last executing test programs: 10m30.475315776s ago: executing program 0 (id=61): socket$kcm(0x10, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 10m27.750966351s ago: executing program 0 (id=65): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() pipe(0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 10m21.766066094s ago: executing program 3 (id=72): socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x208904, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') read$FUSE(r4, &(0x7f0000020940)={0x2020}, 0x2020) 10m19.702824154s ago: executing program 3 (id=74): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x101, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x90) keyctl$instantiate(0xc, 0x0, 0x0, 0x31, 0xfffffffffffffffc) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180), 0x129080, 0x0) ioctl$SNDCTL_TMR_TIMEBASE(r2, 0xc0045401, &(0x7f0000000080)=0xf5) syncfs(0xffffffffffffffff) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) 10m18.816965619s ago: executing program 3 (id=79): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r5, 0x4b45, 0x1) 10m17.349383218s ago: executing program 0 (id=80): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35, 0x0, 0x1}, 0x28) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4e21, 0x9, @mcast1, 0x9}, r2, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 10m16.220879s ago: executing program 0 (id=84): open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r5, 0x0) 10m14.547485226s ago: executing program 3 (id=85): r0 = syz_open_procfs(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) writev(0xffffffffffffffff, 0x0, 0x0) getsockopt$PNPIPE_HANDLE(0xffffffffffffffff, 0x113, 0x3, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) write(r1, &(0x7f0000000080)="db4d67628a", 0x5) socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r3, 0x6, 0xd, 0x0, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, 0x0, 0x0) getdents64(r0, 0x0, 0x0) 10m12.637871221s ago: executing program 0 (id=86): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket(0x10, 0x80002, 0x0) socket(0x200000000000011, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_io_uring_setup(0x3ff, &(0x7f00000005c0)={0x0, 0x32b2, 0x100, 0x1, 0x3da}, 0x0, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) pipe(&(0x7f0000000140)) pipe2$watch_queue(&(0x7f00000000c0), 0x80) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) dup(r3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000080), 0x62}, {&(0x7f0000000100)="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", 0x682c}, {&(0x7f0000001480)="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", 0x1001}], 0x3) 10m10.334857868s ago: executing program 3 (id=91): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000"], 0x48) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r3, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 10m8.660973196s ago: executing program 3 (id=93): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0xce}, @cpuid={0x2, 0x18, {0x0, 0x10}}, @cpuid={0x2, 0x18, {0xab8, 0x401}}, @cpuid={0x2, 0x18, {0x2, 0x3e}}, @cpuid={0x2, 0x18, {0x91, 0x5}}, @code={0x1, 0x5d, {"640f07440f0766b813018ec8264c0fc7ad00000100b9800000c00f3235000400000f30c4a135691e730048b864000000000000000f23c80f21f8350400c0000f23f8c401e9d0c4c4411914c2"}}, @code={0x1, 0x50, {"66ba2100ecb904080000b800980000ba000000000f30c4813658f40f01cb4c0fc79fa8404c87f20f07f20fc27b00ae66b808010f00d066baa10066ed670f30"}}], 0x125}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x0, 0x3e}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 10m3.754398505s ago: executing program 0 (id=95): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f0000000680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x4, 0x4, 0x7ff}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r3, 0x0, 0x100000000000000}, 0x38) r4 = syz_open_dev$dri(0x0, 0x1ff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x4000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064d1, 0x0) mq_open(0x0, 0x1, 0x8, &(0x7f0000000040)={0x100005, 0x100, 0x8, 0x18000000000000}) 9m52.922413578s ago: executing program 32 (id=93): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000140)={0x0, &(0x7f00000006c0)=[@uexit={0x0, 0x18, 0xce}, @cpuid={0x2, 0x18, {0x0, 0x10}}, @cpuid={0x2, 0x18, {0xab8, 0x401}}, @cpuid={0x2, 0x18, {0x2, 0x3e}}, @cpuid={0x2, 0x18, {0x91, 0x5}}, @code={0x1, 0x5d, {"640f07440f0766b813018ec8264c0fc7ad00000100b9800000c00f3235000400000f30c4a135691e730048b864000000000000000f23c80f21f8350400c0000f23f8c401e9d0c4c4411914c2"}}, @code={0x1, 0x50, {"66ba2100ecb904080000b800980000ba000000000f30c4813658f40f01cb4c0fc79fa8404c87f20f07f20fc27b00ae66b808010f00d066baa10066ed670f30"}}], 0x125}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[], 0x0, 0x3e}, 0x28) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9m44.851406258s ago: executing program 33 (id=95): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x22, 0x0, &(0x7f0000000680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x4, 0x4, 0x7ff}, 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="057e30aae10df4f97559054b9a301ecfe91b645115e1421774006df60cb393573839b0078ce169ec2fde0afea66b5bbefa9d4f3cd8c2458336ceb1f0efe647d6d7b1cdbd12c9b8e3a822cbd51494bf79a1dbe5c22338ce37ed467a1d3d616564cbb81faa2e935b2697c12efb0ed141fa2eaad4747725c4bf20f8975e402b03eb77d1aa3f10f512397b5037b1b4cd4b7c08c03dc5e52a066e5982969fa044125ae251f46c26e2536cc8b77e8edb251378be4beedfb8dca0d449123f57677ca3da5bdebf91b195f1a5d49d7c292f20f58d490de36d8ee0e8a86bd04c3165549465cbee7891fc747d7def370ce644db894b56bd53af0d0e261bcfa6bf72a684dafc5bcafe07ece74cbd1d5fa32716dd03f7acd4f32d935438c91e033beaf49e3963e13d05e7a8334a858639636799f04a9033193e7d18a2a4b20bcc96811bb5efe476db70a76b7456ac4e71f3e89c00da0c7761c188570c7902bf2fee1be273be8a9f7a2d7508ef2188d3ba1db4fa9d1533d2f2a288cdfe3b0c50908d56ba69e81386e7e979e9d7ff78685ffb8de6baea2451762736a2bbafa11d541790b0564aef9b0b80fa24832090b84341a9fdf712d3296f911020f8021eda8130befaaab01cbe91dfc5768e6ff31ec50dd88596832a9f5fd4f558d367f40e454d3c97ad16a7f30b93629ee2def77b99f8a17c157529b0782fd847a4c75a2302ca96bbdcff660c2cca753e1a8c60dbcfb319a1594565a2e15bb6124316e196e3cafaf1a29eef84a0908d1dc80af7e333c65736699f1254addf2ab582f5c87c4f6ca234d7ca9673dc29444044b95abdaea958274e39aeb163ee2d05bc2ade5c33a0466e14fbdf8aa70ca2964c06ee5bc57b894b0143a7a503cc43574a07958940b029678df44d6c82fa2e6937ea6aeb5b8f33c21628e3b0d623c23c2e5a3546194fea742d90c1d61f343a005b9e58c3e8292b256fd0ecca81cda433f3bb0ed633607f0b635cdd8b4919bfa37c1e99df087d3f8f3ba5dec7930657eb3a4d8febb5234e048881fbfc499fe5eb6a0ce34546f7010ae2291e6731d0798ca451387a123998e68f6f577ba4e556bb9a119011a191a6bbcf55beb1fb0b8252deeed5721b271b964534a04462720c4c03e8ea7f120cfa1be630e7fc680d1f6e067075c72f642babcacf6b00cd3fdb9f3200e4ff8935b17ebe222053c78c3752666088017c2150dd014b9578af6adb15527a483eff5bb623710ca7b37ed49ff7cf1525f296af6f27846524e4aaea7476a2d08dceeca84a1ab11e2767abff12d10deaf63681dcabe9b1fb9ebe207d8e3793dba9a73a02ebea4e3a072397a88c47795d5e88b2040c9fe3f96f66f8f7d593547c8fc8f4e75a1c20962ecf2dd1e7bddf896f2a6c5f37a8784e2bc5b10cef2feab3b6eee7430908eeadd372248041a09b0c29385cd7a75754d2c429e72bf5fdac34097bbbbb3790f86399c60cb5054fbeb8eb1241608b506beb135091c18110c1d10d9a80f4adb11a6fd3001957cae0b4f8f730cc4fa4a7328e23f390caab014cfeec0ebfd0e14021f47fe330a68680678d23e7ca1ff18e7e242f4c1e3cca51dec73c58b596c2a92267ee76d3657c1e2b34102b09fa4c59c2619148440bf26802