last executing test programs: 6m19.160944326s ago: executing program 32 (id=65): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r2, &(0x7f00000000c0)=""/169, 0xa9) recvfrom$inet_nvme(r2, 0x0, 0x0, 0x40000142, &(0x7f0000000480)=@pppoe={0x18, 0x0, {0x4, @local, 'sit0\x00'}}, 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') r3 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r3, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) 3m7.226366877s ago: executing program 33 (id=457): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x2b) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000002c0)="0f013b9a004800004600c4e193d04436e966b846008ee80f21c40f2204c4c3697c6500d336f01964740a0fc71cbc0f011b", 0x31}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m31.459450693s ago: executing program 2 (id=665): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x138, 0x0, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_NAT={0x10c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x18, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40010}, 0x404c801) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1m30.617818887s ago: executing program 2 (id=666): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x138, 0x0, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_NAT={0x10c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x18, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x4}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x40010}, 0x404c801) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 1m30.304615775s ago: executing program 6 (id=669): sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1ed", 0x37}], 0x1}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe80000000400000000000000000001b000000fb000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14143f000000000000000000000000000004d36c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000008000003000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000200000026bd7000020000100200000000000000000000000400000005000000bd000800b90008000017b100c82c991322bed3035a88000000000000000037341c43eea0c405b03742d572414284a9f0864d5feec5c58c98a1c04a8a06"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m30.292514243s ago: executing program 2 (id=671): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001200)={0x30, r1, 0xe701ac47a3d23ecd, 0x70bd2c, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x30}}, 0x4004000) 1m30.1075103s ago: executing program 2 (id=672): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') 1m30.011018203s ago: executing program 2 (id=673): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e0000000109021200010000000009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, &(0x7f0000000c00)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) 1m29.204690993s ago: executing program 2 (id=676): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) write$tun(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x19) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) r6 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000180)) io_uring_enter(r6, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x10004000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r8, 0x24, &(0x7f0000000000)={0x0, 0x4, 0x5, 0x4001, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) 1m28.991298625s ago: executing program 34 (id=676): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x301880, 0x20d) write$tun(r4, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x19) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'veth1_to_bridge\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0x5c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xe0, 0xf, 0x7fff7ffc}]}) r6 = syz_io_uring_setup(0xefe, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x83, 0x3af}, &(0x7f0000000100), &(0x7f0000000440), &(0x7f0000000180)) io_uring_enter(r6, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x5c}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x10004000) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r8, 0x24, &(0x7f0000000000)={0x0, 0x4, 0x5, 0x4001, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) 1m28.899858793s ago: executing program 6 (id=679): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1m28.681069899s ago: executing program 6 (id=682): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1m28.410546654s ago: executing program 6 (id=684): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') 1m28.086990384s ago: executing program 6 (id=686): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m27.682878316s ago: executing program 0 (id=687): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) 1m27.357951354s ago: executing program 0 (id=689): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m26.94218812s ago: executing program 6 (id=690): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r1, 0x0, &(0x7f0000000340)='d', 0x1, 0xf537}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000300)={0x28, 0x2, r1, 0x0, &(0x7f0000000380)="0810", 0x2, 0x9}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000000440)='/', 0x1, 0xa}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000000400)="ee", 0x1, 0xbe5}) 1m25.400097463s ago: executing program 35 (id=690): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000180)={0x28, 0x4, r1, 0x0, &(0x7f0000000340)='d', 0x1, 0xf537}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000300)={0x28, 0x2, r1, 0x0, &(0x7f0000000380)="0810", 0x2, 0x9}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r1, 0x0, &(0x7f0000000440)='/', 0x1, 0xa}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000000400)="ee", 0x1, 0xbe5}) 1m24.583226085s ago: executing program 5 (id=692): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c05e8fe", 0x1a}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x4001) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/117, 0x75}], 0x1}, 0x40002042) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x268, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m24.501324458s ago: executing program 0 (id=693): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1m24.260426865s ago: executing program 0 (id=695): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(0x0, &(0x7f0000000100)='./file0\x00') 1m24.071007995s ago: executing program 0 (id=696): set_mempolicy(0x3, &(0x7f0000000140)=0x8001, 0x8) r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x2, {0x1}}, 0x18) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000800)="cfb9", 0x2}], 0x1}, 0x80) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x200000000002, r0}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000400)=[{0x0}], 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r4 = epoll_create1(0x80000) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) epoll_wait(r4, 0x0, 0x0, 0x500004) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000100)={'veth1_to_batadv\x00', &(0x7f00000000c0)=@ethtool_rxfh_indir={0x39}}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r7, &(0x7f0000000400)=""/4096, 0xc00) socket$key(0xf, 0x3, 0x2) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000000)={0x28, 0x14, 0x940e2689cab82739, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x12, 0xfa, "4ac2412447060aefadfa61a0b910"}]}, 0x28}}, 0xc8c0) 1m24.066227945s ago: executing program 5 (id=697): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 1m23.095093259s ago: executing program 0 (id=699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 1m22.636161333s ago: executing program 36 (id=699): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) syz_io_uring_setup(0x47a8, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r7, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}}, 0x20040880) sendmmsg$inet6(r4, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @rand_addr=' \x01\x00', 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 1m21.276272789s ago: executing program 5 (id=703): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1m21.142797013s ago: executing program 5 (id=704): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) 1m21.058301901s ago: executing program 5 (id=705): syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) write$tun(0xffffffffffffffff, &(0x7f0000000180)={@void, @void, @mpls={[], @ipv6=@tipc_packet={0x3, 0x6, "621343", 0x9c, 0x6, 0x0, @empty, @mcast1, {[@dstopts={0x2f}, @dstopts={0x33, 0x4, '\x00', [@calipso={0x7, 0x20, {0x2, 0x6, 0x43, 0x668c, [0x8, 0xc, 0x6]}}]}, @routing={0x0, 0x0, 0x2, 0x2}, @srh={0x2, 0x2, 0x4, 0x1, 0x0, 0x50, 0x273, [@mcast1]}, @srh={0x164e56ab029c7285, 0x2, 0x4, 0x1, 0xf9, 0x50, 0x84f5, [@private2={0xfc, 0x2, '\x00', 0x1}]}], @payload_mcast={{{{{{0x2c, 0x0, 0x1, 0x0, 0x0, 0xb, 0x0, 0x2, 0x5, 0x0, 0x57082eceb02ffff2, 0x4, 0x1, 0x1, 0x8, 0x4, 0xa, 0x4e22, 0x4e24}, 0x0, 0x2}, 0x1, 0x4}, 0x2}}}}}}}, 0xc4) 1m20.043222909s ago: executing program 5 (id=706): sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af", 0x6a}], 0x1}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe80000000400000000000000000001b000000fb000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14143f000000000000000000000000000004d36c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000008000003000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000200000026bd7000020000100200000000000000000000000400000005000000bd000800b90008000017b100c82c991322bed3035a88000000000000000037341c43eea0c405b03742d572414284a9f0864d5feec5c58c98a1c04a8a06"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m19.554836059s ago: executing program 37 (id=706): sendmsg$NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x2c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44040) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af", 0x6a}], 0x1}, 0x41) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="c00200001600018000000000000000000000000000bbfe80000000400000000000000000001b000000fb000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac14143f000000000000000000000000000004d36c000000ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000600000000000000000000000000000000008000003000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000200000026bd7000020000100200000000000000000000000400000005000000bd000800b90008000017b100c82c991322bed3035a88000000000000000037341c43eea0c405b03742d572414284a9f0864d5feec5c58c98a1c04a8a06"], 0x2c4}, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1m17.848063284s ago: executing program 3 (id=709): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c", 0x17}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x2, 0x15, 0x4, 0x6, 0x9, 0x0, 0x70bd25, 0x25dfdc00, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x6, @mcast2}}]}, 0x48}}, 0x4001) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/117, 0x75}], 0x1}, 0x40002042) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x268, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m17.628716353s ago: executing program 3 (id=710): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m16.40040516s ago: executing program 3 (id=711): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000040000701feffffff02000000017c0000040042800c00018006000600800a000014000280100014800c0016800800b6008847"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 1m16.2671381s ago: executing program 3 (id=712): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) 1m16.144034779s ago: executing program 3 (id=713): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, {{0x8100, 0x6558, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x5}}}}, 0x36) 1m15.167155215s ago: executing program 3 (id=714): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xf}, &(0x7f0000000180)=0x8) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) 1m14.791606546s ago: executing program 38 (id=714): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xf}, &(0x7f0000000180)=0x8) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, 0x0) 52.90272029s ago: executing program 7 (id=716): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x0, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 49.507335099s ago: executing program 7 (id=717): bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @empty, 0x6}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) r0 = dup(0xffffffffffffffff) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="be", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000003c0)="218f09105b6a", 0x6}], 0x1}}], 0x2, 0x91) 49.354791498s ago: executing program 7 (id=718): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x44}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r2, 0x0, 0x0) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000440), 0x311401, 0x0) capset(0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000f00)={'#! ', './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0xff1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x50) 47.941797649s ago: executing program 7 (id=719): mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', 0x0) 47.618305816s ago: executing program 7 (id=720): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000940)={0x34, &(0x7f0000000680)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000880)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f40)={0x84, &(0x7f0000000740)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 46.547355892s ago: executing program 7 (id=721): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000e0100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) 45.74680123s ago: executing program 39 (id=721): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x44, &(0x7f0000000480)=ANY=[@ANYBLOB="000e0100000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) 16.000188284s ago: executing program 8 (id=759): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x120, 0x0, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_NAT={0x10c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40010}, 0x404c801) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 15.473398564s ago: executing program 9 (id=761): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, 0x0, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) socket$inet_smc(0x2b, 0x1, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r2, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0xa9525000) unlink(&(0x7f0000000140)='./cgroup\x00') syz_open_dev$sndpcmp(0x0, 0x8f1, 0x40c0) ioctl$VIDIOC_S_INPUT(0xffffffffffffffff, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(0xffffffffffffffff, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x40, 0x19ef, 0x4, 0x3, 0x2800, 0x1002800, 0x2, 0xba3, 0x9, 0x0, {0x8, 0xffffffff}, 0xd0, 0x9}}) r3 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$VIDIOC_S_MODULATOR(r3, 0x40445637, &(0x7f0000000180)={0x3, "064c794e4c38cf6a77b9fad058d5bf85b8e28d60c17f327bf3f70f5b13b8e130", 0x4, 0xffff, 0x7f, 0x4, 0x2}) syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x6, 0x2, 0x40, 0x6, 0x2, 0xf8}, {0x9, 0x5, 0xe, 0x2, 0x60, 0x2, 0xb, 0x5}, {0x9, 0x5, 0xc, 0x3, 0x20, 0xc, 0xf2, 0x9}}}}}}]}}, 0x0) 14.371348491s ago: executing program 8 (id=763): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x404c801) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 13.506911382s ago: executing program 8 (id=766): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) 13.209933474s ago: executing program 8 (id=767): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x0, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.298935556s ago: executing program 9 (id=770): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004", 0x156}, {&(0x7f0000000bc0)="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", 0x1c3}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615", 0x9e}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 10.253877921s ago: executing program 4 (id=771): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xe, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x40, 0x6, 0x2c, {0x2c, 0x2, "0f5f671678b79b78f67b27e7cea3c7e53f70473860b319bcaccf35505dd72ba311d33a87a984f3787c83"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.663296684s ago: executing program 9 (id=772): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)={0x120, 0x0, 0x2, 0x3, 0x0, 0x0, {0x7, 0x0, 0x9}, [@CTA_EXPECT_NAT={0x10c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x68, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xa010101}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x88, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010102}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x40010}, 0x404c801) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 9.382647952s ago: executing program 8 (id=773): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x84, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xf8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xe, 0x70}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x40, 0x6, 0x2, {0x2, 0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 8.852446291s ago: executing program 1 (id=774): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff3c, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r5, 0x4004550c, &(0x7f0000000380)) 8.07391541s ago: executing program 1 (id=775): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081064e81f782db4cb904021d0800fe067c", 0x17}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$key(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x2, 0x15, 0x4, 0x6, 0x9, 0x0, 0x70bd25, 0x25dfdc00, [@sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e23, @multicast2}, @in6={0xa, 0x4e24, 0x6, @mcast2}}]}, 0x48}}, 0x4001) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)=""/117, 0x75}], 0x1}, 0x40002042) ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x0, [{0x3, 0x268, 0x6, &(0x7f0000000640)="7a650e526bd0998268bb5847d9beacc47a22df873eab4b8b91133675482eaa56ace8db59bed9aa07d4e390c7c9f98c462b55612196911e3c4e510ede3efde35eec990f22a76cf752e507c1e2de"}, {0x2, 0x0, 0x1ff, 0x0}, {0x3, 0x0, 0x9, 0x0}, {0x0, 0x0, 0xfffffff8, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40003, 0x0}, {0x2, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x10000004, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0xa3a, 0x0}, {0x3, 0x0, 0x3, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x1545, 0x0}, {0x1, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 7.667255945s ago: executing program 9 (id=776): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8000}}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}, {0x2c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xd4}}, 0x0) 7.289793418s ago: executing program 9 (id=777): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={0x0}) 7.264157621s ago: executing program 4 (id=778): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x4, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.899287769s ago: executing program 4 (id=779): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xffffffff, 0xe000, 0x0, 0x77, 0x0, 0x3, 0xcb, 0x2, 0x0, 0x6, 0x6}, {0xeeee0000, 0x9000, 0x3, 0xd, 0x2, 0x0, 0x0, 0xff, 0x7, 0x0, 0x3}, {0xeeee0000, 0x1000, 0x0, 0x0, 0x7, 0xc4, 0x40, 0x1, 0x45, 0x3, 0x4, 0xfc}, {0x1, 0x0, 0x9, 0x4, 0x81, 0x0, 0x9, 0x0, 0x3, 0x0, 0x9}, {0x0, 0xffff1000, 0x3, 0x4, 0x0, 0x4, 0x0, 0x6, 0x2, 0x34, 0x4}, {0xffff1000, 0x1, 0x0, 0x78, 0x8, 0x0, 0x2, 0x1c, 0xa3, 0xff, 0x5}, {0xeeee8000, 0x80a0000, 0x8, 0x4, 0x0, 0x0, 0x7, 0x20}, {0x0, 0x6000, 0xa, 0x0, 0xa4, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0xfe}, {0x80a0000, 0x3}, {0x3000, 0xfffd}, 0xddf8ffdb, 0x0, 0x0, 0x120, 0x0, 0xf801, 0xdddd1000, [0x8080000001, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.76523441s ago: executing program 1 (id=780): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000101c1b021b00000000000109022400010000400009040000010300400009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x20, 0x21, 0x8, {0x8, 0x6, "23dcea902e83"}}, &(0x7f0000000200)={0x0, 0x3, 0x18, @string={0x18, 0x3, "2c014992d498b3a634c5129ffd2f851dc06df361b4a1"}}, 0x0, 0x0, 0x0}, 0x0) 6.045103665s ago: executing program 4 (id=781): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', 0x0, 0x0, 0x141091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r3, &(0x7f00000000c0)=""/169, 0xa9) recvfrom$inet_nvme(r3, 0x0, 0x0, 0x40000142, &(0x7f0000000480)=@pppoe={0x18, 0x0, {0x4, @local, 'sit0\x00'}}, 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') r4 = socket(0xa, 0x2, 0x0) setsockopt$inet_int(r4, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r4, 0x0, 0xffe5, 0xe000, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) 3.773732176s ago: executing program 9 (id=782): r0 = syz_usb_connect$uac1(0x0, 0xac, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029a0003010000000904000000010100000a24010000000201020c24020000000000000800000524050000082407000000009e0c240700000000a3"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000740)={0x0, 0x3, 0x2, "b23b"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.677730273s ago: executing program 8 (id=783): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000000)=""/188) 2.490483687s ago: executing program 4 (id=784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0xffffffffffffff3c, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000010880)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000010400)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r1}, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = syz_open_dev$usbfs(0x0, 0x205, 0x2581) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r5, 0x4004550c, &(0x7f0000000380)) 1.737727232s ago: executing program 1 (id=785): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) fstat(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000700)={{{@in=@local, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000800)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@broadcast}}, &(0x7f0000000940)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000029c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r6, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r7 = userfaultfd(0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x91c6b000) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) syz_open_procfs(0x0, &(0x7f0000001040)='net/nf_conntrack_expect\x00') ioctl$UFFDIO_UNREGISTER(r7, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000000000/0x800000)=nil, 0x800000}) lsetxattr$system_posix_acl(0x0, &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000004a80)=ANY=[@ANYBLOB="03196b3c0f8e594d5ba4b5b048ed8a5b75a59e718585c6d5719b01dd1a50317121463e961d69ea52acd4bd91fa440933f411a98511409f786b7163fafa9ba16241ff1166aa32a314873d99d37dbc1623044569472c142026e5bf1aa2bcd8e11f786e40ac8d4de27a9f48af256952619ab8370662b4f82e61b6f878f4b59ba752d9ec82b118e615d1", @ANYRES32=r1, @ANYBLOB="02000b00", @ANYRES32, @ANYBLOB="02000200", @ANYRES32, @ANYBLOB="02000100", @ANYRES32=r2, @ANYBLOB="02000200", @ANYRES32=0xee00, @ANYBLOB="0200a27f", @ANYRES32=0xee01, @ANYBLOB="02000200", @ANYRES32=r3, @ANYBLOB="040000000000000008000600", @ANYRES32=r4, @ANYBLOB="08000400", @ANYRES32=r5, @ANYBLOB="10000100000000002000010000000000"], 0x6c, 0x0) r8 = syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000c8bd0b20f8061b3039bb0102030109021b0001000000000904"], 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$alg(0xffffffffffffffff, 0x0, 0x0) 955.295322ms ago: executing program 4 (id=786): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x101182) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x1) syz_usbip_server_init(0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010102b7ea5008"], 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) syz_usbip_server_init(0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000440), 0x100, 0x0) syz_emit_vhci(&(0x7f0000000400)=ANY=[@ANYBLOB="040e0402030c", @ANYRES64], 0x7) 310.489385ms ago: executing program 1 (id=787): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f0000001a00)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000000)={0x20, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000041}, 0x40) 0s ago: executing program 1 (id=788): set_mempolicy(0x3, &(0x7f0000000140)=0x8001, 0x8) r0 = gettid() close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x2, {0x1}}, 0x18) sendmsg$alg(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000800)="cfb9", 0x2}], 0x2}, 0x80) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x200000000002, r0}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000400)=[{0x0}], 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r4 = epoll_create1(0x80000) r5 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000000c0)) epoll_wait(r4, 0x0, 0x0, 0x500004) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r6, 0x8946, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r7, &(0x7f0000000400)=""/4096, 0xc00) socket$key(0xf, 0x3, 0x2) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f00000065c0)={0x0, 0x0, &(0x7f0000006580)={&(0x7f0000000000)={0x28, 0x14, 0x940e2689cab82739, 0x0, 0x0, {0x28}, [@INET_DIAG_REQ_BYTECODE={0x12, 0xfa, "4ac2412447060aefadfa61a0b910"}]}, 0x28}}, 0xc8c0) kernel console output (not intermixed with test programs): 330.106123][ T5710] usb 3-1: config 0 descriptor?? [ 330.172449][ T7095] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 330.178184][ T7095] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 330.380710][ T7095] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 330.384440][ T5710] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 330.396660][ T7095] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 330.462807][ T7095] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 330.522632][ T822] usb usb34-port1: attempt power cycle [ 330.610235][ T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 330.769720][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 330.795193][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.795258][ T9] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 330.795280][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.923119][ T9] usb 1-1: config 0 descriptor?? [ 331.117888][ T7095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.186256][ T9] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 331.205407][ T822] usb usb34-port1: unable to enumerate USB device [ 331.375540][ T7095] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.433778][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.441413][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.454304][ T5710] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 331.462021][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.463248][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.577765][ T5710] usb 3-1: USB disconnect, device number 10 [ 331.610788][ T9] gspca_vc032x: reg_r err -32 [ 331.610891][ T9] vc032x 1-1:0.0: probe with driver vc032x failed with error -32 [ 331.692808][ T9] usb 1-1: USB disconnect, device number 7 [ 332.076824][ T7588] IPv4: Oversized IP packet from 127.202.26.0 [ 332.738963][ T7613] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.411'. [ 332.849113][ T5876] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 333.029093][ T5876] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 333.029128][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 333.029148][ T5876] usb 5-1: Product: syz [ 333.029161][ T5876] usb 5-1: Manufacturer: syz [ 333.029175][ T5876] usb 5-1: SerialNumber: syz [ 333.522882][ T5876] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 333.522956][ T5876] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 333.525187][ T5876] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 333.525248][ T5876] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 333.572242][ T5876] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 333.659722][ T5876] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 333.799147][ T5876] usb 5-1: USB disconnect, device number 17 [ 334.169072][ T821] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 334.329051][ T821] usb 3-1: Using ep0 maxpacket: 8 [ 334.331342][ T821] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.331412][ T821] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 334.331437][ T821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.336777][ T7648] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.423'. [ 334.350606][ T821] usb 3-1: config 0 descriptor?? [ 334.410874][ T821] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 334.717955][ T7095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 334.959782][ T821] gspca_vc032x: reg_r err -32 [ 334.959888][ T821] vc032x 3-1:0.0: probe with driver vc032x failed with error -32 [ 334.982544][ T821] usb 3-1: USB disconnect, device number 11 [ 335.427499][ T5724] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 335.659061][ T5724] usb 5-1: Using ep0 maxpacket: 32 [ 335.664985][ T5724] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 335.665016][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.665036][ T5724] usb 5-1: Product: syz [ 335.665051][ T5724] usb 5-1: Manufacturer: syz [ 335.665065][ T5724] usb 5-1: SerialNumber: syz [ 335.847179][ T5724] usb 5-1: config 0 descriptor?? [ 335.975111][ T5724] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 336.036467][ T7095] veth0_vlan: entered promiscuous mode [ 336.049822][ T7095] veth1_vlan: entered promiscuous mode [ 336.059260][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 336.165582][ T7095] veth0_macvtap: entered promiscuous mode [ 336.195422][ T7095] veth1_macvtap: entered promiscuous mode [ 336.301448][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 336.301482][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.301502][ T9] usb 4-1: Product: syz [ 336.301514][ T9] usb 4-1: Manufacturer: syz [ 336.301528][ T9] usb 4-1: SerialNumber: syz [ 336.465483][ T7673] netlink: 'syz.2.429': attribute type 21 has an invalid length. [ 336.465568][ T7673] netlink: 36 bytes leftover after parsing attributes in process `syz.2.429'. [ 337.278248][ T7095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.306348][ T7095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.842864][ T4272] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.086962][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 338.087033][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 338.087908][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE [ 338.087963][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 338.113180][ T9] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 338.301191][ T5724] gspca_ov534_9: reg_w failed -110 [ 338.315994][ T4272] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.343549][ T4272] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.344297][ T4272] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.609028][ T5724] gspca_ov534_9: Unknown sensor 0000 [ 338.609141][ T5724] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 338.902511][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 338.946198][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 338.948281][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 338.970337][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 338.989759][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 339.050332][ T9] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 339.112543][ T9] usb 4-1: USB disconnect, device number 9 [ 339.362568][ T821] usb 5-1: USB disconnect, device number 18 [ 339.741741][ T7697] team0: left promiscuous mode [ 339.741832][ T7697] team_slave_0: left promiscuous mode [ 339.742855][ T7697] team_slave_1: left promiscuous mode [ 341.256365][ T37] audit: type=1326 audit(1778541345.482:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7698 comm="syz.0.437" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18b69cdd9 code=0x7fc00000 [ 341.291569][ T59] Bluetooth: hci1: command tx timeout [ 341.299123][ T37] audit: type=1326 audit(1778541345.482:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7698 comm="syz.0.437" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=451 compat=0 ip=0x7fb18b69cdd9 code=0x7fc00000 [ 341.299177][ T37] audit: type=1326 audit(1778541345.522:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7698 comm="syz.0.437" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18b69cdd9 code=0x7fc00000 [ 341.299216][ T37] audit: type=1326 audit(1778541345.522:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7698 comm="syz.0.437" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18b69cdd9 code=0x7fc00000 [ 341.299256][ T37] audit: type=1326 audit(1778541345.522:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7698 comm="syz.0.437" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18b69cdd9 code=0x7fc00000 [ 341.299294][ T37] audit: type=1326 audit(1778541345.522:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7698 comm="syz.0.437" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18b69cdd9 code=0x7fc00000 [ 341.299332][ T37] audit: type=1326 audit(1778541345.522:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7698 comm="syz.0.437" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18b69cdd9 code=0x7fc00000 [ 341.299380][ T37] audit: type=1326 audit(1778541345.522:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7698 comm="syz.0.437" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18b69cdd9 code=0x7fc00000 [ 341.299419][ T37] audit: type=1326 audit(1778541345.522:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7698 comm="syz.0.437" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18b69cdd9 code=0x7fc00000 [ 341.299456][ T37] audit: type=1326 audit(1778541345.522:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7698 comm="syz.0.437" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb18b69cdd9 code=0x7fc00000 [ 341.419169][ T9] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 341.451042][ T5819] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 341.569031][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 341.577069][ T9] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 341.577097][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 341.591168][ T9] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 341.591209][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.591228][ T9] usb 5-1: Product: syz [ 341.591241][ T9] usb 5-1: Manufacturer: syz [ 341.591254][ T9] usb 5-1: SerialNumber: syz [ 341.701941][ T9] usb 5-1: 0:2 : does not exist [ 341.803884][ T5819] usb 4-1: Using ep0 maxpacket: 8 [ 341.808844][ T5819] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 341.809054][ T5819] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 341.809080][ T5819] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.923684][ T9] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 341.961356][ T5819] usb 4-1: config 0 descriptor?? [ 342.451155][ T5819] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 342.576428][ T7717] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 342.576456][ T7717] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 342.588394][ T7717] vhci_hcd vhci_hcd.0: Device attached [ 342.600621][ T7717] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 342.600648][ T7717] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 342.600751][ T7717] vhci_hcd vhci_hcd.0: Device attached [ 342.610937][ T7717] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 342.610963][ T7717] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 