last executing test programs: 6m8.115047697s ago: executing program 0 (id=1054): bpf$PROG_LOAD(0x5, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x41, 0x1ff) fcntl$setlease(r2, 0x400, 0x1) r3 = landlock_create_ruleset(&(0x7f0000000040)={0x4000, 0x3}, 0x18, 0x0) landlock_restrict_self(r3, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) 6m6.643546412s ago: executing program 0 (id=1059): capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x1ab, 0x0, &(0x7f0000001300)="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", 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x9cf}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x2) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 6m6.494007413s ago: executing program 0 (id=1061): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmmsg(r4, &(0x7f0000002940)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x9, 0xff, 0x8, 0x7, @local}, 0x80, &(0x7f0000000980)}}, {{&(0x7f00000013c0)=@x25, 0x80, &(0x7f0000001540)=[{0x0}], 0x1, 0x0, 0x13b0}}], 0x2, 0x0) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0xc002e38, 0x7ff, 0x80, 0x14000, 0xa79, 0x0, 0x0, 0x100}}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcd5, 0x0, 0x0, r1}) 6m5.696213044s ago: executing program 0 (id=1062): syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close(0x3) socket$netlink(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x10) read$char_usb(r0, 0x0, 0x0) 6m1.148795201s ago: executing program 0 (id=1080): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) shutdown(r0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) 6m0.472453719s ago: executing program 0 (id=1084): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, 0x0) syz_open_dev$vim2m(0x0, 0x20000000fe, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x10448) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2b;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\xd2\a\x11\xa9\xa5^\xff\xf5\x9e\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%\x94F%\x12\x9d\xbcB$\xe9\xf9\xf7\x19N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdn\x00'/140, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0xb272, 0x74, 0x0, 0x0) 5m45.377504442s ago: executing program 32 (id=1084): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x1214040, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc0189374, 0x0) syz_open_dev$vim2m(0x0, 0x20000000fe, 0x2) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x10448) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2b;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\xd2\a\x11\xa9\xa5^\xff\xf5\x9e\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%\x94F%\x12\x9d\xbcB$\xe9\xf9\xf7\x19N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdn\x00'/140, 0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0xb272, 0x74, 0x0, 0x0) 4m47.05557605s ago: executing program 1 (id=1636): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x41000, 0xa8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x26}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000680)=@ethtool_drvinfo={0x3, "4c8c7347e32aa9e1919c70c199bc62daad66ce3db4830992be0a07d0e2edda49", "43ef0626e0c081542132d0ce4926e3c71697d7b2861b69fd144fbdd555d2b463", "48fc56f4f7189546b945e630bca6536abb8675503d0db872c33a48925fe26d22", "caf0c036527a0de8195ff3b19db6bee4baa2f54d3422c3f42344f6ba6e042706", "b5e2c9e1b009a67f0335ead0bda0c05ce1595fe59060e5efc038ddc648d30394", "356b668d9c9fd670b74d5817", 0xa51d, 0x612780, 0x4, 0x2, 0x7}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x14) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040), 0x0, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) sendto$packet(r2, &(0x7f00000002c0)="05031600d3fc140000004788031c09103c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 4m46.804383594s ago: executing program 1 (id=1640): sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x2}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x1b8}) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis256-generic\x00'}, 0x58) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x0) io_uring_enter(r0, 0x80002219, 0x7721, 0x16, 0x0, 0xf2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xcc}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) 4m45.380674528s ago: executing program 1 (id=1652): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000100)={0xa, 0x4e21, 0x80000, @loopback, 0xfffffffb}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@hopopts={{0x14, 0x29, 0x36, {0x67}}}], 0x14}, 0x1400c0c0) 4m45.286278443s ago: executing program 1 (id=1654): mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) 4m45.108688278s ago: executing program 1 (id=1657): r0 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)={'security\x00', 0x2, [{}, {}]}, 0x48) 4m44.503748699s ago: executing program 1 (id=1667): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c05c}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="b1", 0x1}], 0x1, 0x0, 0x0, 0xc810}}], 0x2, 0x2000c080) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4m44.063293825s ago: executing program 33 (id=1667): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmmsg$unix(r0, &(0x7f00000030c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c05c}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="b1", 0x1}], 0x1, 0x0, 0x0, 0xc810}}], 0x2, 0x2000c080) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4m9.940839607s ago: executing program 5 (id=1937): sendmsg$IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="01002cbd7000fbdbdf25"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x80) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01"], 0x0, 0x0, 0x0, 0x0}, 0x0) 4m5.95962765s ago: executing program 5 (id=1944): mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049", @ANYBLOB=',rootmode=00000000000000000040000,user_', @ANYBLOB=',group_i', @ANYRESDEC=0x0, @ANYBLOB=',']) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000340), 0x0, 0x100, 0x9}], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f", 0xae}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}], 0xb8, 0x40800}], 0x1, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4m4.645420298s ago: executing program 5 (id=1949): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) pipe2(0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002940)=[{{&(0x7f0000000240)=@llc={0x1a, 0x0, 0x9, 0xff, 0x8, 0x7, @local}, 0x80, &(0x7f0000000980)}}, {{&(0x7f00000013c0)=@x25, 0x80, 0x0}}], 0x2, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x1, 0xc002e38, 0x7ff, 0x80, 0x14000, 0xa79, 0x0, 0x0, 0x100}}, 0x50) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) openat$panthor(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r0, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffcd5, 0x0, 0x0, r1}) 4m3.29975775s ago: executing program 5 (id=1950): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180200001e0000000000000000"], &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x40f00, 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x94}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x15, 0x0, 0x4000000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000}, 0x94) 4m2.567452203s ago: executing program 5 (id=1951): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) close_range(r0, 0xffffffffffffffff, 0x0) 4m2.481442241s ago: executing program 5 (id=1952): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 3m47.288765008s ago: executing program 34 (id=1952): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 12.784783688s ago: executing program 4 (id=2619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() openat$ppp(0xffffffffffffff9c, 0x0, 0x400, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x9) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) accept(r4, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r7, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) sendmsg$nl_xfrm(r3, 0x0, 0x844) 7.927823948s ago: executing program 7 (id=2636): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000080)="2481", 0x2}], 0x1}, 0x2004085) close(0x4) 7.744204488s ago: executing program 7 (id=2638): gettid() fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = eventfd2(0x74a6, 0x0) writev(r0, &(0x7f0000001780)=[{&(0x7f0000000280)="00ffffffffffffff", 0x8}], 0x1) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0xf}, 0x1c) 6.865003467s ago: executing program 2 (id=2640): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10) listen(r0, 0x2005) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000001600)}}, {{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000400)}], 0x2}}], 0x2, 0x48045) pipe2(0x0, 0x80000) pipe2(0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) socket(0x2, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r5, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 5.423439005s ago: executing program 2 (id=2643): io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000fb266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a73, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.411441054s ago: executing program 4 (id=2645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000001080)={0x2, 0x4624, @remote}, 0x10) r6 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r6, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0xf, @name="211ac0912fb1a36f4826fb7943a679c23dc6871e0875cc8f7b171f10622e1233"}) 5.299835443s ago: executing program 7 (id=2646): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000000) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000340), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)={0x34, r2, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 4.581556911s ago: executing program 7 (id=2647): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x3}, 0x7e) syz_emit_ethernet(0x186, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @dccp={{0x22, 0x4, 0x1, 0x0, 0x178, 0x68, 0x0, 0xce, 0x21, 0x0, @empty, @multicast2, {[@rr={0x7, 0x2b, 0x25, [@private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @remote, @remote, @private=0xa010100, @local, @broadcast, @broadcast, @broadcast]}, @generic={0x83, 0x2}, @timestamp={0x44, 0xc, 0x3e, 0x0, 0x1, [0x5, 0x7]}, @timestamp={0x44, 0x1c, 0x66, 0x0, 0x9, [0x5, 0xf, 0x10001, 0x8, 0x5, 0xfffffffd]}, @noop, @ra={0x94, 0x4}, @noop, @timestamp={0x44, 0x18, 0x84, 0x0, 0x4, [0x3, 0xd74c000, 0xb, 0x2, 0x2]}]}}, {{0x4e23, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x6, 0x6, "d10fe7", 0x9, "e1e6b6"}, "d0e9a7fea77b78e7c49c252e0b0a1f8ce7e3c5f40176c0ab53f4785a55c8b16ce3a4abbacf529e2303a543f7aaf55954a3967a819071a2b6d175c4cea7ef4260af826af47c12884d25f26d14aaafcba5c5fa6d4a8c572f9c890b8324d901489c0f64ea5a3e9dc311ff367bd3aa14bb4814eb7b9ebd7b418a6f541def28c0593467ca5761ec4eb92a44de165f74e6e482b1e7181697c2a25d2a8c20b455d40cda13c59cdbc0d680b7bc31ad3ee2379b3b0c2a1314fc8b754478835136045178857d560fc66a8350f09f80905d192e51f4a2bb7ed7e714ef31f9c6507e6dac91bf"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x12160, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000004c0)}, {&(0x7f0000000540)}, {&(0x7f00000005c0)="ff31783efd1847f158400fdb071fa932e14fce85caeec0320a20e037bce3bde5e1210c82a21c2f7ef5fa8fd038be8aa4ddf93bb8c97c6c65b2a075195cb4c81ac663d1f0d55ad98bdb037c31724e838c983442d615ae944737d7b03da28c08b00a59138f5859be5f4e2a444b36b7", 0x6e}, {&(0x7f0000000680)}, {&(0x7f0000000780)}], 0x5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) 4.094721973s ago: executing program 6 (id=2648): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$unix(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000080)="2481", 0x2}], 0x1}, 0x2004085) close(0x4) 4.038871186s ago: executing program 3 (id=2649): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000ab9ff0), 0x10) listen(r0, 0x2005) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x40, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000002a00)=[{{0x0, 0x0, &(0x7f0000001600)}}, {{0x0, 0x0, &(0x7f0000000580)=[{0x0}, {&(0x7f0000000400)}], 0x2}}], 0x2, 0x48045) pipe2(0x0, 0x80000) pipe2(0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="0600000004000000101000008900000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = socket(0x2, 0x2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write$bt_hci(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="01"], 0x7) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0x5832}) close_range(r0, 0xffffffffffffffff, 0x0) 3.87193752s ago: executing program 4 (id=2650): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121602, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x2000005, r1}, 0x38) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) 3.747552803s ago: executing program 6 (id=2651): io_uring_setup(0x671d, &(0x7f0000000080)={0x0, 0x8a74, 0x4000, 0x1, 0x5c}) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000a003000005"], 0x50) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0, 0x1800, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r1, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) r2 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FIOCLEX(r2, 0x5451) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x4a82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000140)={0x3, 0x5}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[], 0xa0}}, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 2.998030535s ago: executing program 4 (id=2652): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000002500), 0x0, 0x1000000007}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f0000000300)="d1", 0x1, 0x4d8000000000}) 2.971073788s ago: executing program 2 (id=2653): kexec_load(0x3, 0x2, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac1", 0x1e, 0x5, 0xffffffff}, {0x0, 0x0, 0x100, 0x9}], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)=',8Z', 0x3) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.842223741s ago: executing program 3 (id=2654): io_pgetevents(0x0, 0x7, 0x0, 0x0, 0x0, 0x0) io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x202, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000fb266b9ab0900000f32f2f031b3e759dc2c", 0x38}], 0x1, 0x9f6a364b3fac2a73, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.838907169s ago: executing program 4 (id=2655): openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) openat$ocfs2_control(0xffffff9c, &(0x7f0000000040), 0x40000, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8, @ANYBLOB="03"], 0x0) 2.767933713s ago: executing program 7 (id=2656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x4004880) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000841000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000075000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x23f}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.274167537s ago: executing program 6 (id=2657): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101842, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000005c0)) r1 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0x2, 0x235}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000f4688d8e5f000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x4, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r6 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f0000000000)={r6, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r7, 0x40086200, &(0x7f00000001c0)=0x1) close_range(r1, 0xffffffffffffffff, 0x0) 2.021190399s ago: executing program 4 (id=2658): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_setup(0x8, &(0x7f00000001c0)) 1.263083229s ago: executing program 6 (id=2659): io_uring_setup(0x671d, &(0x7f0000000080)={0x0, 0x8a74, 0x4000, 0x1, 0x5c}) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) r1 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FIOCLEX(r1, 0x5451) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) set_mempolicy(0x8000, &(0x7f0000000380)=0xfff, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[], 0xa0}}, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000280)={0x20, 0x0, &(0x7f0000000240)="6465f4e8458d0cc7e8bef4ee5cb8837a14e0a7bfa7b1a92916acc99fc597094208ec3a60e70ad816f8f7f693c43af2c0fb0930f449151430bdaa", 0x8000000000000000, 0x5}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 1.049954684s ago: executing program 2 (id=2660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6, 0x4, 0x60, 0x5}]}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c0003800800024000000000080001400000000018000380140001006d61630400633000000000000000000014000000110001"], 0x80}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x20, 0x17, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000800, &(0x7f0000001080)={0x2, 0x4624, @remote}, 0x10) r4 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(r4, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0xf, @name="211ac0912fb1a36f4826fb7943a679c23dc6871e0875cc8f7b171f10622e1233"}) 814.185693ms ago: executing program 3 (id=2661): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(0x0, r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[], 0xc) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1], 0x14) 615.03029ms ago: executing program 2 (id=2662): io_uring_setup(0x671d, &(0x7f0000000080)={0x0, 0x8a74, 0x4000, 0x1, 0x5c}) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000a003000005"], 0x50) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0, 0x1800, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r1, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) r2 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FIOCLEX(r2, 0x5451) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x4a82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r4, 0x3ba0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000140)={0x3, 