c6f858b8eee6d8c697bad2c4d5a0f76c6a4cdd3b8fdc21e447920491ef40578b68a7a5dfda04fa235fac01ad4e824b627137dc48807100e52ec5ae2f3a3fd84d68b824033b4f0ee28a9e72333b4e209ae905d0781e4fe8116e03b1ca5c3b1ea84974cabaa0214ed15bfe01e974491e8a20f9d03ed1b73799b083f3a65e809c3ff3cf126288fc1627409d46f78b5fe8b8ba0b3ddc3ac79aecd6eee2e0cc59826e5798f48f80f0c7f549b3a656e9acbc5e51bdc3becef93533166c1d9ffe4335ec973d3d27ce5987d150f554c4095650528578fe4858b670b0786f23c886612191f89ec57970dbc0e33cd62b57a08fa940b339577fd12d07dec2ac50e9e0b27f0716b3233803153389a95df956637af8d9778e27bce49ab0a832978712a074d3f7516ad512ed0d9b43049b5990c841a7b7146a24c62fb70645b8d85b6c8863d5c6aab03638ffa4e30c8de24383cf320eee735a4fd37262d473076f495da8b2f0f028b8f178c238010738d6afb1dc2e48089e80f6a7658ad3496f1a1f7f78abdcf934c733d22abb0671a0d41b9b33a5faf99d7b82166e27df0f97a7953dcc1fb364478200253757e8311ba61cb4c78a380cdd820553c7296816210f64b34619966f1540a407c8d6e8e30788909de19ede4116d09a14ce26ad59957add80b90602855c0134ba7fe8afd4493f7cd9ced61fda7d0ae02505c046acf68d68ecd9b1507a4d4eba4c2c834777b2c3c5a8b3c06677fe468072dcab48c1ac9deec30265c7f6c5864df89e25bba52715c82e9921db601b3935f5047b8cc07351b9965b1a1f6ef36c1fba89d9d96e332eacc1e8a78e09d7d6ba30845866449ed5264f763735d4e7cc133dba4b296b2dd9331efea01e5b3d05f38055e41c49993d679ef133b9b1af435fd0ac5fad33f571c76d02c40d4e301110b4442aa134364f0456da0cf362b2c27ebd667c0969ae09dad18becba9d6918fb1e741f685735cc7078f0e6328181a83da67516fac31522f9d9fc64a4b769e57e76bfff6f9867fa2fee1e7dddd11128322210e44eeef6db7269dfa1bfbd9099dd6f8219d585c22c20483251447772719a6115ccb690609de352989610a138110c884562b65de3cf63c3ebe9adfeb53c6e4ecc637c98b60161f71952b84c6fc4cea6af0ed533144bde4f8fbab2d3ffe0b2a5d0c55ec9979ea85a25045ad3a84becf0e891b89c1a83178d7368aea4bdfa0ebd46b8e110a2972c8ac96e10ac630e89f8d76bf35b03b5ecd393d1986fc61318e08ef02721e5f2cd2fe098ebcd1bd30a8f87b2a5650b51dd50d0d78ab7fe66490f5827372f1779d3d389e9fa66bd0296f0203af010d8f76783837cdde2555a90be577626a12de47d4da638efd0017750a230485f6ade34a27284d85dd87f9db8a832c571106d8296629418777b4d933fa049f0f4e5958c193e889305074091be14c66a4bf02cdfe1e8d26a5d21fa78c5628a7ee3d7a0c550296b2f0625e2dd18d45f2d45bee6746d4462c92bc3cf50503c7479bd121393821afe1cd7144ea37f4e8e5ee21f739024ad25af9430dee006b76617725556ff8a820b767fa821629819732f086a5fdf2ccb4edae0aceb3d6dea698e798ead905a2eef9065d633b007271e93101a71cbe385f56e32b3a8fb081c5c1ab09b729f89294a0007df3a3b8e93686020d993b812c6f85fe1618db897cd67be6cd5053dc8490bbebee133d140503c4aa51eea0c156523a1d81ae849dbe5a273bfc0de94836f8160ea9f146147fc02dd7b55dca6a2a43692268ee98f51fcd2d3faa76071d9716e877b2a3dcb51a51d5359a2ee705da52b43306f1f3caf33342fc281bc9c58d1ce05ecdeca371e3a788542f8fa999e4d8e10e66f0b6053d7d4cfc6acb815628bc2409b3dec01726121c267b3ee85fd61bbbdda68ae2c13026863e4a54b93d956fe692707a179411c841ca7d2f33a5223181b18b7ba2eebdd7c2a8dec3ac2a317b5fbd996e8598c394ee627308f0e887480a8dcd59b0256b636f4c62566501a733fa74232945ba1d9e2bae347391bf9ae2da4d3af2b262b772421fd3a5cab46862ea6049f5c9c76dd8549ce0e6c31c792b81b6b21f0bcca18bb2fa6a9d4d6e0a837bb119e2e002a69d6ca95a4b2acc463076c2e05731ef0cfaea84387a6baf6737cc14a25f5329ea924090311213344625a69ee382dd4bc72e00e63329956f3e021092585c9affa06a95bd0ef653ae9ff0abed5ee561ada4f83d8ef202d9c0b2225ebe8660cc408859d45e0332f4f78f6a339bce9d12ca2bc5116a8fd4007c485f5c1c41af96c41d96db35411842d7babc05c8b228066dccb9b67f348974363be521e41fa94d2034a0bc1e87360a80606e1e1bfa8e6399601b30bf93ac41129869158bc2b791b50e51519133ab58afd4023d4d721129b1307f054103a47c49e0524ac4df511c3409fa62d8b5c1a897794600f53efdcc987e06bffd77c9fc75fb7221ef29ed2f7e3e8abcb4a1875b85bd5176a6fba9a361d8684876508443bd50e630f4c684002b15930cf81d740b880eed25d22d8de8c00066790df084fea7c5021184a210a6d24f9bc862c4e3eafbb1782fa240ecfa5959d7a681bae84e8a96a5ff45dea4f9e16dd2cff2dccc6cf4042b44b7ad1f55dc1db5998ed40a409c0e67e1e64fab423d2c00fabb8976d9dacf0c82530e356a99f75082f3411adddfe4ab1ad3b55599fa15450dd5feee23591f1ce398e4c5ae8aad71ad26ea189c333c8467d1eaba9589bb8c41bbfe8c0c173e5446bc06b578c1db849fabe5fcd8fe0fca94bdc799b53b897249826037499e8b6213d640724fda1bcc9341ac61fbea02c8f39a53c496902d5c7922f678a273cdf5ffff38ea028ae19dc72f0b0688f2b9b7d5a9c04153c10ff4168cf9f243dea03b336be778f6c79d67a2d0ade82863eaf95d6fc7f745569864f369f4b39177c356c8c393bded485df28622f01251e58f3d39498520ff90e6c670f0dce5b494cb1d78dfad108406dc5857086d386bd42bd03fe716f049407e5e55caa0e73e96c1a4f6d5791ce7195b2ce72de52ed617ecefaeeabfa9350af49d1d91f9a4b97dc0808869b916f34ee242c40fe8c8aee57b6ddb69f9a10636e481dfa059ef001bad7020266f0d74b14edce6c18ffef854768a60885bad798658a6b9d0b438c483ba159346d5ce0771f53ff18e0bd47d8583bd56237f8da2747ac7eb2a87b6e26c4820d4fe18b76e06bb6e0c0cdf478b4aecd381c2a6ca9f10ec433f0aca63a66d04f70557baf9f2844005351a21664c2430fb0002cd03bcf0b2004068a2567f91a9fbee8c6d948fb35d48527b23e1398ce9f535e2b0b33c2bc31ab737ba4b980f46f5d424e33892c8093f3cd18510a3157afc023f63ad3ba999e950747c78c06ab141a26d74ffc049a6f76c465f9f9f03a8d339a8e61fef26a5239fbc11c01a87800c81efd7b9f28ee2ab2ed88a383f5013bfd6671ea3086121b235a0cc45ccb300c02588895f8d13ec7e00a3aaaa8b0e739f666fd1b13a90b23998704859c9c76108ed7ecdc63770e6ebaa0aeb9208b92ec4e948ac7fc81cc6f305f06c2f2d8c9267463af92e185ff627eed54313fa2ee0bff2cfa8be411982fd19fa88db5ec99f238f88782f8c7a957bef14f79351b63799a4cce160357c068987a5516b04c79644c140850cddc8bd5541fcca9e30826aad864240f434bd1fc67b58e3d664f782e9e46edcb34e2db98a39c23e334e51c71c9fa466470992cc1fbc36c3c8ff4340be67f9b85a74c9114cb9fe5ca4dcbb641ea17a54ba4658aeaa515109e117625a6196dd66d3584d293b468fce63b5a9c4b9461700c74ae955539bfbbe3eccfa7d9c9f737792a9d4b978baa2e92819e88340b73c88c2900b723248b18ae9414cb37a64ef8cb8ca85cda9677d9f1e71a6b70fe3ad17f2d13c1df48d93bfa50fd939a72ea26f9fbeaa6f8af2eec91b04a8fa7dc14fec0f54fcd1c5c848b4432f979f10e661cd2d7f8ff669ce99f9813fc5440fbbeb35f1a5e5115f5ca35dcc270bdbcae07a9ae8e22aabf8178379dee08874ec7840de27815890a88fc9a3bcfa88a33f9baef9af0ae01b2bd34a907f1151cb14bc8b396bc43a60f884f425e4a04348cc645aae68db49980139ddad0fed303e40b124fd654b36c961a56c44cc3686a7529b1f1ee47da3a0f1158542337df15780444790a2ff1b57e062f0db66730c9f98de395f939f44188225211c514447f67fcbf320a34c43ce09ed272bb992db3a35ae2c3c491c36f2de88984129fcea1ffd235aff7bef7fa95d65894db9a5f1b348efcb571a81b3d73ccd07cbef052389001e4d456800e05ca53bcf3485ce05791ff65a9f7913416ae26972f34f51a3270580b81307ce31c98eda06f3b35890ce317e79a16d728cd0bb6a3835667555c0c5138cfa5305a91db1f873b2a75b82ffcb27616ee67777708f7dc2ed9ddbeb38a60f446d3ac88ded25265c25ef38b0755a9d34bab5e669b6501d8c9787aae7eced9945cad3d4d1c32fa68b48a1d773750f814631db3e088c1b5e7ffa854ea1343d94ec1343918d7a1c5a095bb72b00eb3bff210aeec0b8a581a2a13429b83a193f4d447059265b63c4b8f8ea1b9494f65e79844d956c5d80780849dc086506e9eba002e682a1bae1543f8289588c574bb6ca9a2e57b908aaffed23ecf3536abaf96fe08291f3d70773288b4698e972b0187385dfff4cba59175814e75e7e5146205c7f2d2f749583b393f46c448c152d8be50d60ed8d8bdb30fc7925656a0f90b1de967c729980815e5f19ed453fbefcff67832cb90d753410a0b18eb7504600b11b0360c3d3594d48d832160d357afc1f17dc71dccabef7bbcf1fdd55b48cb02135c32650ab07b902f36b48be9376b2dd68343eacfe80d9dab3205a393a4c6ffd405f6db323dea11be4f22ce50df1e0cfec9e9b1e23acb94d66ea787d08f615a7c7288cdf1921a13a85d885e47cf1067d89ebad5b92ce5c9da255f8d74bd2d5b78366f998cc35bf35e45d06128f1c5984fabee7542642bbf6d981b60759d3e7900e5b3d1d7310f90df0c88a600ff2f39932bf7411e61c692c9444dc9ae0dff28c0b94292c430ac4464e83ce8a29b886f45c98b8396667740c5be51e592eac0250d6e479505d36e930ca3a32cb671d58707d25b10e2660cd5e661b08e268c8bf1b3cbceb2d995a2a6fdfe5475cccc965f71baa7c84054e3bb6cbcb7167b06c708cd72ad4301