 789.555888][ T5925] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 789.555932][ T5925] usb 1-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 789.555960][ T5925] usb 1-1: config 0 interface 0 has no altsetting 0 [ 789.641323][ T5925] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 789.641357][ T5925] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 789.641376][ T5925] usb 1-1: Product: syz [ 789.641389][ T5925] usb 1-1: Manufacturer: syz [ 789.641402][ T5925] usb 1-1: SerialNumber: syz [ 789.693780][ T31] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 789.712257][ T5925] usb 1-1: config 0 descriptor?? [ 789.721332][ T31] usb 2-1: device descriptor read/8, error -71 [ 789.741463][ T5925] ldusb 1-1:0.0: Interrupt in endpoint not found [ 789.833421][ T9454] Bluetooth: hci5: command tx timeout [ 789.929285][ T1017] usb 1-1: USB disconnect, device number 46 [ 790.056770][ T31] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 790.075366][ T31] usb 2-1: device descriptor read/8, error -71 [ 790.103941][ T7066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 790.184313][ T31] usb usb2-port1: unable to enumerate USB device [ 790.193913][ T7066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 790.267209][ T7066] bond0 (unregistering): Released all slaves [ 791.013379][ T7066] hsr_slave_0: left promiscuous mode [ 791.035140][ T7066] hsr_slave_1: left promiscuous mode [ 791.037954][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 791.078364][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 791.273298][ T9454] Bluetooth: hci1: command tx timeout [ 791.913489][ T9454] Bluetooth: hci5: command tx timeout [ 794.289915][ T7066] team0 (unregistering): Port device team_slave_1 removed [ 794.412761][ T31] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 794.595750][ T31] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 794.595784][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.623930][ T31] usb 3-1: config 0 descriptor?? [ 794.710927][ T7066] team0 (unregistering): Port device team_slave_0 removed [ 794.835967][ T31] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 795.183022][ T31] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 795.183050][ T31] [drm] Initialized udl on minor 2 [ 795.314396][ T31] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 795.316576][ T31] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 795.523357][ T5925] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 795.546526][ T977] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 795.569418][ T977] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 795.570097][ T977] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 795.600766][ T977] usb 3-1: USB disconnect, device number 42 [ 795.683383][ T5925] usb 1-1: Using ep0 maxpacket: 32 [ 795.688527][ T5925] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 795.688558][ T5925] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 795.688595][ T5925] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 795.688622][ T5925] usb 1-1: config 0 interface 0 altsetting 191 has 0 endpoint descriptors, different from the interface descriptor's value: 144 [ 795.688638][ T5925] usb 1-1: config 0 interface 0 has no altsetting 0 [ 795.803472][ T5925] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 795.803505][ T5925] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 795.803525][ T5925] usb 1-1: Product: syz [ 795.803540][ T5925] usb 1-1: Manufacturer: syz [ 795.803554][ T5925] usb 1-1: SerialNumber: syz [ 795.918000][ T5925] usb 1-1: config 0 descriptor?? [ 795.938824][ T5925] ldusb 1-1:0.0: Interrupt in endpoint not found [ 796.136755][ T10] usb 1-1: USB disconnect, device number 47 [ 796.404321][T10173] chnl_net:caif_netlink_parms(): no params data found [ 796.423330][ T5970] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 796.503647][ T5925] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 796.553493][ T5970] usb 3-1: device descriptor read/64, error -71 [ 796.631922][T10174] chnl_net:caif_netlink_parms(): no params data found [ 796.665440][ T5925] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 796.665471][ T5925] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 796.712275][ T5925] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 796.712305][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 796.712325][ T5925] usb 2-1: SerialNumber: syz [ 796.803387][ T5970] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 796.933534][ T5970] usb 3-1: device descriptor read/64, error -71 [ 796.992572][ T5925] usb 2-1: 0:2 : does not exist [ 796.992662][ T5925] usb 2-1: unit 255 not found! [ 797.053786][ T5925] usb 2-1: USB disconnect, device number 46 [ 797.121366][T10197] udevd[10197]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 797.298554][ T5970] usb usb3-port1: attempt power cycle [ 798.183390][ T5970] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 798.205251][ T5970] usb 3-1: device descriptor read/8, error -71 [ 798.463491][ T5970] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 798.497183][ T5970] usb 3-1: device descriptor read/8, error -71 [ 798.512320][T10173] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.660887][T10173] bridge0: port 1(bridge_slave_0) entered disabled state [ 798.702360][ T5970] usb usb3-port1: unable to enumerate USB device [ 798.771098][T10304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1037'. [ 798.946080][T10173] bridge_slave_0: entered allmulticast mode [ 799.029422][T10173] bridge_slave_0: entered promiscuous mode [ 799.188255][T10173] bridge0: port 2(bridge_slave_1) entered blocking state [ 799.188406][T10173] bridge0: port 2(bridge_slave_1) entered disabled state [ 799.188677][T10173] bridge_slave_1: entered allmulticast mode [ 799.197202][T10173] bridge_slave_1: entered promiscuous mode [ 799.841740][T10173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 800.037141][T10173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.037299][T10174] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.037436][T10174] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.037615][T10174] bridge_slave_0: entered allmulticast mode [ 800.040040][T10174] bridge_slave_0: entered promiscuous mode [ 800.495677][T10174] bridge0: port 2(bridge_slave_1) entered blocking state [ 800.495822][T10174] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.496073][T10174] bridge_slave_1: entered allmulticast mode [ 800.499547][T10174] bridge_slave_1: entered promiscuous mode [ 800.907665][T10173] team0: Port device team_slave_0 added [ 801.376305][T10173] team0: Port device team_slave_1 added [ 801.869362][T10174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 802.548420][T10174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 802.798721][T10342] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1048'. [ 803.152867][ T10] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 803.314426][ T10] usb 3-1: no configurations [ 803.314449][ T10] usb 3-1: can't read configurations, error -22 [ 803.463406][ T10] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 803.544768][T10173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 803.544782][T10173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.544798][T10173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 803.629249][ T10] usb 3-1: no configurations [ 803.629269][ T10] usb 3-1: can't read configurations, error -22 [ 803.629739][ T10] usb usb3-port1: attempt power cycle [ 803.892391][T10173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 803.892410][T10173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 803.892448][T10173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 803.896511][T10174] team0: Port device team_slave_0 added [ 803.908134][T10174] team0: Port device team_slave_1 added [ 803.963632][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 803.984968][ T10] usb 3-1: no configurations [ 803.984990][ T10] usb 3-1: can't read configurations, error -22 [ 804.023679][ T3925] bridge_slave_1: left allmulticast mode [ 804.023714][ T3925] bridge_slave_1: left promiscuous mode [ 804.024023][ T3925] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.194268][ T10] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 804.552854][ T10] usb 3-1: no configurations [ 804.552873][ T10] usb 3-1: can't read configurations, error -22 [ 804.553743][ T10] usb usb3-port1: unable to enumerate USB device [ 804.651820][ T3925] bridge_slave_0: left allmulticast mode [ 804.651853][ T3925] bridge_slave_0: left promiscuous mode [ 804.652146][ T3925] bridge0: port 1(bridge_slave_0) entered disabled state [ 804.749273][ T3925] bridge_slave_1: left allmulticast mode [ 804.749307][ T3925] bridge_slave_1: left promiscuous mode [ 804.749489][ T3925] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.856985][ T3925] bridge_slave_0: left allmulticast mode [ 804.857006][ T3925] bridge_slave_0: left promiscuous mode [ 804.857181][ T3925] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.985896][ T3925] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.025133][ T5925] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 806.114290][ T3925] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.276555][ T5925] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 806.276590][ T5925] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 806.278789][ T5925] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 806.278822][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 806.278842][ T5925] usb 1-1: SerialNumber: syz [ 806.977936][ T3925] bond0 (unregistering): Released all slaves [ 807.542417][ T5925] usb 1-1: 0:2 : does not exist [ 807.542533][ T5925] usb 1-1: unit 255 not found! [ 807.542550][ T5925] usb 1-1: unit 18 not found! [ 807.617552][ T5925] usb 1-1: USB disconnect, device number 48 [ 807.803372][T10382] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1058'. [ 807.934187][ T3925] bond0 (unregistering): Released all slaves [ 808.279843][T10197] udevd[10197]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 809.066230][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.066315][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.204174][T10174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 809.204192][T10174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.204217][T10174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 809.488978][T10174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 809.489013][T10174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 809.489060][T10174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 809.600011][T10392] [U]  [ 809.723889][T10173] hsr_slave_0: entered promiscuous mode [ 809.740119][T10173] hsr_slave_1: entered promiscuous mode [ 809.770339][T10173] debugfs: 'hsr0' already exists in 'hsr' [ 809.770382][T10173] Cannot create hsr debugfs directory [ 810.178464][ T3925] hsr_slave_0: left promiscuous mode [ 810.186190][ T5970] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 810.772063][ T3925] hsr_slave_1: left promiscuous mode [ 810.784202][ T3925] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 810.786297][ T5970] usb 1-1: no configurations [ 810.786316][ T5970] usb 1-1: can't read configurations, error -22 [ 810.859355][ T3925] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 810.933557][ T5970] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 811.087612][ T5970] usb 1-1: no configurations [ 811.087635][ T5970] usb 1-1: can't read configurations, error -22 [ 811.093494][ T5970] usb usb1-port1: attempt power cycle [ 812.293516][ T5970] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 812.315614][ T5970] usb 1-1: no configurations [ 812.315637][ T5970] usb 1-1: can't read configurations, error -22 [ 812.483524][ T5970] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 812.518951][ T5970] usb 1-1: no configurations [ 812.518974][ T5970] usb 1-1: can't read configurations, error -22 [ 812.519409][ T5970] usb usb1-port1: unable to enumerate USB device [ 814.941959][T10449] [U]  [ 815.204202][ T3925] team0 (unregistering): Port device team_slave_1 removed [ 817.234434][ T3925] team0 (unregistering): Port device team_slave_0 removed [ 817.583386][ T5790] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 817.773400][ T5790] usb 3-1: no configurations [ 817.773421][ T5790] usb 3-1: can't read configurations, error -22 [ 817.903344][ T5790] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 818.054415][ T5790] usb 3-1: no configurations [ 818.054439][ T5790] usb 3-1: can't read configurations, error -22 [ 818.055051][ T5790] usb usb3-port1: attempt power cycle [ 818.514083][ T5790] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 818.630521][ T5790] usb 3-1: no configurations [ 818.630574][ T5790] usb 3-1: can't read configurations, error -22 [ 819.113538][ T5790] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 819.140093][ T5790] usb 3-1: no configurations [ 819.140107][ T5790] usb 3-1: can't read configurations, error -22 [ 819.155106][ T5790] usb usb3-port1: unable to enumerate USB device [ 821.728103][T10505] [U]  [ 821.990404][T10174] hsr_slave_0: entered promiscuous mode [ 821.991977][T10174] hsr_slave_1: entered promiscuous mode [ 821.993077][T10174] debugfs: 'hsr0' already exists in 'hsr' [ 821.993103][T10174] Cannot create hsr debugfs directory [ 825.071376][ T5946] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 825.664545][ T5946] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.664575][ T5946] usb 1-1: config 0 has no interfaces? [ 825.664606][ T5946] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 825.664630][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.860007][ T5946] usb 1-1: config 0 descriptor?? [ 827.070376][T10551] [U]  [ 828.939948][ T5946] usb 1-1: USB disconnect, device number 53 [ 834.832254][T10620] [U]  [ 836.643447][ T5925] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 836.797220][ T5925] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.797257][ T5925] usb 2-1: config 0 has no interfaces? [ 836.797291][ T5925] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 836.797315][ T5925] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.846179][ T5925] usb 2-1: config 0 descriptor?? [ 839.001003][T10174] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 839.040139][T10174] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 839.084920][T10174] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 839.135428][T10174] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 839.272882][T10174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 839.300179][T10174] 8021q: adding VLAN 0 to HW filter on device team0 [ 839.312128][ T3925] bridge0: port 1(bridge_slave_0) entered blocking state [ 839.312756][ T3925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 839.318128][ T3925] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.318289][ T3925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 839.453547][ T977] usb 2-1: USB disconnect, device number 47 [ 842.815698][T10682] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 843.654631][T10669] [U]  [ 844.581724][ T9126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 844.600363][ T9126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 844.619468][ T9126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 844.621611][ T9126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 844.622932][ T9126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 844.685072][ T5814] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 844.714069][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 844.741058][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 844.742677][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 844.763314][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 846.829584][T10710] binder: 10709:10710 ioctl c0306201 0 returned -14 [ 846.830025][T10710] binder: 10709:10710 ioctl 4018620d 0 returned -22 [ 846.873571][ T9126] Bluetooth: hci1: command tx timeout [ 846.874030][ T9126] Bluetooth: hci0: command tx timeout [ 848.256733][ C1] vkms_vblank_simulate: vblank timer overrun [ 848.270114][T10726] [U]  [ 848.953371][ T9454] Bluetooth: hci0: command tx timeout [ 848.953410][ T9454] Bluetooth: hci1: command tx timeout [ 849.029838][T10691] chnl_net:caif_netlink_parms(): no params data found [ 849.371160][T10693] chnl_net:caif_netlink_parms(): no params data found [ 849.757390][T10746] binder: 10745:10746 ioctl c0306201 0 returned -14 [ 849.757765][T10746] binder: 10745:10746 ioctl 4018620d 0 returned -22 [ 849.797010][ T7066] bridge_slave_1: left allmulticast mode [ 849.797041][ T7066] bridge_slave_1: left promiscuous mode [ 849.797326][ T7066] bridge0: port 2(bridge_slave_1) entered disabled state [ 850.178153][ C1] vkms_vblank_simulate: vblank timer overrun [ 850.243376][ T7066] bridge_slave_0: left allmulticast mode [ 850.243409][ T7066] bridge_slave_0: left promiscuous mode [ 850.243826][ T7066] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.993034][ C1] vkms_vblank_simulate: vblank timer overrun [ 851.033443][ T9454] Bluetooth: hci0: command tx timeout [ 851.033459][ T9126] Bluetooth: hci1: command tx timeout [ 851.480090][ C1] vkms_vblank_simulate: vblank timer overrun [ 852.174786][T10766] [U]  [ 852.342214][ T7066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 853.319775][ C1] vkms_vblank_simulate: vblank timer overrun [ 853.330095][ T9126] Bluetooth: hci0: command tx timeout [ 853.330154][ T9126] Bluetooth: hci1: command tx timeout [ 853.374324][ T7066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 853.489336][ T7066] bond0 (unregistering): Released all slaves [ 853.718718][ C1] vkms_vblank_simulate: vblank timer overrun [ 853.948166][ C1] vkms_vblank_simulate: vblank timer overrun [ 855.943515][ T7066] hsr_slave_0: left promiscuous mode [ 856.078284][ T7066] hsr_slave_1: left promiscuous mode [ 856.090730][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 856.142309][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 857.283678][T10810] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 858.714683][T10811] [U]  [ 861.418228][ T7066] team0 (unregistering): Port device team_slave_1 removed [ 862.195655][ T7066] team0 (unregistering): Port device team_slave_0 removed [ 863.564202][T10691] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.564361][T10691] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.564607][T10691] bridge_slave_0: entered allmulticast mode [ 863.569475][T10691] bridge_slave_0: entered promiscuous mode [ 864.429919][T10850] [U]  [ 864.523569][T10691] bridge0: port 2(bridge_slave_1) entered blocking state [ 864.523722][T10691] bridge0: port 2(bridge_slave_1) entered disabled state [ 864.523999][T10691] bridge_slave_1: entered allmulticast mode [ 864.533491][T10691] bridge_slave_1: entered promiscuous mode [ 864.798230][T10693] bridge0: port 1(bridge_slave_0) entered blocking state [ 864.798397][T10693] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.798671][T10693] bridge_slave_0: entered allmulticast mode [ 864.802042][T10693] bridge_slave_0: entered promiscuous mode [ 865.870974][T10693] bridge0: port 2(bridge_slave_1) entered blocking state [ 865.871182][T10693] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.871402][T10693] bridge_slave_1: entered allmulticast mode [ 865.877756][T10693] bridge_slave_1: entered promiscuous mode [ 866.223836][ T5946] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 866.756112][ T5946] usb 1-1: config 0 interface 0 has no altsetting 0 [ 866.756160][ T5946] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 866.756184][ T5946] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.927442][ T5946] usb 1-1: config 0 descriptor?? [ 866.989440][T10691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.493597][ T5946] (null): keene_cmd_main failed (-110) [ 867.499111][ T5946] video4linux radio48: keene_cmd_main failed (-32) [ 867.499199][ T5946] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 867.565980][T10691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.587533][T10693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.736951][T10693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.959993][T10691] team0: Port device team_slave_0 added [ 868.078590][T10691] team0: Port device team_slave_1 added [ 868.239789][T10693] team0: Port device team_slave_0 added [ 868.453783][T10693] team0: Port device team_slave_1 added [ 868.767285][T10691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.767306][T10691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.767334][T10691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.821519][T10693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 868.821540][T10693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.821574][T10693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 868.860760][T10691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.860781][T10691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.860809][T10691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 868.901375][T10693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 868.901395][T10693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 868.901420][T10693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 869.144101][T10902] [U]  [ 870.472787][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.473905][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.605508][ T5925] usb 1-1: USB disconnect, device number 54 [ 870.757774][T10916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1180'. [ 871.968428][T10691] hsr_slave_0: entered promiscuous mode [ 871.969974][T10691] hsr_slave_1: entered promiscuous mode [ 871.971036][T10691] debugfs: 'hsr0' already exists in 'hsr' [ 871.971063][T10691] Cannot create hsr debugfs directory [ 874.596253][T10693] hsr_slave_0: entered promiscuous mode [ 874.597940][T10693] hsr_slave_1: entered promiscuous mode [ 874.609287][T10693] debugfs: 'hsr0' already exists in 'hsr' [ 874.609316][T10693] Cannot create hsr debugfs directory [ 874.996050][T10935] [U]  [ 877.039954][T10949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1190'. [ 877.816354][T10951] process 'syz.0.1189' launched './file0' with NULL argv: empty string added [ 877.821252][T10951] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 877.821281][T10951] CIFS mount error: No usable UNC path provided in device string! [ 877.821281][T10951] [ 877.821496][T10951] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 881.811599][T10969] [U]  [ 882.776790][T10985] loop2: detected capacity change from 0 to 7 [ 882.779099][T10985] Dev loop2: unable to read RDB block 7 [ 882.779133][T10985] loop2: AHDI p1 p2 p3 [ 882.779165][T10985] loop2: partition table partially beyond EOD, truncated [ 882.779574][T10985] loop2: p1 start 1601398130 is beyond EOD, truncated [ 882.779596][T10985] loop2: p2 start 1702059890 is beyond EOD, truncated [ 888.394654][ T7066] bridge_slave_1: left allmulticast mode [ 888.394690][ T7066] bridge_slave_1: left promiscuous mode [ 888.394952][ T7066] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.496414][ T7066] bridge_slave_0: left allmulticast mode [ 888.496448][ T7066] bridge_slave_0: left promiscuous mode [ 888.508493][ T7066] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.802578][T11002] [U]  [ 892.164822][ T5970] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 892.337117][ T5970] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 892.337168][ T5970] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 892.337192][ T5970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.372364][ T5970] usb 3-1: config 0 descriptor?? [ 894.331798][T11053] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 894.343952][ T7066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 894.545726][ T7066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 894.624712][ T7066] bond0 (unregistering): Released all slaves [ 894.954072][ T31] usb 3-1: USB disconnect, device number 55 [ 895.255310][T11060] syz.0.1220 (11060): drop_caches: 2 [ 895.359574][ T7066] hsr_slave_0: left promiscuous mode [ 895.396221][ T7066] hsr_slave_1: left promiscuous mode [ 895.397367][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.471436][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 897.668953][T11074] i2c i2c-0: Invalid block write size 34 [ 897.705306][T11074] netlink: 'syz.1.1223': attribute type 3 has an invalid length. [ 898.022508][T11057] [U]  [ 898.825691][ T7066] team0 (unregistering): Port device team_slave_1 removed [ 899.174396][ T7066] team0 (unregistering): Port device team_slave_0 removed [ 901.201947][T11090] syz.2.1229 (11090): drop_caches: 2 [ 901.473490][ T1017] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 901.541949][ T9126] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 901.547472][ T9126] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 901.548804][ T9126] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 901.550009][ T9126] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 901.551221][ T9126] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 901.647309][ T1017] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 901.647359][ T1017] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 901.647388][ T1017] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.650762][ T1017] usb 1-1: config 0 descriptor?? [ 902.664527][T11104] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 903.891314][ T9454] Bluetooth: hci5: command tx timeout [ 904.744830][ T9039] usb 1-1: USB disconnect, device number 55 [ 904.988067][ T9126] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 904.992296][ T9126] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 905.003483][ T9126] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 905.005231][ T9126] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 905.006166][ T9126] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 905.162819][ T5790] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 905.640588][ T5790] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 905.640619][ T5790] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 905.642158][ T5790] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 905.642188][ T5790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 905.642207][ T5790] usb 2-1: SerialNumber: syz [ 905.938562][ T5790] usb 2-1: 0:2 : does not exist [ 905.938619][ T5790] usb 2-1: unit 5 not found! [ 906.023301][ T9454] Bluetooth: hci5: command tx timeout [ 906.212657][ T5790] usb 2-1: USB disconnect, device number 48 [ 907.033344][ T9454] Bluetooth: hci6: command tx timeout [ 907.203395][ T31] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 907.356245][ T31] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 907.356279][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.360738][ T31] usb 2-1: config 0 descriptor?? [ 907.568907][ T31] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 908.239534][ T9454] Bluetooth: hci5: command tx timeout [ 908.246710][ T31] [drm:udl_init] *ERROR* Selecting channel failed [ 908.365077][ T7066] bridge_slave_1: left allmulticast mode [ 908.365111][ T7066] bridge_slave_1: left promiscuous mode [ 908.365409][ T7066] bridge0: port 2(bridge_slave_1) entered disabled state [ 908.405827][ T31] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 908.405853][ T31] [drm] Initialized udl on minor 2 [ 908.420798][ T31] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 908.421154][ T31] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 908.422164][ T977] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 908.423991][ T977] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 908.424166][ T977] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 908.496303][ T31] usb 2-1: USB disconnect, device number 49 [ 908.565018][ T7066] bridge_slave_0: left allmulticast mode [ 908.565051][ T7066] bridge_slave_0: left promiscuous mode [ 908.565349][ T7066] bridge0: port 1(bridge_slave_0) entered disabled state [ 909.253385][ T9454] Bluetooth: hci6: command tx timeout [ 909.404963][T11146] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 910.376365][ T9454] Bluetooth: hci5: command tx timeout [ 910.924619][T11158] binder: 11157:11158 ioctl c0306201 2000000003c0 returned -14 [ 911.222531][T11163] syz.2.1245 (11163): drop_caches: 2 [ 911.285487][ T9454] Bluetooth: hci6: command tx timeout [ 911.744195][ T7066] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 912.274228][ T7066] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 912.386027][ T7066] bond0 (unregistering): Released all slaves [ 913.353464][ T9454] Bluetooth: hci6: command tx timeout [ 913.587900][ T7066] hsr_slave_0: left promiscuous mode [ 913.633921][ T7066] hsr_slave_1: left promiscuous mode [ 913.635131][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 913.694245][ T7066] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 914.818991][ C1] vkms_vblank_simulate: vblank timer overrun [ 914.952217][ C1] vkms_vblank_simulate: vblank timer overrun [ 915.005521][ C1] vkms_vblank_simulate: vblank timer overrun [ 915.603775][ C1] vkms_vblank_simulate: vblank timer overrun [ 916.390713][ C1] vkms_vblank_simulate: vblank timer overrun [ 916.656966][T11192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1254'. [ 916.871851][ C1] vkms_vblank_simulate: vblank timer overrun [ 917.254810][T11203] random: crng reseeded on system resumption [ 918.412691][ C1] vkms_vblank_simulate: vblank timer overrun [ 919.744124][ T7066] team0 (unregistering): Port device team_slave_1 removed [ 920.205949][ T7066] team0 (unregistering): Port device team_slave_0 removed [ 920.851999][ C0] vkms_vblank_simulate: vblank timer overrun [ 921.624456][ C0] vkms_vblank_simulate: vblank timer overrun [ 921.881083][ C0] vkms_vblank_simulate: vblank timer overrun [ 921.959249][ C0] vkms_vblank_simulate: vblank timer overrun [ 922.132113][ C0] vkms_vblank_simulate: vblank timer overrun [ 922.491436][ C0] vkms_vblank_simulate: vblank timer overrun [ 922.492622][ T9039] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 922.550407][T11093] chnl_net:caif_netlink_parms(): no params data found [ 922.594108][T11243] random: crng reseeded on system resumption [ 922.694718][ C0] vkms_vblank_simulate: vblank timer overrun [ 923.342030][ C0] vkms_vblank_simulate: vblank timer overrun [ 923.351209][ T9039] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 923.351236][ T9039] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 923.352713][ T9039] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 923.352737][ T9039] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 923.352754][ T9039] usb 1-1: SerialNumber: syz [ 923.670513][ T9039] usb 1-1: 0:2 : does not exist [ 923.670611][ T9039] usb 1-1: unit 5 not found! [ 924.362508][ T9039] usb 1-1: USB disconnect, device number 56 [ 924.397692][ C0] vkms_vblank_simulate: vblank timer overrun [ 924.614622][T11116] chnl_net:caif_netlink_parms(): no params data found [ 924.756204][ C0] vkms_vblank_simulate: vblank timer overrun [ 924.965170][ C0] vkms_vblank_simulate: vblank timer overrun [ 925.492279][ C0] vkms_vblank_simulate: vblank timer overrun [ 928.712134][T11093] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.712222][T11093] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.712367][T11093] bridge_slave_0: entered allmulticast mode [ 928.715893][T11093] bridge_slave_0: entered promiscuous mode [ 928.740323][T11093] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.742478][T11093] bridge0: port 2(bridge_slave_1) entered disabled state [ 929.143422][T11093] bridge_slave_1: entered allmulticast mode [ 929.145639][T11093] bridge_slave_1: entered promiscuous mode [ 931.301612][T11289] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1278'. [ 931.708193][T11093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.926969][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.927046][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.397007][T11093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 932.721134][T11300] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1281'. [ 936.365458][T11116] bridge0: port 1(bridge_slave_0) entered blocking state [ 936.365619][T11116] bridge0: port 1(bridge_slave_0) entered disabled state [ 936.365867][T11116] bridge_slave_0: entered allmulticast mode [ 936.383919][T11116] bridge_slave_0: entered promiscuous mode [ 936.450778][T11093] team0: Port device team_slave_0 added [ 937.375016][T11116] bridge0: port 2(bridge_slave_1) entered blocking state [ 937.375180][T11116] bridge0: port 2(bridge_slave_1) entered disabled state [ 937.375400][T11116] bridge_slave_1: entered allmulticast mode [ 937.379954][T11116] bridge_slave_1: entered promiscuous mode [ 937.525446][ C1] vkms_vblank_simulate: vblank timer overrun [ 937.535870][T11093] team0: Port device team_slave_1 added [ 937.923732][ C1] vkms_vblank_simulate: vblank timer overrun [ 938.439927][T11331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1289'. [ 938.898081][ C1] vkms_vblank_simulate: vblank timer overrun [ 939.291816][ C1] vkms_vblank_simulate: vblank timer overrun [ 939.348080][ C1] vkms_vblank_simulate: vblank timer overrun [ 940.080872][ C1] vkms_vblank_simulate: vblank timer overrun [ 940.112531][T11341] syz.0.1293 (11341): drop_caches: 2 [ 940.942584][ C1] vkms_vblank_simulate: vblank timer overrun [ 942.243855][ C1] vkms_vblank_simulate: vblank timer overrun [ 943.732143][ T3502] bridge_slave_1: left allmulticast mode [ 943.732167][ T3502] bridge_slave_1: left promiscuous mode [ 943.732349][ T3502] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.805905][ T3502] bridge_slave_0: left allmulticast mode [ 943.805936][ T3502] bridge_slave_0: left promiscuous mode [ 943.806238][ T3502] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.904929][T11362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1297'. [ 944.947673][ T3502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 946.108019][ T3502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 946.244471][T11378] syz.1.1302 (11378): drop_caches: 2 [ 946.329520][ T3502] bond0 (unregistering): Released all slaves [ 947.574970][T11116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 947.583633][T11093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.583649][T11093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.583671][T11093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.606477][T11116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 947.607522][T11093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.607535][T11093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.607560][T11093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.514792][T11116] team0: Port device team_slave_0 added [ 948.713377][ T3502] hsr_slave_0: left promiscuous mode [ 948.735118][ T3502] hsr_slave_1: left promiscuous mode [ 948.736286][ T3502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 948.792696][ T3502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 951.045826][ T3502] team0 (unregistering): Port device team_slave_1 removed [ 951.404737][ T3502] team0 (unregistering): Port device team_slave_0 removed [ 952.776116][T11116] team0: Port device team_slave_1 added [ 953.589239][T11413] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1312'. [ 954.223535][ T1017] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 954.353337][ T1017] usb 2-1: device descriptor read/64, error -71 [ 955.473923][T11421] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1314'. [ 955.482667][T11093] hsr_slave_0: entered promiscuous mode [ 955.504249][T11093] hsr_slave_1: entered promiscuous mode [ 955.523197][T11093] debugfs: 'hsr0' already exists in 'hsr' [ 955.523231][T11093] Cannot create hsr debugfs directory [ 955.530717][T11116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 955.530737][T11116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.530766][T11116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 955.594972][ T1017] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 955.597599][T11116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 955.597616][T11116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 955.597644][T11116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 955.906185][ T1017] usb 2-1: device descriptor read/64, error -71 [ 956.847890][ T1017] usb usb2-port1: attempt power cycle [ 958.736462][T11440] loop2: detected capacity change from 0 to 7 [ 958.739296][T11440] Dev loop2: unable to read RDB block 7 [ 958.739345][T11440] loop2: unable to read partition table [ 958.739615][T11440] loop2: partition table beyond EOD, truncated [ 958.739634][T11440] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 958.742669][T11442] kAFS: No cell specified [ 958.871097][T11445] random: crng reseeded on system resumption [ 960.924676][T11116] hsr_slave_0: entered promiscuous mode [ 960.927643][T11116] hsr_slave_1: entered promiscuous mode [ 960.928781][T11116] debugfs: 'hsr0' already exists in 'hsr' [ 960.928808][T11116] Cannot create hsr debugfs directory [ 962.867425][T11093] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 962.930241][T11093] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 962.966306][T11093] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 963.024624][T11093] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 963.561971][ T9126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 963.582917][ T9126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 963.597079][ T9126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 963.603881][ T9126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 963.619309][ T9126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 963.846380][ T1183] bridge_slave_1: left allmulticast mode [ 963.846412][ T1183] bridge_slave_1: left promiscuous mode [ 963.846646][ T1183] bridge0: port 2(bridge_slave_1) entered disabled state [ 963.932667][ T1183] bridge_slave_0: left allmulticast mode [ 963.932691][ T1183] bridge_slave_0: left promiscuous mode [ 963.932892][ T1183] bridge0: port 1(bridge_slave_0) entered disabled state [ 964.263995][ T1183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 964.347031][ T1183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 964.468282][ T1183] bond0 (unregistering): Released all slaves [ 964.838661][ T1017] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 964.928172][T11475] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1329'. [ 965.009655][ T1017] usb 1-1: device descriptor read/64, error -71 [ 965.023378][ T1183] hsr_slave_0: left promiscuous mode [ 965.054228][ T1183] hsr_slave_1: left promiscuous mode [ 965.055262][ T1183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 965.075071][ T9126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 965.091191][ T9126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 965.095845][ T9126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 965.105454][ T9126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 965.106297][ T9126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 965.145133][ T1183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 965.282563][ T1017] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 965.424048][ T1017] usb 1-1: device descriptor read/64, error -71 [ 965.536817][ T1017] usb usb1-port1: attempt power cycle [ 965.683299][ T9454] Bluetooth: hci0: command tx timeout [ 965.780066][ T1183] team0 (unregistering): Port device team_slave_1 removed [ 965.796219][T11483] kAFS: No cell specified [ 965.876641][ T1017] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 965.892129][T11485] loop2: detected capacity change from 0 to 7 [ 965.895143][T11485] Dev loop2: unable to read RDB block 7 [ 965.895193][T11485] loop2: unable to read partition table [ 965.895536][T11485] loop2: partition table beyond EOD, truncated [ 965.895554][T11485] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 965.924006][ T1017] usb 1-1: device descriptor read/8, error -71 [ 966.488770][ T1183] team0 (unregistering): Port device team_slave_0 removed [ 966.563345][ T1017] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 966.596771][ T1017] usb 1-1: device descriptor read/8, error -71 [ 966.781287][ T1017] usb usb1-port1: unable to enumerate USB device [ 967.494113][ T9454] Bluetooth: hci1: command tx timeout [ 967.753370][ T9454] Bluetooth: hci0: command tx timeout [ 969.513385][ T9454] Bluetooth: hci1: command tx timeout [ 969.843587][ T9454] Bluetooth: hci0: command tx timeout [ 970.559720][T11463] chnl_net:caif_netlink_parms(): no params data found [ 970.925198][T11521] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1342'. [ 971.983271][ T5925] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 972.113549][ T5925] usb 2-1: device descriptor read/64, error -71 [ 972.198230][ T9454] Bluetooth: hci1: command tx timeout [ 972.198268][ T9454] Bluetooth: hci0: command tx timeout [ 972.353370][ T5925] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 972.455220][T11535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1346'. [ 