0x5}) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) set_mempolicy(0x8000, &(0x7f0000000380)=0xfff, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000280)={0x20, 0x0, &(0x7f0000000240)="6465f4e8458d0cc7e8bef4ee5cb8837a14e0a7bfa7b1a92916acc99fc597094208ec3a60e70ad816f8f7f693c43af2c0fb0930f449151430bdaa", 0x8000000000000000, 0x5}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r8 = dup(r7) socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 443.562415ms ago: executing program 3 (id=2663): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000001080)={r2, @in={{0x2, 0x4e24, @local}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000001140)={r2, 0x5}, 0x8) 289.257385ms ago: executing program 3 (id=2664): r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00'}) sendmsg$nl_route(r1, 0x0, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 215.64274ms ago: executing program 6 (id=2665): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x181041, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000200)={0x28, 0x5, r1, 0x0, &(0x7f0000000a40)="7f", 0x1, 0x4}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000002c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ae0000/0x2000)=nil, 0x2000, 0x7}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f00000001c0)={0x28, 0x2, r1, 0x0, &(0x7f0000002500), 0x0, 0x1000000007}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000400)={0x28, 0x2, r1, 0x0, &(0x7f0000000300)="d1", 0x1, 0x4d8000000000}) 95.86514ms ago: executing program 2 (id=2666): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) mount_setattr(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x9000, &(0x7f0000000000)={0x0, 0x3}, 0x7e) syz_emit_ethernet(0x186, &(0x7f0000000400)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @dccp={{0x22, 0x4, 0x1, 0x0, 0x178, 0x68, 0x0, 0xce, 0x21, 0x0, @empty, @multicast2, {[@rr={0x7, 0x2b, 0x25, [@private=0xa010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x1b}, @remote, @remote, @private=0xa010100, @local, @broadcast, @broadcast, @broadcast]}, @generic={0x83, 0x2}, @timestamp={0x44, 0xc, 0x3e, 0x0, 0x1, [0x5, 0x7]}, @timestamp={0x44, 0x1c, 0x66, 0x0, 0x9, [0x5, 0xf, 0x10001, 0x8, 0x5, 0xfffffffd]}, @noop, @ra={0x94, 0x4}, @noop, @timestamp={0x44, 0x18, 0x84, 0x0, 0x4, [0x3, 0xd74c000, 0xb, 0x2, 0x2]}]}}, {{0x4e23, 0x4e22, 0x4, 0x1, 0x8, 0x0, 0x0, 0x6, 0x6, "d10fe7", 0x9, "e1e6b6"}, "d0e9a7fea77b78e7c49c252e0b0a1f8ce7e3c5f40176c0ab53f4785a55c8b16ce3a4abbacf529e2303a543f7aaf55954a3967a819071a2b6d175c4cea7ef4260af826af47c12884d25f26d14aaafcba5c5fa6d4a8c572f9c890b8324d901489c0f64ea5a3e9dc311ff367bd3aa14bb4814eb7b9ebd7b418a6f541def28c0593467ca5761ec4eb92a44de165f74e6e482b1e7181697c2a25d2a8c20b455d40cda13c59cdbc0d680b7bc31ad3ee2379b3b0c2a1314fc8b754478835136045178857d560fc66a8350f09f80905d192e51f4a2bb7ed7e714ef31f9c6507e6dac91bf"}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) recvmmsg(r1, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}, 0x81}], 0x1, 0x12160, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x1]}, 0x8, 0x0) read$eventfd(0xffffffffffffffff, &(0x7f0000000080), 0x8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000004c0)}, {&(0x7f0000000540)}, {&(0x7f00000005c0)="ff31783efd1847f158400fdb071fa932e14fce85caeec0320a20e037bce3bde5e1210c82a21c2f7ef5fa8fd038be8aa4ddf93bb8c97c6c65b2a075195cb4c81ac663d1f0d55ad98bdb037c31724e838c983442d615ae944737d7b03da28c08b00a59138f5859be5f4e2a444b36b7", 0x6e}, {&(0x7f0000000680)}, {&(0x7f0000000780)}], 0x5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r3, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="358742"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000001a40)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x33455aed6cbf4c1b) 43.933179ms ago: executing program 3 (id=2667): io_uring_setup(0x671d, &(0x7f0000000080)={0x0, 0x8a74, 0x4000, 0x1, 0x5c}) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2}}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000001000000a003000005"], 0x50) syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x0, 0x1800, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000640)={r1, &(0x7f0000000080), &(0x7f0000000540)=""/240}, 0x20) r2 = openat$vimc0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$FIOCLEX(r2, 0x5451) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, &(0x7f0000000040)={'wlan1\x00', @random="0100"}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x4a82, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r3, 0x3ba0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r2, 0x4020565b, &(0x7f0000000140)={0x3, 0x5}) set_mempolicy(0x8000, &(0x7f0000000380)=0xfff, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[], 0xa0}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) socket$unix(0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(r4, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000}) 1.271595ms ago: executing program 7 (id=2668): pselect6(0x40, &(0x7f0000000100)={0x1ff, 0x0, 0x0, 0x0, 0x800, 0x0, 0x8000100ffffe}, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=2669): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d3846101009049", @ANYBLOB=',rootmode=00000000000000000040000,user_', @ANYBLOB=',group_i', @ANYRESDEC=0x0, @ANYBLOB=',']) kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000340), 0x0, 0x100, 0x9}], 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c94", 0xcb}], 0x1, &(0x7f00000008c0)=[@iv={0xb8, 0x117, 0x2, 0xa0, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c9af6f1b0bc00510c3b27f64245b6f4f80e00bca3c91538839a52c3c393aada6ed6155fa03c988b6658e106d043cc8652373dd8e2a7"}], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1", 0xba}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70", 0x33}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e", 0xaa}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681", 0xb0}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): 88807][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 395.889000][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 395.934123][ T10] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 395.934156][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.934177][ T10] usb 4-1: Product: syz [ 395.934192][ T10] usb 4-1: Manufacturer: syz [ 395.934205][ T10] usb 4-1: SerialNumber: syz [ 396.005734][ T5336] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 396.005756][ T5336] (id 0x00) [ 396.067419][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 396.105708][ T5336] rc_core: IR keymap rc-imon-pad not found [ 396.105730][ T5336] Registered IR keymap rc-empty [ 396.105935][ T5336] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 396.105998][ T5336] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 396.200621][ T5336] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0 [ 396.223648][ T5336] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:155.0/rc/rc0/input12 [ 396.237394][ T9595] fuse: Bad value for 'fd' [ 396.255790][ T5336] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:28> initialized [ 396.745377][ T9601] lo speed is unknown, defaulting to 1000 [ 396.838206][ T5336] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 396.914249][ T5714] libceph: connect (1)[c::]:6789 error -99 [ 396.914416][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 396.915453][ T5714] libceph: connect (1)[c::]:6789 error -99 [ 396.915821][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 396.990613][ T5336] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 396.990662][ T5336] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 396.990685][ T5336] usb 3-1: Product: syz [ 396.990752][ T5336] usb 3-1: SerialNumber: syz [ 396.995231][ T5336] usb 3-1: config 0 descriptor?? [ 397.176913][ T5714] libceph: connect (1)[c::]:6789 error -99 [ 397.177056][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 397.426867][ T5693] usb 3-1: USB disconnect, device number 30 [ 397.686177][ T5693] libceph: connect (1)[c::]:6789 error -99 [ 397.686822][ T5693] libceph: mon0 (1)[c::]:6789 connect error [ 397.952859][ T9604] imon:send_packet: task interrupted [ 397.952879][ T9604] imon:send_packet: packet tx failed (-512) [ 397.952906][ T9604] imon:vfd_write: send packet #1 failed [ 398.110664][ T10] usb 4-1: 0:1 : does not exist [ 398.172219][ T5693] usb 5-1: USB disconnect, device number 28 [ 398.320361][ T10] usb 4-1: USB disconnect, device number 38 [ 398.934460][ T9619] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 398.934593][ T9619] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 398.934669][ T9619] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 398.934743][ T9619] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 398.934817][ T9619] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 398.934850][ T9619] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 398.973177][ T5693] libceph: connect (1)[c::]:6789 error -99 [ 398.996572][ T5693] libceph: mon0 (1)[c::]:6789 connect error [ 399.034723][ T9478] udevd[9478]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.381463][ T5604] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1 [ 399.684801][ T9601] ceph: No mds server is up or the cluster is laggy [ 399.785859][ T5714] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 399.936330][ T5714] usb 3-1: Using ep0 maxpacket: 32 [ 399.939487][ T5714] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 399.945020][ T5714] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 399.945070][ T5714] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 399.945085][ T5714] usb 3-1: Product: syz [ 399.945095][ T5714] usb 3-1: Manufacturer: syz [ 399.945106][ T5714] usb 3-1: SerialNumber: syz [ 399.996560][ T5714] usb 3-1: config 0 descriptor?? [ 399.998724][ T9630] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 400.220789][ T5714] usb 3-1: USB disconnect, device number 31 [ 400.374915][ T9650] netlink: 'syz.4.1096': attribute type 1 has an invalid length. [ 400.616474][ T36] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 400.875946][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 400.945736][ T5604] Bluetooth: hci3: command 0x0c1a tx timeout [ 400.945770][ T5604] Bluetooth: hci4: command 0x0c1a tx timeout [ 400.945792][ T5604] Bluetooth: hci0: command 0x0c1a tx timeout [ 400.945812][ T5604] Bluetooth: hci2: command 0x0c1a tx timeout [ 401.055703][ T36] usb 2-1: Using ep0 maxpacket: 32 [ 401.057156][ T36] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 401.057186][ T36] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 401.057205][ T36] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 401.057225][ T36] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 401.061490][ T36] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 401.061509][ T36] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.061524][ T36] usb 2-1: Product: syz [ 401.061535][ T36] usb 2-1: Manufacturer: syz [ 401.061546][ T36] usb 2-1: SerialNumber: syz [ 401.196583][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 401.200215][ T36] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input13 [ 403.035846][ T5604] Bluetooth: hci4: command 0x0c1a tx timeout [ 404.325761][ T9657] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 404.325827][ T9657] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 404.417266][ T9657] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 404.433406][ T9657] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 404.444449][ T9657] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 404.446670][ T9657] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 404.522561][ T36] imon:send_packet: packet tx failed (-71) [ 404.535762][ T36] imon 2-1:155.0: panel buttons/knobs setup failed [ 404.535784][ T36] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 404.535799][ T36] (id 0x00) [ 404.877250][ T9674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1104'. [ 405.387602][ T36] rc_core: IR keymap rc-imon-pad not found [ 405.387667][ T36] Registered IR keymap rc-empty [ 405.387711][ T36] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 405.387724][ T36] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 405.387963][ T36] imon:send_packet: packet tx failed (-71) [ 405.443190][ T36] imon 2-1:155.0: remote input dev register failed [ 405.443304][ T36] imon 2-1:155.0: imon_init_intf0: rc device setup failed [ 405.663266][ T36] imon 2-1:155.0: unable to initialize intf0, err 0 [ 405.663282][ T36] imon:imon_probe: failed to initialize context! [ 405.663291][ T36] imon 2-1:155.0: unable to register, err -19 [ 405.692991][ T36] usb 2-1: USB disconnect, device number 34 [ 405.882005][ T9688] trusted_key: syz.1.1111 sent an empty control message without MSG_MORE. [ 405.961105][ T9685] syzkaller0: entered promiscuous mode [ 405.961125][ T9685] syzkaller0: entered allmulticast mode [ 406.386118][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 406.476613][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 406.476649][ T59] Bluetooth: hci2: command 0x0c1a tx timeout [ 406.476673][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 406.476751][ T5604] Bluetooth: hci4: command 0x0c1a tx timeout [ 407.576037][ T5747] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 407.756132][ T5747] usb 2-1: Using ep0 maxpacket: 8 [ 407.764845][ T5747] usb 2-1: unable to get BOS descriptor or descriptor too short [ 407.769688][ T5747] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 407.769751][ T5747] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 407.778761][ T5747] usb 2-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40 [ 407.778827][ T5747] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.778883][ T5747] usb 2-1: Product: syz [ 407.778933][ T5747] usb 2-1: Manufacturer: syz [ 407.778982][ T5747] usb 2-1: SerialNumber: syz [ 408.465765][ T9706] Bluetooth: hci1: command 0x0c1a tx timeout [ 409.377480][ T10] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 409.525690][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 409.529570][ T10] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 409.529590][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 409.529604][ T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 409.529618][ T10] usb 5-1: config 1 has no interface number 1 [ 409.529642][ T10] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 409.529700][ T10] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 409.581145][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 409.581325][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.581385][ T10] usb 5-1: Product: syz [ 409.603075][ T10] usb 5-1: Manufacturer: syz [ 409.603100][ T10] usb 5-1: SerialNumber: syz [ 409.953523][ T10] usb 5-1: USB disconnect, device number 29 [ 410.079070][ T9320] udevd[9320]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 410.194909][ T5747] usb 2-1: 0:1 : does not exist [ 410.194927][ T5747] usb 2-1: 0:2 : does not exist [ 410.194993][ T5747] usb 2-1: unit 0 not found! [ 410.305415][ T5747] usb 2-1: USB disconnect, device number 35 [ 410.354938][ T8926] udevd[8926]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 411.128001][ T36] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 411.275805][ T36] usb 5-1: Using ep0 maxpacket: 16 [ 411.277588][ T36] usb 5-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 411.277607][ T36] usb 5-1: config 128 has 0 interfaces, different from the descriptor's value: 1 [ 411.277631][ T36] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 411.277648][ T36] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.492209][ T36] usb 5-1: string descriptor 0 read error: -71 [ 411.494719][ T36] usb 5-1: USB disconnect, device number 30 [ 411.967995][ T4919] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 411.969425][ T4919] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 411.969850][ T4919] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 411.970817][ T4919] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 411.971329][ T4919] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 414.478614][ T9706] Bluetooth: hci5: command tx timeout [ 414.664858][ T9848] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 416.757165][ T9706] Bluetooth: hci5: command tx timeout [ 417.226685][ T5714] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 417.355713][ T5714] usb 5-1: device descriptor read/64, error -71 [ 417.595953][ T5714] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 417.726274][ T5714] usb 5-1: device descriptor read/64, error -71 [ 417.855394][ T5714] usb usb5-port1: attempt power cycle [ 418.306309][ T5714] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 418.503281][ T5714] usb 5-1: device descriptor read/8, error -71 [ 418.735734][ T5714] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 418.757068][ T5714] usb 5-1: device descriptor read/8, error -71 [ 418.795722][ T9706] Bluetooth: hci5: command tx timeout [ 418.867609][ T5714] usb usb5-port1: unable to enumerate USB device [ 419.325812][ T10] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 419.488166][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 419.488221][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 419.490270][ T10] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 419.490300][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 419.490324][ T10] usb 4-1: Product: syz [ 419.490340][ T10] usb 4-1: Manufacturer: syz [ 419.490356][ T10] usb 4-1: SerialNumber: syz [ 419.534875][ T10] usb 4-1: config 0 descriptor?? [ 419.557835][ T9963] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 419.607233][ T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 419.767060][ T5714] usb 4-1: USB disconnect, device number 39 [ 419.767101][ C0] kbtab 4-1:0.0: kbtab_irq - usb_submit_urb failed with result -19 [ 420.004436][ T9804] lo speed is unknown, defaulting to 1000 [ 420.724551][ T9985] lo speed is unknown, defaulting to 1000 [ 420.728288][ T10] libceph: connect (1)[c::]:6789 error -101 [ 420.728459][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 420.733654][ T10] libceph: connect (1)[c::]:6789 error -101 [ 420.733740][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 420.865751][ T9706] Bluetooth: hci5: command tx timeout [ 421.295866][ T10] libceph: connect (1)[c::]:6789 error -101 [ 421.296053][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 421.775705][ T6623] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 421.815951][ T10] libceph: connect (1)[c::]:6789 error -101 [ 421.816038][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 421.905737][ T6623] usb 2-1: device descriptor read/64, error -71 [ 422.145739][ T6623] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 422.276107][ T6623] usb 2-1: device descriptor read/64, error -71 [ 422.387624][ T6623] usb usb2-port1: attempt power cycle [ 422.726339][ T6623] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 422.751323][ T6623] usb 2-1: device descriptor read/8, error -71 [ 422.985711][ T6623] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 423.006187][ T6623] usb 2-1: device descriptor read/8, error -71 [ 423.026231][ T5747] libceph: connect (1)[c::]:6789 error -101 [ 423.026329][ T5747] libceph: mon0 (1)[c::]:6789 connect error [ 423.115884][ T6623] usb usb2-port1: unable to enumerate USB device [ 423.142022][ T9804] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.143124][ T9804] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.144456][ T9804] bridge_slave_0: entered allmulticast mode [ 423.151733][ T9804] bridge_slave_0: entered promiscuous mode [ 423.183899][ T9804] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.183968][ T9804] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.184097][ T9804] bridge_slave_1: entered allmulticast mode [ 423.201753][ T9804] bridge_slave_1: entered promiscuous mode [ 423.312899][ T9804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.331607][ T9804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.436168][ T9804] team0: Port device team_slave_0 added [ 423.441511][ T9804] team0: Port device team_slave_1 added [ 423.528836][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 423.528851][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.528871][ T9804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 423.578278][ T9804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 423.578330][ T9804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 423.578410][ T9804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.861915][ T9804] hsr_slave_0: entered promiscuous mode [ 423.865135][ T9804] hsr_slave_1: entered promiscuous mode [ 423.870179][ T9804] debugfs: 'hsr0' already exists in 'hsr' [ 423.870202][ T9804] Cannot create hsr debugfs directory [ 423.986164][ T5747] libceph: connect (1)[c::]:6789 error -101 [ 423.986269][ T5747] libceph: mon0 (1)[c::]:6789 connect error [ 424.251155][ T9991] ceph: No mds server is up or the cluster is laggy [ 424.256005][ T10] libceph: connect (1)[c::]:6789 error -101 [ 424.256097][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 424.819222][ T9804] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 424.864298][ T9804] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 425.092536][T10080] netlink: 'syz.1.1266': attribute type 4 has an invalid length. [ 425.648061][ T9804] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 425.774411][ T9804] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 425.786142][ T9804] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 425.840608][ T9804] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 425.842337][ T9804] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 425.891746][ T9804] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 425.964427][T10095] binder: 10094:10095 ioctl 4018620d 0 returned -22 [ 425.973169][T10095] binder: 10094:10095 unknown command 0 [ 425.973184][T10095] binder: 10094:10095 ioctl c0306201 200000000000 returned -22 [ 426.833892][ T9804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 426.898893][T10120] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 426.899038][T10120] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 426.939845][ T9804] 8021q: adding VLAN 0 to HW filter on device team0 [ 426.965057][ T1554] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.970759][ T1554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.985066][T10120] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 426.985251][T10120] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 426.985399][T10120] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 426.996274][T10120] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 426.996815][T10120] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 426.997010][T10120] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 427.038250][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.038344][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.061669][T10120] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 428.769337][ T6623] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 428.878489][ T4919] Bluetooth: hci1: command 0x0c1a tx timeout [ 428.918816][ T6623] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 428.918851][ T6623] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.925048][ T6623] usb 2-1: config 0 descriptor?? [ 429.025762][ T4919] Bluetooth: hci5: command 0x0c1a tx timeout [ 429.025774][ T9706] Bluetooth: hci4: command 0x0c1a tx timeout [ 429.025799][ T4919] Bluetooth: hci3: command 0x0c1a tx timeout [ 429.025802][ T9706] Bluetooth: hci2: command 0x0c1a tx timeout [ 429.025823][ T4919] Bluetooth: hci0: command 0x0c1a tx timeout [ 429.172784][ T6623] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 429.377297][ T6623] [drm:udl_init] *ERROR* Selecting channel failed [ 429.410899][ T6623] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 429.410918][ T6623] [drm] Initialized udl on minor 2 [ 429.411666][ T6623] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 429.411863][ T6623] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 429.412543][ T5693] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 429.412964][ T5693] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 429.413130][ T5693] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 429.422592][ T6623] usb 2-1: USB disconnect, device number 40 [ 429.853407][T10164] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 429.854927][T10164] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 429.857129][T10164] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 429.857314][T10164] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 429.859076][T10164] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 429.960999][T10164] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 429.961128][T10164] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 430.445811][ T6623] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 430.595743][ T6623] usb 4-1: Using ep0 maxpacket: 16 [ 430.597799][ T6623] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.597829][ T6623] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 430.597865][ T6623] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 430.597889][ T6623] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.659590][T10191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1303'. [ 430.661948][ T6623] usb 4-1: config 0 descriptor?? [ 430.768917][ T9804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.588696][ T9804] veth0_vlan: entered promiscuous mode [ 431.607915][ T9804] veth1_vlan: entered promiscuous mode [ 431.665715][ T9706] Bluetooth: hci1: command 0x0c1a tx timeout [ 431.667991][ T9804] veth0_macvtap: entered promiscuous mode [ 431.674671][ T9804] veth1_macvtap: entered promiscuous mode [ 431.718615][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.739778][ T9804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.771392][ T1554] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.771624][ T1554] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.771664][ T1554] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.771700][ T1554] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.905811][ T9706] Bluetooth: hci3: command 0x0c1a tx timeout [ 431.905843][ T9706] Bluetooth: hci2: command 0x0c1a tx timeout [ 431.905867][ T9706] Bluetooth: hci0: command 0x0c1a tx timeout [ 431.985914][ T5604] Bluetooth: hci5: command 0x0c1a tx timeout [ 431.985948][ T5604] Bluetooth: hci4: command 0x0c1a tx timeout [ 432.085539][ T8939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.085562][ T8939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.149799][ T1554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.149821][ T1554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.155841][ T5714] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 432.357333][ T5714] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 432.357366][ T5714] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.360319][ T5714] usb 5-1: config 0 descriptor?? [ 432.567228][ T5714] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 432.768041][ T5714] [drm:udl_init] *ERROR* Selecting channel failed [ 432.802144][ T5714] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 432.802173][ T5714] [drm] Initialized udl on minor 2 [ 432.809337][ T5714] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 432.810195][ T5714] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 432.820464][ T5693] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 432.823068][ T5693] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 432.823416][ T5693] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 432.824501][ T5714] usb 5-1: USB disconnect, device number 35 [ 432.910780][T10242] 8021q: VLANs not supported on gre0 [ 433.252695][ T9] usb 4-1: USB disconnect, device number 40 [ 433.995719][ T9706] Bluetooth: hci3: command 0x0c1a tx timeout [ 434.075848][ T9706] Bluetooth: hci5: command 0x0c1a tx timeout [ 434.245024][T10283] fuse: Bad value for 'fd' [ 434.866564][ T10] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 435.012771][T10288] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 435.012831][T10288] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 435.012947][T10288] vhci_hcd vhci_hcd.0: Device attached [ 435.062017][T10288] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(8) [ 435.062063][T10288] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 435.062136][T10288] vhci_hcd vhci_hcd.0: Device attached [ 435.115772][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 435.117673][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.117691][ T10] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 435.117715][ T10] usb 2-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 435.117732][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.119877][ T10] usb 2-1: config 0 descriptor?? [ 435.224635][T10288] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(12) [ 435.225837][T10288] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 435.245377][T10288] vhci_hcd vhci_hcd.0: Device attached [ 435.305716][ T9] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 435.367061][T10296] vhci_hcd: connection closed [ 435.367979][ T1446] vhci_hcd vhci_hcd.5: stop threads [ 435.368008][ T1446] vhci_hcd vhci_hcd.5: release socket [ 435.368064][ T1446] vhci_hcd vhci_hcd.5: disconnect device [ 435.416736][T10292] vhci_hcd: connection closed [ 435.418102][ T3344] vhci_hcd vhci_hcd.5: stop threads [ 435.418123][ T3344] vhci_hcd vhci_hcd.5: release socket [ 435.418676][ T3344] vhci_hcd vhci_hcd.5: disconnect device [ 435.424976][T10289] vhci_hcd: connection reset by peer [ 435.455199][ T3344] vhci_hcd vhci_hcd.5: stop threads [ 435.455239][ T3344] vhci_hcd vhci_hcd.5: release socket [ 435.455271][ T3344] vhci_hcd vhci_hcd.5: disconnect device [ 436.021779][T10313] lo speed is unknown, defaulting to 1000 [ 436.433199][T10263] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 437.174321][T10336] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.400176][ T5714] usb 2-1: USB disconnect, device number 41 [ 437.746397][ T5714] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 438.265715][ T5714] usb 2-1: Using ep0 maxpacket: 32 [ 438.268148][ T5714] usb 2-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 438.268179][ T5714] usb 2-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 438.268198][ T5714] usb 2-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 438.268217][ T5714] usb 2-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 438.270195][ T5714] usb 2-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 438.270215][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.270230][ T5714] usb 2-1: Product: syz [ 438.270240][ T5714] usb 2-1: Manufacturer: syz [ 438.270251][ T5714] usb 2-1: SerialNumber: syz [ 438.388768][ C1] imon 2-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 438.390028][ T5714] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/input/input16 [ 438.619781][ T5714] imon 2-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 438.619804][ T5714] (id 0x00) [ 438.735693][ T5714] rc_core: IR keymap rc-imon-pad not found [ 438.735713][ T5714] Registered IR keymap rc-empty [ 438.735771][ T5714] imon 2-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 438.735791][ T5714] imon 2-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 438.816536][ T5714] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0 [ 438.817769][ T5714] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:155.0/rc/rc0/input17 [ 438.821064][ T5714] imon 2-1:155.0: iMON device (15c2:ffdc, intf0) on usb<2:42> initialized [ 439.074717][T10342] imon:send_packet: packet tx failed (-71) [ 439.081995][ T5714] usb 2-1: USB disconnect, device number 42 [ 439.085690][T10342] imon:vfd_write: send packet #0 failed [ 439.533637][T10382] bond1: entered allmulticast mode [ 439.546774][T10382] 8021q: adding VLAN 0 to HW filter on device bond1 [ 439.641448][T10388] bond1: (slave ip6gretap1): making interface the new active one [ 439.641478][T10388] ip6gretap1: entered allmulticast mode [ 439.664213][T10388] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 439.925858][ T5747] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 440.211348][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.211605][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.729410][ T5747] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 440.729443][ T5747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.733738][ T5747] usb 2-1: config 0 descriptor?? [ 440.775742][ T9] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 440.960011][ T5747] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 441.165410][ T5747] [drm:udl_init] *ERROR* Selecting channel failed [ 441.211923][ T5747] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 441.211951][ T5747] [drm] Initialized udl on minor 2 [ 441.234221][ T5747] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 441.234496][ T5747] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 441.235226][ T5336] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 441.235902][ T5336] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 441.236248][ T5336] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 441.288367][ T5747] usb 2-1: USB disconnect, device number 43 [ 441.549480][T10418] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1381'. [ 441.695908][T10418] bond3: entered allmulticast mode [ 441.809637][T10421] ip6gretap1: entered allmulticast mode [ 441.809838][T10421] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 442.968623][T10439] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 442.968769][T10439] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 442.968899][T10439] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 442.969030][T10439] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 442.969092][T10439] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 443.038008][T10439] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 443.038150][T10439] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 443.554843][T10449] bond3: entered promiscuous mode [ 443.582751][T10449] 8021q: adding VLAN 0 to HW filter on device bond3 [ 443.928225][T10465] 8021q: adding VLAN 0 to HW filter on device bond3 [ 443.928520][T10465] bond3: (slave gre3): The slave device specified does not support setting the MAC address [ 443.961705][T10465] bond3: (slave gre3): Error -95 calling set_mac_address [ 445.026788][ T5604] Bluetooth: hci3: command 0x0c1a tx timeout [ 445.026817][ T4919] Bluetooth: hci0: command 0x0c1a tx timeout [ 445.026825][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 445.026888][ T9706] Bluetooth: hci2: command 0x0c1a tx timeout [ 445.105756][ T59] Bluetooth: hci4: command 0x0c1a tx timeout [ 445.105803][ T9706] Bluetooth: hci5: command 0x0c1a tx timeout [ 445.302665][T10504] kvm: requested 40228 ns i8254 timer period limited to 200000 ns [ 445.302985][T10504] kvm: requested 94704 ns i8254 timer period limited to 200000 ns [ 445.303173][T10504] kvm: requested 196114 ns i8254 timer period limited to 200000 ns [ 445.303297][T10504] kvm: requested 50285 ns i8254 timer period limited to 200000 ns [ 445.303488][T10504] kvm: requested 10895 ns i8254 timer period limited to 200000 ns [ 445.303689][T10504] kvm: requested 98057 ns i8254 timer period limited to 200000 ns [ 445.303941][T10504] kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 