e943dd1b2b2c325f682be3eaae730a8ed8bc3134b28d1ce04543bc66a529744561c42d25e65c7b5cc2a17875ebf35e53aa46e1edec29ff8d046a7e01459d9639c10d1df998cd9a12d7e50b2dc71ee7338cf71beb72d5020dc69eeafc354bf822d65ee0328eb07d04ac0d266fdb53227a158411da5ded254b3c359ee710e0278e1a06f06002538e108450fd6b11949fdc618a29baf34f232aa192230ddb318aa6d59d122257e50713fe73e6c0059399589c382dc901a8c3381139436f7331b69f457bbb38ed54daaa07a52cceb053c32690836c664b73d86261216b8610fc7b4d53dd3e5d9bcb3e25528e132911cac37e7f2618274c733b5ae02f9c27638d9e11988f1dfbb281ffd8cddf8558a481861cbe9d53a4ad8282d3587449cd51759ca397eda122d286e117d01539359870b94c98a3ce383ed1d280bcceb228acf73193e87fd3650e4dfd563cc55bfbc8626a41293cc90ef76e28e2dedaf968602d2997ae1c2752a0febe3a78f3756d40201ae13074091238324422caabe22c66b7866065264261fc2c3e0569493468d1c1c36259aedd5f078a231e72decd70f4de8532f6753287435296f33a096bc1c8b0ebb68c9f783881e45ac54159ec1c2f9e1f5cb48f96729a62d1b4fdaa89ef5de8741bca04e953534dc977e881a61281812af435206378eff173d7929ab4967e511bdc14e6a783ab647a4c257a4fcd6ba38ef32bc48a00643416d7e34f7465b3e6240589d854db4d9714e998f2edf3a03986598a52aaf647d938f4a8e07c1c29615803af6cd403d261ad6da3c1c804034b4a4eef3ea1cc8db39d9e171b3f6dd074388577a4eb901c25c8031e4592cea80b6354850657f53b2acd910ec2c5a7db6abb0153e051dadfbcdf047e35591b96b5657ca55d99ef6fb48e07c34321cd20c40b30a646132f8afcb9426fe84a790567fb847076a8762ca29cfb037e0c948edc12122a1160a55d465f5c912406a10dc0d3c1156cd207e9ffe906d267c9c870521934e1c56af460c0ad0dea9c929acf85768e22bb65eca6e25e4ec8e6edb7a6215e8c7e5fdb56c7131b156ab6a78fc808f8f17a2708ff68b37778c00b3b546004fb2b2c588d8ca8276d281026bfe896698569814410422f27421b8fc5c09d47635f17ddf6b9f56a203c991514678c18a4afabe1eeca6fce1187fffcb6ebdacfc6cac9750766ed40c80e7eceb342a3fa6f86d014949f9d111bfd96e2a39d364f2e2722f2d9ab0577befe26055890161d780e52eff4022461c1d3b019b86af28c4f02fd1f7496d8c141344ad5756bcdc45158f3af7aac227c8853f607cae412db6fa924c039859fe455857bd5fde66cc1b773c12f516401a31c80d750079247c128a103361e7f0a392d21b4b1b594307ff6b37e5a242666209ec517561e04645b92e7cf3cff1a6c76c900d12d9556e2962c535401b1e61fa85e06551ed678703fb3bf8590f2608ae3c278b8d1ac286af38061afbbc3cb27ee7adc6ad299151cd00a84506e6a97648ff99f2a9d35d8421e71589437406fa8e6def8ce34c9abe5de3481c492887176d4485dac794b84567d5ebaf68d0007cb2256a0f1ce4318f6891f750fa9696fed3525059688cf973e70d688b1759cd0f3dfb0b2a7078174b978767cbdbfc3f7d5850e2f7772e2bd6e3ed69ef13cc141238b5ee04b6615e33c42fcd6cf979a0ac848458b713b9a988c1e3fc32f2a182fc0cab2e6933e9aa5c2d77db8c6a1802b43bd8220ff0ca92229fc26a44761d00eeebec834e5f7d382b4f58a2759c56e53b163dae034ffa1970acc57165746e575470e13c4044f392ae4bea93e7d666256436507bb987a247785301274d4f262f94989cdc94b209b7499bd0cb4437525b72be79c87c6076533e4a14799a60bd3563d46ee4767108bed7e637cfed6f3139637bb01f36385dc5873eed726fbec9a87da294cc11db8b49fe45b798ae74e1a8cb0f2907eb0178d2baf5f0f88f654baab9f147741945c496ddea1cfed65a82e913a131c4ac7bb6f0d8d5d28225dab8a33c6e60c0d2b2d5dbd8c35089f13f9a2ae81ec9addaefea9b8ddabc8cdeb6437381ce346db6e14d9d1e8bb4662b508d61da77fc8d9ebebceb1c23be5d0a7bba4a48c0591333ab7779bae78ff23c4bbf8a8cf30f3120a5b63a047064d7ed7d37191cf39b6d1e8ffe3b47379767bd691cb855a9c938e9a0235a5ec9c316a6dceca63fa5fe6df0b9f0d6b38add216aaf2726d3377ab827b00b4cbf490708a0f679b8cd7caadb3dee40cc98f778917d6a6263fcc0747bf75fd676d84abb7d10087da323f95c2571139fd4c9826ad5db6ee4c246b9da20592cae11f9264bd2945aa1a427b2acefb514a2daafbbae35ff761eb1e3b98b4a1dfca348b8c4ff96325a618d677180ceb7e916654ecc2deecb4e61d01080f44b98776b1b43aebeffe2c14006dd1d78c8babf1179f42fd20d87654d3246d41e9dc633eac1741be44f8d751d8c9fd57316fe06d60872939b7a2906bb27a299a3408a51d74e5d98417f05f85fc1b332e103e79203e9fe344dc1d1572de39d914c5270c839870d2b33da5a6efc08c4f0c8227cc35a7f77c6a55f80ceef90e217c80e5ecb4c236685f5219787b01612cfbac90794e8269c07fb7ca4f7dba4defb2aae2b37f7b1696e78de15dbb1b6d4ee0cc4c0fae274b2c2de9343862de1d9847515ad235b1837daa9b814f19e895ae3966ed262e3e7add9f19009e6b61462917b29502b67e124c43538a6bcab7296529e01bb26ab8b3ef094ed057383c4f92790b6f705ae9d943c4e8dad84f6ef82b54d062713c16960fb475d74d46a1b16062563da3391cc6ff5185162c31ff7339e4837e38adab8ab911abaaa006e313dd19a1f92b4f7bede4525b154e1b9f796136a85f3602da011ae2232be902347e08ce0bbf3d23d91c4aac11c8824caafa1d1ff0343ce655802c1915f3ae7c0c670b18e56e139be66a33613afcb3b1928613b3afba9d635070af678216d57023d1911f0eb7ebddefc96f0efd8e9dc10e8a87a68393e19733ef900c6264722940750ae16f664e445414e85e98570303c6d87d7f265cfae0a1e9314fc14674c2871c0d59bbe2eddaf9330a4e2a28673af73910d6cb90790f800e89d55a2930910a8430ade9551819d83d5ea6da4e58326b7ce555d01da86ea78200f0219ec92473da95cd5a632c525ca9fbcddebb8168881cdb2f5da787d0e31881e2b17d78184f3a0bed8662486d3937dab275d050b9dd5a2ce904208a91a467afc33e10fb6c1ca788a5ef30d6e8b615ec0ae1503fea7006569559b7b155c31b196b85881c5671173c06fc5373e9fd973e7111ed45874609bf3c88c6db732210a3ea04cb68662bbc2048bb55d811482af5c658e29bd18c57ffa25e88d7297cd20d4c2b13007cfae89f4dcd90177a0806a2ceb2095333b58f828c093b9bf63cd07e3d56a446fd12e755fd651211bc160948836939c17623b317b9e935307044bab2c11879a62288e7ecbbb97f10f52516f517b7b8e44cff5964fdfaf8044065056b48db13b1365004c336afa3535af1242c9b7271b8b1ba2213fcbb80926bcd394815cd7c27e3aeb2348dc45f5e06e32f5bd56d1c472f41b564ec0939cd012028412883cc098d086fd43858747b746be72b979d175f6a6447fc5908616dec7fc6c962e12e96e09bd068acd2fcf0ce1cc26d9f82b2b91bc9aafcbf8435011f73b6a8ea1bb2f3289b23236136b31656600762feff53e607df8cf3c9a7f257b212630c19f142e4cf5094250b629cabb145c77f1f14ad60ab7617078f810a766cfa341fb7c16086609bc0a768fb1cd782606f32b83a0a55d883269a05b80275612dc571cb993ea9e447b4d32570d412203ab4c8b050b63bb5ac0f8d6f4e9a1644e4b622587b2ae125c2093bd363493d58544d6303a0de17780fcd83e993aa83f4432274eee1e6333fcdc77bcfdea95b8b9ed787723e35b71f1dbe89ff1e3e6fde146c05b6fe9eae52b472624e412253a63e7fcf1b77dbff7509eec5a55501e222f66bd84d36663cd244fa1556bd34b4c9957a93a71e63961ffc7700c5545acdd3e79da41e1cfaca0956d4978222cda23a574d691dbb6c6bd083c70c2782c045bbbe0fcaa10efbc002af6832e3fa7dda0ec8ff6ded69302d55d5a62a7ec213f16ecc5e3304a83103d1c2b21e04e3f5f3730339a630a407e8cc6a5afd2f2ed78ff992035a3783a2708195a46e565a9113be8c228ccaae3510363b475732ad48fe8ff34801f4c35132359d4c5c5bff65141f4a8684d462cf5d97b44496440fff3f7a28d28bbaa8e6db2a6064cbe9fca4679afe8ca6dd27a25c56f3e58165040f19a0455199a0ece4583f060979427f2f3495f40a83bc6ee3eaadab18705d464662b8aba9c7aa2f29114f7acc247548a85bd44723064abeee18f7f558f6d0d74fa08103dd906124454745d23005c425b260b0034372123b642a0cbebbc1a0bcf0cfc3639876eceac5f9734057ff659cfd35b1a3eaa768b86d66244aabc23a45676a59d492614f1c0011c9253e53fc7bb3e20d303afdb5b6614dcc7bbf72a339e414672aac23c2e2983083f08dbc34e3452def00f402598b6aaa4f0d896d1648b1442621993b7d0c930560cb6152b9ce59f94356726816a224fca84da5dbde6675d20f546a3e4635e82ff9575cac9160e6819f", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r3}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r3, 0x0, 0x100000000000000}, 0x38) r4 = syz_open_dev$dri(0x0, 0x1ff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x55}, 0x4000) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r4, 0xc01064d1, 0x0) mq_open(0x0, 0x1, 0x8, &(0x7f0000000040)={0x100005, 0x100, 0x8, 0x18000000000000}) 1m54.27151085s ago: executing program 2 (id=1187): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback}, 0x1c) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x3}}, 0x2e) 1m51.522033003s ago: executing program 2 (id=1197): syz_init_net_socket$ax25(0x3, 0x2, 0xc4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$OBJ_PIN_PROG(0x6, 0x0, 