972.494516][ T5925] usb 2-1: device descriptor read/64, error -71 [ 972.564532][T11463] bridge0: port 1(bridge_slave_0) entered blocking state [ 972.565169][T11463] bridge0: port 1(bridge_slave_0) entered disabled state [ 972.565334][T11463] bridge_slave_0: entered allmulticast mode [ 972.597421][T11463] bridge_slave_0: entered promiscuous mode [ 972.607401][ T5925] usb usb2-port1: attempt power cycle [ 972.627691][T11463] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.627811][T11463] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.628205][T11463] bridge_slave_1: entered allmulticast mode [ 972.739800][T11463] bridge_slave_1: entered promiscuous mode [ 973.003363][ T5925] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 973.025723][ T5925] usb 2-1: device descriptor read/8, error -71 [ 973.187617][T11463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.464901][ C1] vkms_vblank_simulate: vblank timer overrun [ 973.473253][ T5925] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 973.498304][ T5925] usb 2-1: device descriptor read/8, error -71 [ 973.633759][ C1] vkms_vblank_simulate: vblank timer overrun [ 973.687110][T11552] fuse: Bad value for 'fd' [ 973.703772][ C1] vkms_vblank_simulate: vblank timer overrun [ 974.208697][ C1] vkms_vblank_simulate: vblank timer overrun [ 974.233261][ T5925] usb usb2-port1: unable to enumerate USB device [ 974.652200][ T9126] Bluetooth: hci1: command tx timeout [ 974.746845][T11554] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1351'. [ 974.788955][T11463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.959372][T11558] random: crng reseeded on system resumption [ 975.188839][ C1] vkms_vblank_simulate: vblank timer overrun [ 975.906707][ C1] vkms_vblank_simulate: vblank timer overrun [ 976.154407][ C1] vkms_vblank_simulate: vblank timer overrun [ 976.698176][ C1] vkms_vblank_simulate: vblank timer overrun [ 977.137101][ C1] vkms_vblank_simulate: vblank timer overrun [ 977.659621][ C1] vkms_vblank_simulate: vblank timer overrun [ 977.722636][T11463] team0: Port device team_slave_0 added [ 977.726481][T11480] chnl_net:caif_netlink_parms(): no params data found [ 977.754474][T11463] team0: Port device team_slave_1 added [ 977.983336][ T9039] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 978.153378][ T9039] usb 1-1: Using ep0 maxpacket: 8 [ 978.157822][ T9039] usb 1-1: config 8 has an invalid interface number: 160 but max is 0 [ 978.157850][ T9039] usb 1-1: config 8 has no interface number 0 [ 978.157886][ T9039] usb 1-1: config 8 interface 160 has no altsetting 0 [ 978.161498][ T9039] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=82.ee [ 978.161528][ T9039] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 978.161548][ T9039] usb 1-1: Product: syz [ 978.161562][ T9039] usb 1-1: Manufacturer: syz [ 978.161577][ T9039] usb 1-1: SerialNumber: syz [ 978.803451][ T977] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 978.933428][ T977] usb 2-1: device descriptor read/64, error -71 [ 979.173421][ T977] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 979.624736][T11588] fuse: Bad value for 'fd' [ 979.631528][ T977] usb 2-1: device descriptor read/64, error -71 [ 979.745445][ T977] usb usb2-port1: attempt power cycle [ 980.093419][ T977] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 980.120598][ T977] usb 2-1: device descriptor read/8, error -71 [ 980.353327][ T977] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 980.374473][ T977] usb 2-1: device descriptor read/8, error -71 [ 980.484115][ T977] usb usb2-port1: unable to enumerate USB device [ 981.105209][T11463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 981.105223][T11463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 981.105239][T11463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 981.220301][ T9039] usb 1-1: Invalid firmware size=18. [ 981.224588][ T9039] usb 1-1: USB disconnect, device number 61 [ 981.784887][T11463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 981.784905][T11463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 981.784933][T11463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 984.776466][T11623] random: crng reseeded on system resumption [ 985.655358][ T5946] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 985.833398][ T5946] usb 1-1: Using ep0 maxpacket: 8 [ 986.016144][ T5946] usb 1-1: config 8 has an invalid interface number: 160 but max is 0 [ 986.016191][ T5946] usb 1-1: config 8 has no interface number 0 [ 986.016345][ T5946] usb 1-1: config 8 interface 160 has no altsetting 0 [ 986.225717][ T5946] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=82.ee [ 986.225763][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 986.225839][ T5946] usb 1-1: Product: syz [ 986.225901][ T5946] usb 1-1: Manufacturer: syz [ 986.225962][ T5946] usb 1-1: SerialNumber: syz [ 989.906026][T11463] hsr_slave_0: entered promiscuous mode [ 989.907592][T11463] hsr_slave_1: entered promiscuous mode [ 989.910254][T11463] debugfs: 'hsr0' already exists in 'hsr' [ 989.910282][T11463] Cannot create hsr debugfs directory [ 989.911367][T11480] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.911677][T11480] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.912020][T11480] bridge_slave_0: entered allmulticast mode [ 989.917690][T11480] bridge_slave_0: entered promiscuous mode [ 989.976495][T11480] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.976632][T11480] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.976880][T11480] bridge_slave_1: entered allmulticast mode [ 989.998164][T11480] bridge_slave_1: entered promiscuous mode [ 990.308332][ T5946] usb 1-1: Invalid firmware size=18. [ 990.336116][ T5946] usb 1-1: USB disconnect, device number 62 [ 991.363737][ T5946] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 992.568879][T11651] afs: Unknown parameter 'dy' [ 992.603319][ T5946] usb 1-1: device descriptor read/64, error -71 [ 992.658134][T11480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.759596][T11480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.003713][ T5946] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 993.199595][ T5946] usb 1-1: device descriptor read/64, error -71 [ 993.314499][ T5946] usb usb1-port1: attempt power cycle [ 993.501929][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.502016][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.511624][ T5790] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 993.675859][ T5790] usb 3-1: config 0 interface 0 has no altsetting 0 [ 993.675907][ T5790] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 993.675932][ T5790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.682438][ T5790] usb 3-1: config 0 descriptor?? [ 993.982853][T11659] syz.0.1381 (11659): drop_caches: 2 [ 994.263685][ T5790] (null): keene_cmd_main failed (-110) [ 994.686739][ T5790] video4linux radio48: keene_cmd_main failed (-32) [ 994.687617][ T5790] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 995.608669][T11480] team0: Port device team_slave_0 added [ 995.681079][T11480] team0: Port device team_slave_1 added [ 995.824795][ T1183] bridge_slave_1: left allmulticast mode [ 995.824829][ T1183] bridge_slave_1: left promiscuous mode [ 995.825101][ T1183] bridge0: port 2(bridge_slave_1) entered disabled state [ 995.924559][ T1183] bridge_slave_0: left allmulticast mode [ 995.924583][ T1183] bridge_slave_0: left promiscuous mode [ 995.924799][ T1183] bridge0: port 1(bridge_slave_0) entered disabled state [ 996.083400][ T5946] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 996.233195][ T5946] usb 2-1: Using ep0 maxpacket: 8 [ 996.235946][ T5946] usb 2-1: config 8 has an invalid interface number: 160 but max is 0 [ 996.235974][ T5946] usb 2-1: config 8 has no interface number 0 [ 996.236010][ T5946] usb 2-1: config 8 interface 160 has no altsetting 0 [ 996.241342][ T5946] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=82.ee [ 996.241372][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 996.241392][ T5946] usb 2-1: Product: syz [ 996.241407][ T5946] usb 2-1: Manufacturer: syz [ 996.241422][ T5946] usb 2-1: SerialNumber: syz [ 996.435339][ T1183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 996.662434][ T5890] usb 3-1: USB disconnect, device number 56 [ 996.744281][ T1183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 998.650329][ T1183] bond0 (unregistering): Released all slaves [ 1005.235016][ T5946] usb 2-1: Invalid firmware size=18. [ 1005.299603][ T10] usb 2-1: USB disconnect, device number 61 [ 1006.693433][T11691] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1387'. [ 1007.122105][T11480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.122125][T11480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.122153][T11480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1007.343336][ T1017] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1007.503793][ T1017] usb 2-1: device descriptor read/64, error -71 [ 1007.942134][T11699] syz.0.1390 (11699): drop_caches: 2 [ 1008.017749][ T1183] hsr_slave_0: left promiscuous mode [ 1008.192744][ T1017] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 1008.210421][ T1183] hsr_slave_1: left promiscuous mode [ 1008.212030][ T1183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1009.610224][ T1183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1009.683288][ T1017] usb 2-1: device descriptor read/64, error -71 [ 1009.793770][ T1017] usb usb2-port1: attempt power cycle [ 1010.133222][ T1017] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 1010.157738][ T1017] usb 2-1: device descriptor read/8, error -71 [ 1010.545908][ T977] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1010.724902][ T977] usb 3-1: Using ep0 maxpacket: 8 [ 1010.735603][ T977] usb 3-1: config 8 has an invalid interface number: 160 but max is 0 [ 1010.735629][ T977] usb 3-1: config 8 has no interface number 0 [ 1010.735660][ T977] usb 3-1: config 8 interface 160 has no altsetting 0 [ 1010.743534][ T977] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=82.ee [ 1010.743565][ T977] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1010.743642][ T977] usb 3-1: Product: syz [ 1010.743699][ T977] usb 3-1: Manufacturer: syz [ 1010.743715][ T977] usb 3-1: SerialNumber: syz [ 1016.590513][ T977] usb 3-1: Invalid firmware size=18. [ 1017.276617][ T5790] usb 3-1: USB disconnect, device number 57 [ 1020.163983][T11740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1400'. [ 1020.664988][ T1183] team0 (unregistering): Port device team_slave_1 removed [ 1020.788138][T11748] fuse: Bad value for 'rootmode' [ 1021.655206][T11749] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1022.593244][ T977] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1022.746024][ T977] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1022.746056][ T977] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1022.747963][ T977] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1022.747991][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1022.748012][ T977] usb 2-1: SerialNumber: syz [ 1022.960280][ T1183] team0 (unregistering): Port device team_slave_0 removed [ 1023.042858][ T977] usb 2-1: invalid UAC_HEADER (v1) [ 1023.104133][ T977] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1023.106264][ T977] usb 2-1: USB disconnect, device number 66 [ 1023.233312][ T10] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1023.421349][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 1023.428931][ T10] usb 1-1: config 8 has an invalid interface number: 160 but max is 0 [ 1023.428949][ T10] usb 1-1: config 8 has no interface number 0 [ 1023.428973][ T10] usb 1-1: config 8 interface 160 has no altsetting 0 [ 1023.431941][ T10] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=82.ee [ 1023.431964][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1023.431975][ T10] usb 1-1: Product: syz [ 1023.431984][ T10] usb 1-1: Manufacturer: syz [ 1023.431992][ T10] usb 1-1: SerialNumber: syz [ 1024.578983][T11480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.579046][T11480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.579124][T11480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1028.100751][ T10] usb 1-1: Invalid firmware size=18. [ 1028.111325][ T10] usb 1-1: USB disconnect, device number 66 [ 1035.727010][T11790] fuse: Bad value for 'rootmode' [ 1037.325033][T11793] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1413'. [ 1037.438988][ T9454] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1037.454772][ T9454] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1037.456280][ T9454] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1037.457961][ T9454] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1037.458974][ T9454] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1037.805303][ T5814] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1037.922728][T11802] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1038.024548][ T5814] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1038.085373][ T5814] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1038.122459][ T5814] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1038.138399][ T5814] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1039.050167][ T5925] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1039.173261][ T5790] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1039.206306][ T5925] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1039.206328][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1039.232895][ T5925] usb 1-1: config 0 descriptor?? [ 1039.241621][ T5925] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1039.373279][ T5790] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1039.373298][ T5790] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1039.377062][ T5790] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1039.377083][ T5790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1039.377094][ T5790] usb 2-1: SerialNumber: syz [ 1039.656688][ T5925] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 1039.771781][ T5790] usb 2-1: invalid UAC_HEADER (v1) [ 1039.919248][ T5814] Bluetooth: hci5: command tx timeout [ 1040.749133][ T5814] Bluetooth: hci6: command tx timeout [ 1040.761547][ T5925] gspca_cpia1: usb_control_msg 02, error -71 [ 1040.762223][ T5925] gspca_cpia1: usb_control_msg 05, error -71 [ 1040.762238][ T5925] cpia1 1-1:0.0: unexpected systemstate: 00 [ 1040.784708][ T5925] usb 1-1: USB disconnect, device number 67 [ 1040.817176][ T5790] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1040.819123][ T5790] usb 2-1: USB disconnect, device number 67 [ 1041.993308][ T5814] Bluetooth: hci5: command tx timeout [ 1042.135885][T11817] random: crng reseeded on system resumption [ 1042.223401][ T1183] bridge_slave_1: left allmulticast mode [ 1042.223436][ T1183] bridge_slave_1: left promiscuous mode [ 1042.223741][ T1183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1042.228324][T11821] loop2: detected capacity change from 0 to 7 [ 1042.243962][T11821] Dev loop2: unable to read RDB block 7 [ 1042.244006][T11821] loop2: unable to read partition table [ 1042.244242][T11821] loop2: partition table beyond EOD, truncated [ 1042.244260][T11821] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1042.359251][ T1183] bridge_slave_0: left allmulticast mode [ 1042.359284][ T1183] bridge_slave_0: left promiscuous mode [ 1042.360627][ T1183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.794579][ T5814] Bluetooth: hci6: command tx timeout [ 1042.916569][ T1183] bridge_slave_1: left allmulticast mode [ 1042.916605][ T1183] bridge_slave_1: left promiscuous mode [ 1042.916904][ T1183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.850159][T11832] Can't find ip_set type hash:ne [ 1045.081063][ T5814] Bluetooth: hci5: command tx timeout [ 1045.081212][ T5814] Bluetooth: hci6: command tx timeout [ 1045.201995][ T1183] bridge_slave_0: left allmulticast mode [ 1045.202026][ T1183] bridge_slave_0: left promiscuous mode [ 1045.202278][ T1183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.430684][T11848] Process accounting resumed [ 1046.525799][ T1183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.674985][ T1183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.788948][ T1183] bond0 (unregistering): Released all slaves [ 1047.073342][ T7351] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1047.112118][ T1183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.113341][ T9454] Bluetooth: hci6: command tx timeout [ 1047.113372][ T9454] Bluetooth: hci5: command tx timeout [ 1047.193758][ T5946] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1047.225819][ T7351] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1047.225849][ T7351] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1047.227508][ T7351] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1047.227536][ T7351] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1047.227556][ T7351] usb 3-1: SerialNumber: syz [ 1047.290960][ T1183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.365898][ T5946] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1047.365932][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.372264][ T1183] bond0 (unregistering): Released all slaves [ 1047.402449][ T5946] usb 2-1: config 0 descriptor?? [ 1047.417555][ T5946] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1047.465143][ T7351] usb 3-1: invalid UAC_HEADER (v1) [ 1047.606808][ T7351] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 1047.624573][ T7351] usb 3-1: USB disconnect, device number 58 [ 1047.818372][ T5946] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 1048.195064][ T1183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1048.244831][ T5946] gspca_cpia1: usb_control_msg 02, error -71 [ 1048.245288][ T5946] gspca_cpia1: usb_control_msg 05, error -71 [ 1048.245304][ T5946] cpia1 2-1:0.0: unexpected systemstate: 00 [ 1048.248879][ T5946] usb 2-1: USB disconnect, device number 68 [ 1048.283590][ T1183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1048.804829][T11863] random: crng reseeded on system resumption [ 1048.923248][ T1183] hsr_slave_0: left promiscuous mode [ 1048.963294][ T1183] hsr_slave_1: left promiscuous mode [ 1048.964390][ T1183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1049.004378][ T1183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1050.089682][T11870] Can't find ip_set type hash:ne [ 1050.654850][ T1183] team0 (unregistering): Port device team_slave_1 removed [ 1050.772774][T11881] Process accounting resumed [ 1050.824133][ T1183] team0 (unregistering): Port device team_slave_0 removed [ 1050.853208][ T5946] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1051.989069][ T5946] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1051.989119][ T5946] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1051.989143][ T5946] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.020028][ T5946] usb 3-1: config 0 descriptor?? [ 1053.741225][ T5946] (null): keene_cmd_main failed (-110) [ 1053.745536][ T5946] video4linux radio48: keene_cmd_main failed (-32) [ 1053.745557][ T5946] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 1053.895678][T11897] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1440'. [ 1053.936845][T11899] loop2: detected capacity change from 0 to 7 [ 1053.938576][T11899] Dev loop2: unable to read RDB block 7 [ 1053.938623][T11899] loop2: unable to read partition table [ 1053.938884][T11899] loop2: partition table beyond EOD, truncated [ 1053.938904][T11899] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1054.719572][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.719656][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.784023][ T1183] team0 (unregistering): Port device team_slave_1 removed [ 1054.936889][ T7351] usb 3-1: USB disconnect, device number 59 [ 1055.074124][ T1183] team0 (unregistering): Port device team_slave_0 removed [ 1056.071850][T11913] Can't find ip_set type hash:ne [ 1057.884983][T11796] chnl_net:caif_netlink_parms(): no params data found [ 1057.996505][T11799] chnl_net:caif_netlink_parms(): no params data found [ 1061.163216][ T1017] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1061.316054][ T1017] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1061.316102][ T1017] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1061.316126][ T1017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1061.322738][ T1017] usb 3-1: config 0 descriptor?? [ 1062.616650][ T1017] (null): keene_cmd_main failed (-110) [ 1063.401892][ T1017] video4linux radio48: keene_cmd_main failed (-32) [ 1063.401924][ T1017] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 1063.679009][T11796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.679236][T11796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.679477][T11796] bridge_slave_0: entered allmulticast mode [ 1063.681368][T11962] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1456'. [ 1063.682656][T11796] bridge_slave_0: entered promiscuous mode [ 1063.763792][T11796] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.763932][T11796] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.764149][T11796] bridge_slave_1: entered allmulticast mode [ 1063.767869][T11796] bridge_slave_1: entered promiscuous mode [ 1064.051742][ T5925] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1064.706093][ T977] usb 3-1: USB disconnect, device number 60 [ 1064.711228][ T5925] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.711256][ T5925] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1064.759573][ T5925] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1064.759607][ T5925] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1064.759628][ T5925] usb 1-1: SerialNumber: syz [ 1065.059660][ T5925] usb 1-1: 0:2 : does not exist [ 1065.089795][ T5925] usb 1-1: USB disconnect, device number 68 [ 1065.139021][T11799] bridge0: port 1(bridge_slave_0) entered blocking state [ 1065.139261][T11799] bridge0: port 1(bridge_slave_0) entered disabled state [ 1065.139495][T11799] bridge_slave_0: entered allmulticast mode [ 1065.176246][T11799] bridge_slave_0: entered promiscuous mode [ 1065.407994][T11799] bridge0: port 2(bridge_slave_1) entered blocking state [ 1065.410052][T11799] bridge0: port 2(bridge_slave_1) entered disabled state [ 1065.437839][T11799] bridge_slave_1: entered allmulticast mode [ 1065.838460][T11799] bridge_slave_1: entered promiscuous mode [ 1066.023582][T11796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1066.291940][T11796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1066.953565][T11991] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1465'. [ 1067.057164][T11799] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1067.363785][T11799] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1067.523209][ T977] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1067.536342][T11796] team0: Port device team_slave_0 added [ 1067.791927][ T977] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1067.792167][ T977] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1067.792220][ T977] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1068.447452][ T977] usb 2-1: config 0 descriptor?? [ 1068.600590][T11796] team0: Port device team_slave_1 added [ 1069.901845][ T977] (null): keene_cmd_main failed (-110) [ 1069.922605][ T977] video4linux radio48: keene_cmd_main failed (-32) [ 1069.922625][ T977] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 1070.041891][T11799] team0: Port device team_slave_0 added [ 1070.262110][T12006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1469'. [ 1070.779005][T11799] team0: Port device team_slave_1 added [ 1070.782198][T11796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.782218][T11796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1070.782247][T11796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1071.053232][ T977] usb 2-1: USB disconnect, device number 69 [ 1071.208503][T11796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1071.208522][T11796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1071.208551][T11796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1071.805330][T12016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1471'. [ 1072.834302][T11799] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.834321][T11799] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.834351][T11799] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.857545][T11799] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.857566][T11799] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1072.857594][T11799] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.411400][T11796] hsr_slave_0: entered promiscuous mode [ 1073.421028][T11796] hsr_slave_1: entered promiscuous mode [ 1073.422541][T11796] debugfs: 'hsr0' already exists in 'hsr' [ 1073.422570][T11796] Cannot create hsr debugfs directory [ 1075.206381][T12043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1480'. [ 1076.185878][T11799] hsr_slave_0: entered promiscuous mode [ 1076.195882][T11799] hsr_slave_1: entered promiscuous mode [ 1076.204135][T11799] debugfs: 'hsr0' already exists in 'hsr' [ 1076.204184][T11799] Cannot create hsr debugfs directory [ 1079.085419][T12075] loop2: detected capacity change from 0 to 7 [ 1079.086696][T12075] Dev loop2: unable to read RDB block 7 [ 1079.086740][T12075] loop2: unable to read partition table [ 1079.087009][T12075] loop2: partition table beyond EOD, truncated [ 1079.087030][T12075] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1080.841693][T12092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1493'. [ 1081.243354][ T7351] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1081.415672][ T7351] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1081.415694][ T7351] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1081.444496][ T7351] usb 1-1: config 0 descriptor?? [ 1081.756550][ T7351] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1082.114749][ T7351] cpia1 1-1:0.0: unexpected state after lo power cmd: 00 [ 1082.550449][ T7351] gspca_cpia1: usb_control_msg 02, error -71 [ 1082.550905][ T7351] gspca_cpia1: usb_control_msg 05, error -71 [ 1082.550919][ T7351] cpia1 1-1:0.0: unexpected systemstate: 00 [ 1082.574395][ T7351] usb 1-1: USB disconnect, device number 69 [ 1083.192621][T12106] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1498'. [ 1083.402895][T12108] loop2: detected capacity change from 0 to 7 [ 1083.411548][T12108] Dev loop2: unable to read RDB block 7 [ 1083.411578][T12108] loop2: unable to read partition table [ 1083.411724][T12108] loop2: partition table beyond EOD, truncated [ 1083.411736][T12108] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1083.500342][T11796] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1083.560718][T11796] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1083.641653][T11796] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1084.012845][T12114] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1501'. [ 1084.202368][T11796] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1084.843452][T11796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1084.881031][T11796] 8021q: adding VLAN 0 to HW filter on device team0 [ 1084.908605][ T1183] bridge0: port 1(bridge_slave_0) entered blocking state [ 1084.908837][ T1183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1084.951836][ T1183] bridge0: port 2(bridge_slave_1) entered blocking state [ 1084.952086][ T1183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1085.233569][T11796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1088.503280][ T1017] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 1088.688832][ T1017] usb 2-1: config 1 has an invalid interface number: 5 but max is 2 [ 1088.688862][ T1017] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1088.688881][ T1017] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1088.688902][ T1017] usb 2-1: config 1 has no interface number 1 [ 1088.688953][ T1017] usb 2-1: config 1 interface 5 has no altsetting 0 [ 1088.690512][ T1017] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1088.690540][ T1017] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1088.690559][ T1017] usb 2-1: SerialNumber: syz [ 1088.950780][ T1017] usb 2-1: 0:2 : does not exist [ 1089.007614][ T1017] usb 2-1: USB disconnect, device number 70 [ 1089.102586][ T9454] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1089.121197][ T9454] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1089.122807][ T9454] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1089.132784][ T9454] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1089.133804][ T9454] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1089.845671][T12148] chnl_net:caif_netlink_parms(): no params data found [ 1090.079111][T12160] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1508'. [ 1091.904148][T12170] loop2: detected capacity change from 0 to 7 [ 1091.909002][T12170] Dev loop2: unable to read RDB block 7 [ 1091.909052][T12170] loop2: unable to read partition table [ 1091.909321][T12170] loop2: partition table beyond EOD, truncated [ 1091.909341][T12170] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1092.195968][ T5814] Bluetooth: hci0: command tx timeout [ 1092.384394][ T9454] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1092.388222][ T9454] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1092.391968][ T9454] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1092.427047][ T9454] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1092.429522][ T9454] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1093.170091][T12148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1093.170250][T12148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.170508][T12148] bridge_slave_0: entered allmulticast mode [ 1093.203797][T12148] bridge_slave_0: entered promiscuous mode [ 1093.301365][T12148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1093.303412][T12148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.319892][T12148] bridge_slave_1: entered allmulticast mode [ 1093.927850][T12148] bridge_slave_1: entered promiscuous mode [ 1094.086033][ T1183] bridge_slave_1: left allmulticast mode [ 1094.086055][ T1183] bridge_slave_1: left promiscuous mode [ 1094.086226][ T1183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1094.134744][T12190] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1515'. [ 1094.175377][ T1183] bridge_slave_0: left allmulticast mode [ 1094.175399][ T1183] bridge_slave_0: left promiscuous mode [ 1094.175586][ T1183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1094.233445][ T5814] Bluetooth: hci0: command tx timeout [ 1094.673245][ T7351] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 1094.692476][ T1183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1094.803936][ T1183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1094.826844][ T7351] usb 2-1: config 1 has an invalid interface number: 5 but max is 2 [ 1094.826864][ T7351] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.826875][ T7351] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1094.826886][ T7351] usb 2-1: config 1 has no interface number 1 [ 1094.826914][ T7351] usb 2-1: config 1 interface 5 has no altsetting 0 [ 1094.827980][ T7351] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1094.827997][ T7351] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1094.828008][ T7351] usb 2-1: SerialNumber: syz [ 1094.953375][ T5814] Bluetooth: hci1: command tx timeout [ 1094.955532][ T1183] bond0 (unregistering): Released all slaves [ 1095.142352][ T7351] usb 2-1: 0:2 : does not exist [ 1095.280131][ T7351] usb 2-1: USB disconnect, device number 71 [ 1095.314059][T12148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1095.319489][T12148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1095.443445][ T1183] hsr_slave_0: left promiscuous mode [ 1095.485098][ T1183] hsr_slave_1: left promiscuous mode [ 1095.486876][ T1183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1095.506875][ T1183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1095.893333][ T1017] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1096.079064][ T1017] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1096.079098][ T1017] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.085384][ T1017] usb 3-1: config 0 descriptor?? [ 1096.091136][ T1017] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1096.096740][T12202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1520'. [ 1096.336002][ T5814] Bluetooth: hci0: command tx timeout [ 1096.519638][ T1017] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1096.574134][ T1183] team0 (unregistering): Port device team_slave_1 removed [ 1096.794181][ T1183] team0 (unregistering): Port device team_slave_0 removed [ 1096.922137][ T1017] gspca_cpia1: usb_control_msg 02, error -71 [ 1096.922155][ T1017] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1096.938254][ T1017] usb 3-1: USB disconnect, device number 61 [ 1096.993255][ T977] usb 2-1: new high-speed USB device number 72 using dummy_hcd [ 1097.043257][ T5814] Bluetooth: hci1: command tx timeout [ 1097.151260][ T977] usb 2-1: Using ep0 maxpacket: 8 [ 1097.154067][ T977] usb 2-1: config 8 has an invalid interface number: 160 but max is 0 [ 1097.154097][ T977] usb 2-1: config 8 has no interface number 0 [ 1097.154135][ T977] usb 2-1: config 8 interface 160 has no altsetting 0 [ 1097.185516][ T977] usb 2-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=82.ee [ 1097.185549][ T977] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1097.185570][ T977] usb 2-1: Product: syz [ 1097.185585][ T977] usb 2-1: Manufacturer: syz [ 1097.185599][ T977] usb 2-1: SerialNumber: syz [ 1098.779575][ T5814] Bluetooth: hci0: command tx timeout [ 1099.136490][ T5814] Bluetooth: hci1: command tx timeout [ 1101.039703][T12148] team0: Port device team_slave_0 added [ 1101.079467][T12148] team0: Port device team_slave_1 added [ 1101.198599][ T5814] Bluetooth: hci1: command tx timeout [ 1101.805188][ T977] usb 2-1: Invalid firmware size=18. [ 1101.828865][ T977] usb 2-1: USB disconnect, device number 72 [ 1102.348951][T12218] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1525'. [ 1102.587222][T12148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1102.587242][T12148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.587268][T12148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1102.624506][T12148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1102.624524][T12148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1102.624548][T12148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1103.222093][T12235] fuse: Unknown parameter 'user_id00000000000000000000' [ 1103.993802][ T10] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1104.145926][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1104.145975][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1104.146000][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1104.154834][ T10] usb 2-1: config 0 descriptor?? [ 1104.342157][T12148] hsr_slave_0: entered promiscuous mode [ 1104.351235][T12148] hsr_slave_1: entered promiscuous mode [ 1104.355240][T12148] debugfs: 'hsr0' already exists in 'hsr' [ 1104.355483][T12148] Cannot create hsr debugfs directory [ 1104.739787][ T10] (null): keene_cmd_main failed (-110) [ 1104.746962][ T10] video4linux radio48: keene_cmd_main failed (-32) [ 1104.746990][ T10] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 1107.093962][ T10] usb 2-1: USB disconnect, device number 73 [ 1107.838073][T12259] random: crng reseeded on system resumption [ 1107.973233][ T10] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1108.418830][T12271] fuse: Unknown parameter 'user_id00000000000000000000' [ 1110.873196][ T10] usb 2-1: device not accepting address 74, error -71 [ 1112.066665][T12285] loop2: detected capacity change from 0 to 7 [ 1112.067762][T12285] Dev loop2: unable to read RDB block 7 [ 1112.067817][T12285] loop2: unable to read partition table [ 1112.068070][T12285] loop2: partition table beyond EOD, truncated [ 1112.068089][T12285] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1112.113200][ T10] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1112.266167][ T10] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1112.266216][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1112.266240][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.272836][ T10] usb 2-1: config 0 descriptor?? [ 1112.578648][T12292] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1113.096230][ T10] (null): keene_cmd_main failed (-110) [ 1113.103436][ T10] video4linux radio48: keene_cmd_main failed (-32) [ 1113.103464][ T10] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 1114.888506][ T10] usb 2-1: USB disconnect, device number 75 [ 1115.359243][T12177] chnl_net:caif_netlink_parms(): no params data found [ 1115.914738][T12305] fuse: Bad value for 'fd' [ 1115.944497][T11967] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1116.795248][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.795333][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.903375][T11967] usb 1-1: Using ep0 maxpacket: 8 [ 1116.907011][T11967] usb 1-1: config 8 has an invalid interface number: 160 but max is 0 [ 1116.907032][T11967] usb 1-1: config 8 has no interface number 0 [ 1116.907052][T11967] usb 1-1: config 8 interface 160 has no altsetting 0 [ 1116.908939][T11967] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=82.ee [ 1116.908956][T11967] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.908967][T11967] usb 1-1: Product: syz [ 1116.908975][T11967] usb 1-1: Manufacturer: syz [ 1116.908983][T11967] usb 1-1: SerialNumber: syz [ 1122.155699][T11967] usb 1-1: Invalid firmware size=18. [ 1122.361154][T11967] usb 1-1: USB disconnect, device number 70 [ 1124.124687][T12334] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1125.239059][T12177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1125.239312][T12177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1125.239570][T12177] bridge_slave_0: entered allmulticast mode [ 1125.358292][T12345] fuse: Bad value for 'fd' [ 1126.246523][T12177] bridge_slave_0: entered promiscuous mode [ 1127.031570][T12177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.031714][T12350] loop2: detected capacity change from 0 to 7 [ 1127.031727][T12177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.031992][T12177] bridge_slave_1: entered allmulticast mode [ 1127.061432][T12177] bridge_slave_1: entered promiscuous mode [ 1127.068732][T12350] Dev loop2: unable to read RDB block 7 [ 1127.068778][T12350] loop2: unable to read partition table [ 1127.069034][T12350] loop2: partition table beyond EOD, truncated [ 1127.069073][T12350] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1128.602279][T12177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.647273][T12177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1129.147233][T12377] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1129.253711][ T977] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1129.311830][T12379] fuse: Bad value for 'fd' [ 1130.056065][ T977] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 1130.056097][ T977] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1130.056137][ T977] usb 3-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 4, skipping [ 1130.056160][ T977] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1130.058556][ T977] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1130.058583][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1130.058603][ T977] usb 3-1: SerialNumber: syz [ 1130.447179][ T977] usb 3-1: 0:2 : does not exist [ 1130.447283][ T977] usb 3-1: unit 5 not found! [ 1130.481150][ T977] usb 3-1: USB disconnect, device number 62 [ 1130.552608][T12177] team0: Port device team_slave_0 added [ 1131.178577][T12177] team0: Port device team_slave_1 added [ 1131.179478][ T1183] bridge_slave_1: left allmulticast mode [ 1131.179505][ T1183] bridge_slave_1: left promiscuous mode [ 1131.179781][ T1183] bridge0: port 2(bridge_slave_1) entered disabled state [ 1131.258470][ T1183] bridge_slave_0: left allmulticast mode [ 1131.258506][ T1183] bridge_slave_0: left promiscuous mode [ 1131.258817][ T1183] bridge0: port 1(bridge_slave_0) entered disabled state [ 1131.467111][T12386] loop2: detected capacity change from 0 to 7 [ 1131.470168][T12386] Dev loop2: unable to read RDB block 7 [ 1131.470215][T12386] loop2: unable to read partition table [ 1131.470484][T12386] loop2: partition table beyond EOD, truncated [ 1131.470504][T12386] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1132.995293][T12397] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1574'. [ 1135.419477][T12411] fuse: Unknown parameter '0x0000000000000006' [ 1139.019066][T12429] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1141.210437][T12446] fuse: Unknown parameter '0x0000000000000006' [ 1142.503252][ T10] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1143.212822][ T10] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1143.212845][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1143.237799][ T10] usb 2-1: config 0 descriptor?? [ 1143.253761][ T10] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1143.674241][ T10] cpia1 2-1:0.0: unexpected state after lo power cmd: 00 [ 1144.079732][ T10] gspca_cpia1: usb_control_msg 02, error -71 [ 1144.079757][ T10] cpia1 2-1:0.0: only firmware version 1 is supported (got: 0) [ 1144.381927][ T10] usb 2-1: USB disconnect, device number 76 [ 1146.276173][ T1183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1146.334438][ T1183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1146.356324][ T1183] bond0 (unregistering): Released all slaves [ 1146.833171][ T1183] hsr_slave_0: left promiscuous mode [ 1146.873548][ T1183] hsr_slave_1: left promiscuous mode [ 1146.874769][ T1183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1147.210340][ T1183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1149.118594][T12484] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1149.213417][ T9454] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1149.260765][ T9454] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1149.265349][ T9454] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1149.268155][ T9454] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1149.276694][ T9454] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1150.283406][ T1017] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1150.433156][ T1017] usb 1-1: Using ep0 maxpacket: 8 [ 1150.440227][ T1017] usb 1-1: config 8 has an invalid interface number: 160 but max is 0 [ 1150.440261][ T1017] usb 1-1: config 8 has no interface number 0 [ 1150.440297][ T1017] usb 1-1: config 8 interface 160 has no altsetting 0 [ 1150.473403][ T1017] usb 1-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=82.ee [ 1150.473436][ T1017] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1150.473457][ T1017] usb 1-1: Product: syz [ 1150.473471][ T1017] usb 1-1: Manufacturer: syz [ 1150.473486][ T1017] usb 1-1: SerialNumber: syz [ 1151.438787][ T5814] Bluetooth: hci5: command tx timeout [ 1153.433405][ T977] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1153.440065][ T1017] usb 1-1: Invalid firmware size=18. [ 1153.463313][ T1017] usb 1-1: USB disconnect, device number 71 [ 1153.486914][ T9039] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1153.513188][ T5814] Bluetooth: hci5: command tx timeout [ 1153.585754][ T977] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1153.585785][ T977] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.591728][ T977] usb 3-1: config 0 descriptor?? [ 1153.621382][ T977] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1154.152874][ T9039] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1154.152905][ T9039] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1154.152918][ T9039] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.165784][ T9039] usb 2-1: config 0 descriptor?? [ 1154.207404][ T1183] team0 (unregistering): Port device team_slave_1 removed [ 1154.341261][ T977] cpia1 3-1:0.0: unexpected state after lo power cmd: 00 [ 1154.474554][ T9454] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1154.495959][ T9454] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1154.498944][ T9454] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1154.510017][ T9454] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1154.515831][ T9454] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1154.891620][ T9039] (null): keene_cmd_main failed (-110) [ 1154.919417][ T977] gspca_cpia1: usb_control_msg 02, error -71 [ 1154.919434][ T977] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0) [ 1154.921788][ T977] usb 3-1: USB disconnect, device number 63 [ 1154.960291][ T9039] video4linux radio48: keene_cmd_main failed (-32) [ 1154.960321][ T9039] radio-keene 2-1:0.0: V4L2 device registered as radio48 [ 1154.980872][ T9039] usb 2-1: USB disconnect, device number 77 [ 1155.524145][ T1183] team0 (unregistering): Port device team_slave_0 removed [ 1155.641835][ T5814] Bluetooth: hci5: command tx timeout [ 1156.691657][ T5814] Bluetooth: hci6: command tx timeout [ 1158.541076][ T5814] Bluetooth: hci5: command tx timeout [ 1159.028140][ T5814] Bluetooth: hci6: command tx timeout [ 1159.051449][T12523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1161.179377][ T5814] Bluetooth: hci6: command tx timeout [ 1163.124033][T12500] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1163.246562][ T5814] Bluetooth: hci6: command tx timeout [ 1164.734109][T12500] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1164.734243][T12500] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1164.734298][T12500] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.906053][T12500] usb 3-1: config 0 descriptor?? [ 1165.757076][T12500] (null): keene_cmd_main failed (-110) [ 1165.790437][T12500] video4linux radio48: keene_cmd_main failed (-32) [ 1165.790808][T12500] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 1166.403280][ T9039] usb 3-1: USB disconnect, device number 64 [ 1166.530248][ C1] vkms_vblank_simulate: vblank timer overrun [ 1166.778987][T12561] loop2: detected capacity change from 0 to 7 [ 1166.780486][T12561] Dev loop2: unable to read RDB block 7 [ 1166.780532][T12561] loop2: unable to read partition table [ 1166.780791][T12561] loop2: partition table beyond EOD, truncated [ 1166.780811][T12561] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1166.919666][ C1] vkms_vblank_simulate: vblank timer overrun [ 1170.281098][ C0] vkms_vblank_simulate: vblank timer overrun [ 1170.386308][ C0] vkms_vblank_simulate: vblank timer overrun [ 1170.493915][ C0] vkms_vblank_simulate: vblank timer overrun [ 1170.601901][ C0] vkms_vblank_simulate: vblank timer overrun [ 1170.697529][ C0] vkms_vblank_simulate: vblank timer overrun [ 1170.981548][ C0] vkms_vblank_simulate: vblank timer overrun [ 1171.064559][T12577] CIFS mount error: No usable UNC path provided in device string! [ 1171.064559][T12577] [ 1171.064583][T12577] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1171.305963][ C0] vkms_vblank_simulate: vblank timer overrun [ 1171.385350][ C0] vkms_vblank_simulate: vblank timer overrun [ 1171.395375][T12500] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1171.434861][ C0] vkms_vblank_simulate: vblank timer overrun [ 1171.546551][T12500] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1171.546600][T12500] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1171.546625][T12500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.559106][T12500] usb 1-1: config 0 descriptor?? [ 1171.763779][ C0] vkms_vblank_simulate: vblank timer overrun [ 1171.890418][ C0] vkms_vblank_simulate: vblank timer overrun [ 1172.152532][ C0] vkms_vblank_simulate: vblank timer overrun [ 1173.368699][ C0] vkms_vblank_simulate: vblank timer overrun [ 1173.403337][ C0] vkms_vblank_simulate: vblank timer overrun [ 1173.427728][T12500] (null): keene_cmd_main failed (-110) [ 1173.430028][T12500] video4linux radio48: keene_cmd_main failed (-32) [ 1173.430046][T12500] radio-keene 1-1:0.0: V4L2 device registered as radio48 [ 1173.556723][ C0] vkms_vblank_simulate: vblank timer overrun [ 1173.629167][ C0] vkms_vblank_simulate: vblank timer overrun [ 1173.687174][ C0] vkms_vblank_simulate: vblank timer overrun [ 1174.022885][ C0] vkms_vblank_simulate: vblank timer overrun [ 1174.135081][ C0] vkms_vblank_simulate: vblank timer overrun [ 1174.507703][ C0] vkms_vblank_simulate: vblank timer overrun [ 1174.513359][T12500] usb 1-1: USB disconnect, device number 72 [ 1174.624380][ C0] vkms_vblank_simulate: vblank timer overrun [ 1174.763383][ C0] vkms_vblank_simulate: vblank timer overrun [ 1175.063349][ C0] vkms_vblank_simulate: vblank timer overrun [ 1175.165991][ C0] vkms_vblank_simulate: vblank timer overrun [ 1177.989514][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.989566][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1179.743260][ T10] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1179.841988][T12177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1179.842001][T12177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1179.842017][T12177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1179.921853][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1179.921900][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1179.921925][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.995254][ T10] usb 3-1: config 0 descriptor?? [ 1180.583421][ T10] (null): keene_cmd_main failed (-110) [ 1180.731130][ T10] video4linux radio48: keene_cmd_main failed (-32) [ 1180.731436][ T10] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 1182.899503][ T5790] usb 3-1: USB disconnect, device number 65 [ 1183.229769][T12651] overlayfs: failed to resolve './file1': -2 [ 1188.336227][ C0] vkms_vblank_simulate: vblank timer overrun [ 1188.475484][ C0] vkms_vblank_simulate: vblank timer overrun [ 1188.576173][ C0] vkms_vblank_simulate: vblank timer overrun [ 1188.632732][ C0] vkms_vblank_simulate: vblank timer overrun [ 1188.682152][T12677] binder: 12676:12677 ioctl c0306201 2000000003c0 returned -14 [ 1188.726493][ C0] vkms_vblank_simulate: vblank timer overrun [ 1188.893317][ T10] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 1189.378634][ C0] vkms_vblank_simulate: vblank timer overrun [ 1189.751070][T12690] CIFS mount error: No usable UNC path provided in device string! [ 1189.751070][T12690] [ 1189.751094][T12690] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1190.224330][ C0] vkms_vblank_simulate: vblank timer overrun [ 1190.381133][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1190.381189][ T10] usb 3-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 1190.381214][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.448407][ T10] usb 3-1: config 0 descriptor?? [ 1190.880439][ C0] vkms_vblank_simulate: vblank timer overrun [ 1190.906057][ C0] vkms_vblank_simulate: vblank timer overrun [ 1190.968405][ C0] vkms_vblank_simulate: vblank timer overrun [ 1191.077575][ C0] vkms_vblank_simulate: vblank timer overrun [ 1191.123128][ T10] (null): keene_cmd_main failed (-110) [ 1191.176514][ C0] vkms_vblank_simulate: vblank timer overrun [ 1191.710935][ C0] vkms_vblank_simulate: vblank timer overrun [ 1191.747147][ C0] vkms_vblank_simulate: vblank timer overrun [ 1191.775876][ C0] vkms_vblank_simulate: vblank timer overrun [ 1191.867857][ C0] vkms_vblank_simulate: vblank timer overrun [ 1192.011812][ C0] vkms_vblank_simulate: vblank timer overrun [ 1192.312932][ C0] vkms_vblank_simulate: vblank timer overrun [ 1192.578143][ C0] vkms_vblank_simulate: vblank timer overrun [ 1192.594537][ T10] video4linux radio48: keene_cmd_main failed (-71) [ 1192.594567][ T10] radio-keene 3-1:0.0: V4L2 device registered as radio48 [ 1192.599403][ T10] usb 3-1: USB disconnect, device number 66 [ 1192.632671][T12697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1664'. [ 1192.800632][T12708] overlayfs: failed to resolve './file1': -2 [ 1192.854199][T12505] chnl_net:caif_netlink_parms(): no params data found [ 1194.767199][T12485] chnl_net:caif_netlink_parms(): no params data found [ 1195.017299][T12728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1195.075722][T12728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1195.082662][T12728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1195.181872][T12729] netlink: 'syz.1.1672': attribute type 10 has an invalid length. [ 1196.510763][T12728] warning: `syz.1.1672' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1196.573223][ T10] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 1196.592517][T12729] ------------[ cut here ]------------ [ 1196.592529][T12729] WARNING: CPU: 1 PID: 12729 at net/wireless/scan.c:1194 cfg80211_scan_done+0x2f3/0x480 [ 1196.592560][T12729] Modules linked in: [ 1196.592573][T12729] CPU: 1 UID: 0 PID: 12729 Comm: syz.1.1672 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1196.592588][T12729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1196.592594][T12729] RIP: 0010:cfg80211_scan_done+0x2f3/0x480 [ 1196.592612][T12729] Code: 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c2 55 b1 00 cc e8 5c 14 ac f7 90 0f 0b 90 e9 07 fe ff ff e8 4e 14 ac f7 90 <0f> 0b 90 e9 d7 fe ff ff e8 40 14 ac f7 c6 05 cf c6 ad 04 01 90 48 [ 1196.592622][T12729] RSP: 0018:ffffc9000423e5a0 EFLAGS: 00010287 [ 1196.592633][T12729] RAX: ffffffff8a12a9b2 RBX: ffff88802130c618 RCX: 0000000000080000 [ 1196.592642][T12729] RDX: ffffc900126e3000 RSI: 0000000000000b11 RDI: 0000000000000b12 [ 1196.592649][T12729] RBP: ffffc9000423e678 R08: 0000000000000000 R09: 0000000000000000 [ 1196.592656][T12729] R10: dffffc0000000000 R11: fffffbfff1dac52f R12: ffff88802130c600 [ 1196.592665][T12729] R13: ffff88802130c678 R14: dffffc0000000000 R15: ffff88805e100860 [ 1196.592673][T12729] FS: 00007fa6457916c0(0000) GS:ffff888126efc000(0000) knlGS:0000000000000000 [ 1196.592683][T12729] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1196.592691][T12729] CR2: 000000110c2be727 CR3: 0000000060da0000 CR4: 00000000003526f0 [ 1196.592704][T12729] Call Trace: [ 1196.592711][T12729] [ 1196.592722][T12729] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 1196.592746][T12729] __ieee80211_scan_completed+0x550/0xb40 [ 1196.592766][T12729] ieee80211_do_stop+0x209/0x1fc0 [ 1196.592787][T12729] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1196.592803][T12729] ? lockdep_hardirqs_on+0x9c/0x150 [ 1196.592818][T12729] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 