342.611009][ T7717] vhci_hcd vhci_hcd.0: Device attached [ 342.612154][ T7717] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 342.632848][ T7717] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15) [ 342.632877][ T7717] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 342.633028][ T7717] vhci_hcd vhci_hcd.0: Device attached [ 342.729726][ T9] usb 5-1: USB disconnect, device number 19 [ 342.749341][ T5819] gspca_vc032x: reg_r err -32 [ 342.749443][ T5819] vc032x 4-1:0.0: probe with driver vc032x failed with error -32 [ 342.756944][ T5819] usb 4-1: USB disconnect, device number 10 [ 342.819096][ T5724] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 342.905603][ T821] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 343.059078][ T821] usb 1-1: Using ep0 maxpacket: 8 [ 343.123424][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.262723][ T7731] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 343.339605][ T59] Bluetooth: hci1: command tx timeout [ 343.397269][ T59] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 344.132319][ T7746] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.208472][ T66] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.507055][ T7747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.572670][ T7744] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.590863][ T7717] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 344.930026][ T66] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.270884][ T66] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.419069][ T59] Bluetooth: hci1: command tx timeout [ 345.600926][ T7731] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 345.608624][ T7731] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 345.621793][ T7731] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 345.622163][ T7731] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 345.622296][ T7731] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 345.753206][ T7731] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 345.954984][ T7724] vhci_hcd: connection closed [ 345.955333][ T7722] vhci_hcd: connection closed [ 345.955637][ T7718] vhci_hcd: connection reset by peer [ 345.956129][ T7720] vhci_hcd: connection closed [ 345.956419][ T3392] vhci_hcd vhci_hcd.0: stop threads [ 345.956445][ T3392] vhci_hcd vhci_hcd.0: release socket [ 345.956520][ T3392] vhci_hcd vhci_hcd.0: disconnect device [ 345.979218][ T3392] vhci_hcd vhci_hcd.0: stop threads [ 345.979244][ T3392] vhci_hcd vhci_hcd.0: release socket [ 345.979315][ T3392] vhci_hcd vhci_hcd.0: disconnect device [ 345.981785][ T821] usb 1-1: unable to get BOS descriptor or descriptor too short [ 345.981870][ T821] usb 1-1: no configurations [ 345.981881][ T821] usb 1-1: can't read configurations, error -22 [ 346.026250][ T3392] vhci_hcd vhci_hcd.0: stop threads [ 346.026280][ T3392] vhci_hcd vhci_hcd.0: release socket [ 346.026357][ T3392] vhci_hcd vhci_hcd.0: disconnect device [ 346.034678][ T3392] vhci_hcd vhci_hcd.0: stop threads [ 346.034698][ T3392] vhci_hcd vhci_hcd.0: release socket [ 346.034772][ T3392] vhci_hcd vhci_hcd.0: disconnect device [ 346.168431][ T66] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.929181][ T5876] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 347.696756][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 347.697006][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 347.697038][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 347.989036][ T5876] usb 4-1: Using ep0 maxpacket: 8 [ 347.991626][ T5876] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 347.991686][ T5876] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 347.991710][ T5876] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.000382][ T5876] usb 4-1: config 0 descriptor?? [ 348.021606][ T5876] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 348.103029][ T5724] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 348.879674][ T5876] gspca_vc032x: reg_r err -71 [ 348.879775][ T5876] vc032x 4-1:0.0: probe with driver vc032x failed with error -71 [ 348.927158][ T5876] usb 4-1: USB disconnect, device number 11 [ 349.223059][ T7678] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.223290][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.223529][ T7678] bridge_slave_0: entered allmulticast mode [ 349.227111][ T7678] bridge_slave_0: entered promiscuous mode [ 349.331632][ T7678] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.331795][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.332046][ T7678] bridge_slave_1: entered allmulticast mode [ 349.360182][ T7678] bridge_slave_1: entered promiscuous mode [ 349.390958][ T5601] usb usb34-port1: attempt power cycle [ 349.527204][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.563591][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.566224][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.589872][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.600488][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.749275][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 350.012521][ T5601] usb usb34-port1: unable to enumerate USB device [ 350.022775][ T7678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.237633][ T7678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.461591][ T66] bridge_slave_1: left allmulticast mode [ 350.461629][ T66] bridge_slave_1: left promiscuous mode [ 350.461924][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.563364][ T66] bridge_slave_0: left allmulticast mode [ 350.563490][ T66] bridge_slave_0: left promiscuous mode [ 350.590488][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.297570][ T7813] netlink: 'syz.3.464': attribute type 21 has an invalid length. [ 351.297672][ T7813] netlink: 36 bytes leftover after parsing attributes in process `syz.3.464'. [ 352.089152][ T5607] Bluetooth: hci2: command tx timeout [ 352.641582][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 354.024617][ T5724] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 354.139231][ T5607] Bluetooth: hci2: command tx timeout [ 354.238628][ T5724] usb 1-1: unable to get BOS descriptor or descriptor too short [ 354.242661][ T5724] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 354.242701][ T5724] usb 1-1: can't read configurations, error -71 [ 354.351611][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.411472][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.431317][ T66] bond0 (unregistering): Released all slaves [ 354.861646][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 355.020189][ T7678] team0: Port device team_slave_0 added [ 355.045990][ T7678] team0: Port device team_slave_1 added [ 355.510661][ T66] hsr_slave_0: left promiscuous mode [ 355.574807][ T66] hsr_slave_1: left promiscuous mode [ 355.576092][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.576119][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.641145][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.641173][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.721223][ T66] veth1_macvtap: left promiscuous mode [ 355.721339][ T66] veth0_macvtap: left promiscuous mode [ 355.721709][ T66] veth1_vlan: left promiscuous mode [ 355.721927][ T66] veth0_vlan: left promiscuous mode [ 356.220688][ T5607] Bluetooth: hci2: command tx timeout [ 357.120004][ T66] team0 (unregistering): Port device team_slave_1 removed [ 357.170779][ T66] team0 (unregistering): Port device team_slave_0 removed [ 357.402850][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.402869][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.402897][ T7678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.627563][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.627591][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 357.627619][ T7678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.997037][ T7678] hsr_slave_0: entered promiscuous mode [ 358.013273][ T7678] hsr_slave_1: entered promiscuous mode [ 358.017337][ T7678] debugfs: 'hsr0' already exists in 'hsr' [ 358.017366][ T7678] Cannot create hsr debugfs directory [ 358.147330][ T5724] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 358.309850][ T5607] Bluetooth: hci2: command tx timeout [ 358.353283][ T5724] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 358.353316][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.353335][ T5724] usb 3-1: Product: syz [ 358.353351][ T5724] usb 3-1: Manufacturer: syz [ 358.353364][ T5724] usb 3-1: SerialNumber: syz [ 358.371783][ T5724] usb 3-1: config 0 descriptor?? [ 358.614961][ T5724] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 359.458866][ T5724] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 359.521281][ T5724] usb 3-1: USB disconnect, device number 12 [ 359.701305][ T7885] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 359.701336][ T7885] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 359.719188][ T7885] vhci_hcd vhci_hcd.0: Device attached [ 359.731515][ T7886] vhci_hcd: connection closed [ 359.732088][ T6330] vhci_hcd vhci_hcd.3: stop threads [ 359.732113][ T6330] vhci_hcd vhci_hcd.3: release socket [ 359.732151][ T6330] vhci_hcd vhci_hcd.3: disconnect device [ 359.918707][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 360.299326][ T7781] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.299559][ T7781] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.299781][ T7781] bridge_slave_0: entered allmulticast mode [ 360.305299][ T7781] bridge_slave_0: entered promiscuous mode [ 360.340483][ T7781] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.340733][ T7781] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.340979][ T7781] bridge_slave_1: entered allmulticast mode [ 360.345942][ T7781] bridge_slave_1: entered promiscuous mode [ 361.037006][ T7781] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.067559][ T7781] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.139074][ T5875] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 361.269113][ T5875] usb 1-1: device descriptor read/64, error -71 [ 361.407607][ T7781] team0: Port device team_slave_0 added [ 361.532631][ T7781] team0: Port device team_slave_1 added [ 361.589621][ T5875] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 361.719102][ T5875] usb 1-1: device descriptor read/64, error -71 [ 361.835106][ T5875] usb usb1-port1: attempt power cycle [ 361.972464][ T7781] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.972477][ T7781] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.972492][ T7781] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.975062][ T7781] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.975074][ T7781] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 361.975088][ T7781] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.019117][ T5844] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 362.169079][ T5875] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 362.170079][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 362.173620][ T5844] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.173667][ T5844] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 362.173691][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.188114][ T5844] usb 4-1: config 0 descriptor?? [ 362.228556][ T5875] usb 1-1: device descriptor read/8, error -71 [ 362.251080][ T5844] hub 4-1:0.0: bad descriptor, ignoring hub [ 362.251107][ T5844] hub 4-1:0.0: probe with driver hub failed with error -5 [ 362.264360][ T5844] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 362.457692][ T7781] hsr_slave_0: entered promiscuous mode [ 362.458550][ T7781] hsr_slave_1: entered promiscuous mode [ 362.461568][ T7781] debugfs: 'hsr0' already exists in 'hsr' [ 362.461593][ T7781] Cannot create hsr debugfs directory [ 362.478539][ T5875] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 362.509917][ T5875] usb 1-1: device descriptor read/8, error -71 [ 362.621667][ T5875] usb usb1-port1: unable to enumerate USB device [ 363.327513][ T7678] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 363.384679][ T7678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 363.386760][ T7678] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 363.519217][ T7678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 363.521951][ T7678] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 363.564512][ T7678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 363.612799][ T7678] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 363.675220][ T7678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 363.930843][ T7961] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 363.930872][ T7961] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 363.930984][ T7961] vhci_hcd vhci_hcd.0: Device attached [ 363.947078][ T7962] vhci_hcd: connection closed [ 363.962552][ T4272] vhci_hcd vhci_hcd.0: stop threads [ 363.962591][ T4272] vhci_hcd vhci_hcd.0: release socket [ 363.962626][ T4272] vhci_hcd vhci_hcd.0: disconnect device [ 364.867740][ T7781] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 365.734967][ T7781] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 366.044752][ T7781] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 366.131070][ T7781] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 366.136551][ T7781] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 366.175178][ T7781] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 366.184429][ T5710] usb 4-1: USB disconnect, device number 12 [ 366.192591][ T7781] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 366.339640][ T7781] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 366.417277][ T7678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 366.500807][ T7678] 8021q: adding VLAN 0 to HW filter on device team0 [ 366.524059][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.525125][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 366.614942][ T3334] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.615107][ T3334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.759226][ T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 367.919518][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 367.924762][ T9] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 367.924794][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.924814][ T9] usb 3-1: Product: syz [ 367.924827][ T9] usb 3-1: Manufacturer: syz [ 367.924840][ T9] usb 3-1: SerialNumber: syz [ 367.961659][ T5710] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 368.001265][ T9] usb 3-1: config 0 descriptor?? [ 368.046473][ T9] gspca_main: spca508-2.14.0 probing 041e:4018 [ 368.089092][ T5844] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 368.139489][ T5710] usb 4-1: Using ep0 maxpacket: 32 [ 368.220010][ T5710] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 368.220114][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.220144][ T5710] usb 4-1: Product: syz [ 368.220158][ T5710] usb 4-1: Manufacturer: syz [ 368.220172][ T5710] usb 4-1: SerialNumber: syz [ 368.241708][ T7781] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.274034][ T9] gspca_spca508: reg_read err -32 [ 368.285686][ T9] gspca_spca508: reg_read err -32 [ 368.295228][ T9] gspca_spca508: reg_read err -32 [ 368.296060][ T9] gspca_spca508: reg_read err -32 [ 368.303919][ T9] gspca_spca508: reg_read err -32 [ 368.304234][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 368.309805][ T9] gspca_spca508: reg write: error -32 [ 368.309907][ T9] spca508 3-1:0.0: probe with driver spca508 failed with error -32 [ 368.339086][ T5844] usb 1-1: device descriptor read/64, error -71 [ 368.355626][ T5710] usb 4-1: config 0 descriptor?? [ 368.427181][ T5710] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 368.489059][ T9] usb 3-1: USB disconnect, device number 13 [ 368.550864][ T7781] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.630216][ T5844] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 368.657826][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.657975][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.779316][ T5844] usb 1-1: device descriptor read/64, error -71 [ 368.813492][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.813636][ T4272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.891036][ T5844] usb usb1-port1: attempt power cycle [ 369.270124][ T5844] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 369.290217][ T5844] usb 1-1: device descriptor read/8, error -71 [ 369.529204][ T5844] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 369.560696][ T5844] usb 1-1: device descriptor read/8, error -71 [ 369.632465][ T5710] gspca_ov534_9: reg_w failed -71 [ 369.680456][ T5844] usb usb1-port1: unable to enumerate USB device [ 369.929446][ T5710] gspca_ov534_9: Unknown sensor 0000 [ 369.929560][ T5710] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 369.969238][ T5710] usb 4-1: USB disconnect, device number 13 [ 370.317154][ T8045] netlink: 'syz.2.504': attribute type 21 has an invalid length. [ 370.317229][ T8045] netlink: 36 bytes leftover after parsing attributes in process `syz.2.504'. [ 373.399075][ T5724] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 373.579041][ T5724] usb 4-1: Using ep0 maxpacket: 32 [ 373.581749][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.581804][ T5724] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 373.581828][ T5724] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.665329][ T5724] usb 4-1: config 0 descriptor?? [ 373.728440][ T5724] hub 4-1:0.0: bad descriptor, ignoring hub [ 373.728483][ T5724] hub 4-1:0.0: probe with driver hub failed with error -5 [ 373.973908][ T5724] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 374.032318][ T7678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.455994][ T8072] team0: left promiscuous mode [ 374.456045][ T8072] team_slave_0: left promiscuous mode [ 374.457120][ T8072] team_slave_1: left promiscuous mode [ 374.534108][ T8072] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.553682][ T8072] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.464459][ T7781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.091408][ T5710] usb 4-1: USB disconnect, device number 14 [ 378.853950][ T7678] veth0_vlan: entered promiscuous mode [ 378.868289][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.868359][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.888776][ T7781] veth0_vlan: entered promiscuous mode [ 378.946636][ T7678] veth1_vlan: entered promiscuous mode [ 379.032543][ T8094] netlink: 'syz.3.512': attribute type 21 has an invalid length. [ 379.032569][ T8094] netlink: 36 bytes leftover after parsing attributes in process `syz.3.512'. [ 379.033755][ T7781] veth1_vlan: entered promiscuous mode [ 379.139019][ T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 379.229710][ T7678] veth0_macvtap: entered promiscuous mode [ 379.234445][ T7781] veth0_macvtap: entered promiscuous mode [ 379.302260][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 379.316073][ T9] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 379.316103][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.316121][ T9] usb 3-1: Product: syz [ 379.316133][ T9] usb 3-1: Manufacturer: syz [ 379.316145][ T9] usb 3-1: SerialNumber: syz [ 379.337053][ T9] usb 3-1: config 0 descriptor?? [ 379.375386][ T7678] veth1_macvtap: entered promiscuous mode [ 379.427950][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 379.436968][ T7781] veth1_macvtap: entered promiscuous mode [ 379.863370][ T7678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.893076][ T7781] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.926564][ T7678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.952242][ T7781] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.008867][ T163] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.028177][ T163] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.055280][ T1020] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.060192][ T5724] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 380.085844][ T1020] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.119579][ T1020] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.128323][ T1020] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.233624][ T1020] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.234187][ T5724] usb 4-1: Using ep0 maxpacket: 32 [ 380.237021][ T5724] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 380.237048][ T5724] usb 4-1: config 0 has no interface number 0 [ 380.257424][ T5724] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 380.257453][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.257471][ T5724] usb 4-1: Product: syz [ 380.257483][ T5724] usb 4-1: Manufacturer: syz [ 380.257498][ T5724] usb 4-1: SerialNumber: syz [ 380.330836][ T1020] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.336675][ T5724] usb 4-1: config 0 descriptor?? [ 380.371900][ T5724] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 380.603506][ T9] gspca_ov534_9: reg_w failed -71 [ 380.860603][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 380.980676][ T9] gspca_ov534_9: Unknown sensor 0000 [ 380.980787][ T9] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 381.010850][ T9] usb 3-1: USB disconnect, device number 14 [ 381.283069][ T5724] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 381.530271][ T5724] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 381.796684][ T5724] usb 4-1: USB disconnect, device number 15 [ 383.194083][ T5724] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 383.255737][ T5724] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 383.275042][ T5724] quatech2 4-1:0.51: device disconnected [ 383.455518][ T5811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.455536][ T5811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.864670][ T3392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.864695][ T3392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.079809][ T5844] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 384.152864][ T2687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.152885][ T2687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.279159][ T5844] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 384.279190][ T5844] usb 3-1: config 1 has no interface number 0 [ 384.279241][ T5844] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 384.279267][ T5844] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 96 [ 384.336711][ T5844] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 384.336745][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.336765][ T5844] usb 3-1: Product: syz [ 384.336779][ T5844] usb 3-1: Manufacturer: syz [ 384.336793][ T5844] usb 3-1: SerialNumber: syz [ 384.381096][ T822] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 384.389473][ T8120] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 384.391443][ T8120] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 384.523226][ T5844] usb 3-1: Error in usbnet_get_endpoints (-22) [ 384.531406][ T822] usb 4-1: Using ep0 maxpacket: 32 [ 384.535436][ T822] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.535480][ T822] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 384.535501][ T822] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.569936][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.569977][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.571641][ T822] usb 4-1: config 0 descriptor?? [ 384.653189][ T822] hub 4-1:0.0: bad descriptor, ignoring hub [ 384.653229][ T822] hub 4-1:0.0: probe with driver hub failed with error -5 [ 384.687800][ T822] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 384.770257][ T5875] usb 3-1: USB disconnect, device number 15 [ 387.922089][ T8148] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(6) [ 387.922118][ T8148] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 387.923322][ T8148] vhci_hcd vhci_hcd.0: Device attached [ 387.944386][ T8148] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(8) [ 387.944411][ T8148] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 387.946270][ T8148] vhci_hcd vhci_hcd.0: Device attached [ 388.011381][ T5875] usb 4-1: USB disconnect, device number 16 [ 388.035008][ T8148] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(10) [ 388.035039][ T8148] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 388.035115][ T8148] vhci_hcd vhci_hcd.0: Device attached [ 388.050514][ T8159] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 388.288754][ T5601] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 389.369567][ T8148] vhci_hcd vhci_hcd.0: pdev(6) rhport(3) sockfd(15) [ 389.369598][ T8148] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 389.369712][ T8148] vhci_hcd vhci_hcd.0: Device attached [ 389.551682][ T5791] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 389.558639][ T5724] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 389.733543][ T5791] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 389.733578][ T5791] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.733599][ T5791] usb 3-1: Product: syz [ 389.733615][ T5791] usb 3-1: Manufacturer: syz [ 389.733629][ T5791] usb 3-1: SerialNumber: syz [ 389.748641][ T5791] usb 3-1: config 0 descriptor?? [ 389.785372][ T5710] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 389.923735][ T5724] usb 7-1: Using ep0 maxpacket: 8 [ 390.983780][ T5710] usb 4-1: Using ep0 maxpacket: 16 [ 391.035121][ T8148] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 391.130845][ T5791] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 391.131285][ T5791] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 391.206342][ T5710] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 391.206374][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 391.206394][ T5710] usb 4-1: Product: syz [ 391.206408][ T5710] usb 4-1: Manufacturer: syz [ 391.206422][ T5710] usb 4-1: SerialNumber: syz [ 391.354120][ T5710] usb 4-1: config 0 descriptor?? [ 391.398581][ T5710] gspca_main: spca508-2.14.0 probing 041e:4018 [ 391.651798][ T5710] gspca_spca508: reg_read err -32 [ 391.667972][ T5710] gspca_spca508: reg_read err -32 [ 391.669152][ T5710] gspca_spca508: reg_read err -32 [ 391.671761][ T5710] gspca_spca508: reg_read err -32 [ 391.674758][ T5710] gspca_spca508: reg_read err -32 [ 391.676495][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 391.684394][ T5710] gspca_spca508: reg write: error -32 [ 391.684496][ T5710] spca508 4-1:0.0: probe with driver spca508 failed with error -32 [ 391.748264][ T5710] usb 4-1: USB disconnect, device number 17 [ 392.367196][ T8159] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 392.379009][ T8159] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 392.394345][ T8159] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 392.394691][ T8159] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 392.395062][ T36] usb 3-1: USB disconnect, device number 16 [ 392.417082][ T8159] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 392.531557][ T8159] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 392.580105][ T8159] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 392.789676][ T5724] usb 7-1: unable to get BOS descriptor or descriptor too short [ 392.789781][ T5724] usb 7-1: no configurations [ 392.789796][ T5724] usb 7-1: can't read configurations, error -22 [ 392.793786][ T8165] vhci_hcd: connection closed [ 392.814804][ T8156] vhci_hcd: connection closed [ 392.816722][ T8152] vhci_hcd: connection closed [ 392.816766][ T8149] vhci_hcd: connection reset by peer [ 392.871743][ T6330] vhci_hcd vhci_hcd.6: stop threads [ 392.871772][ T6330] vhci_hcd vhci_hcd.6: release socket [ 392.871859][ T6330] vhci_hcd vhci_hcd.6: disconnect device [ 392.880431][ T6330] vhci_hcd vhci_hcd.6: stop threads [ 392.880452][ T6330] vhci_hcd vhci_hcd.6: release socket [ 392.880534][ T6330] vhci_hcd vhci_hcd.6: disconnect device [ 392.887320][ T6330] vhci_hcd vhci_hcd.6: stop threads [ 392.887350][ T6330] vhci_hcd vhci_hcd.6: release socket [ 392.887507][ T6330] vhci_hcd vhci_hcd.6: disconnect device [ 392.897542][ T6330] vhci_hcd vhci_hcd.6: stop threads [ 392.897565][ T6330] vhci_hcd vhci_hcd.6: release socket [ 392.897637][ T6330] vhci_hcd vhci_hcd.6: disconnect device [ 394.308236][ T5601] vhci_hcd vhci_hcd.6: vhci_device speed not set [ 394.572165][ T5607] Bluetooth: hci2: command 0x0c1a tx timeout [ 394.582098][ T59] Bluetooth: hci1: command 0x0c1a tx timeout [ 394.582144][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 394.582176][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 395.571681][ T8215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.544'. [ 395.597740][ T8215] netlink: 24 bytes leftover after parsing attributes in process `syz.0.544'. [ 395.824222][ T8207] netlink: 24 bytes leftover after parsing attributes in process `syz.5.542'. [ 395.854878][ T8207] netlink: 24 bytes leftover after parsing attributes in process `syz.5.542'. [ 396.786033][ T5607] Bluetooth: hci2: command 0x0c1a tx timeout [ 397.126717][ T31] usb usb46-port1: attempt power cycle [ 397.199670][ T8223] netlink: 'syz.6.543': attribute type 21 has an invalid length. [ 397.199697][ T8223] netlink: 36 bytes leftover after parsing attributes in process `syz.6.543'. [ 397.371878][ T5791] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 397.585603][ T36] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 397.608295][ T5791] usb 6-1: Using ep0 maxpacket: 16 [ 397.611164][ T5791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 397.611198][ T5791] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 397.611238][ T5791] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 397.611262][ T5791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.676370][ T5791] usb 6-1: config 0 descriptor?? [ 397.771344][ T31] usb usb46-port1: unable to enumerate USB device [ 397.803047][ T36] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.803112][ T36] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 397.803137][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.086993][ T36] usb 3-1: config 0 descriptor?? [ 398.130147][ T5791] usbhid 6-1:0.0: can't add hid device: -71 [ 398.130281][ T5791] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 398.181674][ T5791] usb 6-1: USB disconnect, device number 2 [ 398.791242][ T36] ath6kl: Failed to read usb control message: -71 [ 398.791305][ T36] ath6kl: Unable to read the bmi data from the device: -71 [ 398.791321][ T36] ath6kl: Unable to recv target info: -71 [ 398.874999][ T36] ath6kl: Failed to init ath6kl core: -71 [ 398.875815][ T36] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 398.882847][ T36] usb 3-1: USB disconnect, device number 17 [ 399.006832][ T5607] Bluetooth: hci2: command 0x0c1a tx timeout [ 400.855700][ T5844] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 400.962580][ T36] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 401.157420][ T36] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 401.157455][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.157476][ T36] usb 7-1: Product: syz [ 401.157491][ T36] usb 7-1: Manufacturer: syz [ 401.157506][ T36] usb 7-1: SerialNumber: syz [ 401.210525][ T36] usb 7-1: config 0 descriptor?? [ 401.466576][ T36] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 402.687564][ T36] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 402.744667][ T36] usb 7-1: USB disconnect, device number 4 [ 403.014478][ T5844] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 403.174476][ T5844] usb 4-1: Using ep0 maxpacket: 16 [ 403.192093][ T5844] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 403.192127][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.192148][ T5844] usb 4-1: Product: syz [ 403.192163][ T5844] usb 4-1: Manufacturer: syz [ 403.192351][ T5844] usb 4-1: SerialNumber: syz [ 403.261202][ T5844] usb 4-1: config 0 descriptor?? [ 404.259983][ T5844] gspca_main: spca508-2.14.0 probing 041e:4018 [ 405.430514][ T8293] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.437064][ T8293] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.590259][ T5844] gspca_spca508: reg_read err -110 [ 406.849178][ T5844] gspca_spca508: reg_read err -71 [ 406.849618][ T5844] gspca_spca508: reg_read err -71 [ 406.850036][ T5844] gspca_spca508: reg_read err -71 [ 406.867201][ T5844] gspca_spca508: reg_read err -71 [ 406.867636][ T5844] gspca_spca508: reg write: error -71 [ 406.867731][ T5844] spca508 4-1:0.0: probe with driver spca508 failed with error -71 [ 406.912014][ T5844] usb 4-1: USB disconnect, device number 19 [ 407.216778][ T8306] netlink: 24 bytes leftover after parsing attributes in process `syz.6.570'. [ 407.410805][ T8306] netlink: 24 bytes leftover after parsing attributes in process `syz.6.570'. [ 414.055119][ T5601] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 414.213299][ T5601] usb 3-1: Using ep0 maxpacket: 16 [ 414.238667][ T5601] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 414.238700][ T5601] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 414.238722][ T5601] usb 3-1: Product: syz [ 414.238736][ T5601] usb 3-1: Manufacturer: syz [ 414.238750][ T5601] usb 3-1: SerialNumber: syz [ 414.286521][ T5601] usb 3-1: config 0 descriptor?? [ 414.314869][ T5601] gspca_main: spca508-2.14.0 probing 041e:4018 [ 415.510461][ T5601] gspca_spca508: reg_read err -110 [ 415.519836][ T5601] gspca_spca508: reg_read err -32 [ 415.527960][ T5601] gspca_spca508: reg_read err -32 [ 415.562081][ T5601] gspca_spca508: reg_read err -32 [ 415.567118][ T5601] gspca_spca508: reg_read err -32 [ 415.992005][ T5601] gspca_spca508: reg write: error -71 [ 415.992108][ T5601] spca508 3-1:0.0: probe with driver spca508 failed with error -71 [ 416.034733][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 416.398283][ T5601] usb 3-1: USB disconnect, device number 18 [ 417.174906][ T9] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 417.174938][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.174957][ T9] usb 1-1: Product: syz [ 417.174970][ T9] usb 1-1: Manufacturer: syz [ 417.174984][ T9] usb 1-1: SerialNumber: syz [ 417.221043][ T9] usb 1-1: config 0 descriptor?? [ 417.255729][ T9] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 418.133420][ T8398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.601'. [ 418.715949][ T8398] netlink: 24 bytes leftover after parsing attributes in process `syz.3.601'. [ 420.401933][ T9] gspca_sunplus: reg_w_riv err -110 [ 420.402038][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -110 [ 420.501969][ T9] usb 1-1: USB disconnect, device number 20 [ 420.667584][ T36] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 420.951468][ T36] usb 6-1: unable to get BOS descriptor or descriptor too short [ 420.953532][ T36] usb 6-1: not running at top speed; connect to a high speed hub [ 420.986569][ T36] usb 6-1: config 5 has an invalid interface number: 206 but max is 0 [ 420.986656][ T36] usb 6-1: config 5 has no interface number 0 [ 420.986906][ T36] usb 6-1: config 5 interface 206 has no altsetting 0 [ 423.304627][ T36] usb 6-1: string descriptor 0 read error: -71 [ 423.304806][ T36] usb 6-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=87.b4 [ 423.304831][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.954933][ T36] usb 6-1: can't set config #5, error -71 [ 424.012275][ T36] usb 6-1: USB disconnect, device number 3 [ 425.732692][ T36] usb 1-1: new