0x0) msync(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x6) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) getcwd(0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8000, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000f80)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x66, 0x0, 0x0, 0x6c, 0x0, @private}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0xfffc}}}}}}, 0x0) prlimit64(0x0, 0xa, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00'}, 0x10) 1m50.118917866s ago: executing program 2 (id=1202): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x203, 0x8401) ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522) ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r0, 0x5521) 1m50.00519906s ago: executing program 2 (id=1203): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x1ffffffffffffdf4, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 1m49.904482039s ago: executing program 2 (id=1204): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, 0x0, 0x0) getsockopt$netlink(r1, 0x10e, 0x9, &(0x7f0000001840)=""/42, &(0x7f0000000100)=0x2a) 1m49.801772193s ago: executing program 2 (id=1205): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="000510000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) 1m49.277142263s ago: executing program 1 (id=1206): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 1m46.303427235s ago: executing program 1 (id=1214): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x1}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x11, 0x0, 0x3}}}}}}}, 0x0) 1m41.923684477s ago: executing program 4 (id=1215): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f00000001c0)={0x60, 0x3, &(0x7f0000900000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, 0x800, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x24}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r2, 0x3ba0, &(0x7f00000001c0)={0x48, 0x4}) 1m41.586926667s ago: executing program 1 (id=1216): rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r0 = gettid() r1 = getpid() rt_tgsigqueueinfo(r1, r0, 0x5, &(0x7f0000000280)={0x2, 0xa4, 0x46}) r2 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8)={[0xfffffffffffffffe]}, 0x8) read(r2, &(0x7f0000000740)=""/384, 0x200008c0) 1m41.243136812s ago: executing program 6 (id=1217): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) read$alg(r1, &(0x7f0000000000)=""/35, 0x23) sendmmsg$inet6(r1, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)="f6980c2ff07651343612f2e0a5adba64", 0x10}], 0x1}}], 0x1, 0x4000) 1m40.068739954s ago: executing program 4 (id=1219): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sys_enter\x00', r1}, 0x18) timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000000c0)) timer_gettime(0x0, 0x0) 1m39.326966711s ago: executing program 1 (id=1220): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x1000000) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) 1m37.352454864s ago: executing program 6 (id=1222): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1001, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000003c0)={0x20, 0x0, &(0x7f00000004c0)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) 1m37.242321594s ago: executing program 4 (id=1223): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x2, @loopback, 0x10000}, {0xa, 0x2, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x1c}}, r2, 0x40099d}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1m35.42016431s ago: executing program 6 (id=1224): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x88, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_FRAME={0x6c, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @device_b, @device_a, @random="7d8cc6decdc2", {0xf, 0x5}}, 0xffffffffffffffff, @default, 0x1000, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0x24}, @void, @val={0x6, 0x2, 0x1fc}, @val={0x5, 0x3, {0x5, 0x97, 0x5}}, @void, @val={0x2a, 0x1, {0x0, 0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x400, 0x2, 0x5, 0x0, {0x2, 0xb7b, 0x0, 0x347, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0, 0x100, 0x1}}, @void, @val={0x71, 0x7, {0x69, 0x0, 0x1, 0xffffffffffffffff, 0x1, 0x7, 0x20}}, @val={0x76, 0x6, {0x3, 0x0, 0x2f, 0x6}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1m35.419289867s ago: executing program 1 (id=1225): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x400, 0x48a050, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lremovexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000140)=@known='system.posix_acl_access\x00') syz_fuse_handle_req(r0, &(0x7f0000006140)="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", 0x2000, &(0x7f0000000700)={&(0x7f00000002c0)={0x50, 0xffffffffffffff8c, 0x8000000000000000, {0x7, 0x2b, 0x0, 0x2c000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m35.132214345s ago: executing program 4 (id=1226): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x800, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@ccm_128={{0x303}, "19f4cac3800d446f", "5f311dfe9f340765616121aeaf9fbd2b", "e07fd7aa", "3a948cf896841434"}, 0x28) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 1m32.25361203s ago: executing program 34 (id=1205): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f00000006c0)=ANY=[@ANYBLOB="000510000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGFIELDINFO(r1, 0xc038480a, 0x0) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, 0x0) 1m32.205761695s ago: executing program 6 (id=1229): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 1m32.172913735s ago: executing program 1 (id=1230): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x71, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x63, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4f, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908"}}}}}}, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 1m32.154742242s ago: executing program 4 (id=1232): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) syz_open_dev$tty20(0xc, 0x4, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) 1m30.269291432s ago: executing program 4 (id=1233): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x555, 0x0, 0x1000000}}, @nested_vmresume={0x130, 0x18}], 0x50}) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(0x4) 1m24.451444795s ago: executing program 6 (id=1237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="12000000080000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xd, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1m15.957096786s ago: executing program 6 (id=1241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000700)={0x24, &(0x7f00000004c0)={0x0, 0x6, 0x2, {0x2, 0x4}}, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m14.872352329s ago: executing program 35 (id=1230): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) syz_emit_ethernet(0x71, &(0x7f0000001c00)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x63, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4f, 0x0, @wg=@data={0x4, 0x7407, 0xfffffffffffffffd, "9c67524ed6ed152d4f775bbc411126513b67aa2818e6f3aeb55bee6ae1049f195705bc8bd9b1085cd41af77353267df8a1d4cecdb01908"}}}}}}, 0x0) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000180)=""/53, 0x35}], 0x1) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f00000000c0)) 1m11.882207015s ago: executing program 36 (id=1233): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x555, 0x0, 0x1000000}}, @nested_vmresume={0x130, 