445.304087][T10504] kvm: requested 121523 ns i8254 timer period limited to 200000 ns [ 445.304209][T10504] kvm: requested 151695 ns i8254 timer period limited to 200000 ns [ 445.304331][T10504] kvm: requested 177676 ns i8254 timer period limited to 200000 ns [ 445.747674][T10514] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 445.747817][T10514] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 445.747928][T10514] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 445.748042][T10514] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 445.748096][T10514] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 445.820825][T10514] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 445.821004][T10514] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 447.138879][T10530] syzkaller0: entered promiscuous mode [ 447.138899][T10530] syzkaller0: entered allmulticast mode [ 447.203217][T10537] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1427'. [ 447.825798][ T5604] Bluetooth: hci2: command 0x0c1a tx timeout [ 447.825831][ T5604] Bluetooth: hci5: command 0x0c1a tx timeout [ 447.825859][ T5604] Bluetooth: hci4: command 0x0c1a tx timeout [ 447.825880][ T5604] Bluetooth: hci3: command 0x0c1a tx timeout [ 447.825901][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 447.825985][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 449.054529][ T5714] libceph: connect (1)[c::]:6789 error -101 [ 449.054618][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 449.306069][ T5714] libceph: connect (1)[c::]:6789 error -101 [ 449.306206][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 449.816104][ T5714] libceph: connect (1)[c::]:6789 error -101 [ 449.816199][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 449.905835][ T59] Bluetooth: hci3: command 0x0c1a tx timeout [ 450.946105][ T5714] libceph: connect (1)[c::]:6789 error -101 [ 450.946226][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 451.656532][T10582] ceph: No mds server is up or the cluster is laggy [ 455.806699][T10526] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 456.832661][T10580] lo speed is unknown, defaulting to 1000 [ 459.218033][ T36] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 459.368062][ T36] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 459.368108][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 459.368146][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 459.368181][ T36] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 459.370212][ T36] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 459.370243][ T36] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 459.370264][ T36] usb 4-1: Manufacturer: syz [ 459.415904][ T36] usb 4-1: config 0 descriptor?? [ 460.130338][ T36] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 460.151683][ T36] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 461.675692][ T36] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 461.827555][ T36] usb 5-1: unable to get BOS descriptor or descriptor too short [ 461.828940][ T36] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 461.832857][ T36] usb 5-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 461.832879][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.832894][ T36] usb 5-1: Product: syz [ 461.832904][ T36] usb 5-1: Manufacturer: syz [ 461.832914][ T36] usb 5-1: SerialNumber: syz [ 462.226872][ T6623] usb 4-1: USB disconnect, device number 41 [ 462.749984][T10863] bond4: entered promiscuous mode [ 462.753164][T10863] 8021q: adding VLAN 0 to HW filter on device bond4 [ 462.909696][T10872] 8021q: adding VLAN 0 to HW filter on device bond4 [ 462.912036][T10872] bond4: (slave gre3): The slave device specified does not support setting the MAC address [ 462.940213][T10872] bond4: (slave gre3): Error -95 calling set_mac_address [ 464.125878][ T6623] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 464.255737][ T6623] usb 6-1: device descriptor read/64, error -71 [ 464.496791][ T6623] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 464.523587][ T36] usb 5-1: unit 4 not found! [ 464.630551][ T6623] usb 6-1: device descriptor read/64, error -71 [ 464.679834][ T36] usb 5-1: USB disconnect, device number 36 [ 464.735994][ T6623] usb usb6-port1: attempt power cycle [ 464.810735][ T9320] udevd[9320]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 465.075704][ T6623] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 465.096536][ T6623] usb 6-1: device descriptor read/8, error -71 [ 465.699548][ T6623] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 466.115144][ T6623] usb 6-1: device descriptor read/8, error -71 [ 466.215967][ T6623] usb usb6-port1: unable to enumerate USB device [ 466.915793][ T5336] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 467.065861][ T5336] usb 5-1: Using ep0 maxpacket: 32 [ 467.158166][ T5336] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 467.158322][ T5336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.158372][ T5336] usb 5-1: Product: syz [ 467.158418][ T5336] usb 5-1: Manufacturer: syz [ 467.158453][ T5336] usb 5-1: SerialNumber: syz [ 467.529653][ T5336] usb 5-1: config 0 descriptor?? [ 467.769844][ T5336] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 468.784673][ T5336] gspca_ov534_9: reg_w failed -71 [ 469.040346][T10977] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 469.105724][ T5336] gspca_ov534_9: Unknown sensor 0000 [ 469.105792][ T5336] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 469.113274][ T5336] usb 5-1: USB disconnect, device number 37 [ 469.870087][T11001] syzkaller0: entered promiscuous mode [ 469.870105][T11001] syzkaller0: entered allmulticast mode [ 470.708699][T11024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 471.784982][T11045] netlink: 'syz.3.1650': attribute type 4 has an invalid length. [ 472.054699][T11055] program syz.3.1655 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 472.515722][ T5693] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 472.666150][ T5693] usb 6-1: Using ep0 maxpacket: 16 [ 472.667919][ T5693] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 472.667951][ T5693] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 472.667968][ T5693] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 472.667996][ T5693] usb 6-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 472.668013][ T5693] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.674419][ T5693] usb 6-1: config 0 descriptor?? [ 472.759542][ T5693] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 472.857084][ T8938] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.149511][ T8938] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.711327][ T8938] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.892179][ T4919] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 473.892756][ T4919] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 473.892970][ T4919] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 473.893631][ T4919] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 473.894155][ T4919] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 474.066337][ T5747] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 474.121472][ T8938] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.215719][ T5747] usb 4-1: Using ep0 maxpacket: 32 [ 474.217248][ T5747] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 474.221909][ T5747] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 474.221942][ T5747] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 474.221958][ T5747] usb 4-1: Product: syz [ 474.221968][ T5747] usb 4-1: Manufacturer: syz [ 474.221979][ T5747] usb 4-1: SerialNumber: syz [ 474.273432][ T5747] usb 4-1: config 0 descriptor?? [ 474.274749][T11093] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 474.587903][T11113] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 475.098374][ T36] usb 4-1: USB disconnect, device number 42 [ 475.329540][ T5714] usb 6-1: USB disconnect, device number 6 [ 475.412421][ T8938] bridge_slave_1: left allmulticast mode [ 475.412450][ T8938] bridge_slave_1: left promiscuous mode [ 475.412650][ T8938] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.986607][ T59] Bluetooth: hci2: command tx timeout [ 476.201990][ T8938] bridge_slave_0: left allmulticast mode [ 476.202021][ T8938] bridge_slave_0: left promiscuous mode [ 476.203208][ T8938] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.198477][T11174] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 478.574655][ T59] Bluetooth: hci2: command tx timeout [ 479.093103][T11183] siw: device registration error -23 [ 479.823542][T11190] netlink: 'syz.5.1702': attribute type 4 has an invalid length. [ 479.909737][T11192] fuse: Unknown parameter 'group_i00000000000000000000' [ 480.016103][ T8938] bond1 (unregistering): (slave gre1): Releasing backup interface [ 480.016148][ T8938] gre1 (unregistering): left promiscuous mode [ 480.106082][ T8938] bond2 (unregistering): (slave gre2): Releasing backup interface [ 480.106105][ T8938] gre2 (unregistering): left promiscuous mode [ 480.496128][ T8938] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.556229][ T8938] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 480.597154][ T8938] bond0 (unregistering): Released all slaves [ 480.601581][ T8938] bond1 (unregistering): Released all slaves [ 480.608138][ T8938] bond2 (unregistering): Released all slaves [ 480.614537][ T8938] bond3 (unregistering): Released all slaves [ 480.625668][ T59] Bluetooth: hci2: command tx timeout [ 480.697440][ T5265] 8021q: adding VLAN 0 to HW filter on device eth2 [ 480.699668][T11184] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1698'. [ 480.798493][ T8938] tipc: Left network mode [ 481.241540][T11218] siw: device registration error -23 [ 482.632833][T11096] lo speed is unknown, defaulting to 1000 [ 482.705732][ T59] Bluetooth: hci2: command tx timeout [ 483.215206][T11277] siw: device registration error -23 [ 483.769937][T11279] fuse: Bad value for 'fd' [ 483.927400][T11283] fuse: Unknown parameter 'group_id00000000000000000000' [ 484.085094][T11292] fuse: Bad value for 'fd' [ 484.190829][ T8938] hsr_slave_0: left promiscuous mode [ 484.228122][ T8938] hsr_slave_1: left promiscuous mode [ 484.228665][ T8938] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 484.228682][ T8938] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 484.245867][ T5336] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 484.289390][ T8938] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 484.289409][ T8938] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 484.396318][ T8938] veth1_macvtap: left promiscuous mode [ 484.396366][ T8938] veth0_macvtap: left promiscuous mode [ 484.396468][ T8938] veth1_vlan: left promiscuous mode [ 484.396531][ T8938] veth0_vlan: left promiscuous mode [ 484.435760][ T5336] usb 4-1: unable to get BOS descriptor or descriptor too short [ 484.441181][ T5336] usb 4-1: New USB device found, idVendor=1c9e, idProduct=9603, bcdDevice=f3.0a [ 484.441236][ T5336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.441253][ T5336] usb 4-1: Product: syz [ 484.441264][ T5336] usb 4-1: Manufacturer: syz [ 484.441275][ T5336] usb 4-1: SerialNumber: syz [ 484.705503][ T5336] option 4-1:4.0: GSM modem (1-port) converter detected [ 484.736301][ T5336] usb 4-1: USB disconnect, device number 43 [ 484.742650][ T5336] option 4-1:4.0: device disconnected [ 485.651524][ T8938] team0 (unregistering): Port device team_slave_1 removed [ 485.730346][ T8938] team0 (unregistering): Port device team_slave_0 removed [ 486.149186][ T5265] 8021q: adding VLAN 0 to HW filter on device eth1 [ 486.556535][T11319] syzkaller0: entered promiscuous mode [ 486.556565][T11319] syzkaller0: entered allmulticast mode [ 495.065743][ T5714] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 495.221617][ T5714] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 495.221666][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 495.221694][ T5714] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 495.221722][ T5714] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 495.221761][ T5714] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 495.221784][ T5714] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.302594][ T5714] usb 6-1: config 0 descriptor?? [ 495.303204][T11594] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 495.736935][ T5714] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 495.736961][ T5714] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 495.736981][ T5714] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 495.737002][ T5714] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 495.737020][ T5714] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 495.737038][ T5714] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 495.737057][ T5714] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 495.737076][ T5714] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 495.737094][ T5714] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 495.737113][ T5714] plantronics 0003:047F:FFFF.000E: unknown main item tag 0x0 [ 495.738607][T11096] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.738687][T11096] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.738825][T11096] bridge_slave_0: entered allmulticast mode [ 495.743686][T11096] bridge_slave_0: entered promiscuous mode [ 495.856255][T11096] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.856349][T11096] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.856529][T11096] bridge_slave_1: entered allmulticast mode [ 495.858909][T11096] bridge_slave_1: entered promiscuous mode [ 495.865309][ T5714] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 496.036821][T11096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.081748][T11096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.446023][ T5714] usb 6-1: USB disconnect, device number 7 [ 496.552749][T11096] team0: Port device team_slave_0 added [ 496.579112][T11096] team0: Port device team_slave_1 added [ 496.624606][ T5265] 8021q: adding VLAN 0 to HW filter on device eth3 [ 496.860670][T11096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.860690][T11096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.860721][T11096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.913634][T11096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.913647][T11096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 496.913676][T11096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.050199][T11664] fuse: Bad value for 'fd' [ 498.256348][T11096] hsr_slave_0: entered promiscuous mode [ 498.259659][T11096] hsr_slave_1: entered promiscuous mode [ 498.260187][T11096] debugfs: 'hsr0' already exists in 'hsr' [ 498.260202][T11096] Cannot create hsr debugfs directory [ 499.728418][T11096] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 499.756601][T11699] fuse: fd is not a fuse device [ 499.773939][T11096] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 499.783654][T11096] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 499.839872][T11096] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 499.840874][T11096] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 499.889483][T11096] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 499.891545][T11096] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 499.955212][T11096] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 500.181451][T11717] fuse: Bad value for 'fd' [ 501.502291][T11728] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1904'. [ 501.586632][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.586670][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.714376][T11096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.801631][T11096] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.842634][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.842799][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.878725][ T8939] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.878933][ T8939] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.553072][ T5265] 8021q: adding VLAN 0 to HW filter on device eth4 [ 503.634094][T11096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 504.249188][T11096] veth0_vlan: entered promiscuous mode [ 504.273638][T11096] veth1_vlan: entered promiscuous mode [ 504.369487][T11096] veth0_macvtap: entered promiscuous mode [ 504.394113][T11096] veth1_macvtap: entered promiscuous mode [ 504.474700][T11096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.502973][T11096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.535116][ T1424] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.545033][ T1424] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.549144][ T1424] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.549189][ T1424] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.845723][ T1561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.845755][ T1561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.918942][ T1561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.918965][ T1561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.435809][ T5693] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 506.578344][ T4919] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 506.579537][ T4919] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 506.579850][ T4919] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 506.581120][ T4919] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 506.581600][ T4919] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 506.589200][ T5693] usb 4-1: unable to get BOS descriptor or descriptor too short [ 506.647684][ T5693] usb 4-1: New USB device