1196.592832][T12729] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1196.592854][T12729] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1196.592865][T12729] ? rt_spin_lock+0x1c1/0x3e0 [ 1196.592881][T12729] ? rt_spin_unlock+0x150/0x200 [ 1196.592896][T12729] ? rt_spin_unlock+0x161/0x200 [ 1196.592909][T12729] ieee80211_stop+0x1b1/0x240 [ 1196.592923][T12729] ? __pfx_ieee80211_stop+0x10/0x10 [ 1196.592938][T12729] __dev_close_many+0x364/0x6f0 [ 1196.592987][T12729] ? __pfx___dev_close_many+0x10/0x10 [ 1196.593073][T12729] ? rt_spin_unlock+0x161/0x200 [ 1196.593098][T12729] ? dev_set_rx_mode+0x4d/0x300 [ 1196.593118][T12729] ? dev_set_rx_mode+0x244/0x300 [ 1196.593141][T12729] __dev_change_flags+0x2c7/0x6d0 [ 1196.593167][T12729] ? finish_task_switch+0x32f/0x950 [ 1196.593296][T12729] ? __pfx___dev_change_flags+0x10/0x10 [ 1196.593336][T12729] ? __schedule+0x1709/0x4c20 [ 1196.593365][T12729] netif_change_flags+0x88/0x1a0 [ 1196.593393][T12729] do_setlink+0xc55/0x41c0 [ 1196.593486][T12729] ? __pfx_do_setlink+0x10/0x10 [ 1196.593511][T12729] ? do_raw_spin_unlock+0x122/0x240 [ 1196.593542][T12729] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1196.593591][T12729] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1196.593620][T12729] ? lockdep_hardirqs_on+0x9c/0x150 [ 1196.593651][T12729] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1196.593679][T12729] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1196.593721][T12729] ? rt_mutex_slowlock+0x3de/0x6e0 [ 1196.593746][T12729] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1196.593767][T12729] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1196.593792][T12729] ? __lock_acquire+0xab9/0xd20 [ 1196.593844][T12729] ? rtnl_newlink+0x8e9/0x1c80 [ 1196.593888][T12729] ? safesetid_security_capable+0xa9/0x1a0 [ 1196.593926][T12729] ? bpf_lsm_capable+0x9/0x20 [ 1196.593948][T12729] ? security_capable+0x7e/0x2e0 [ 1196.593981][T12729] ? mutex_lock_nested+0x16a/0x1d0 [ 1196.594007][T12729] rtnl_newlink+0x1619/0x1c80 [ 1196.594038][T12729] ? netlink_deliver_tap+0x19c/0x1b0 [ 1196.594076][T12729] ? __pfx_rtnl_newlink+0x10/0x10 [ 1196.594128][T12729] ? __local_bh_enable+0x27b/0x410 [ 1196.594161][T12729] ? __local_bh_enable+0x28c/0x410 [ 1196.594186][T12729] ? reacquire_held_locks+0x127/0x1d0 [ 1196.594219][T12729] ? __pfx___local_bh_enable+0x10/0x10 [ 1196.594255][T12729] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 1196.594283][T12729] ? lockdep_hardirqs_on+0x9c/0x150 [ 1196.594320][T12729] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1196.594345][T12729] ? dev_hard_start_xmit+0x7f5/0x870 [ 1196.594370][T12729] ? __dev_queue_xmit+0x26f/0x3b70 [ 1196.594405][T12729] ? __dev_queue_xmit+0x26f/0x3b70 [ 1196.594432][T12729] ? __dev_queue_xmit+0x26f/0x3b70 [ 1196.594473][T12729] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 1196.594507][T12729] ? __lock_acquire+0xab9/0xd20 [ 1196.594566][T12729] ? __pfx_rtnl_newlink+0x10/0x10 [ 1196.594600][T12729] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1196.594638][T12729] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1196.594670][T12729] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1196.594700][T12729] ? ref_tracker_free+0x61e/0x7c0 [ 1196.594731][T12729] ? __asan_memcpy+0x40/0x70 [ 1196.594755][T12729] ? __pfx_ref_tracker_free+0x10/0x10 [ 1196.594782][T12729] ? __skb_clone+0x63/0x7a0 [ 1196.594827][T12729] netlink_rcv_skb+0x208/0x470 [ 1196.594851][T12729] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1196.594889][T12729] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1196.594925][T12729] ? netlink_deliver_tap+0x2e/0x1b0 [ 1196.594959][T12729] netlink_unicast+0x846/0xa10 [ 1196.595004][T12729] ? __pfx_netlink_unicast+0x10/0x10 [ 1196.595040][T12729] ? netlink_sendmsg+0x642/0xb30 [ 1196.595060][T12729] ? skb_put+0x11b/0x210 [ 1196.595088][T12729] netlink_sendmsg+0x805/0xb30 [ 1196.595123][T12729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1196.595154][T12729] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1196.595181][T12729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1196.595201][T12729] __sock_sendmsg+0x21c/0x270 [ 1196.595235][T12729] ____sys_sendmsg+0x508/0x820 [ 1196.595267][T12729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1196.595302][T12729] ? import_iovec+0x74/0xa0 [ 1196.595331][T12729] ___sys_sendmsg+0x21f/0x2a0 [ 1196.595359][T12729] ? __pfx____sys_sendmsg+0x10/0x10 [ 1196.595432][T12729] ? __fget_files+0x2a/0x420 [ 1196.595477][T12729] ? __fget_files+0x3a6/0x420 [ 1196.595521][T12729] __x64_sys_sendmsg+0x1a1/0x260 [ 1196.595551][T12729] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1196.595593][T12729] ? do_syscall_64+0xbe/0xfa0 [ 1196.595621][T12729] do_syscall_64+0xfa/0xfa0 [ 1196.595644][T12729] ? lockdep_hardirqs_on+0x9c/0x150 [ 1196.595667][T12729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.595687][T12729] ? clear_bhb_loop+0x60/0xb0 [ 1196.595723][T12729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.595744][T12729] RIP: 0033:0x7fa64798efc9 [ 1196.595764][T12729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1196.595783][T12729] RSP: 002b:00007fa645791038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1196.595807][T12729] RAX: ffffffffffffffda RBX: 00007fa647be6270 RCX: 00007fa64798efc9 [ 1196.595821][T12729] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000007 [ 1196.595833][T12729] RBP: 00007fa647a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1196.595841][T12729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1196.595848][T12729] R13: 00007fa647be6308 R14: 00007fa647be6270 R15: 00007ffeca069658 [ 1196.595868][T12729] [ 1196.595876][T12729] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1196.595887][T12729] CPU: 1 UID: 0 PID: 12729 Comm: syz.1.1672 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1196.595909][T12729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1196.595916][T12729] Call Trace: [ 1196.595922][T12729] [ 1196.595927][T12729] dump_stack_lvl+0x99/0x250 [ 1196.595946][T12729] ? __asan_memcpy+0x40/0x70 [ 1196.595960][T12729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1196.595977][T12729] ? __pfx__printk+0x10/0x10 [ 1196.595998][T12729] vpanic+0x237/0x6d0 [ 1196.596010][T12729] ? __pfx_vpanic+0x10/0x10 [ 1196.596027][T12729] panic+0xb9/0xc0 [ 1196.596038][T12729] ? __pfx_panic+0x10/0x10 [ 1196.596058][T12729] __warn+0x31b/0x4b0 [ 1196.596068][T12729] ? cfg80211_scan_done+0x2f3/0x480 [ 1196.596086][T12729] ? cfg80211_scan_done+0x2f3/0x480 [ 1196.596102][T12729] report_bug+0x2be/0x4f0 [ 1196.596116][T12729] ? cfg80211_scan_done+0x2f3/0x480 [ 1196.596131][T12729] ? cfg80211_scan_done+0x2f3/0x480 [ 1196.596147][T12729] ? cfg80211_scan_done+0x2f5/0x480 [ 1196.596162][T12729] handle_bug+0x84/0x160 [ 1196.596178][T12729] exc_invalid_op+0x1a/0x50 [ 1196.596193][T12729] asm_exc_invalid_op+0x1a/0x20 [ 1196.596208][T12729] RIP: 0010:cfg80211_scan_done+0x2f3/0x480 [ 1196.596226][T12729] Code: 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c2 55 b1 00 cc e8 5c 14 ac f7 90 0f 0b 90 e9 07 fe ff ff e8 4e 14 ac f7 90 <0f> 0b 90 e9 d7 fe ff ff e8 40 14 ac f7 c6 05 cf c6 ad 04 01 90 48 [ 1196.596235][T12729] RSP: 0018:ffffc9000423e5a0 EFLAGS: 00010287 [ 1196.596245][T12729] RAX: ffffffff8a12a9b2 RBX: ffff88802130c618 RCX: 0000000000080000 [ 1196.596254][T12729] RDX: ffffc900126e3000 RSI: 0000000000000b11 RDI: 0000000000000b12 [ 1196.596261][T12729] RBP: ffffc9000423e678 R08: 0000000000000000 R09: 0000000000000000 [ 1196.596269][T12729] R10: dffffc0000000000 R11: fffffbfff1dac52f R12: ffff88802130c600 [ 1196.596277][T12729] R13: ffff88802130c678 R14: dffffc0000000000 R15: ffff88805e100860 [ 1196.596290][T12729] ? cfg80211_scan_done+0x2f2/0x480 [ 1196.596314][T12729] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 1196.596336][T12729] __ieee80211_scan_completed+0x550/0xb40 [ 1196.596355][T12729] ieee80211_do_stop+0x209/0x1fc0 [ 1196.596376][T12729] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1196.596391][T12729] ? lockdep_hardirqs_on+0x9c/0x150 [ 1196.596405][T12729] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 1196.596418][T12729] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1196.596439][T12729] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1196.596458][T12729] ? rt_spin_lock+0x1c1/0x3e0 [ 1196.596474][T12729] ? rt_spin_unlock+0x150/0x200 [ 1196.596488][T12729] ? rt_spin_unlock+0x161/0x200 [ 1196.596501][T12729] ieee80211_stop+0x1b1/0x240 [ 1196.596515][T12729] ? __pfx_ieee80211_stop+0x10/0x10 [ 1196.596531][T12729] __dev_close_many+0x364/0x6f0 [ 1196.596550][T12729] ? __pfx___dev_close_many+0x10/0x10 [ 1196.596565][T12729] ? rt_spin_unlock+0x161/0x200 [ 1196.596581][T12729] ? dev_set_rx_mode+0x4d/0x300 [ 1196.596593][T12729] ? dev_set_rx_mode+0x244/0x300 [ 1196.596606][T12729] __dev_change_flags+0x2c7/0x6d0 [ 1196.596620][T12729] ? finish_task_switch+0x32f/0x950 [ 1196.596638][T12729] ? __pfx___dev_change_flags+0x10/0x10 [ 1196.596653][T12729] ? __schedule+0x1709/0x4c20 [ 1196.596668][T12729] netif_change_flags+0x88/0x1a0 [ 1196.596684][T12729] do_setlink+0xc55/0x41c0 [ 1196.596704][T12729] ? __pfx_do_setlink+0x10/0x10 [ 1196.596717][T12729] ? do_raw_spin_unlock+0x122/0x240 [ 1196.596739][T12729] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 1196.596756][T12729] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1196.596771][T12729] ? lockdep_hardirqs_on+0x9c/0x150 [ 1196.596785][T12729] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1196.596799][T12729] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1196.596819][T12729] ? rt_mutex_slowlock+0x3de/0x6e0 [ 1196.596832][T12729] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1196.596844][T12729] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1196.596854][T12729] ? __lock_acquire+0xab9/0xd20 [ 1196.596875][T12729] ? rtnl_newlink+0x8e9/0x1c80 [ 1196.596892][T12729] ? safesetid_security_capable+0xa9/0x1a0 [ 1196.596911][T12729] ? bpf_lsm_capable+0x9/0x20 [ 1196.596923][T12729] ? security_capable+0x7e/0x2e0 [ 1196.596939][T12729] ? mutex_lock_nested+0x16a/0x1d0 [ 1196.596959][T12729] rtnl_newlink+0x1619/0x1c80 [ 1196.596974][T12729] ? netlink_deliver_tap+0x19c/0x1b0 [ 1196.596992][T12729] ? __pfx_rtnl_newlink+0x10/0x10 [ 1196.597018][T12729] ? __local_bh_enable+0x27b/0x410 [ 1196.597034][T12729] ? __local_bh_enable+0x28c/0x410 [ 1196.597047][T12729] ? reacquire_held_locks+0x127/0x1d0 [ 1196.597064][T12729] ? __pfx___local_bh_enable+0x10/0x10 [ 1196.597081][T12729] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 1196.597094][T12729] ? lockdep_hardirqs_on+0x9c/0x150 [ 1196.597112][T12729] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1196.597124][T12729] ? dev_hard_start_xmit+0x7f5/0x870 [ 1196.597137][T12729] ? __dev_queue_xmit+0x26f/0x3b70 [ 1196.597155][T12729] ? __dev_queue_xmit+0x26f/0x3b70 [ 1196.597169][T12729] ? __dev_queue_xmit+0x26f/0x3b70 [ 1196.597185][T12729] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 1196.597210][T12729] ? __lock_acquire+0xab9/0xd20 [ 1196.597238][T12729] ? __pfx_rtnl_newlink+0x10/0x10 [ 1196.597274][T12729] rtnetlink_rcv_msg+0x7cf/0xb70 [ 1196.597293][T12729] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 1196.597310][T12729] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1196.597325][T12729] ? ref_tracker_free+0x61e/0x7c0 [ 1196.597342][T12729] ? __asan_memcpy+0x40/0x70 [ 1196.597354][T12729] ? __pfx_ref_tracker_free+0x10/0x10 [ 1196.597368][T12729] ? __skb_clone+0x63/0x7a0 [ 1196.597387][T12729] netlink_rcv_skb+0x208/0x470 [ 1196.597400][T12729] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1196.597428][T12729] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1196.597452][T12729] ? netlink_deliver_tap+0x2e/0x1b0 [ 1196.597469][T12729] netlink_unicast+0x846/0xa10 [ 1196.597492][T12729] ? __pfx_netlink_unicast+0x10/0x10 [ 1196.597509][T12729] ? netlink_sendmsg+0x642/0xb30 [ 1196.597520][T12729] ? skb_put+0x11b/0x210 [ 1196.597534][T12729] netlink_sendmsg+0x805/0xb30 [ 1196.597551][T12729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1196.597567][T12729] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1196.597582][T12729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1196.597594][T12729] __sock_sendmsg+0x21c/0x270 [ 1196.597613][T12729] ____sys_sendmsg+0x508/0x820 [ 1196.597629][T12729] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1196.597647][T12729] ? import_iovec+0x74/0xa0 [ 1196.597663][T12729] ___sys_sendmsg+0x21f/0x2a0 [ 1196.597677][T12729] ? __pfx____sys_sendmsg+0x10/0x10 [ 1196.597709][T12729] ? __fget_files+0x2a/0x420 [ 1196.597724][T12729] ? __fget_files+0x3a6/0x420 [ 1196.597745][T12729] __x64_sys_sendmsg+0x1a1/0x260 [ 1196.597759][T12729] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1196.597781][T12729] ? do_syscall_64+0xbe/0xfa0 [ 1196.597797][T12729] do_syscall_64+0xfa/0xfa0 [ 1196.597811][T12729] ? lockdep_hardirqs_on+0x9c/0x150 [ 1196.597824][T12729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.597835][T12729] ? clear_bhb_loop+0x60/0xb0 [ 1196.597849][T12729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1196.597860][T12729] RIP: 0033:0x7fa64798efc9 [ 1196.597870][T12729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1196.597885][T12729] RSP: 002b:00007fa645791038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1196.597898][T12729] RAX: ffffffffffffffda RBX: 00007fa647be6270 RCX: 00007fa64798efc9 [ 1196.597906][T12729] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000007 [ 1196.597913][T12729] RBP: 00007fa647a11f91 R08: 0000000000000000 R09: 0000000000000000 [ 1196.597920][T12729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1196.597927][T12729] R13: 00007fa647be6308 R14: 00007fa647be6270 R15: 00007ffeca069658 [ 1196.597945][T12729] [ 1196.598131][T12729] Kernel Offset: disabled