0x18}], 0x50}) r3 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(0x4) 57.226935494s ago: executing program 37 (id=1241): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000700)={0x24, &(0x7f00000004c0)={0x0, 0x6, 0x2, {0x2, 0x4}}, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 32.019653252s ago: executing program 5 (id=1251): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001d9167204f17316a3f26010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4090}, 0x0) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) 22.669524739s ago: executing program 5 (id=1252): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000006c59850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$sock_attach_bpf(r3, 0x29, 0x17, &(0x7f0000000100)=r2, 0x4) sendmsg$inet6(r3, &(0x7f0000000480)={&(0x7f0000000000)={0xa, 0x4e22, 0x7fff, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800"], 0x18}, 0x1) 22.137529259s ago: executing program 5 (id=1253): r0 = fsopen(&(0x7f0000000280)='configfs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x2) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x48) getdents(r2, &(0x7f0000000000)=""/56, 0x38) getdents(r2, 0xfffffffffffffffd, 0x58) 20.440757062s ago: executing program 5 (id=1254): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) 19.837930427s ago: executing program 5 (id=1255): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) sync() sync() sync() ppoll(0x0, 0x0, 0x0, 0x0, 0x0) 17.833931735s ago: executing program 5 (id=1256): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 0s ago: executing program 38 (id=1256): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r2, 0x405, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) kernel console output (not intermixed with test programs): nd [ 349.028548][ T7039] chnl_net:caif_netlink_parms(): no params data found [ 359.718625][ T7278] syz.1.324 (7278) used greatest stack depth: 16496 bytes left [ 360.034352][ T5880] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 361.253359][ T7102] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.253489][ T7102] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.253698][ T7102] bridge_slave_0: entered allmulticast mode [ 361.256271][ T7102] bridge_slave_0: entered promiscuous mode [ 361.283936][ T7102] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.284063][ T7102] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.284253][ T7102] bridge_slave_1: entered allmulticast mode [ 361.286907][ T7102] bridge_slave_1: entered promiscuous mode [ 365.620625][ T5880] usb 3-1: device descriptor read/64, error -110 [ 365.624134][ T1055] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.717926][ T7102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.256735][ T7102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.265675][ T5880] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 367.658642][ T5880] usb 3-1: device descriptor read/64, error -32 [ 368.719018][ T5880] usb usb3-port1: attempt power cycle [ 368.914385][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.097174][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.177837][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.360832][ C0] vkms_vblank_simulate: vblank timer overrun [ 369.867796][ C0] vkms_vblank_simulate: vblank timer overrun [ 370.015127][ C0] vkms_vblank_simulate: vblank timer overrun [ 370.246850][ C0] vkms_vblank_simulate: vblank timer overrun [ 370.322550][ C0] vkms_vblank_simulate: vblank timer overrun [ 370.395667][ C0] vkms_vblank_simulate: vblank timer overrun [ 370.617606][ C0] vkms_vblank_simulate: vblank timer overrun [ 370.903106][ C0] vkms_vblank_simulate: vblank timer overrun [ 371.943537][ T7338] netlink: 24 bytes leftover after parsing attributes in process `syz.4.337'. [ 372.080557][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.163340][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.220533][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.249893][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.345322][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.424025][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.574471][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.642666][ T1055] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.821825][ C0] vkms_vblank_simulate: vblank timer overrun [ 372.845682][ T7039] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.845909][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.846177][ T7039] bridge_slave_0: entered allmulticast mode [ 372.892152][ T7039] bridge_slave_0: entered promiscuous mode [ 373.450348][ T7102] team0: Port device team_slave_0 added [ 373.851336][ C0] vkms_vblank_simulate: vblank timer overrun [ 373.939284][ T1055] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.571265][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 375.588340][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 375.589587][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 375.602195][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 375.615502][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 376.216581][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.483143][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.531485][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.753587][ T7102] team0: Port device team_slave_1 added [ 376.758590][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.994298][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.203884][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.443716][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.730030][ C0] vkms_vblank_simulate: vblank timer overrun [ 377.879862][ T5807] Bluetooth: hci0: command tx timeout [ 380.083178][ T5807] Bluetooth: hci0: command tx timeout [ 380.674453][ T1055] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.848853][ T7102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.848871][ T7102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 380.848896][ T7102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.317513][ T5807] Bluetooth: hci0: command tx timeout [ 382.505724][ T5127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 382.513424][ T5127] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 382.516990][ T5127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 382.531654][ T5127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 382.551868][ T5127] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 383.536281][ T1055] bridge_slave_1: left allmulticast mode [ 383.536311][ T1055] bridge_slave_1: left promiscuous mode [ 383.536564][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.087600][ T7435] capability: warning: `syz.2.352' uses 32-bit capabilities (legacy support in use) [ 384.809846][ T5807] Bluetooth: hci0: command tx timeout [ 384.809914][ T5807] Bluetooth: hci3: command tx timeout [ 384.831517][ T1055] bridge_slave_0: left allmulticast mode [ 384.831547][ T1055] bridge_slave_0: left promiscuous mode [ 384.831896][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.153522][ T1055] bridge_slave_1: left allmulticast mode [ 385.153542][ T1055] bridge_slave_1: left promiscuous mode [ 385.153681][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.290260][ T1055] bridge_slave_0: left allmulticast mode [ 385.290287][ T1055] bridge_slave_0: left promiscuous mode [ 