found, idVendor=1c9e, idProduct=9603, bcdDevice=f3.0a [ 506.647718][ T5693] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.647740][ T5693] usb 4-1: Product: syz [ 506.647756][ T5693] usb 4-1: Manufacturer: syz [ 506.647772][ T5693] usb 4-1: SerialNumber: syz [ 506.841574][T11834] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.924859][ T5693] option 4-1:4.0: GSM modem (1-port) converter detected [ 506.965859][ T5693] usb 4-1: USB disconnect, device number 44 [ 506.971610][ T5693] option 4-1:4.0: device disconnected [ 507.150073][T11834] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.349299][ T1433] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.486783][ T5693] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 507.572288][T11834] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.638047][ T5693] usb 6-1: no configurations [ 507.638063][ T5693] usb 6-1: can't read configurations, error -22 [ 507.765707][ T5693] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 507.825465][ T1433] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 507.856882][ T36] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 508.006202][ T5693] usb 6-1: no configurations [ 508.006217][ T5693] usb 6-1: can't read configurations, error -22 [ 508.006373][ T5693] usb usb6-port1: attempt power cycle [ 508.625735][ T59] Bluetooth: hci6: command tx timeout [ 508.642336][ T36] usb 4-1: unable to get BOS descriptor or descriptor too short [ 508.643392][ T36] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 508.664780][ T36] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 508.664813][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.664834][ T36] usb 4-1: Product: syz [ 508.664850][ T36] usb 4-1: Manufacturer: syz [ 508.664865][ T36] usb 4-1: SerialNumber: syz [ 508.874848][T11834] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.886007][ T5693] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 508.907191][ T5693] usb 6-1: no configurations [ 508.907257][ T5693] usb 6-1: can't read configurations, error -22 [ 509.035940][ T5693] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 509.067432][ T5693] usb 6-1: no configurations [ 509.067453][ T5693] usb 6-1: can't read configurations, error -22 [ 509.067759][ T5693] usb usb6-port1: unable to enumerate USB device [ 509.272764][ T1433] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.401088][T11835] lo speed is unknown, defaulting to 1000 [ 509.584445][ T1433] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.788595][ T1424] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.869147][ T143] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.921145][ T8941] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.041973][ T143] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 510.710471][ T59] Bluetooth: hci6: command tx timeout [ 511.332807][ T36] usb 4-1: unit 4 not found! [ 512.178363][ T36] usb 4-1: USB disconnect, device number 45 [ 512.300297][ T9320] udevd[9320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 512.417229][ T1433] bridge_slave_1: left allmulticast mode [ 512.417258][ T1433] bridge_slave_1: left promiscuous mode [ 512.417430][ T1433] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.496492][ T1433] bridge_slave_0: left allmulticast mode [ 512.496521][ T1433] bridge_slave_0: left promiscuous mode [ 512.496693][ T1433] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.748570][ T59] Bluetooth: hci6: command tx timeout [ 514.196341][ T1433] bond1 (unregistering): (slave gre1): Releasing backup interface [ 514.196369][ T1433] gre1 (unregistering): left promiscuous mode [ 514.488597][ T1433] team0: Port device bridge1 removed [ 514.686082][ T1433] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.715944][ T1554] smbdirect: ib_dev[syz1] removed [ 514.736060][ T1433] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.757014][ T1433] bond0 (unregistering): Released all slaves [ 514.760761][ T1433] bond1 (unregistering): Released all slaves [ 514.947334][T11888] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.969812][T11894] netlink: 'syz.4.1947': attribute type 12 has an invalid length. [ 514.969834][T11894] netlink: 'syz.4.1947': attribute type 29 has an invalid length. [ 514.969849][T11894] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1947'. [ 515.001352][T11897] netlink: 'syz.4.1947': attribute type 12 has an invalid length. [ 515.001368][T11897] netlink: 'syz.4.1947': attribute type 29 has an invalid length. [ 515.001378][T11897] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1947'. [ 515.056569][T11906] syzkaller0: entered promiscuous mode [ 515.056590][T11906] syzkaller0: entered allmulticast mode [ 515.989928][ T59] Bluetooth: hci6: command tx timeout [ 521.757790][T11888] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.688345][T11916] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 522.804611][T11932] syz.3.1955 (11932) used greatest stack depth: 18552 bytes left [ 522.830905][ T1433] tipc: Left network mode [ 522.967809][T11888] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.198322][T11888] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.531854][T11916] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.605144][ T5265] 8021q: adding VLAN 0 to HW filter on device eth5 [ 523.663908][ T8938] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.717654][ T8938] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.949526][T11916] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.132235][ T8938] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.087947][ T8938] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.090004][T11835] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.090751][T11835] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.092017][T11835] bridge_slave_0: entered allmulticast mode [ 525.097390][T11835] bridge_slave_0: entered promiscuous mode [ 525.148776][T11835] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.150439][T11835] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.152457][T11835] bridge_slave_1: entered allmulticast mode [ 525.164930][T11835] bridge_slave_1: entered promiscuous mode [ 525.327745][T11916] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.617498][T11835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.624542][T11835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.489722][T11835] team0: Port device team_slave_0 added [ 526.637267][ T1433] hsr_slave_0: left promiscuous mode [ 526.678226][ T1433] hsr_slave_1: left promiscuous mode [ 526.678886][ T1433] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.678907][ T1433] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.715341][ T1433] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.715367][ T1433] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.787730][ T1433] veth1_macvtap: left promiscuous mode [ 526.787777][ T1433] veth0_macvtap: left promiscuous mode [ 526.787867][ T1433] veth1_vlan: left promiscuous mode [ 526.787929][ T1433] veth0_vlan: left promiscuous mode [ 527.225782][T11880] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 527.375667][T11880] usb 7-1: Using ep0 maxpacket: 32 [ 527.377297][T11880] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 527.377319][T11880] usb 7-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 527.377337][T11880] usb 7-1: config 0 interface 0 has no altsetting 0 [ 527.379728][T11880] usb 7-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 527.379750][T11880] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.379764][T11880] usb 7-1: Product: syz [ 527.379792][T11880] usb 7-1: Manufacturer: syz [ 527.379809][T11880] usb 7-1: SerialNumber: syz [ 527.383773][T11880] usb 7-1: config 0 descriptor?? [ 527.854210][T11880] gs_usb 7-1:0.0: Configuring for 1 interfaces [ 527.887187][ T1433] team0 (unregistering): Port device team_slave_1 removed [ 527.948355][ T1433] team0 (unregistering): Port device team_slave_0 removed [ 528.928565][T11880] gs_usb 7-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 528.946444][T11880] gs_usb 7-1:0.0: probe with driver gs_usb failed with error -22 [ 529.132546][T11880] usb 7-1: USB disconnect, device number 2 [ 529.246366][T11835] team0: Port device team_slave_1 added [ 529.358882][ T5265] 8021q: adding VLAN 0 to HW filter on device eth6 [ 529.421309][ T8939] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.470639][ T8940] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.475195][T11835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.475210][T11835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.475237][T11835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.529183][T11835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.529241][T11835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 529.529320][T11835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 529.631314][ T8939] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.682804][ T8939] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 529.873133][T11835] hsr_slave_0: entered promiscuous mode [ 529.875163][T11835] hsr_slave_1: entered promiscuous mode [ 529.886842][T11835] debugfs: 'hsr0' already exists in 'hsr' [ 529.886891][T11835] Cannot create hsr debugfs directory [ 531.140812][ T4919] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 531.142558][ T4919] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 531.142754][ T4919] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 531.143403][ T4919] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 531.143798][ T4919] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 533.905693][ T4919] Bluetooth: hci4: command tx timeout [ 534.888221][T12095] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.707720][ T8941] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.985739][ T4919] Bluetooth: hci4: command tx timeout [ 536.037407][T12095] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.131676][T12121] fuse: fd is not a fuse device [ 536.167106][ T8941] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.187132][ T31] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 536.192114][T12051] lo speed is unknown, defaulting to 1000 [ 536.335669][ T31] usb 7-1: Using ep0 maxpacket: 16 [ 536.338714][ T31] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 536.338764][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.338793][ T31] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.338818][ T31] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 536.338860][ T31] usb 7-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 536.338885][ T31] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.343218][ T31] usb 7-1: config 0 descriptor?? [ 536.527663][T12095] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.217199][T12131] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.297517][ T8941] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.365426][ T31] input: HID 0458:5013 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5013.000F/input/input19 [ 537.417715][T12095] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.447608][ T31] input: HID 0458:5013 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0458:5013.000F/input/input20 [ 537.474550][ T31] kye 0003:0458:5013.000F: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.6-1/input0 [ 537.568424][T12131] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.669266][ T5747] usb 7-1: USB disconnect, device number 3 [ 537.690131][ T8941] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.763862][T12135] fido_id[12135]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 537.807534][T12131] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.916165][T11835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 537.963763][T11835] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 537.970455][ T43] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.090442][ T4919] Bluetooth: hci4: command tx timeout [ 538.171127][ T43] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.217927][T12131] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.268047][T11835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 538.316619][T11835] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 538.349209][ T8938] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.350422][T11835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 538.400316][T11835] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 538.401006][ T8938] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.426826][T11835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 538.621213][T11835] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 539.312643][ T173] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.434061][ T173] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.469843][ T173] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.906447][ T173] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.970363][ T37] kauditd_printk_skb: 34 callbacks suppressed [ 539.970383][ T37] audit: type=1804 audit(1781650243.350:149): pid=12178 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz.4.2000" name="bus" dev="ramfs" ino=33006 res=1 errno=0 [ 540.187138][ T4919] Bluetooth: hci4: command tx timeout [ 540.428559][T12186] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 541.550796][ T8941] bridge_slave_1: left allmulticast mode [ 541.550824][ T8941] bridge_slave_1: left promiscuous mode [ 541.551017][ T8941] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.396801][ T8941] bridge_slave_0: left allmulticast mode [ 542.396822][ T8941] bridge_slave_0: left promiscuous mode [ 542.396970][ T8941] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.591697][T12217] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2009'. [ 543.386242][ T8941] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.466970][ T8941] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.509561][ T8941] bond0 (unregistering): Released all slaves [ 546.667858][T12051] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.667922][T12051] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.668082][T12051] bridge_slave_0: entered allmulticast mode [ 546.697636][T12051] bridge_slave_0: entered promiscuous mode [ 546.728000][T12051] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.728314][T12051] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.734203][T12051] bridge_slave_1: entered allmulticast mode [ 546.751010][T12051] bridge_slave_1: entered promiscuous mode [ 547.233910][T12051] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.271524][T12051] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.404771][ T5265] 8021q: adding VLAN 0 to HW filter on device eth7 [ 547.418914][T12051] team0: Port device team_slave_0 added [ 547.558106][ T8941] hsr_slave_0: left promiscuous mode [ 547.600498][ T8941] hsr_slave_1: left promiscuous mode [ 547.601019][ T8941] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.601038][ T8941] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.648038][ T8941] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.648057][ T8941] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.738327][ T8941] veth1_macvtap: left promiscuous mode [ 547.738393][ T8941] veth0_macvtap: left promiscuous mode [ 547.738524][ T8941] veth1_vlan: left promiscuous mode [ 547.738629][ T8941] veth0_vlan: left promiscuous mode [ 548.926123][ T8941] team0 (unregistering): Port device team_slave_1 removed [ 548.976946][ T8941] team0 (unregistering): Port device team_slave_0 removed [ 549.929232][T12051] team0: Port device team_slave_1 added [ 550.623660][T12286] loop2: detected capacity change from 0 to 7 [ 550.628095][T12286] Buffer I/O error on dev loop2, logical block 0, async page read [ 550.628549][T12286] Buffer I/O error on dev loop2, logical block 0, async page read [ 550.629029][T12286] Buffer I/O error on dev loop2, logical block 0, async page read [ 550.629895][T12286] Buffer I/O error on dev loop2, logical block 0, async page read [ 550.630486][T12286] Buffer I/O error on dev loop2, logical block 0, async page read [ 550.631022][T12286] Buffer I/O error on dev loop2, logical block 0, async page read [ 550.631441][T12286] Buffer I/O error on dev loop2, logical block 0, async page read [ 550.631491][T12286] ldm_validate_partition_table(): Disk read failed. [ 550.631991][T12286] Buffer I/O error on dev loop2, logical block 0, async page read [ 550.632394][T12286] Buffer I/O error on dev loop2, logical block 0, async page read [ 551.908354][T12286] Buffer I/O error on dev loop2, logical block 0, async page read [ 551.908890][T12286] Dev loop2: unable to read RDB block 0 [ 551.910284][T12286] loop2: unable to read partition table [ 551.911479][T12286] loop2: partition table beyond EOD, truncated [ 551.925238][T12286] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 552.134845][T12051] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 552.134864][T12051] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.134894][T12051] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 552.254819][T12051] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 552.254838][T12051] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 552.254870][T12051] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.365386][T11835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.528007][T12051] hsr_slave_0: entered promiscuous mode [ 553.668909][T12051] hsr_slave_1: entered promiscuous mode [ 553.671313][T12051] debugfs: 'hsr0' already exists in 'hsr' [ 553.671366][T12051] Cannot create hsr debugfs directory [ 554.881304][T11835] 8021q: adding VLAN 0 to HW filter on device team0 [ 555.544268][ T9385] bridge0: port 1(bridge_slave_0) entered blocking state [ 555.544410][ T9385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.676430][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.676733][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.163693][ T4919] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 556.163740][ T4919] CPU: 1 UID: 0 PID: 4919 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 556.163774][ T4919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 556.163790][ T4919] Workqueue: hci2 hci_rx_work [ 556.163901][ T4919] Call Trace: [ 556.163910][ T4919] [ 556.163919][ T4919] dump_stack_lvl+0xe8/0x150 [ 556.163948][ T4919] sysfs_create_dir_ns+0x271/0x2a0 [ 556.164045][ T4919] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 556.164112][ T4919] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 556.164148][ T4919] ? rt_spin_unlock+0x160/0x200 [ 556.164179][ T4919] kobject_add_internal+0x62c/0xce0 [ 556.164261][ T4919] kobject_add+0x163/0x240 [ 556.164292][ T4919] ? __pfx_kobject_add+0x10/0x10 [ 556.164342][ T4919] ? get_device_parent+0x370/0x3a0 [ 556.164398][ T4919] device_add+0x3fa/0xb80 [ 556.164422][ T4919] hci_conn_add_sysfs+0xd5/0x210 [ 556.164472][ T4919] le_conn_complete_evt+0xfef/0x1580 [ 556.164561][ T4919] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 556.164595][ T4919] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 556.164619][ T4919] ? rt_mutex_slowunlock+0x219/0x460 [ 556.164650][ T4919] ? skb_pull_data+0xf0/0x200 [ 556.164737][ T4919] hci_le_conn_complete_evt+0x187/0x470 [ 556.164779][ T4919] hci_event_packet+0x67a/0xf10 [ 556.164833][ T4919] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 556.164860][ T4919] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 556.164889][ T4919] ? __pfx_hci_event_packet+0x10/0x10 [ 556.164915][ T4919] ? trace_irq_enable+0x3b/0x140 [ 556.164968][ T4919] ? hci_send_to_monitor+0xe2/0x590 [ 556.165036][ T4919] hci_rx_work+0x3ee/0x1020 [ 556.165066][ T4919] ? process_scheduled_works+0xa20/0x14e0 [ 556.165162][ T4919] process_scheduled_works+0xa8e/0x14e0 [ 556.165208][ T4919] ? __pfx_process_scheduled_works+0x10/0x10 [ 556.165240][ T4919] ? do_raw_spin_lock+0x12b/0x2f0 [ 556.165311][ T4919] ? assign_work+0x3cf/0x5d0 [ 556.165343][ T4919] worker_thread+0xa47/0xfb0 [ 556.165388][ T4919] kthread+0x388/0x470 [ 556.165435][ T4919] ? __pfx_worker_thread+0x10/0x10 [ 556.165465][ T4919] ? __pfx_kthread+0x10/0x10 [ 556.165487][ T4919] ret_from_fork+0x514/0xb70 [ 556.165514][ T4919] ? __pfx_ret_from_fork+0x10/0x10 [ 556.165537][ T4919] ? __switch_to+0xc89/0x1420 [ 556.165570][ T4919] ? __pfx_kthread+0x10/0x10 [ 556.165593][ T4919] ret_from_fork_asm+0x1a/0x30 [ 556.165641][ T4919] [ 556.165835][ T4919] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 556.165874][ T4919] Bluetooth: hci2: failed to register connection device [ 556.283662][T12051] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 556.481496][T12051] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 556.502199][T12051] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 556.542456][T12051] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 556.559896][ T5265] 8021q: adding VLAN 0 to HW filter on device eth8 [ 556.561414][T12051] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 556.614089][T12051] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 556.631887][T12051] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 556.670960][T12051] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 557.273173][T12051] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.946706][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2040'. [ 558.043738][T12051] 8021q: adding VLAN 0 to HW filter on device team0 [ 558.060227][ T143] bridge0: port 1(bridge_slave_0) entered blocking state [ 558.061853][ T143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 558.098291][ T143] bridge0: port 2(bridge_slave_1) entered blocking state [ 558.098349][ T143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 561.008261][T11835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 561.145063][T11835] veth0_vlan: entered promiscuous mode [ 561.158534][T11835] veth1_vlan: entered promiscuous mode [ 561.363461][T11835] veth0_macvtap: entered promiscuous mode [ 561.388402][T11835] veth1_macvtap: entered promiscuous mode [ 562.563043][T11835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.659078][T11835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.693599][ T1433] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.694929][ T1433] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.696927][ T1433] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 562.704957][ T1433] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.051903][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.051958][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.141007][ T1424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.141024][ T1424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.416972][ T8941] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.416994][ T8941] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.132750][T12051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.505712][ T36] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 565.658516][ T36] usb 7-1: unable to get BOS descriptor or descriptor too short [ 565.663775][ T36] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 565.668901][ T36] usb 7-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 565.668929][ T36] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.668944][ T36] usb 7-1: Product: syz [ 565.668972][ T36] usb 7-1: Manufacturer: syz [ 565.668983][ T36] usb 7-1: SerialNumber: syz [ 565.968236][ T36] usb 7-1: unit 4 not found! [ 566.088721][ T36] usb 7-1: USB disconnect, device number 4 [ 566.187326][T12051] veth0_vlan: entered promiscuous mode [ 566.211774][T12134] udevd[12134]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 566.240255][T12051] veth1_vlan: entered promiscuous mode [ 566.318742][T12051] veth0_macvtap: entered promiscuous mode [ 566.334768][T12051] veth1_macvtap: entered promiscuous mode [ 566.388703][T12051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 566.412944][T12051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 566.444544][ T8941] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.444978][ T8941] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.445017][ T8941] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.445061][ T8941] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 566.682139][T12489] netlink: 'syz.4.2061': attribute type 12 has an invalid length. [ 566.682163][T12489] netlink: 'syz.4.2061': attribute type 29 has an invalid length. [ 566.682177][T12489] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2061'. [ 566.687728][T12489] netlink: 'syz.4.2061': attribute type 12 has an invalid length. [ 566.687780][T12489] netlink: 'syz.4.2061': attribute type 29 has an invalid length. [ 566.687821][T12489] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2061'. [ 567.018912][ T1424] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.018938][ T1424] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.882396][ T3344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 567.882418][ T3344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.760604][T12540] netlink: 'syz.4.2073': attribute type 12 has an invalid length. [ 570.760642][T12540] netlink: 'syz.4.2073': attribute type 29 has an invalid length. [ 570.760659][T12540] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2073'. [ 571.427193][T12542] netlink: 'syz.4.2073': attribute type 12 has an invalid length. [ 571.427223][T12542] netlink: 'syz.4.2073': attribute type 29 has an invalid length. [ 571.427237][T12542] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2073'. [ 571.840533][T12554] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2076'. [ 572.577723][T12559] netlink: 592 bytes leftover after parsing attributes in process `syz.6.2077'. [ 572.578049][T12559] netlink: 592 bytes leftover after parsing attributes in process `syz.6.2077'. [ 578.418264][T12621] fuse: Bad value for 'fd' [ 579.008063][ T5336] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 579.315716][ T5336] usb 4-1: Using ep0 maxpacket: 32 [ 579.317055][ T5336] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 579.317074][ T5336] usb 4-1: config 0 has no interface number 0 [ 579.318880][ T5336] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 579.318900][ T5336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.318914][ T5336] usb 4-1: Product: syz [ 579.318925][ T5336] usb 4-1: Manufacturer: syz [ 579.318936][ T5336] usb 4-1: SerialNumber: syz [ 579.320967][ T5336] usb 4-1: config 0 descriptor?? [ 579.735309][ T5336] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 579.735346][ T5336] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 580.567770][T12645] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2097'. [ 580.624962][T12646] fuse: Bad value for 'fd' [ 580.677257][ T5336] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 580.677504][ T5336] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 580.990730][T12650] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2099'. [ 580.991848][T12650] 8021q: VLANs not supported on vxcan1 [ 582.351861][ T31] usb 4-1: USB disconnect, device number 46 [ 583.680776][T12674] fuse: Bad value for 'fd' [ 585.565798][T12701] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2111'. [ 585.599773][T12703] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2112'. [ 586.508625][T12710] loop2: detected capacity change from 0 to 7 [ 586.512641][T12710] buffer_io_error: 9 callbacks suppressed [ 586.512675][T12710] Buffer I/O error on dev loop2, logical block 0, async page read [ 586.513220][T12710] Buffer I/O error on dev loop2, logical block 0, async page read [ 586.513724][T12710] Buffer I/O error on dev loop2, logical block 0, async page read [ 586.514205][T12710] Buffer I/O error on dev loop2, logical block 0, async page read [ 586.514803][T12710] Buffer I/O error on dev loop2, logical block 0, async page read [ 586.515267][T12710] Buffer I/O error on dev loop2, logical block 0, async page read [ 586.515773][T12710] Buffer I/O error on dev loop2, logical block 0, async page read [ 586.515827][T12710] ldm_validate_partition_table(): Disk read failed. [ 586.516165][T12710] Buffer I/O error on dev loop2, logical block 0, async page read [ 586.516556][T12710] Buffer I/O error on dev loop2, logical block 0, async page read [ 586.517098][T12710] Buffer I/O error on dev loop2, logical block 0, async page read [ 586.517577][T12710] Dev loop2: unable to read RDB block 0 [ 586.518954][T12710] loop2: unable to read partition table [ 586.520087][T12710] loop2: partition table beyond EOD, truncated [ 586.520152][T12710] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 589.605611][ T31] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 589.817085][ T31] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 589.817111][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 589.817130][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 589.817155][ T31] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 589.817176][ T31] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 589.818034][ T31] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 589.818054][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 589.818068][ T31] usb 3-1: SerialNumber: syz [ 589.821270][T12730] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 589.821411][T12730] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 589.838594][ T31] rndis_host 3-1:1.0: missing RNDIS status endpoint [ 590.605446][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2118'. [ 591.581593][T12762] fuse: Unknown parameter '0x0000000000000003' [ 592.108978][ T5265] 8021q: adding VLAN 0 to HW filter on device eth5 [ 592.563812][T12774] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2131'. [ 593.379798][T12780] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2132'. [ 596.779257][T12818] syzkaller0: entered promiscuous mode [ 596.779282][T12818] syzkaller0: entered allmulticast mode [ 596.829835][T12818] tipc: Started in network mode [ 596.829860][T12818] tipc: Node identity 8a4061fa6166, cluster identity 4711 [ 596.829960][T12818] tipc: Enabled bearer , priority 0 [ 596.928237][T12821] fuse: Unknown parameter '0x0000000000000003' [ 596.998801][T12822] tipc: Resetting bearer [ 597.065813][T12815] tipc: Resetting bearer [ 598.044633][T12815] tipc: Disabling bearer [ 598.165460][T11880] usb 3-1: USB disconnect, device number 32 [ 598.463413][ T31] tipc: Node number set to 3945161210 [ 598.465011][ T5265] 8021q: adding VLAN 0 to HW filter on device eth6 [ 600.640259][T12861] fuse: Unknown parameter '0x0000000000000003' [ 600.945688][ T4919] Bluetooth: hci2: command 0x0406 tx timeout [ 601.855625][ T9] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 601.960091][T12879] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2158'. [ 602.017169][ T9] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 602.017207][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 602.017236][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 602.017266][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 602.017294][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 602.024940][ T9] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 602.024977][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 602.025010][ T9] usb 7-1: SerialNumber: syz [ 602.108677][T12871] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 602.109821][T12871] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 602.136594][ T9] rndis_host 7-1:1.0: missing RNDIS status endpoint [ 602.259819][ T59] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci6/hci6:201' [ 602.259850][ T59] CPU: 1 UID: 0 PID: 59 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 602.259877][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 602.259893][ T59] Workqueue: hci6 hci_rx_work [ 602.259927][ T59] Call Trace: [ 602.259934][ T59] [ 602.259944][ T59] dump_stack_lvl+0xe8/0x150 [ 602.259973][ T59] sysfs_create_dir_ns+0x271/0x2a0 [ 602.260011][ T59] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 602.260046][ T59] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 602.260085][ T59] ? rt_spin_unlock+0x160/0x200 [ 602.260118][ T59] kobject_add_internal+0x62c/0xce0 [ 602.260153][ T59] kobject_add+0x163/0x240 [ 602.260185][ T59] ? __pfx_kobject_add+0x10/0x10 [ 602.260217][ T59] ? get_device_parent+0x370/0x3a0 [ 602.260246][ T59] device_add+0x3fa/0xb80 [ 602.260270][ T59] hci_conn_add_sysfs+0xd5/0x210 [ 602.260296][ T59] le_conn_complete_evt+0xfef/0x1580 [ 602.260335][ T59] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 602.260369][ T59] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 602.260393][ T59] ? rt_mutex_slowunlock+0x219/0x460 [ 602.260425][ T59] ? skb_pull_data+0xf0/0x200 [ 602.260466][ T59] hci_le_conn_complete_evt+0x187/0x470 [ 602.260502][ T59] hci_event_packet+0x67a/0xf10 [ 602.260527][ T59] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 602.260554][ T59] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 602.260582][ T59] ? __pfx_hci_event_packet+0x10/0x10 [ 602.260608][ T59] ? do_raw_spin_lock+0x12b/0x2f0 [ 602.260634][ T59] ? hci_send_to_monitor+0xe2/0x590 [ 602.260669][ T59] hci_rx_work+0x3ee/0x1020 [ 602.260698][ T59] ? process_scheduled_works+0xa20/0x14e0 [ 602.260729][ T59] process_scheduled_works+0xa8e/0x14e0 [ 602.260774][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 602.260803][ T59] ? do_raw_spin_lock+0x12b/0x2f0 [ 602.260827][ T59] ? assign_work+0x3cf/0x5d0 [ 602.260859][ T59] worker_thread+0xa47/0xfb0 [ 602.260902][ T59] kthread+0x388/0x470 [ 602.260922][ T59] ? __pfx_worker_thread+0x10/0x10 [ 602.260950][ T59] ? __pfx_kthread+0x10/0x10 [ 602.260970][ T59] ret_from_fork+0x514/0xb70 [ 602.260994][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 602.261017][ T59] ? __switch_to+0xc89/0x1420 [ 602.261049][ T59] ? __pfx_kthread+0x10/0x10 [ 602.261070][ T59] ret_from_fork_asm+0x1a/0x30 [ 602.261104][ T59] [ 602.261150][ T59] kobject: kobject_add_internal failed for hci6:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 602.261188][ T59] Bluetooth: hci6: failed to register connection device [ 602.807291][T12895] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2155'. [ 608.613639][ T5693] usb 7-1: USB disconnect, device number 5 [ 608.917748][T11880] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 609.612970][T11880] usb 4-1: Using ep0 maxpacket: 32 [ 609.968814][T11880] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 609.968853][T11880] usb 4-1: config 0 has no interface number 0 [ 610.087491][T11880] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 610.087531][T11880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.087561][T11880] usb 4-1: Product: syz [ 610.087585][T11880] usb 4-1: Manufacturer: syz [ 610.087633][T11880] usb 4-1: SerialNumber: syz [ 610.293889][T11880] usb 4-1: config 0 descriptor?? [ 610.982474][T11880] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 610.982498][T11880] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 611.211683][ T4919] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 611.211710][ T4919] CPU: 1 UID: 0 PID: 4919 Comm: kworker/u9:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 611.211738][ T4919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 611.211757][ T4919] Workqueue: hci4 hci_rx_work [ 611.211790][ T4919] Call Trace: [ 611.211798][ T4919] [ 611.211807][ T4919] dump_stack_lvl+0xe8/0x150 [ 611.211836][ T4919] sysfs_create_dir_ns+0x271/0x2a0 [ 611.211873][ T4919] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 611.211906][ T4919] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 611.211945][ T4919] ? rt_spin_unlock+0x160/0x200 [ 611.211978][ T4919] kobject_add_internal+0x62c/0xce0 [ 611.212012][ T4919] kobject_add+0x163/0x240 [ 611.212042][ T4919] ? __pfx_kobject_add+0x10/0x10 [ 611.212074][ T4919] ? get_device_parent+0x370/0x3a0 [ 611.212101][ T4919] device_add+0x3fa/0xb80 [ 611.212122][ T4919] hci_conn_add_sysfs+0xd5/0x210 [ 611.212148][ T4919] le_conn_complete_evt+0xfef/0x1580 [ 611.212186][ T4919] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 611.212219][ T4919] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 611.212251][ T4919] ? rt_mutex_slowunlock+0x219/0x460 [ 611.212282][ T4919] ? skb_pull_data+0xf0/0x200 [ 611.212326][ T4919] hci_le_conn_complete_evt+0x187/0x470 [ 611.212360][ T4919] hci_event_packet+0x67a/0xf10 [ 611.212402][ T4919] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 611.212429][ T4919] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 611.212458][ T4919] ? __pfx_hci_event_packet+0x10/0x10 [ 611.212482][ T4919] ? do_raw_spin_lock+0x12b/0x2f0 [ 611.212507][ T4919] ? hci_send_to_monitor+0xe2/0x590 [ 611.212544][ T4919] hci_rx_work+0x3ee/0x1020 [ 611.212574][ T4919] ? process_scheduled_works+0xa20/0x14e0 [ 611.212616][ T4919] process_scheduled_works+0xa8e/0x14e0 [ 611.212660][ T4919] ? __pfx_process_scheduled_works+0x10/0x10 [ 611.212686][ T4919] ? do_raw_spin_lock+0x12b/0x2f0 [ 611.212709][ T4919] ? assign_work+0x3cf/0x5d0 [ 611.212739][ T4919] worker_thread+0xa47/0xfb0 [ 611.212781][ T4919] kthread+0x388/0x470 [ 611.212803][ T4919] ? __pfx_worker_thread+0x10/0x10 [ 611.212830][ T4919] ? __pfx_kthread+0x10/0x10 [ 611.212851][ T4919] ret_from_fork+0x514/0xb70 [ 611.212875][ T4919] ? __pfx_ret_from_fork+0x10/0x10 [ 611.212896][ T4919] ? __switch_to+0xc89/0x1420 [ 611.212929][ T4919] ? __pfx_kthread+0x10/0x10 [ 611.212951][ T4919] ret_from_fork_asm+0x1a/0x30 [ 611.212984][ T4919] [ 611.213071][ T4919] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 611.213105][ T4919] Bluetooth: hci4: failed to register connection device [ 612.519608][T11880] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 612.519755][T11880] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 614.098735][ T36] usb 4-1: USB disconnect, device number 47 [ 614.125651][T11880] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 614.294926][T11880] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 614.294949][T11880] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.320387][T11880] usb 8-1: config 0 descriptor?? [ 614.799239][T11880] udl 8-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 614.800796][T11880] [drm:udl_init] *ERROR* Selecting channel failed [ 615.341763][T11880] [drm] Initialized udl 0.0.1 for 8-1:0.0 on minor 2 [ 615.341789][T11880] [drm] Initialized udl on minor 2 [ 615.342829][T11880] udl 8-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 615.343631][T11880] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 615.399575][T11880] usb 8-1: USB disconnect, device number 2 [ 615.400688][ T36] udl 8-1:0.0: [drm] Cannot find any crtc or sizes [ 615.744246][T13019] netlink: 'syz.3.2189': attribute type 1 has an invalid length. [ 615.917763][T13019] 8021q: adding VLAN 0 to HW filter on device bond5 [ 616.436010][T13024] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 616.543195][T13019] bond5: (slave geneve2): making interface the new active one [ 616.544731][T13019] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 616.597701][T13024] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.008406][T13024] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.158920][T13024] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.415905][ T1559] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.415969][ T1559] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.416037][ T1559] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 620.416089][ T1559] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 621.126989][T13081] netlink: 'syz.7.2205': attribute type 1 has an invalid length. [ 624.451191][T13122] netlink: 'syz.6.2216': attribute type 1 has an invalid length. [ 624.473213][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.473250][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.611959][T13122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 624.721230][T13129] bond1: (slave geneve2): making interface the new active one [ 624.731554][T13129] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 627.669184][ T5336] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 628.376001][ T5336] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 628.376037][ T5336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.405773][ T5336] usb 4-1: config 0 descriptor?? [ 628.836583][ T5336] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 628.836936][ T5336] [drm:udl_init] *ERROR* Selecting channel failed [ 628.914711][ T5336] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 628.914737][ T5336] [drm] Initialized udl on minor 2 [ 629.068416][ T5336] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 629.068604][ T5336] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 629.069717][ T5747] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 629.070119][ T5747] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 629.070257][ T5747] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 629.116660][ T5336] usb 4-1: USB disconnect, device number 48 [ 630.155663][ T9] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 630.316061][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 630.318302][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 630.318347][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 630.318379][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 630.318404][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 630.318430][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 630.319706][ T9] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 630.319736][ T9] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 630.319756][ T9] usb 7-1: Manufacturer: syz [ 630.407734][ T9] usb 7-1: config 0 descriptor?? [ 630.888510][ T9] rc_core: IR keymap rc-hauppauge not found [ 630.888525][ T9] Registered IR keymap rc-empty [ 630.888805][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 630.915645][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 630.936333][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 630.937688][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input21 [ 630.944157][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 630.978694][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 630.995709][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 631.015624][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 631.035789][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 631.055668][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 631.085670][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 631.105886][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 631.125682][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 631.145677][ T9] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 631.167623][ T9] mceusb 7-1:0.0: Registered 42424242 with mce emulator interface version 1 [ 631.167641][ T9] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 631.228886][ T31] usb 7-1: USB disconnect, device number 6 [ 631.745628][ T59] Bluetooth: hci6: command 0x0406 tx timeout [ 633.075770][T13210] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 638.889205][T13303] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 640.615622][ T5747] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 640.775753][ T5747] usb 4-1: Using ep0 maxpacket: 16 [ 640.782353][ T5747] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 640.782548][ T5747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.782588][ T5747] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 640.782675][ T5747] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 640.787658][ T5747] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 640.791000][ T5747] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.888217][ T5747] usb 4-1: config 0 descriptor?? [ 640.935053][T13386] fuse: Bad value for 'fd' [ 641.878836][ T5747] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0010/input/input22 [ 641.973288][ T5747] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0010/input/input23 [ 642.029229][ T5747] kye 0003:0458:5013.0010: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 642.055694][ T5747] usb 4-1: USB disconnect, device number 49 [ 642.723173][T13399] fido_id[13399]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 645.222466][T13451] IPv6: Can't replace route, no match found [ 645.445879][ T36] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 645.596037][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 645.602084][ T36] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 645.602119][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 645.602139][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 645.602156][ T36] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 645.602184][ T36] usb 4-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00 [ 645.602202][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 645.735920][ T36] usb 4-1: config 0 descriptor?? [ 646.661357][ T36] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0011/input/input24 [ 646.728326][ T36] input: HID 0458:5013 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5013.0011/input/input25 [ 646.874988][ T36] kye 0003:0458:5013.0011: input,hiddev0,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.3-1/input0 [ 647.022504][ T9] usb 4-1: USB disconnect, device number 50 [ 647.168748][T13467] fido_id[13467]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 647.204803][T13001] udevd[13001]: setting owner of /dev/input/event5 to uid=0, gid=104 failed: No such file or directory [ 650.093421][T13469] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 654.722420][T13548] netlink: 592 bytes leftover after parsing attributes in process `syz.3.2337'. [ 654.722864][T13548] netlink: 592 bytes leftover after parsing attributes in process `syz.3.2337'. [ 657.920976][ T59] Bluetooth: hci4: command 0x0406 tx timeout [ 658.292496][T13585] netlink: 592 bytes leftover after parsing attributes in process `syz.4.2349'. [ 658.316629][T13585] netlink: 592 bytes leftover after parsing attributes in process `syz.4.2349'. [ 659.297600][T13589] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.550253][T13589] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.868793][T13589] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.099633][T13589] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.410069][ T9385] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.424188][ T8939] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.424635][ T1424] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.424714][ T8939] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 666.187130][T13661] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 666.324062][T13661] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.397238][T13661] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.527723][T13661] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.746677][ T8939] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.746806][ T8939] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.746856][ T8939] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 667.855783][ T1559] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.321923][T13694] netlink: 'syz.7.2384': attribute type 4 has an invalid length. [ 671.455436][T13733] netlink: 'syz.4.2400': attribute type 4 has an invalid length. [ 672.994301][T11880] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 673.155604][T11880] usb 4-1: Using ep0 maxpacket: 32 [ 673.157217][T11880] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 673.157237][T11880] usb 4-1: config 0 has no interface number 0 [ 673.187837][T11880] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 673.187860][T11880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.187874][T11880] usb 4-1: Product: syz [ 673.187885][T11880] usb 4-1: Manufacturer: syz [ 673.187895][T11880] usb 4-1: SerialNumber: syz [ 673.330297][T11880] usb 4-1: config 0 descriptor?? [ 674.697805][T11880] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 674.697829][T11880] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 675.255685][ T31] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 675.405578][ T31] usb 7-1: Using ep0 maxpacket: 32 [ 675.410428][ T31] usb 7-1: unable to get BOS descriptor or descriptor too short [ 675.433101][ T31] usb 7-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 675.433124][ T31] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.433139][ T31] usb 7-1: Product: syz [ 675.433150][ T31] usb 7-1: Manufacturer: syz [ 675.433163][ T31] usb 7-1: SerialNumber: syz [ 675.726750][ T31] usb 7-1: selecting invalid altsetting 1 [ 675.862966][ T31] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 675.887262][ T31] usb 7-1: USB disconnect, device number 7 [ 675.907737][T13396] udevd[13396]: setting mode of /dev/bus/usb/007/007 to 020664 failed: No such file or directory [ 675.909530][T13396] udevd[13396]: setting owner of /dev/bus/usb/007/007 to uid=0, gid=0 failed: No such file or directory [ 676.002165][T13396] udevd[13396]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 677.286323][T11880] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000006c: -71 [ 677.286523][T11880] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 677.307249][T11880] usb 4-1: USB disconnect, device number 51 [ 678.632279][T13772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 680.139243][ T4919] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection [ 681.097644][T11917] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 681.245648][T11917] usb 8-1: Using ep0 maxpacket: 16 [ 681.250348][T11917] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 681.250373][T11917] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 681.250389][T11917] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 681.250417][T11917] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 681.250434][T11917] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.267296][T11917] usb 8-1: config 0 descriptor?? [ 684.095942][T13863] fuse: Bad value for 'group_id' [ 684.095962][T13863] fuse: Bad value for 'group_id' [ 684.405844][T11917] usbhid 8-1:0.0: can't add hid device: -71 [ 684.405940][T11917] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 684.455143][T11917] usb 8-1: USB disconnect, device number 3 [ 684.940395][T13870] netlink: 'syz.7.2444': attribute type 1 has an invalid length. [ 684.991250][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2444'. [ 685.018206][T13870] bond1: entered promiscuous mode [ 685.018414][T13870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 685.136996][T13875] 8021q: adding VLAN 0 to HW filter on device bond1 [ 685.139317][T13875] bond1: (slave gre1): The slave device specified does not support setting the MAC address [ 685.139343][T13875] bond1: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 685.176157][T13875] bond1: (slave gre1): making interface the new active one [ 685.176228][T13875] gre1: entered promiscuous mode [ 685.199426][T13875] bond1: (slave gre1): Enslaving as an active interface with an up link [ 686.040843][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.040899][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.277641][T13892] netlink: 'syz.3.2450': attribute type 1 has an invalid length. [ 686.356019][T13892] 8021q: adding VLAN 0 to HW filter on device bond6 [ 687.605709][T11880] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 687.756189][T11880] usb 4-1: Using ep0 maxpacket: 32 [ 687.758510][T11880] usb 4-1: unable to get BOS descriptor or descriptor too short [ 687.759424][T11880] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 687.762788][T11880] usb 4-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 687.762808][T11880] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 687.762823][T11880] usb 4-1: Product: syz [ 687.762833][T11880] usb 4-1: Manufacturer: syz [ 687.762844][T11880] usb 4-1: SerialNumber: syz [ 688.646440][T11880] usb 4-1: selecting invalid altsetting 1 [ 689.509658][T11880] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 689.523516][T11880] usb 4-1: USB disconnect, device number 52 [ 689.674883][T13001] udevd[13001]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 693.529852][T13968] netlink: 'syz.4.2472': attribute type 1 has an invalid length. [ 694.294886][T13968] 8021q: adding VLAN 0 to HW filter on device bond2 [ 694.403748][T13976] bond2: (slave geneve2): making interface the new active one [ 694.407423][T13976] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 698.224011][T14021] overlayfs: failed to clone upperpath [ 698.282711][T14021] fuse: Bad value for 'fd' [ 700.205657][ T36] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 701.276111][ T36] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 701.276141][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 701.276161][ T36] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 701.276181][ T36] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 701.276216][ T36] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 701.276232][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.356524][ T36] usb 4-1: config 0 descriptor?? [ 701.483231][ T36] usb 4-1: can't set config #0, error -71 [ 701.486815][ T36] usb 4-1: USB disconnect, device