full-speed USB device number 21 using dummy_hcd [ 425.917242][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.917273][ T36] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 425.917329][ T36] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 425.917353][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.980357][ T36] usb 1-1: config 0 descriptor?? [ 426.012148][ T36] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 426.013680][ T36] dvb-usb: bulk message failed: -22 (3/0) [ 426.063905][ T9] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 426.126132][ T36] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 426.127368][ T36] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 426.127467][ T36] usb 1-1: media controller created [ 426.157932][ T36] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 426.247437][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 426.247634][ T5844] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 426.258472][ T9] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 426.258504][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.258526][ T9] usb 3-1: Product: syz [ 426.258540][ T9] usb 3-1: Manufacturer: syz [ 426.258555][ T9] usb 3-1: SerialNumber: syz [ 427.130943][ T5844] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 427.130977][ T5844] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.130998][ T5844] usb 7-1: Product: syz [ 427.131091][ T5844] usb 7-1: Manufacturer: syz [ 427.131107][ T5844] usb 7-1: SerialNumber: syz [ 427.235061][ T36] dvb-usb: bulk message failed: -22 (6/0) [ 427.235202][ T36] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 427.243376][ T9] usb 3-1: config 0 descriptor?? [ 427.277229][ T5844] usb 7-1: config 0 descriptor?? [ 427.387010][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 427.534652][ T5844] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 428.874804][ T9] gspca_ov534_9: reg_w failed -71 [ 429.154482][ T36] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 429.203308][ T5844] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 429.257252][ T5844] usb 7-1: USB disconnect, device number 5 [ 429.264650][ T9] gspca_ov534_9: Unknown sensor 0000 [ 429.264758][ T9] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 429.346743][ T9] usb 3-1: USB disconnect, device number 19 [ 429.766048][ T36] dvb-usb: schedule remote query interval to 150 msecs. [ 429.766077][ T36] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 430.000344][ T5601] dvb-usb: bulk message failed: -22 (1/0) [ 430.000407][ T5601] dvb-usb: error while querying for an remote control event. [ 430.035243][ T36] usb 1-1: USB disconnect, device number 21 [ 431.189485][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 431.853571][ T8482] netlink: 'syz.3.627': attribute type 21 has an invalid length. [ 431.853688][ T8482] netlink: 36 bytes leftover after parsing attributes in process `syz.3.627'. [ 435.916487][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 436.079121][ T9] usb 6-1: device descriptor read/all, error -71 [ 437.143928][ T8499] sg_write: data in/out 449500/218 bytes for SCSI command 0x0-- guessing data in; [ 437.143928][ T8499] program syz.2.636 not setting count and/or reply_len properly [ 437.831370][ T10] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 437.989886][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 438.067311][ T10] usb 7-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 438.067345][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.067367][ T10] usb 7-1: Product: syz [ 438.067381][ T10] usb 7-1: Manufacturer: syz [ 438.067397][ T10] usb 7-1: SerialNumber: syz [ 438.174547][ T10] usb 7-1: config 0 descriptor?? [ 438.212224][ T10] gspca_main: spca508-2.14.0 probing 041e:4018 [ 438.384461][ T36] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 438.594767][ T10] gspca_spca508: reg_read err -32 [ 438.614311][ T10] gspca_spca508: reg_read err -32 [ 438.635674][ T10] gspca_spca508: reg_read err -32 [ 438.638697][ T10] gspca_spca508: reg_read err -32 [ 438.661720][ T10] gspca_spca508: reg_read err -32 [ 438.685896][ T10] gspca_spca508: reg write: error -71 [ 438.686006][ T10] spca508 7-1:0.0: probe with driver spca508 failed with error -71 [ 438.740575][ T10] usb 7-1: USB disconnect, device number 6 [ 441.612233][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 441.772467][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 441.779286][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 441.779325][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 441.809750][ T9] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 441.809785][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 441.809807][ T9] usb 4-1: Product: syz [ 441.809822][ T9] usb 4-1: Manufacturer: syz [ 441.809837][ T9] usb 4-1: SerialNumber: syz [ 441.902836][ T9] usb 4-1: 0:2 : does not exist [ 442.326124][ T9] usb 4-1: USB disconnect, device number 20 [ 443.979903][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.979983][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.439856][ T9] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 444.611864][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 444.611921][ T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=0221, bcdDevice= 0.00 [ 444.612023][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.652756][ T9] usb 7-1: config 0 descriptor?? [ 444.653746][ T8566] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 444.807391][ T822] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 445.026241][ T822] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 445.026534][ T822] usb 6-1: New USB device found, idVendor=05ac, idProduct=0221, bcdDevice= 0.00 [ 445.026876][ T822] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.091013][ T822] usb 6-1: config 0 descriptor?? [ 445.094369][ T8573] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 445.626980][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 445.661810][ T822] usbhid 6-1:0.0: can't add hid device: -71 [ 445.661971][ T822] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 445.690350][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 445.719137][ T822] usb 6-1: USB disconnect, device number 6 [ 445.762935][ T9] usb 7-1: USB disconnect, device number 7 [ 446.410375][ T5785] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 446.647472][ T5785] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 446.647507][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.647528][ T5785] usb 4-1: Product: syz [ 446.647543][ T5785] usb 4-1: Manufacturer: syz [ 446.647603][ T5785] usb 4-1: SerialNumber: syz [ 446.702438][ T5785] usb 4-1: config 0 descriptor?? [ 446.737159][ T8600] sg_write: data in/out 433116/154 bytes for SCSI command 0x0-- guessing data in; [ 446.737159][ T8600] program syz.5.675 not setting count and/or reply_len properly [ 447.056785][ T5785] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 448.144859][ T5785] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 448.157126][ T5785] usb 4-1: USB disconnect, device number 21 [ 448.317602][ T5602] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 448.382542][ T5602] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 448.386126][ T5602] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 448.405373][ T5602] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 448.410631][ T5602] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 449.410105][ T8639] netlink: 'syz.5.685': attribute type 21 has an invalid length. [ 449.410132][ T8639] netlink: 36 bytes leftover after parsing attributes in process `syz.5.685'. [ 450.641916][ T5607] Bluetooth: hci3: command tx timeout [ 451.270906][ T5602] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 451.314675][ T5602] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 451.323713][ T5602] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 451.345257][ T5602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 451.478135][ T5602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 452.197937][ T6330] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.347693][ T8618] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.347846][ T8618] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.348107][ T8618] bridge_slave_0: entered allmulticast mode [ 452.366975][ T8618] bridge_slave_0: entered promiscuous mode [ 452.384575][ T8618] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.384734][ T8618] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.384968][ T8618] bridge_slave_1: entered allmulticast mode [ 452.393021][ T8618] bridge_slave_1: entered promiscuous mode [ 452.763867][ T5724] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 452.867461][ T5607] Bluetooth: hci3: command tx timeout [ 452.932074][ T5724] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 452.932103][ T5724] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.932115][ T5724] usb 6-1: Product: syz [ 452.932123][ T5724] usb 6-1: Manufacturer: syz [ 452.932131][ T5724] usb 6-1: SerialNumber: syz [ 452.936715][ T5724] usb 6-1: config 0 descriptor?? [ 453.034372][ T8618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.048808][ T8618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.106250][ T8618] team0: Port device team_slave_0 added [ 453.117264][ T8618] team0: Port device team_slave_1 added [ 453.216600][ T5724] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 453.708228][ T6330] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.720952][ T5607] Bluetooth: hci2: command tx timeout [ 454.057211][ T5602] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 454.116060][ T5602] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 454.121088][ T5602] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 454.137895][ T5602] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 454.159711][ T5602] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 454.384883][ T5724] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 454.404775][ T5724] usb 6-1: USB disconnect, device number 7 [ 454.427796][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.427815][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.427845][ T8618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.473124][ T8618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.473142][ T8618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 454.473167][ T8618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.738449][ T6330] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.087345][ T5607] Bluetooth: hci3: command tx timeout [ 455.099147][ T8618] hsr_slave_0: entered promiscuous mode [ 455.106998][ T8618] hsr_slave_1: entered promiscuous mode [ 455.107975][ T8618] debugfs: 'hsr0' already exists in 'hsr' [ 455.107998][ T8618] Cannot create hsr debugfs directory [ 455.194093][ T5724] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 455.368760][ T6330] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.420649][ T5724] usb 4-1: Using ep0 maxpacket: 32 [ 455.649060][ T5724] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 455.649094][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.649108][ T5724] usb 4-1: Product: syz [ 455.649116][ T5724] usb 4-1: Manufacturer: syz [ 455.649124][ T5724] usb 4-1: SerialNumber: syz [ 455.658683][ T5724] usb 4-1: config 0 descriptor?? [ 455.706051][ T5724] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 455.966176][ T5607] Bluetooth: hci2: command tx timeout [ 456.554491][ T5607] Bluetooth: hci4: command tx timeout [ 457.093340][ T5602] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 457.103025][ T5602] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 457.112847][ T5602] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 457.226820][ T5602] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 457.229543][ T5602] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 457.313801][ T5602] Bluetooth: hci3: command tx timeout [ 457.565190][ T5724] gspca_ov534_9: reg_r err -71 [ 457.833554][ T5724] gspca_ov534_9: Unknown sensor 0000 [ 457.833660][ T5724] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 457.840874][ T5724] usb 4-1: USB disconnect, device number 22 [ 458.164953][ T5607] Bluetooth: hci2: command tx timeout [ 458.571340][ T6330] bridge_slave_1: left allmulticast mode [ 458.571377][ T6330] bridge_slave_1: left promiscuous mode [ 458.571576][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.637808][ T6330] bridge_slave_0: left allmulticast mode [ 458.637835][ T6330] bridge_slave_0: left promiscuous mode [ 458.640055][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 458.763565][ T5607] Bluetooth: hci4: command tx timeout [ 459.447311][ T5607] Bluetooth: hci1: command tx timeout [ 459.512129][ T6330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.576110][ T6330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.600617][ T6330] bond0 (unregistering): Released all slaves [ 460.398518][ T5607] Bluetooth: hci2: command tx timeout [ 460.986000][ T5607] Bluetooth: hci4: command tx timeout [ 461.624451][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 461.637407][ T5602] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 461.663413][ T5602] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 461.664672][ T5602] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 461.665689][ T5602] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 461.671511][ T5602] Bluetooth: hci1: command tx timeout [ 462.519639][ T8618] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 462.561885][ T8618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 462.823977][ T6330] hsr_slave_0: left promiscuous mode [ 462.867003][ T6330] hsr_slave_1: left promiscuous mode [ 462.891725][ T6330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.891748][ T6330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.942485][ T6330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.942516][ T6330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.040035][ T6330] veth1_macvtap: left promiscuous mode [ 463.040102][ T6330] veth0_macvtap: left promiscuous mode [ 463.047633][ T6330] veth1_vlan: left promiscuous mode [ 463.047778][ T6330] veth0_vlan: left promiscuous mode [ 463.213615][ T5602] Bluetooth: hci4: command tx timeout [ 463.861085][ T6330] team0 (unregistering): Port device team_slave_1 removed [ 463.892584][ T5602] Bluetooth: hci1: command tx timeout [ 463.909500][ T6330] team0 (unregistering): Port device team_slave_0 removed [ 463.978404][ T5602] Bluetooth: hci0: command tx timeout [ 464.140790][ T8651] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.141014][ T8651] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.141186][ T8651] bridge_slave_0: entered allmulticast mode [ 464.142780][ T8651] bridge_slave_0: entered promiscuous mode [ 464.144547][ T8618] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 464.183360][ T8618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.188479][ T5260] 8021q: adding VLAN 0 to HW filter on device eth5 [ 464.236530][ T8651] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.236629][ T8651] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.236767][ T8651] bridge_slave_1: entered allmulticast mode [ 464.241359][ T8651] bridge_slave_1: entered promiscuous mode [ 464.242872][ T8618] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 464.283352][ T8618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.330222][ T8618] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 464.365761][ T8618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.487288][ T8651] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.566281][ T8651] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.689155][ T8678] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.689372][ T8678] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.689580][ T8678] bridge_slave_0: entered allmulticast mode [ 464.691494][ T8678] bridge_slave_0: entered promiscuous mode [ 464.723564][ T8651] team0: Port device team_slave_0 added [ 464.724076][ T8678] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.724237][ T8678] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.724756][ T8678] bridge_slave_1: entered allmulticast mode [ 464.728587][ T8678] bridge_slave_1: entered promiscuous mode [ 464.750516][ T8651] team0: Port device team_slave_1 added [ 464.963784][ T8678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.966678][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.966690][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 464.966705][ T8651] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.043761][ T8678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.045160][ T8651] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.045171][ T8651] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.045203][ T8651] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.240435][ T8678] team0: Port device team_slave_0 added [ 465.338817][ T8678] team0: Port device team_slave_1 added [ 465.820776][ T5260] 8021q: adding VLAN 0 to HW filter on device eth6 [ 465.841049][ T8651] hsr_slave_0: entered promiscuous mode [ 465.849625][ T8651] hsr_slave_1: entered promiscuous mode [ 465.850705][ T8651] debugfs: 'hsr0' already exists in 'hsr' [ 465.850729][ T8651] Cannot create hsr debugfs directory [ 465.909456][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.909475][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.909502][ T8678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.973835][ T8678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.973848][ T8678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 465.973864][ T8678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.115303][ T5602] Bluetooth: hci1: command tx timeout [ 466.201026][ T5602] Bluetooth: hci0: command tx timeout [ 466.277583][ T8678] hsr_slave_0: entered promiscuous mode [ 466.278526][ T8678] hsr_slave_1: entered promiscuous mode [ 466.279116][ T8678] debugfs: 'hsr0' already exists in 'hsr' [ 466.279133][ T8678] Cannot create hsr debugfs directory [ 466.449969][ T8700] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.451783][ T8700] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.452505][ T8700] bridge_slave_0: entered allmulticast mode [ 466.454142][ T8700] bridge_slave_0: entered promiscuous mode [ 466.760147][ T6330] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.870587][ T8700] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.870824][ T8700] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.871028][ T8700] bridge_slave_1: entered allmulticast mode [ 466.873721][ T8700] bridge_slave_1: entered promiscuous mode [ 467.521929][ T6330] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.571044][ T8700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 467.629263][ T5260] 8021q: adding VLAN 0 to HW filter on device eth7 [ 467.686663][ T8700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.042802][ T6330] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.108999][ T8700] team0: Port device team_slave_0 added [ 468.189115][ T8731] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.189224][ T8731] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.189424][ T8731] bridge_slave_0: entered allmulticast mode [ 468.192669][ T8731] bridge_slave_0: entered promiscuous mode [ 468.238957][ T8700] team0: Port device team_slave_1 added [ 468.246013][ T8731] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.246139][ T8731] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.246389][ T8731] bridge_slave_1: entered allmulticast mode [ 468.254841][ T8731] bridge_slave_1: entered promiscuous mode [ 468.423500][ T5602] Bluetooth: hci0: command tx timeout [ 468.503541][ T6330] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.602545][ T8700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.602566][ T8700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.602581][ T8700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.640624][ T8731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.713673][ T8618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.718984][ T8700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.719004][ T8700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 468.719031][ T8700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.722072][ T8731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.044876][ T8731] team0: Port device team_slave_0 added [ 469.190120][ T8731] team0: Port device team_slave_1 added [ 469.195098][ T8651] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 469.261105][ T8651] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 469.391189][ T8651] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 469.443715][ T8651] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 469.502513][ T8700] hsr_slave_0: entered promiscuous mode [ 469.507198][ T8700] hsr_slave_1: entered promiscuous mode [ 469.508159][ T8700] debugfs: 'hsr0' already exists in 'hsr' [ 469.508182][ T8700] Cannot create hsr debugfs directory [ 469.540906][ T8651] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 469.583622][ T8651] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 469.840906][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.840921][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.840937][ T8731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.841292][ T8651] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 469.908211][ T8651] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 469.912165][ T8618] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.969194][ T8731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.969207][ T8731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.969224][ T8731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.061157][ T5260] 8021q: adding VLAN 0 to HW filter on device eth8 [ 470.292172][ T2687] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.292290][ T2687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 470.440665][ T8731] hsr_slave_0: entered promiscuous mode [ 470.441600][ T8731] hsr_slave_1: entered promiscuous mode [ 470.442204][ T8731] debugfs: 'hsr0' already exists in 'hsr' [ 470.442229][ T8731] Cannot create hsr debugfs directory [ 470.530776][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.530923][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 470.531593][ T8678] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 470.577105][ T8678] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 470.646205][ T5602] Bluetooth: hci0: command tx timeout [ 470.874435][ T6330] bridge_slave_1: left allmulticast mode [ 470.874477][ T6330] bridge_slave_1: left promiscuous mode [ 470.875241][ T6330] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.936240][ T6330] bridge_slave_0: left allmulticast mode [ 470.936268][ T6330] bridge_slave_0: left promiscuous mode [ 470.939272][ T6330] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.811640][ T6330] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.897245][ T6330] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.920647][ T6330] bond0 (unregistering): Released all slaves [ 471.968637][ T8678] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 471.985354][ T8678] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.140992][ T8678] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 472.280728][ T8678] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.314492][ T8678] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 472.359362][ T8678] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 473.873644][ T6330] hsr_slave_0: left promiscuous mode [ 473.916240][ T6330] hsr_slave_1: left promiscuous mode [ 473.918662][ T6330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 473.918691][ T6330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 473.940666][ T6330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 473.940694][ T6330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 474.040419][ T6330] veth1_macvtap: left promiscuous mode [ 474.040488][ T6330] veth0_macvtap: left promiscuous mode [ 474.040641][ T6330] veth1_vlan: left promiscuous mode [ 474.040742][ T6330] veth0_vlan: left promiscuous mode [ 474.899560][ T6330] team0 (unregistering): Port device team_slave_1 removed [ 474.953437][ T6330] team0 (unregistering): Port device team_slave_0 removed [ 476.243845][ T8651] 8021q: adding VLAN 0 to HW filter on device bond0 [ 476.803524][ T8651] 8021q: adding VLAN 0 to HW filter on device team0 [ 476.809619][ T5260] 8021q: adding VLAN 0 to HW filter on device eth9 [ 476.890384][ T66] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.890665][ T66] bridge0: port 1(bridge_slave_0) entered forwarding state [ 476.943908][ T8678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.008892][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.009149][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.150097][ T8678] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.180216][ T8618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.203262][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.203414][ T5811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.319059][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.319187][ T5811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.136568][ T8731] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.866276][ T8731] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 478.911759][ T5260] 8021q: adding VLAN 0 to HW filter on device eth10 [ 479.272995][ T8731] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.378378][ T8618] veth0_vlan: entered promiscuous mode [ 479.455850][ T8618] veth1_vlan: entered promiscuous mode [ 479.897358][ T8731] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 479.964609][ T8618] veth0_macvtap: entered promiscuous mode [ 479.972520][ T8651] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.015363][ T8618] veth1_macvtap: entered promiscuous mode [ 480.154347][ T8678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.171761][ T8618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.236025][ T8618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.290711][ T56] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.293015][ T56] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.297745][ T56] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.297790][ T56] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.509668][ T1227] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.509691][ T1227] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.697727][ T5260] 8021q: adding VLAN 0 to HW filter on device eth11 [ 481.809189][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.809213][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.062844][ T8700] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 482.108867][ T8700] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 482.110202][ T8651] veth0_vlan: entered promiscuous mode [ 482.121970][ T8700] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 482.175309][ T8700] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 482.200813][ T8700] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 482.449503][ T8700] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 483.301281][ T8700] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 483.350646][ T8700] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 483.459482][ T8678] veth0_vlan: entered promiscuous mode [ 483.581740][ T8651] veth1_vlan: entered promiscuous mode [ 483.738529][ T8678] veth1_vlan: entered promiscuous mode [ 483.853127][ T8731] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 483.894417][ T8731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 483.910884][ T8731] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 483.955817][ T8731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 483.965457][ T8731] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 484.032541][ T8731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 484.051180][ T8731] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 484.094587][ T8731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 484.183126][ T8651] veth0_macvtap: entered promiscuous mode [ 484.194376][ T5260] 8021q: adding VLAN 0 to HW filter on device eth12 [ 484.258100][ T8651] veth1_macvtap: entered promiscuous mode [ 484.327679][ T8678] veth0_macvtap: entered promiscuous mode [ 484.392246][ T8678] veth1_macvtap: entered promiscuous mode [ 484.462030][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.541608][ T8651] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.658017][ T8678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.684234][ T6330] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.692717][ T6330] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.708272][ T6330] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.725069][ T8678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.725162][ T6330] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.841522][ T1125] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.895282][ T1125] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.910521][ T8700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 484.911199][ T1125] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.052334][ T1125] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.016527][ T8700] 8021q: adding VLAN 0 to HW filter on device team0 [ 486.172970][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.172989][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.189586][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.208165][ T4272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.444220][ T8731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 486.468389][ T6330] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.468610][ T6330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 486.648527][ T6330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.648559][ T6330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.906369][ T8731] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.034131][ T2687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.034153][ T2687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.075510][ T2687] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.075643][ T2687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.290292][ T2687] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.292133][ T2687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.313028][ T149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 488.313051][ T149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.988016][ T5601] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 490.162928][ T5601] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 490.241591][ T9032] fido_id[9032]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 490.945411][ T66] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.115915][ T5607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 491.200637][ T5607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 491.610800][ T5607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 492.029763][ T5607] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 492.031495][ T5607] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 493.187521][ T66] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.223598][ T5951] kworker/u8:18 (5951) used greatest stack depth: 18360 bytes left [ 494.172551][ T5724] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 494.337349][ T5724] usb 9-1: Using ep0 maxpacket: 16 [ 494.343061][ T5724] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 494.343090][ T5724] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 494.346745][ T5724] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 494.346776][ T5724] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.346797][ T5724] usb 9-1: Product: syz [ 494.346811][ T5724] usb 9-1: Manufacturer: syz [ 494.346825][ T5724] usb 9-1: SerialNumber: syz [ 494.371795][ T66] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.469964][ T5724] usb 9-1: 0:2 : does not exist [ 494.470019][ T5724] usb 9-1: unit 6 not found! [ 494.510628][ T5602] Bluetooth: hci3: command tx timeout [ 494.517528][ T8731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.562090][ T8700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 494.572240][ T821] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 494.743274][ T821] usb 10-1: Using ep0 maxpacket: 32 [ 494.748498][ T821] usb 10-1: config 0 has an invalid interface number: 51 but max is 0 [ 494.748531][ T821] usb 10-1: config 0 has no interface number 0 [ 494.754209][ T821] usb 10-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 494.754240][ T821] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.754258][ T821] usb 10-1: Product: syz [ 494.754270][ T821] usb 10-1: Manufacturer: syz [ 494.754284][ T821] usb 10-1: SerialNumber: syz [ 494.783790][ T821] usb 10-1: config 0 descriptor?? [ 494.824135][ T821] quatech2 10-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 495.135213][ T66] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.217692][ T5724] usb 9-1: USB disconnect, device number 2 [ 495.264377][ T821] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 495.514611][ C1] usb 10-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 495.661120][ T821] usb 10-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 495.698650][ T821] usb 10-1: USB disconnect, device number 2 [ 495.821871][ T8700] veth0_vlan: entered promiscuous mode [ 496.202268][ T8700] veth1_vlan: entered promiscuous mode [ 496.394747][ T821] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 496.827292][ T9116] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.851768][ T9116] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.204078][ T5602] Bluetooth: hci3: command tx timeout [ 497.699338][ T821] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 497.702566][ T821] quatech2 10-1:0.51: device disconnected [ 497.850197][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 498.066746][ T5724] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 498.430728][ T5724] usb 9-1: Using ep0 maxpacket: 32 [ 498.433851][ T5724] usb 9-1: config 0 has an invalid interface number: 51 but max is 0 [ 498.433882][ T5724] usb 9-1: config 0 has no interface number 0 [ 498.462638][ T5724] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 498.462675][ T5724] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.462697][ T5724] usb 9-1: Product: syz [ 498.462711][ T5724] usb 9-1: Manufacturer: syz [ 498.462726][ T5724] usb 9-1: SerialNumber: syz [ 499.128667][ T5724] usb 9-1: config 0 descriptor?? [ 499.188255][ T5724] quatech2 9-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 499.373598][ T5602] Bluetooth: hci3: command tx timeout [ 499.673251][ C1] usb 9-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 499.711118][ T5724] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 499.744745][ T5724] usb 9-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 499.778850][ T5724] usb 9-1: USB disconnect, device number 3 [ 499.796570][ T5724] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 499.824512][ T5724] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 499.825642][ T5724] quatech2 9-1:0.51: device disconnected [ 500.595036][ T8700] veth0_macvtap: entered promiscuous mode [ 