number 53 [ 703.657198][T14070] fuse: Bad value for 'fd' [ 705.145634][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 705.840495][ T9] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 705.840593][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 705.840660][ T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 705.840725][ T9] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 705.840871][ T9] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 705.840985][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.074177][ T9] usb 8-1: config 0 descriptor?? [ 706.076003][T14079] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 706.518269][ T9] hid_parser_main: 1 callbacks suppressed [ 706.518292][ T9] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 706.518322][ T9] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 706.518353][ T9] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 706.518380][ T9] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 706.518406][ T9] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 706.518431][ T9] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 706.518457][ T9] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 706.518483][ T9] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 706.518508][ T9] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 706.518535][ T9] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0 [ 706.616659][ T9] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 706.897270][T14111] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 707.094530][ T31] usb 8-1: USB disconnect, device number 4 [ 707.287971][T14123] fuse: Bad value for 'fd' [ 712.211831][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 712.392009][ T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 712.392046][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 712.392077][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 712.392107][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 712.392145][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 712.392168][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 712.412342][ T10] usb 8-1: config 0 descriptor?? [ 712.452625][T14156] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 712.898626][ T10] hid_parser_main: 1 callbacks suppressed [ 712.898653][ T10] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 712.898683][ T10] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 712.898710][ T10] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 712.898736][ T10] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 712.898761][ T10] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 712.898788][ T10] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 712.898815][ T10] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 712.898841][ T10] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 712.898867][ T10] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 712.898893][ T10] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0 [ 713.004153][ T10] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 714.565868][ T31] usb 8-1: reset high-speed USB device number 5 using dummy_hcd [ 716.456478][ T36] usb 8-1: USB disconnect, device number 5 [ 716.764702][T14210] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 719.448316][T14252] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 719.495659][ T31] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 719.646197][ T31] usb 3-1: Using ep0 maxpacket: 16 [ 719.649248][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.649271][ T31] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.649287][ T31] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 719.649336][ T31] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 719.649362][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.654123][ T31] usb 3-1: config 0 descriptor?? [ 722.539708][ T31] usbhid 3-1:0.0: can't add hid device: -71 [ 722.540973][ T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 722.571536][ T31] usb 3-1: USB disconnect, device number 33 [ 723.484730][T14279] netlink: 'syz.3.2564': attribute type 1 has an invalid length. [ 723.533321][T14279] 8021q: adding VLAN 0 to HW filter on device bond7 [ 724.689126][T14302] netlink: 'syz.6.2570': attribute type 12 has an invalid length. [ 724.689144][T14302] netlink: 'syz.6.2570': attribute type 29 has an invalid length. [ 724.689158][T14302] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2570'. [ 724.747702][T14302] netlink: 'syz.6.2570': attribute type 12 has an invalid length. [ 724.747780][T14302] netlink: 'syz.6.2570': attribute type 29 has an invalid length. [ 724.747816][T14302] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2570'. [ 724.786832][T14303] IPv6: Can't replace route, no match found [ 726.646785][T14289] dvmrp0: entered allmulticast mode [ 727.460018][T14316] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 727.534528][T14318] netlink: 'syz.6.2576': attribute type 1 has an invalid length. [ 727.618398][T14318] 8021q: adding VLAN 0 to HW filter on device bond2 [ 727.829633][T14325] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2578'. [ 727.829653][T14325] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2578'. [ 727.868755][T14325] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2578'. [ 727.868774][T14325] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2578'. [ 729.471243][T14345] fuse: fd is not a fuse device [ 730.798162][T14356] netlink: 'syz.7.2588': attribute type 1 has an invalid length. [ 731.050152][T14356] 8021q: adding VLAN 0 to HW filter on device bond2 [ 731.824370][T14367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2592'. [ 731.824398][T14367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2592'. [ 731.860154][T14367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2592'. [ 731.860175][T14367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2592'. [ 739.751875][T14404] netlink: 'syz.6.2605': attribute type 1 has an invalid length. [ 740.578563][T14404] 8021q: adding VLAN 0 to HW filter on device bond3 [ 741.504347][T14418] netlink: 'syz.7.2608': attribute type 1 has an invalid length. [ 741.774429][T14418] bond3: entered promiscuous mode [ 741.774623][T14418] 8021q: adding VLAN 0 to HW filter on device bond3 [ 742.977169][T14425] 8021q: adding VLAN 0 to HW filter on device bond3 [ 742.977549][T14425] bond3: (slave gre2): The slave device specified does not support setting the MAC address [ 742.977564][T14425] bond3: (slave gre2): Setting fail_over_mac to active for active-backup mode [ 743.017684][T14425] bond3: (slave gre2): making interface the new active one [ 743.017716][T14425] gre2: entered promiscuous mode [ 743.024016][T14425] bond3: (slave gre2): Enslaving as an active interface with an up link [ 743.555939][ T36] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 743.756797][ T36] usb 4-1: Using ep0 maxpacket: 8 [ 743.957359][ T36] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 743.959881][ T36] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 743.960123][ T36] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 743.960406][ T36] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 743.960859][ T36] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 743.961495][ T36] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 743.962310][ T36] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 744.549926][ T36] usb 4-1: usb_control_msg returned -32 [ 744.549977][ T36] usbtmc 4-1:16.0: can't read capabilities [ 746.350954][T14458] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 746.368032][T14445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.370022][T14445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.406727][T14445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.410721][T14445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.439803][T14445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.448152][T14445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.674123][T14445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 746.683986][T14445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 746.705108][ T5336] usb 4-1: USB disconnect, device number 54 [ 746.750128][T14479] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2619'. [ 746.750151][T14479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2619'. [ 746.750168][T14479] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2619'. [ 747.354562][ T1342] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.354619][ T1342] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.580668][T14499] netlink: 'syz.3.2630': attribute type 1 has an invalid length. [ 748.766716][T14499] bond8: entered promiscuous mode [ 748.766983][T14499] 8021q: adding VLAN 0 to HW filter on device bond8 [ 748.986980][T14491] 8021q: adding VLAN 0 to HW filter on device bond8 [ 748.990256][T14491] bond8: (slave gre3): The slave device specified does not support setting the MAC address [ 748.990281][T14491] bond8: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 749.024442][T14491] bond8: (slave gre3): making interface the new active one [ 749.024473][T14491] gre3: entered promiscuous mode [ 749.033086][T14491] bond8: (slave gre3): Enslaving as an active interface with an up link [ 752.502109][T14544] kvm: emulating exchange as write [ 757.590591][ T9607] ------------[ cut here ]------------ [ 757.590602][ T9607] time_after(jiffies, warn_timeout) [ 757.590614][ T9607] WARNING: io_uring/io-wq.c:1370 at io_wq_put_and_exit+0x736/0xaa0, CPU#0: syz.0.1084/9607 [ 757.590753][ T9607] Modules linked in: [ 757.590786][ T9607] CPU: 0 UID: 0 PID: 9607 Comm: syz.0.1084 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 757.590804][ T9607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 757.590818][ T9607] RIP: 0010:io_wq_put_and_exit+0x736/0xaa0 [ 757.590887][ T9607] Code: 78 22 e8 fd 74 28 fd 4c 89 e7 4c 89 fe e8 62 9f 7d 06 48 85 c0 75 18 e8 e8 74 28 fd 80 3c 2b 00 75 bb eb c5 e8 db 74 28 fd 90 <0f> 0b 90 eb d8 e8 d0 74 28 fd 4c 8b 2c 24 4d 8d 7d 08 4c 89 fd 48 [ 757.590906][ T9607] RSP: 0018:ffffc9001fc97838 EFLAGS: 00010293 [ 757.590924][ T9607] RAX: ffffffff849c4715 RBX: 1ffffffff1b42678 RCX: ffff888071e33e00 [ 757.590941][ T9607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 757.590954][ T9607] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 757.590967][ T9607] R10: dffffc0000000000 R11: fffffbfff1ed259f R12: ffff88804061f018 [ 757.590984][ T9607] R13: 0000000100009a90 R14: 000000010000b200 R15: 0000000000001b58 [ 757.590999][ T9607] FS: 00007f37bb2356c0(0000) GS:ffff88812637d000(0000) knlGS:0000000000000000 [ 757.591017][ T9607] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 757.591032][ T9607] CR2: 00007feb1b706b43 CR3: 000000005ceee000 CR4: 00000000003526f0 [ 757.591052][ T9607] Call Trace: [ 757.591060][ T9607] [ 757.591071][ T9607] ? io_wq_put_and_exit+0x15a/0xaa0 [ 757.591109][ T9607] io_uring_clean_tctx+0x12e/0x1b0 [ 757.591142][ T9607] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 757.591172][ T9607] ? trace_irq_enable+0x3b/0x140 [ 757.591197][ T9607] ? io_uring_drop_tctx_refs+0x135/0x1d0 [ 757.591225][ T9607] io_uring_cancel_generic+0x6c0/0x7d0 [ 757.591263][ T9607] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 757.591295][ T9607] ? __fput_deferred+0x253/0x3e0 [ 757.591395][ T9607] ? __pfx___fput_deferred+0x10/0x10 [ 757.591426][ T9607] ? rcu_is_watching+0x15/0xb0 [ 757.591504][ T9607] ? __pfx_autoremove_wake_function+0x10/0x10 [ 757.591583][ T9607] ? io_uring_unreg_ringfd+0x531/0x540 [ 757.591633][ T9607] do_exit+0x39f/0x2360 [ 757.591685][ T9607] ? __pfx_do_exit+0x10/0x10 [ 757.591723][ T9607] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 757.591755][ T9607] ? preempt_count_add+0x91/0x190 [ 757.591838][ T9607] do_group_exit+0x22d/0x2f0 [ 757.591862][ T9607] ? rt_spin_unlock+0x160/0x200 [ 757.591894][ T9607] get_signal+0x121b/0x12c0 [ 757.591977][ T9607] arch_do_signal_or_restart+0xbb/0x860 [ 757.592013][ T9607] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 757.592054][ T9607] ? rcu_is_watching+0x15/0xb0 [ 757.592093][ T9607] exit_to_user_mode_loop+0x104/0x730 [ 757.592143][ T9607] ? rcu_is_watching+0x15/0xb0 [ 757.592172][ T9607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.592195][ T9607] do_syscall_64+0x353/0x580 [ 757.592298][ T9607] ? clear_bhb_loop+0x40/0x90 [ 757.592323][ T9607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.592346][ T9607] RIP: 0033:0x7f37bcffce59 [ 757.592379][ T9607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.592399][ T9607] RSP: 002b:00007f37bb2350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 757.592422][ T9607] RAX: fffffffffffffe00 RBX: 00007f37bd276098 RCX: 00007f37bcffce59 [ 757.592438][ T9607] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f37bd276098 [ 757.592452][ T9607] RBP: 00007f37bd276090 R08: 0000000000000000 R09: 0000000000000000 [ 757.592467][ T9607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.592480][ T9607] R13: 00007f37bd276128 R14: 00007fffc42f80a0 R15: 00007fffc42f8188 [ 757.592506][ T9607] [ 757.592518][ T9607] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 757.592535][ T9607] CPU: 0 UID: 0 PID: 9607 Comm: syz.0.1084 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 757.592560][ T9607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 757.592573][ T9607] Call Trace: [ 757.592582][ T9607] [ 757.592590][ T9607] vpanic+0x56c/0xa60 [ 757.592618][ T9607] ? __pfx__printk+0x10/0x10 [ 757.592647][ T9607] ? __pfx_vpanic+0x10/0x10 [ 757.592672][ T9607] ? is_bpf_text_address+0x292/0x2b0 [ 757.592753][ T9607] ? is_bpf_text_address+0x26/0x2b0 [ 757.592784][ T9607] panic+0xc5/0xd0 [ 757.592809][ T9607] ? __pfx_panic+0x10/0x10 [ 757.592845][ T9607] __warn+0x315/0x4c0 [ 757.592871][ T9607] ? io_wq_put_and_exit+0x736/0xaa0 [ 757.592898][ T9607] ? io_wq_put_and_exit+0x736/0xaa0 [ 757.592923][ T9607] __report_bug+0x331/0x530 [ 757.592975][ T9607] ? io_wq_put_and_exit+0x736/0xaa0 [ 757.593001][ T9607] ? __pfx___report_bug+0x10/0x10 [ 757.593025][ T9607] ? irqentry_exit+0x218/0x8f0 [ 757.593071][ T9607] ? trace_irq_disable+0x3b/0x140 [ 757.593106][ T9607] ? io_wq_put_and_exit+0x738/0xaa0 [ 757.593130][ T9607] ? io_wq_put_and_exit+0x736/0xaa0 [ 757.593158][ T9607] ? io_wq_put_and_exit+0x736/0xaa0 [ 757.593182][ T9607] report_bug+0x16a/0x220 [ 757.593205][ T9607] ? io_wq_put_and_exit+0x736/0xaa0 [ 757.593228][ T9607] ? io_wq_put_and_exit+0x738/0xaa0 [ 757.593252][ T9607] handle_bug+0x9c/0x200 [ 757.593272][ T9607] exc_invalid_op+0x1a/0x50 [ 757.593291][ T9607] asm_exc_invalid_op+0x1a/0x20 [ 757.593306][ T9607] RIP: 0010:io_wq_put_and_exit+0x736/0xaa0 [ 757.593325][ T9607] Code: 78 22 e8 fd 74 28 fd 4c 89 e7 4c 89 fe e8 62 9f 7d 06 48 85 c0 75 18 e8 e8 74 28 fd 80 3c 2b 00 75 bb eb c5 e8 db 74 28 fd 90 <0f> 0b 90 eb d8 e8 d0 74 28 fd 4c 8b 2c 24 4d 8d 7d 08 4c 89 fd 48 [ 757.593338][ T9607] RSP: 0018:ffffc9001fc97838 EFLAGS: 00010293 [ 757.593352][ T9607] RAX: ffffffff849c4715 RBX: 1ffffffff1b42678 RCX: ffff888071e33e00 [ 757.593364][ T9607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 757.593374][ T9607] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 757.593384][ T9607] R10: dffffc0000000000 R11: fffffbfff1ed259f R12: ffff88804061f018 [ 757.593396][ T9607] R13: 0000000100009a90 R14: 000000010000b200 R15: 0000000000001b58 [ 757.593410][ T9607] ? io_wq_put_and_exit+0x735/0xaa0 [ 757.593431][ T9607] ? io_wq_put_and_exit+0x735/0xaa0 [ 757.593448][ T9607] ? io_wq_put_and_exit+0x15a/0xaa0 [ 757.593469][ T9607] io_uring_clean_tctx+0x12e/0x1b0 [ 757.593492][ T9607] ? __pfx_io_uring_clean_tctx+0x10/0x10 [ 757.593512][ T9607] ? trace_irq_enable+0x3b/0x140 [ 757.593529][ T9607] ? io_uring_drop_tctx_refs+0x135/0x1d0 [ 757.593549][ T9607] io_uring_cancel_generic+0x6c0/0x7d0 [ 757.593576][ T9607] ? __pfx_io_uring_cancel_generic+0x10/0x10 [ 757.593600][ T9607] ? __fput_deferred+0x253/0x3e0 [ 757.593624][ T9607] ? __pfx___fput_deferred+0x10/0x10 [ 757.593647][ T9607] ? rcu_is_watching+0x15/0xb0 [ 757.593668][ T9607] ? __pfx_autoremove_wake_function+0x10/0x10 [ 757.593697][ T9607] ? io_uring_unreg_ringfd+0x531/0x540 [ 757.593717][ T9607] do_exit+0x39f/0x2360 [ 757.593735][ T9607] ? __pfx_do_exit+0x10/0x10 [ 757.593749][ T9607] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 757.593772][ T9607] ? preempt_count_add+0x91/0x190 [ 757.593798][ T9607] do_group_exit+0x22d/0x2f0 [ 757.593814][ T9607] ? rt_spin_unlock+0x160/0x200 [ 757.593837][ T9607] get_signal+0x121b/0x12c0 [ 757.593897][ T9607] arch_do_signal_or_restart+0xbb/0x860 [ 757.593932][ T9607] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 757.593974][ T9607] ? rcu_is_watching+0x15/0xb0 [ 757.593997][ T9607] exit_to_user_mode_loop+0x104/0x730 [ 757.594015][ T9607] ? rcu_is_watching+0x15/0xb0 [ 757.594036][ T9607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.594064][ T9607] do_syscall_64+0x353/0x580 [ 757.594081][ T9607] ? clear_bhb_loop+0x40/0x90 [ 757.594103][ T9607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 757.594117][ T9607] RIP: 0033:0x7f37bcffce59 [ 757.594130][ T9607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 757.594143][ T9607] RSP: 002b:00007f37bb2350e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 757.594159][ T9607] RAX: fffffffffffffe00 RBX: 00007f37bd276098 RCX: 00007f37bcffce59 [ 757.594170][ T9607] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f37bd276098 [ 757.594180][ T9607] RBP: 00007f37bd276090 R08: 0000000000000000 R09: 0000000000000000 [ 757.594190][ T9607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 757.594199][ T9607] R13: 00007f37bd276128 R14: 00007fffc42f80a0 R15: 00007fffc42f8188 [ 757.594216][ T9607] [ 757.594865][ T9607] Kernel Offset: disabled