500.941294][ T5710] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 501.101400][ T5710] usb 9-1: Using ep0 maxpacket: 32 [ 501.103564][ T5710] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 501.103594][ T5710] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 501.103626][ T5710] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 501.103640][ T5710] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.116610][ T5710] usb 9-1: config 0 descriptor?? [ 501.168147][ T5710] hub 9-1:0.0: USB hub found [ 501.339230][ T66] bridge_slave_1: left allmulticast mode [ 501.339270][ T66] bridge_slave_1: left promiscuous mode [ 501.339570][ T66] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.443416][ T5710] hub 9-1:0.0: config failed, can't read hub descriptor (err -90) [ 501.470588][ T66] bridge_slave_0: left allmulticast mode [ 501.470627][ T66] bridge_slave_0: left promiscuous mode [ 501.470909][ T66] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.592962][ T5602] Bluetooth: hci3: command tx timeout [ 501.677376][ T5710] usbhid 9-1:0.0: can't add hid device: -71 [ 501.677505][ T5710] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 501.722719][ T5710] usb 9-1: USB disconnect, device number 4 [ 502.557977][ T5897] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 502.807464][ T5897] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 502.807495][ T5897] usb 10-1: config 1 has no interface number 0 [ 502.807544][ T5897] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 502.807584][ T5897] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 96 [ 502.818280][ T5897] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 502.818315][ T5897] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.818335][ T5897] usb 10-1: Product: syz [ 502.818349][ T5897] usb 10-1: Manufacturer: syz [ 502.818364][ T5897] usb 10-1: SerialNumber: syz [ 502.903771][ T9161] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 502.903887][ T9161] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 502.955990][ T5897] usb 10-1: Error in usbnet_get_endpoints (-22) [ 503.239458][ T66] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.315314][ T66] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.358648][ T66] bond0 (unregistering): Released all slaves [ 503.436062][ T8700] veth1_macvtap: entered promiscuous mode [ 503.524421][ T8731] veth0_vlan: entered promiscuous mode [ 503.591280][ T821] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 503.706399][ T8731] veth1_vlan: entered promiscuous mode [ 503.752912][ T821] usb 9-1: Using ep0 maxpacket: 32 [ 503.755504][ T821] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 503.755531][ T821] usb 9-1: config 0 has no interfaces? [ 503.758684][ T821] usb 9-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 503.758712][ T821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.758731][ T821] usb 9-1: Product: syz [ 503.758745][ T821] usb 9-1: Manufacturer: syz [ 503.758759][ T821] usb 9-1: SerialNumber: syz [ 503.819236][ T821] usb 9-1: config 0 descriptor?? [ 503.833489][ T8700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.386435][ T8700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.610623][ T6330] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.616588][ T5791] usb 10-1: USB disconnect, device number 3 [ 504.997283][ T9226] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(6) [ 504.997314][ T9226] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 504.997413][ T9226] vhci_hcd vhci_hcd.0: Device attached [ 505.041703][ T9226] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(8) [ 505.041733][ T9226] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 505.041847][ T9226] vhci_hcd vhci_hcd.0: Device attached [ 505.045807][ T9226] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(10) [ 505.045836][ T9226] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 505.045891][ T9226] vhci_hcd vhci_hcd.0: Device attached [ 505.053036][ T9226] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 505.061218][ T9226] vhci_hcd vhci_hcd.0: pdev(9) rhport(3) sockfd(15) [ 505.061245][ T9226] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 505.061365][ T9226] vhci_hcd vhci_hcd.0: Device attached [ 505.243452][ T6330] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.368939][ T6330] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.439997][ T5791] usb 52-1: SetAddress Request (2) to port 0 [ 505.440099][ T5791] usb 52-1: new SuperSpeed USB device number 2 using vhci_hcd [ 505.464557][ T5710] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 505.483185][ T6330] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.696331][ T5710] usb 10-1: Using ep0 maxpacket: 8 [ 505.785116][ T9226] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 505.900941][ T66] hsr_slave_0: left promiscuous mode [ 505.942266][ T66] hsr_slave_1: left promiscuous mode [ 505.975490][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.975520][ T66] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.002505][ T66] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 506.002534][ T66] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 506.288214][ T66] veth1_macvtap: left promiscuous mode [ 506.288324][ T66] veth0_macvtap: left promiscuous mode [ 506.288568][ T66] veth1_vlan: left promiscuous mode [ 506.288729][ T66] veth0_vlan: left promiscuous mode [ 506.673699][ T5819] usb 9-1: USB disconnect, device number 5 [ 507.449382][ T9262] netlink: 'syz.8.742': attribute type 21 has an invalid length. [ 507.449460][ T9262] netlink: 36 bytes leftover after parsing attributes in process `syz.8.742'. [ 508.519974][ T9226] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 508.785476][ T66] team0 (unregistering): Port device team_slave_1 removed [ 508.839967][ T66] team0 (unregistering): Port device team_slave_0 removed [ 509.451220][ T8731] veth0_macvtap: entered promiscuous mode [ 509.572410][ T9045] bridge0: port 1(bridge_slave_0) entered blocking state [ 509.572618][ T9045] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.572897][ T9045] bridge_slave_0: entered allmulticast mode [ 509.622384][ T9045] bridge_slave_0: entered promiscuous mode [ 510.114350][ T9249] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 510.114467][ T9249] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 510.120391][ T1338] ieee802154 phy0 wpan0: encryption failed: -22 [ 510.157986][ T1338] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.579355][ T8731] veth1_macvtap: entered promiscuous mode [ 510.629257][ T9045] bridge0: port 2(bridge_slave_1) entered blocking state [ 510.629486][ T9045] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.629744][ T9045] bridge_slave_1: entered allmulticast mode [ 510.639562][ T9045] bridge_slave_1: entered promiscuous mode [ 511.008145][ T9249] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 511.090339][ T5710] usb 10-1: unable to get BOS descriptor or descriptor too short [ 511.090437][ T5710] usb 10-1: no configurations [ 511.090450][ T5710] usb 10-1: can't read configurations, error -22 [ 511.208263][ T9249] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 511.208390][ T9249] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 511.294727][ T5710] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 511.481996][ T5710] usb 10-1: device descriptor read/64, error -32 [ 511.519102][ T9045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.551775][ T9045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 511.566077][ T9249] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 511.577793][ T8731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.595766][ T5710] usb usb10-port1: attempt power cycle [ 511.691297][ T5602] Bluetooth: hci2: command 0x0c1a tx timeout [ 511.804912][ T9249] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 511.804997][ T9249] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 511.931861][ T9249] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 511.965118][ T8731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.979912][ T5710] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 512.013594][ T5710] usb 10-1: device descriptor read/8, error -32 [ 512.061946][ T9045] team0: Port device team_slave_0 added [ 512.063739][ T9249] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 512.063928][ T9249] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 512.064003][ T9249] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 512.095993][ T9045] team0: Port device team_slave_1 added [ 512.189103][ T9249] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 512.289892][ T5710] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 512.309446][ T149] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.312945][ T5710] usb 10-1: device descriptor read/8, error -32 [ 512.330948][ T149] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.332123][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 512.332139][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.332168][ T9045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 512.381136][ T149] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.383587][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 512.383603][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 512.383628][ T9045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 512.386290][ T149] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.458967][ T5710] usb usb10-port1: unable to enumerate USB device [ 512.621962][ T9228] vhci_hcd: connection closed [ 512.643520][ T9230] vhci_hcd: connection reset by peer [ 512.643580][ T9234] vhci_hcd: connection closed [ 512.655658][ T9232] vhci_hcd: connection closed [ 512.765853][ T2687] vhci_hcd vhci_hcd.9: stop threads [ 512.765886][ T2687] vhci_hcd vhci_hcd.9: release socket [ 512.765975][ T2687] vhci_hcd vhci_hcd.9: disconnect device [ 512.766959][ T2687] vhci_hcd vhci_hcd.9: stop threads [ 512.766976][ T2687] vhci_hcd vhci_hcd.9: release socket [ 512.767111][ T2687] vhci_hcd vhci_hcd.9: disconnect device [ 512.767305][ T5791] usb 52-1: device descriptor read/8, error -110 [ 512.767413][ T2687] vhci_hcd vhci_hcd.9: stop threads [ 512.767428][ T2687] vhci_hcd vhci_hcd.9: release socket [ 512.767505][ T2687] vhci_hcd vhci_hcd.9: disconnect device [ 512.767728][ T2687] vhci_hcd vhci_hcd.9: stop threads [ 512.767742][ T2687] vhci_hcd vhci_hcd.9: release socket [ 512.767812][ T2687] vhci_hcd vhci_hcd.9: disconnect device [ 513.801575][ T9045] hsr_slave_0: entered promiscuous mode [ 513.803204][ T9045] hsr_slave_1: entered promiscuous mode [ 513.806126][ T9045] debugfs: 'hsr0' already exists in 'hsr' [ 513.806154][ T9045] Cannot create hsr debugfs directory [ 513.903245][ T5602] Bluetooth: hci2: command 0x0c1a tx timeout [ 513.985211][ T5602] Bluetooth: hci4: command 0x0c1a tx timeout [ 513.989248][ T5602] Bluetooth: hci1: command 0x0c1a tx timeout [ 513.996872][ T5785] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 514.042886][ T9] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 514.136656][ T4272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.136679][ T4272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.142595][ T9307] netlink: 'syz.8.747': attribute type 4 has an invalid length. [ 514.207277][ T9] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 514.207299][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.207310][ T9] usb 10-1: Product: syz [ 514.207318][ T9] usb 10-1: Manufacturer: syz [ 514.207326][ T9] usb 10-1: SerialNumber: syz [ 514.211454][ T9] usb 10-1: config 0 descriptor?? [ 514.245198][ T5602] Bluetooth: hci3: command 0x0c1a tx timeout [ 514.465094][ T9] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 514.955672][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.955695][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.103351][ T5791] usb usb52-port1: attempt power cycle [ 515.273979][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.274002][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.573391][ T9] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 515.721964][ T5791] usb usb52-port1: unable to enumerate USB device [ 515.806406][ T5791] usb 10-1: USB disconnect, device number 8 [ 515.926696][ T1227] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.926718][ T1227] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.141567][ T5602] Bluetooth: hci4: command 0x0c1a tx timeout [ 516.141621][ T5602] Bluetooth: hci2: command 0x0c1a tx timeout [ 516.215069][ T5607] Bluetooth: hci1: command 0x0c1a tx timeout [ 516.481370][ T5607] Bluetooth: hci3: command 0x0c1a tx timeout [ 516.843058][ T5791] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 516.902868][ T9326] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(9) [ 516.902898][ T9326] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 516.903015][ T9326] vhci_hcd vhci_hcd.0: Device attached [ 516.976184][ T9326] vhci_hcd vhci_hcd.0: pdev(9) rhport(1) sockfd(11) [ 516.976213][ T9326] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 516.976364][ T9337] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 516.979307][ T9326] vhci_hcd vhci_hcd.0: Device attached [ 517.014062][ T5791] usb 9-1: Using ep0 maxpacket: 32 [ 517.041641][ T5791] usb 9-1: config 0 has an invalid interface number: 67 but max is 0 [ 517.041672][ T5791] usb 9-1: config 0 has no interface number 0 [ 517.063332][ T9328] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(7) [ 517.063363][ T9328] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 517.063429][ T9328] vhci_hcd vhci_hcd.0: Device attached [ 517.108687][ T5791] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 517.108719][ T5791] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.108737][ T5791] usb 9-1: Product: syz [ 517.108752][ T5791] usb 9-1: Manufacturer: syz [ 517.108766][ T5791] usb 9-1: SerialNumber: syz [ 517.160598][ T5791] usb 9-1: config 0 descriptor?? [ 517.346800][ T5876] usb 52-1: SetAddress Request (6) to port 0 [ 517.346898][ T5876] usb 52-1: new SuperSpeed USB device number 6 using vhci_hcd [ 517.422892][ T5875] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 517.697482][ T5875] usb 10-1: Using ep0 maxpacket: 8 [ 517.721690][ T5791] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 517.721723][ T5791] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 517.757470][ T9326] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 517.814471][ T36] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 517.955043][ T5607] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 517.975770][ T36] usb 2-1: Using ep0 maxpacket: 8 [ 517.981851][ T36] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 517.981881][ T36] usb 2-1: config 0 has no interface number 0 [ 517.982010][ T36] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 517.982036][ T36] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 517.982062][ T36] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 517.982088][ T36] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 517.982182][ T36] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 517.982197][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.121230][ T36] usb 2-1: config 0 descriptor?? [ 518.437511][ T5607] Bluetooth: hci1: command 0x0c1a tx timeout [ 518.691577][ T5607] Bluetooth: hci3: command 0x0c1a tx timeout [ 518.749676][ T5791] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 518.750054][ T5791] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71 [ 518.812497][ T5791] usb 9-1: USB disconnect, device number 6 [ 519.344952][ T9045] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.515778][ T36] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 519.623583][ T36] usb 2-1: USB disconnect, device number 2 [ 519.873294][ T9326] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 519.879144][ T36] ldusb 2-1:0.55: LD USB Device #0 now disconnected [ 520.235841][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 520.356309][ T9328] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 520.358557][ T9328] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 520.361857][ T9328] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 520.364613][ T9328] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 520.366790][ T9328] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 520.544117][ T5875] usb 10-1: unable to get BOS descriptor or descriptor too short [ 520.544215][ T5875] usb 10-1: no configurations [ 520.544227][ T5875] usb 10-1: can't read configurations, error -22 [ 520.560953][ T9334] vhci_hcd: connection closed [ 520.566271][ T9330] vhci_hcd: connection reset by peer [ 520.566557][ T9339] vhci_hcd: connection closed [ 520.573025][ T68] vhci_hcd vhci_hcd.9: stop threads [ 520.573056][ T68] vhci_hcd vhci_hcd.9: release socket [ 520.573131][ T68] vhci_hcd vhci_hcd.9: disconnect device [ 520.596287][ T68] vhci_hcd vhci_hcd.9: stop threads [ 520.596312][ T68] vhci_hcd vhci_hcd.9: release socket [ 520.596401][ T68] vhci_hcd vhci_hcd.9: disconnect device [ 520.602089][ T68] vhci_hcd vhci_hcd.9: stop threads [ 520.602112][ T68] vhci_hcd vhci_hcd.9: release socket [ 520.602173][ T68] vhci_hcd vhci_hcd.9: disconnect device [ 520.743136][ T36] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 520.945993][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 520.948884][ T36] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.948912][ T36] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.953362][ T36] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 520.953393][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.953413][ T36] usb 2-1: Product: syz [ 520.953428][ T36] usb 2-1: Manufacturer: syz [ 520.953442][ T36] usb 2-1: SerialNumber: syz [ 521.081733][ T36] usb 2-1: 0:2 : does not exist [ 521.083565][ T36] usb 2-1: unit 6 not found! [ 521.496946][ T36] usb 2-1: USB disconnect, device number 3 [ 521.522838][ T9045] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.868129][ T5801] udevd[5801]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 522.537844][ T5607] Bluetooth: hci3: command 0x0c1a tx timeout [ 522.537895][ T5607] Bluetooth: hci1: command 0x0c1a tx timeout [ 522.537924][ T5607] Bluetooth: hci4: command 0x0c1a tx timeout [ 522.537953][ T5607] Bluetooth: hci2: command 0x0c1a tx timeout [ 522.795271][ T5876] usb 52-1: device descriptor read/8, error -110 [ 522.986596][ T5897] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 523.007794][ T31] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 523.171221][ T31] usb 5-1: Using ep0 maxpacket: 32 [ 523.174563][ T31] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 523.174594][ T31] usb 5-1: config 0 has no interface number 0 [ 523.202437][ T31] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 523.202472][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.202492][ T31] usb 5-1: Product: syz [ 523.202507][ T31] usb 5-1: Manufacturer: syz [ 523.202521][ T31] usb 5-1: SerialNumber: syz [ 523.248526][ T31] usb 5-1: config 0 descriptor?? [ 523.344845][ T9045] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.403463][ T5819] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 523.592028][ T5819] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 523.592058][ T5819] usb 10-1: config 1 has no interface number 0 [ 523.592101][ T5819] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 523.592126][ T5819] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0xE has invalid maxpacket 96 [ 523.595225][ T5819] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 523.595274][ T5819] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.595304][ T5819] usb 10-1: Product: syz [ 523.595320][ T5819] usb 10-1: Manufacturer: syz [ 523.595335][ T5819] usb 10-1: SerialNumber: syz [ 523.597415][ T5791] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 523.672992][ T9372] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 523.674835][ T9372] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 523.693264][ T5819] usb 10-1: Error in usbnet_get_endpoints (-22) [ 523.724889][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 523.724922][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 523.787903][ T5791] usb 9-1: Using ep0 maxpacket: 16 [ 523.919355][ T5791] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 523.919395][ T5791] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 523.919414][ T5791] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 523.968571][ T5791] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 523.968616][ T5791] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.968635][ T5791] usb 9-1: Product: syz [ 523.968649][ T5791] usb 9-1: Manufacturer: syz [ 523.968663][ T5791] usb 9-1: SerialNumber: syz [ 524.128064][ T5876] usb usb52-port1: attempt power cycle [ 524.191610][ T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 524.191965][ T31] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 524.447886][ T5791] usb 9-1: 0:2 : does not exist [ 524.839501][ T5876] usb usb52-port1: unable to enumerate USB device [ 524.927442][ T9045] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.232862][ T5791] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 525.414234][ T5819] usb 10-1: USB disconnect, device number 11 [ 525.427159][ T5791] usb 2-1: Using ep0 maxpacket: 16 [ 525.489154][ T5791] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 525.489184][ T5791] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.489203][ T5791] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 525.544728][ T5791] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 525.544750][ T5791] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.544761][ T5791] usb 2-1: Product: syz [ 525.544769][ T5791] usb 2-1: Manufacturer: syz [ 525.544777][ T5791] usb 2-1: SerialNumber: syz [ 525.781622][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 525.900882][ T5791] usb 2-1: 0:2 : does not exist [ 526.076967][ T9281] usb 5-1: USB disconnect, device number 20 [ 526.621081][ T9281] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 526.724766][ T5791] usb 2-1: 1:0: failed to get current value for ch 0 (-22) [ 526.782483][ T9281] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 526.782539][ T9281] usb 5-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 526.782563][ T9281] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 526.814002][ T7039] usb 9-1: USB disconnect, device number 7 [ 526.927415][ T9281] usb 5-1: config 0 descriptor?? [ 526.928521][ T9411] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 527.469909][ T9281] hid (null): unknown global tag 0x27 [ 528.246019][ T9281] wacom 0003:056A:0084.0004: unknown main item tag 0x0 [ 528.246057][ T9281] wacom 0003:056A:0084.0004: unknown main item tag 0x0 [ 528.246082][ T9281] wacom 0003:056A:0084.0004: unknown main item tag 0x0 [ 528.246107][ T9281] wacom 0003:056A:0084.0004: unknown main item tag 0x0 [ 528.246130][ T9281] wacom 0003:056A:0084.0004: unknown main item tag 0x0 [ 528.246153][ T9281] wacom 0003:056A:0084.0004: unknown main item tag 0x0 [ 528.246178][ T9281] wacom 0003:056A:0084.0004: unknown main item tag 0x0 [ 528.246203][ T9281] wacom 0003:056A:0084.0004: unknown main item tag 0x0 [ 528.246228][ T9281] wacom 0003:056A:0084.0004: unknown main item tag 0x0 [ 528.246253][ T9281] wacom 0003:056A:0084.0004: unknown main item tag 0x0 [ 528.246768][ T9281] wacom 0003:056A:0084.0004: unexpected long global item [ 528.368761][ T9281] wacom 0003:056A:0084.0004: parse failed [ 528.368894][ T9281] wacom 0003:056A:0084.0004: probe with driver wacom failed with error -22 [ 528.407387][ T9281] usb 5-1: USB disconnect, device number 21 [ 528.712178][ T5791] usb 2-1: USB disconnect, device number 4 [ 529.451565][ T5876] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 529.494359][ T7039] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 529.611769][ T5876] usb 10-1: Using ep0 maxpacket: 16 [ 529.617714][ T5876] usb 10-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 529.617749][ T5876] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.617770][ T5876] usb 10-1: Product: syz [ 529.617784][ T5876] usb 10-1: Manufacturer: syz [ 529.617799][ T5876] usb 10-1: SerialNumber: syz [ 529.680674][ T7039] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024 [ 529.680729][ T7039] usb 9-1: New USB device found, idVendor=056a, idProduct=0084, bcdDevice= 0.00 [ 529.680755][ T7039] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.728699][ T9444] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 529.793157][ T5876] usb 10-1: config 0 descriptor?? [ 529.812991][ T7039] usb 9-1: config 0 descriptor?? [ 529.814162][ T9421] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 530.011194][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 [ 530.274459][ T5876] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 530.347926][ T5876] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 530.359312][ T5876] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 530.359377][ T5876] usb 10-1: media controller created [ 530.382827][ T9281] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 530.464164][ T5876] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 530.583881][ T5876] zl10353_read_register: readreg error (reg=127, ret==0) [ 530.583943][ T5876] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 530.583957][ T5876] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 530.605736][ T9281] usb 2-1: Using ep0 maxpacket: 16 [ 530.894620][ T9281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.894657][ T9281] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.894693][ T9281] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 530.894715][ T9281] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.969615][ T5876] usb 10-1: USB disconnect, device number 12 [ 532.099982][ T9281] usb 2-1: config 0 descriptor?? [ 533.396587][ T9045] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 533.481828][ T9281] corsair 0003:1B1C:1B02.0006: item fetching failed at offset 4/5 [ 533.482806][ T9281] corsair 0003:1B1C:1B02.0006: parse failed [ 533.488287][ T9281] corsair 0003:1B1C:1B02.0006: probe with driver corsair failed with error -22 [ 533.612288][ T5876] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 533.646237][ T9281] usb 2-1: USB disconnect, device number 5 [ 533.964013][ T7039] usb 9-1: USB disconnect, device number 8 [ 533.966904][ T9045] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 534.062436][ T9045] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 534.206788][ T5876] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 534.242975][ T9045] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 534.320234][ T9045] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 534.636350][ T5876] usb 10-1: Using ep0 maxpacket: 16 [ 534.640886][ T5876] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 534.640914][ T5876] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.640934][ T5876] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 534.644135][ T5876] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 534.644165][ T5876] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.644186][ T5876] usb 10-1: Product: syz [ 534.644201][ T5876] usb 10-1: Manufacturer: syz [ 534.644215][ T5876] usb 10-1: SerialNumber: syz [ 534.766838][ T9045] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 534.786853][ T5876] usb 10-1: 0:2 : does not exist [ 534.841724][ T9045] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 535.049966][ T9045] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 535.539750][ T9482] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 535.539783][ T9482] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 535.586319][ T9482] vhci_hcd vhci_hcd.0: Device attached [ 535.622836][ T9482] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 535.622866][ T9482] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 535.622974][ T9482] vhci_hcd vhci_hcd.0: Device attached [ 535.665289][ T9482] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(10) [ 535.665319][ T9482] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 535.665491][ T9482] vhci_hcd vhci_hcd.0: Device attached [ 535.668015][ T9482] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 535.863738][ T5876] usb 41-1: new low-speed USB device number 4 using vhci_hcd [ 535.939836][ T5791] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 535.942001][ T9045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.124796][ T9045] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.162417][ T5791] usb 5-1: Using ep0 maxpacket: 8 [ 536.195491][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.195740][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.295657][ T9482] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 536.320305][ T6330] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.320557][ T6330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.480164][ T9499] ------------[ cut here ]------------ [ 536.480181][ T9499] workqueue: cannot queue hci_rx_work on wq hci0 [ 536.480211][ T9499] WARNING: kernel/workqueue.c:2298 at __queue_work+0xd5c/0x1010, CPU#0: syz.4.786/9499 [ 536.480256][ T9499] Modules linked in: [ 536.480276][ T9499] CPU: 0 UID: 0 PID: 9499 Comm: syz.4.786 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 536.480300][ T9499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 536.480313][ T9499] RIP: 0010:__queue_work+0xd87/0x1010 [ 536.480337][ T9499] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 8a 62 9e 00 49 8b 75 00 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 01 7b [ 536.480356][ T9499] RSP: 0018:ffffc9000426fb20 EFLAGS: 00010082 [ 536.480374][ T9499] RAX: 1ffff1100c01717d RBX: 0000000000000008 RCX: 0000000000080000 [ 536.480390][ T9499] RDX: ffff888063775168 RSI: ffffffff8a100ea0 RDI: ffffffff8f8bc170 [ 536.480406][ T9499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 536.480418][ T9499] R10: dffffc0000000000 R11: ffffed100c01717b R12: dffffc0000000000 [ 536.480434][ T9499] R13: ffff8880600b8be8 R14: ffffffff8f8bc170 R15: ffff888063775168 [ 536.480450][ T9499] FS: 00007ff78d8c46c0(0000) GS:ffff888126176000(0000) knlGS:0000000000000000 [ 536.480469][ T9499] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 536.480484][ T9499] CR2: 00007f6903b36068 CR3: 000000003e142000 CR4: 00000000003526f0 [ 536.480505][ T9499] Call Trace: [ 536.480513][ T9499] [ 536.480528][ T9499] ? rcu_is_watching+0x15/0xb0 [ 536.480566][ T9499] queue_work_on+0x106/0x1d0 [ 536.480608][ T9499] hci_recv_frame+0x625/0x7c0 [ 536.480633][ T9499] ? skb_pull+0xc1/0x1d0 [ 536.480667][ T9499] vhci_write+0x35a/0x4a0 [ 536.480703][ T9499] vfs_write+0x629/0xba0 [ 536.480736][ T9499] ? __pfx_vfs_write+0x10/0x10 [ 536.480769][ T9499] ? __fget_files+0x2a/0x420 [ 536.480797][ T9499] ksys_write+0x156/0x270 [ 536.480822][ T9499] ? __pfx_ksys_write+0x10/0x10 [ 536.480853][ T9499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.480874][ T9499] do_syscall_64+0x15f/0xf80 [ 536.480898][ T9499] ? trace_irq_disable+0x3b/0x140 [ 536.480922][ T9499] ? clear_bhb_loop+0x40/0x90 [ 536.480948][ T9499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.480969][ T9499] RIP: 0033:0x7ff78f66d60e [ 536.480988][ T9499] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 536.481006][ T9499] RSP: 002b:00007ff78d8c3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 536.481026][ T9499] RAX: ffffffffffffffda RBX: 00007ff78d8c46c0 RCX: 00007ff78f66d60e [ 536.481041][ T9499] RDX: 0000000000000007 RSI: 0000200000000400 RDI: 00000000000000ca [ 536.481053][ T9499] RBP: 00007ff78f742d69 R08: 0000000000000000 R09: 0000000000000000 [ 536.481064][ T9499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.481075][ T9499] R13: 00007ff78f926218 R14: 00007ff78f926180 R15: 00007ffd47a9b3f8 [ 536.481105][ T9499] [ 536.481115][ T9499] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 536.481130][ T9499] CPU: 0 UID: 0 PID: 9499 Comm: syz.4.786 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 536.481153][ T9499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 536.481165][ T9499] Call Trace: [ 536.481172][ T9499] [ 536.481178][ T9499] vpanic+0x56c/0xa60 [ 536.481202][ T9499] ? __pfx__printk+0x10/0x10 [ 536.481230][ T9499] ? __pfx_vpanic+0x10/0x10 [ 536.481254][ T9499] ? is_bpf_text_address+0x292/0x2b0 [ 536.481277][ T9499] ? is_bpf_text_address+0x26/0x2b0 [ 536.481312][ T9499] panic+0xc5/0xd0 [ 536.481332][ T9499] ? __pfx_panic+0x10/0x10 [ 536.481372][ T9499] __warn+0x315/0x4c0 [ 536.481393][ T9499] ? __queue_work+0xd5c/0x1010 [ 536.481417][ T9499] ? __queue_work+0xd5c/0x1010 [ 536.481443][ T9499] __report_bug+0x29a/0x540 [ 536.481473][ T9499] ? __queue_work+0xd5c/0x1010 [ 536.481499][ T9499] ? __pfx___report_bug+0x10/0x10 [ 536.481522][ T9499] ? __pfx_hci_rx_work+0x10/0x10 [ 536.481557][ T9499] ? __lock_acquire+0x6b5/0x2cf0 [ 536.481597][ T9499] report_bug_entry+0x19a/0x290 [ 536.481623][ T9499] ? __queue_work+0xd87/0x1010 [ 536.481646][ T9499] ? __queue_work+0xd8c/0x1010 [ 536.481668][ T9499] handle_bug+0xce/0x200 [ 536.481699][ T9499] exc_invalid_op+0x1a/0x50 [ 536.481727][ T9499] asm_exc_invalid_op+0x1a/0x20 [ 536.481747][ T9499] RIP: 0010:__queue_work+0xd87/0x1010 [ 536.481771][ T9499] Code: 83 c5 18 4c 89 e8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ef e8 8a 62 9e 00 49 8b 75 00 49 81 c7 68 01 00 00 4c 89 f7 4c 89 fa <67> 48 0f b9 3a 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d e9 01 7b [ 536.481789][ T9499] RSP: 0018:ffffc9000426fb20 EFLAGS: 00010082 [ 536.481807][ T9499] RAX: 1ffff1100c01717d RBX: 0000000000000008 RCX: 0000000000080000 [ 536.481822][ T9499] RDX: ffff888063775168 RSI: ffffffff8a100ea0 RDI: ffffffff8f8bc170 [ 536.481837][ T9499] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 536.481849][ T9499] R10: dffffc0000000000 R11: ffffed100c01717b R12: dffffc0000000000 [ 536.481865][ T9499] R13: ffff8880600b8be8 R14: ffffffff8f8bc170 R15: ffff888063775168 [ 536.481891][ T9499] ? __pfx_hci_rx_work+0x10/0x10 [ 536.481926][ T9499] ? rcu_is_watching+0x15/0xb0 [ 536.481961][ T9499] queue_work_on+0x106/0x1d0 [ 536.481991][ T9499] hci_recv_frame+0x625/0x7c0 [ 536.482016][ T9499] ? skb_pull+0xc1/0x1d0 [ 536.482049][ T9499] vhci_write+0x35a/0x4a0 [ 536.482085][ T9499] vfs_write+0x629/0xba0 [ 536.482117][ T9499] ? __pfx_vfs_write+0x10/0x10 [ 536.482151][ T9499] ? __fget_files+0x2a/0x420 [ 536.482179][ T9499] ksys_write+0x156/0x270 [ 536.482206][ T9499] ? __pfx_ksys_write+0x10/0x10 [ 536.482238][ T9499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.482261][ T9499] do_syscall_64+0x15f/0xf80 [ 536.482285][ T9499] ? trace_irq_disable+0x3b/0x140 [ 536.482309][ T9499] ? clear_bhb_loop+0x40/0x90 [ 536.482335][ T9499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 536.482355][ T9499] RIP: 0033:0x7ff78f66d60e [ 536.482372][ T9499] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 536.482389][ T9499] RSP: 002b:00007ff78d8c3fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 536.482409][ T9499] RAX: ffffffffffffffda RBX: 00007ff78d8c46c0 RCX: 00007ff78f66d60e [ 536.482424][ T9499] RDX: 0000000000000007 RSI: 0000200000000400 RDI: 00000000000000ca [ 536.482437][ T9499] RBP: 00007ff78f742d69 R08: 0000000000000000 R09: 0000000000000000 [ 536.482450][ T9499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 536.482463][ T9499] R13: 00007ff78f926218 R14: 00007ff78f926180 R15: 00007ffd47a9b3f8 [ 536.482493][ T9499] [ 536.483006][ T9499] Kernel Offset: disabled