385.290531][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.025849][ T5127] Bluetooth: hci3: command tx timeout [ 389.641599][ T5807] Bluetooth: hci3: command tx timeout [ 391.504204][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 391.507701][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.810923][ T5127] Bluetooth: hci3: command tx timeout [ 393.370356][ T7480] hpfs: hpfs_map_sector(): read error [ 393.944598][ T7475] Bluetooth: MGMT ver 1.23 [ 394.044425][ T1055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.188790][ T1055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.452290][ T1055] bond0 (unregistering): Released all slaves [ 395.136496][ T7486] netlink: 24 bytes leftover after parsing attributes in process `syz.2.363'. [ 395.473181][ T1055] bond0 (unregistering): Released all slaves [ 396.547837][ T7491] ubi31: attaching mtd0 [ 396.549856][ T7491] ubi31: scanning is finished [ 398.116670][ T7491] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 398.946014][ T7505] netlink: 24 bytes leftover after parsing attributes in process `syz.1.368'. [ 400.945582][ T1055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.109627][ T1055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.170277][ T1055] bond0 (unregistering): Released all slaves [ 403.235554][ T44] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 403.517445][ T44] usb 3-1: Using ep0 maxpacket: 8 [ 403.524356][ T44] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 403.524386][ T44] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 403.524419][ T44] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 403.524441][ T44] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.524495][ T44] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 403.524517][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.958552][ T44] usb 3-1: can't set config #16, error -71 [ 405.015496][ T44] usb 3-1: USB disconnect, device number 6 [ 406.884558][ T1235] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 407.013879][ T7366] chnl_net:caif_netlink_parms(): no params data found [ 407.073838][ T1235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 407.073858][ T1235] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 407.073882][ T1235] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 407.073894][ T1235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.084155][ T1235] usb 5-1: config 0 descriptor?? [ 407.353921][ T7559] random: crng reseeded on system resumption [ 409.192061][ T1235] usbhid 5-1:0.0: can't add hid device: -22 [ 409.192251][ T1235] usbhid 5-1:0.0: probe with driver usbhid failed with error -22 [ 410.616243][ T5995] usb 5-1: USB disconnect, device number 4 [ 414.661450][ T7615] capability: warning: `syz.4.388' uses deprecated v2 capabilities in a way that may be insecure [ 415.038831][ T37] audit: type=1326 audit(1764098070.881:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7610 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 415.039183][ T37] audit: type=1326 audit(1764098070.881:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7610 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 415.039455][ T37] audit: type=1326 audit(1764098070.909:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7610 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 415.039722][ T37] audit: type=1326 audit(1764098070.909:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7610 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 415.040163][ T37] audit: type=1326 audit(1764098070.909:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7610 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 415.040503][ T37] audit: type=1326 audit(1764098070.918:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7610 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f49e580df90 code=0x7ffc0000 [ 415.040715][ T37] audit: type=1326 audit(1764098070.928:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7610 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f49e5810f77 code=0x7ffc0000 [ 415.041158][ T37] audit: type=1326 audit(1764098070.937:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7610 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 415.054268][ T37] audit: type=1326 audit(1764098070.937:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7610 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f49e5810f77 code=0x7ffc0000 [ 415.054615][ T37] audit: type=1326 audit(1764098070.937:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7610 comm="syz.4.388" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f49e580e3aa code=0x7ffc0000 [ 416.178073][ T7366] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.179580][ T7366] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.179913][ T7366] bridge_slave_0: entered allmulticast mode [ 416.269982][ T7366] bridge_slave_0: entered promiscuous mode [ 416.305839][ T7423] chnl_net:caif_netlink_parms(): no params data found [ 416.365227][ T7366] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.365393][ T7366] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.365654][ T7366] bridge_slave_1: entered allmulticast mode [ 416.385051][ T7366] bridge_slave_1: entered promiscuous mode [ 417.429867][ T7624] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 418.786128][ T7366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.876607][ T7366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.879198][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.013194][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.358039][ T1055] hsr_slave_0: left promiscuous mode [ 421.392089][ T1055] hsr_slave_1: left promiscuous mode [ 421.429788][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.431798][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.895906][ T1055] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.895935][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.965943][ T7636] 9pnet_fd: Insufficient options for proto=fd [ 422.014381][ T1055] veth1_macvtap: left promiscuous mode [ 422.014484][ T1055] veth0_macvtap: left promiscuous mode [ 422.014785][ T1055] veth1_vlan: left promiscuous mode [ 422.014965][ T1055] veth0_vlan: left promiscuous mode [ 423.776342][ T1055] team0 (unregistering): Port device team_slave_1 removed [ 424.337011][ T7651] netlink: 24 bytes leftover after parsing attributes in process `syz.4.395'. [ 424.846649][ T1055] team0 (unregistering): Port device team_slave_0 removed [ 428.695562][ T1055] team0 (unregistering): Port device team_slave_1 removed [ 428.865588][ T1055] team0 (unregistering): Port device team_slave_0 removed [ 429.443639][ T7665] netlink: 'syz.4.399': attribute type 1 has an invalid length. [ 429.443653][ T7665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.399'. [ 430.991952][ T7646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 432.097133][ T7673] netlink: 36 bytes leftover after parsing attributes in process `syz.4.401'. [ 432.539690][ T37] kauditd_printk_skb: 17 callbacks suppressed [ 432.539708][ T37] audit: type=1326 audit(1764098087.624:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7677 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c764cf749 code=0x7ffc0000 [ 432.541521][ T37] audit: type=1326 audit(1764098087.624:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7677 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f3c764cf749 code=0x7ffc0000 [ 432.541566][ T37] audit: type=1326 audit(1764098087.624:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7677 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c764cf749 code=0x7ffc0000 [ 432.541606][ T37] audit: type=1326 audit(1764098087.624:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7677 comm="syz.2.403" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3c764cf749 code=0x7ffc0000 [ 432.724388][ T7682] trusted_key: encrypted_key: key user:syz not found [ 432.925968][ T7366] team0: Port device team_slave_0 added [ 435.285773][ T7366] team0: Port device team_slave_1 added [ 438.234102][ T7423] bridge0: port 1(bridge_slave_0) entered blocking state [ 438.234234][ T7423] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.234429][ T7423] bridge_slave_0: entered allmulticast mode [ 438.237211][ T7423] bridge_slave_0: entered promiscuous mode [ 438.271285][ T7423] bridge0: port 2(bridge_slave_1) entered blocking state [ 438.271426][ T7423] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.271605][ T7423] bridge_slave_1: entered allmulticast mode [ 438.297978][ T7423] bridge_slave_1: entered promiscuous mode [ 438.929600][ T7423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.961177][ T7423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.073921][ T5894] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 439.259233][ T5894] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 439.259251][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.262535][ T5894] usb 5-1: config 0 descriptor?? [ 439.265785][ T5894] gspca_main: spca508-2.14.0 probing 8086:0110 [ 439.575815][ T7731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 439.591532][ T7731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 439.642233][ T7725] netlink: 'syz.4.411': attribute type 29 has an invalid length. [ 439.642254][ T7725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.411'. [ 439.846603][ T5894] gspca_spca508: reg_read err -110 [ 439.847041][ T5894] gspca_spca508: reg_read err -32 [ 439.847412][ T5894] gspca_spca508: reg_read err -32 [ 439.847789][ T5894] gspca_spca508: reg_read err -32 [ 439.848136][ T5894] gspca_spca508: reg_read err -32 [ 439.848482][ T5894] gspca_spca508: reg write: error -32 [ 439.848534][ T5894] spca508 5-1:0.0: probe with driver spca508 failed with error -32 [ 439.942320][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 439.956508][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 439.957851][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 439.960372][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 439.982140][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 440.167486][ T7725] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 440.407591][ T5916] usb 5-1: USB disconnect, device number 5 [ 440.673233][ T7423] team0: Port device team_slave_0 added [ 440.691417][ T7423] team0: Port device team_slave_1 added [ 441.999646][ T7746] lo speed is unknown, defaulting to 1000 [ 441.999850][ T7746] lo speed is unknown, defaulting to 1000 [ 442.003974][ T7746] lo speed is unknown, defaulting to 1000 [ 442.011623][ T7746] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 442.025014][ T7746] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 442.069141][ T7746] lo speed is unknown, defaulting to 1000 [ 442.072365][ T7746] lo speed is unknown, defaulting to 1000 [ 442.075732][ T7746] lo speed is unknown, defaulting to 1000 [ 442.078870][ T7746] lo speed is unknown, defaulting to 1000 [ 442.081817][ T7746] lo speed is unknown, defaulting to 1000 [ 442.084736][ T7746] lo speed is unknown, defaulting to 1000 [ 442.087454][ T7746] lo speed is unknown, defaulting to 1000 [ 443.205104][ T5127] Bluetooth: hci5: command tx timeout [ 443.974035][ T7733] lo speed is unknown, defaulting to 1000 [ 443.989904][ T7423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.989919][ T7423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 443.989942][ T7423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.262021][ T7423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.262036][ T7423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 444.262059][ T7423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.929169][ T61] Bluetooth: hci5: command tx timeout [ 448.313419][ T61] Bluetooth: hci5: command 0x040f tx timeout [ 451.362763][ T61] Bluetooth: hci5: command 0x040f tx timeout [ 451.745202][ T7796] netlink: 28 bytes leftover after parsing attributes in process `syz.2.419'. [ 451.745325][ T7796] netlink: 28 bytes leftover after parsing attributes in process `syz.2.419'. [ 454.696974][ T5807] Bluetooth: hci5: command 0x040f tx timeout [ 454.712034][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 454.715979][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 454.725680][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 454.728010][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 454.735427][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 457.055621][ T61] Bluetooth: hci0: command tx timeout [ 457.159819][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 457.159908][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.187368][ T1055] bridge_slave_1: left allmulticast mode [ 458.187434][ T1055] bridge_slave_1: left promiscuous mode [ 458.193432][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 458.646138][ T1055] bridge_slave_0: left allmulticast mode [ 458.646275][ T1055] bridge_slave_0: left promiscuous mode [ 458.647437][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.225413][ T1055] bridge_slave_1: left allmulticast mode [ 459.225443][ T1055] bridge_slave_1: left promiscuous mode [ 459.247172][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.279171][ T61] Bluetooth: hci0: command tx timeout [ 461.087380][ T1055] bridge_slave_0: left allmulticast mode [ 461.087408][ T1055] bridge_slave_0: left promiscuous mode [ 461.087651][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.503690][ T61] Bluetooth: hci0: command tx timeout [ 463.737166][ T61] Bluetooth: hci0: command tx timeout [ 466.740110][ T1055] bridge_slave_0: left allmulticast mode [ 466.740138][ T1055] bridge_slave_0: left promiscuous mode [ 466.740524][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.771298][ T7889] ntfs3(nullb0): Primary boot signature is not NTFS. [ 466.772070][ T7889] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 472.749450][ T5880] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 472.963225][ T5880] usb 3-1: Using ep0 maxpacket: 32 [ 472.994200][ T7918] nvme_fabrics: missing parameter 'transport=%s' [ 472.994259][ T7918] nvme_fabrics: missing parameter 'nqn=%s' [ 473.110729][ T5880] usb 3-1: unable to get BOS descriptor or descriptor too short [ 473.268784][ T5880] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 473.268862][ T5880] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 473.268918][ T5880] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 473.327669][ T5880] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 473.328697][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 473.328719][ T5880] usb 3-1: Product: syz [ 473.328732][ T5880] usb 3-1: Manufacturer: syz [ 473.328746][ T5880] usb 3-1: SerialNumber: syz [ 473.479818][ T1055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 473.959765][ T5880] cdc_ncm 3-1:1.0: skipping garbage [ 473.959783][ T5880] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 473.959807][ T5880] cdc_ncm 3-1:1.0: bind() failure [ 473.968588][ T1055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 474.097129][ T5880] usb 3-1: USB disconnect, device number 7 [ 474.111614][ T1055] bond0 (unregistering): Released all slaves [ 474.122437][ T7925] netlink: 80 bytes leftover after parsing attributes in process `syz.2.436'. [ 475.497753][ T1055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.583230][ T1055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.648395][ T1055] bond0 (unregistering): Released all slaves [ 475.781926][ T1055] bond0 (unregistering): Released all slaves [ 475.849112][ T7927] netlink: 20 bytes leftover after parsing attributes in process `syz.4.437'. [ 475.974964][ T7733] chnl_net:caif_netlink_parms(): no params data found [ 476.349603][ T7847] lo speed is unknown, defaulting to 1000 [ 477.244809][ T7733] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.244892][ T7733] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.245015][ T7733] bridge_slave_0: entered allmulticast mode [ 477.248470][ T7733] bridge_slave_0: entered promiscuous mode [ 477.282848][ T7733] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.282923][ T7733] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.283072][ T7733] bridge_slave_1: entered allmulticast mode [ 477.286921][ T7733] bridge_slave_1: entered promiscuous mode [ 477.698746][ T7733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.719141][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 479.655202][ T1055] team0 (unregistering): Port device team_slave_1 removed [ 480.674666][ T1055] team0 (unregistering): Port device team_slave_0 removed [ 481.320854][ T37] audit: type=1800 audit(1764098133.113:60): pid=7985 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.445" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 482.413936][ T61] Bluetooth: Unexpected continuation frame (len 4) [ 482.937467][ T5880] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 483.101670][ T5880] usb 3-1: config 127 has an invalid interface number: 189 but max is 0 [ 483.101698][ T5880] usb 3-1: config 127 has no interface number 0 [ 483.101764][ T5880] usb 3-1: New USB device found, idVendor=0421, idProduct=003a, bcdDevice=a4.37 [ 483.101787][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.193001][ T5880] usb 3-1: bad CDC descriptors [ 483.203263][ T5880] cdc_acm 3-1:127.189: Zero length descriptor references [ 483.203304][ T5880] cdc_acm 3-1:127.189: probe with driver cdc_acm failed with error -22 [ 483.397687][ T5895] usb 3-1: USB disconnect, device number 8 [ 483.440440][ T1055] team0 (unregistering): Port device team_slave_1 removed [ 483.737424][ T1055] team0 (unregistering): Port device team_slave_0 removed [ 484.167170][ T8005] fuse: Bad value for 'fd' [ 484.203939][ T8005] trusted_key: encrypted_key: insufficient parameters specified [ 484.331374][ T8006] trusted_key: encrypted_key: keylen parameter is missing [ 486.212882][ T61] Bluetooth: hci4: unexpected event for opcode 0x2010 [ 489.052915][ T8027] binder: 8012:8027 ioctl c0306201 0 returned -14 [ 491.661946][ T7733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.548734][ T5995] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 492.724855][ T5995] usb 3-1: Using ep0 maxpacket: 8 [ 492.727331][ T5995] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 492.727356][ T5995] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 492.727405][ T5995] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 492.727434][ T5995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.808214][ T7733] team0: Port device team_slave_0 added [ 492.934156][ T8045] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 493.081663][ T7733] team0: Port device team_slave_1 added [ 493.528253][ T7733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.528269][ T7733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.528290][ T7733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.644959][ T7733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.644976][ T7733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.645001][ T7733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.647257][ T7847] chnl_net:caif_netlink_parms(): no params data found [ 496.164160][ T7733] hsr_slave_0: entered promiscuous mode [ 496.171441][ T7733] hsr_slave_1: entered promiscuous mode [ 496.175392][ T7733] debugfs: 'hsr0' already exists in 'hsr' [ 496.175419][ T7733] Cannot create hsr debugfs directory [ 496.520670][ T5895] usb 3-1: USB disconnect, device number 9 [ 496.790331][ T8078] autofs: Bad value for 'fd' [ 498.736463][ T7847] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.736669][ T7847] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.736872][ T7847] bridge_slave_0: entered allmulticast mode [ 498.766223][ T7847] bridge_slave_0: entered promiscuous mode [ 499.830064][ T7847] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.830200][ T7847] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.830439][ T7847] bridge_slave_1: entered allmulticast mode [ 499.882251][ T7847] bridge_slave_1: entered promiscuous mode [ 502.071508][ T7847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.151482][ T8110] netlink: 'syz.1.477': attribute type 9 has an invalid length. [ 502.184197][ T7847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 502.484261][ T8124] binder: BC_ATTEMPT_ACQUIRE not supported [ 502.484275][ T8124] binder: 8102:8124 ioctl c0306201 2000000001c0 returned -22 [ 502.518325][ T8124] block device autoloading is deprecated and will be removed. [ 502.526455][ T8124] delete_channel: no stack [ 505.569663][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 505.569689][ T8133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.480'. [ 506.367097][ T7847] team0: Port device team_slave_0 added [ 506.481816][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz.4.481'. [ 506.764710][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.808845][ C0] vkms_vblank_simulate: vblank timer overrun [ 506.908143][ T7847] team0: Port device team_slave_1 added [ 507.094458][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.227933][ C0] vkms_vblank_simulate: vblank timer overrun [ 507.547395][ T8149] input: syz1 as /devices/virtual/input/input8 [ 507.886322][ T8150] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 507.947210][ T61] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 508.008934][ T61] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 508.013157][ T61] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 508.020918][ T61] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 508.025783][ T61] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 508.053575][ T7847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 508.053588][ T7847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.053609][ T7847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 508.359706][ T1235] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 508.423087][ T7847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 508.423102][ T7847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 508.423128][ T7847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.569734][ T1235] usb 3-1: config 1 interface 0 has no altsetting 0 [ 508.620052][ T1235] usb 3-1: New USB device found, idVendor=056a, idProduct=0318, bcdDevice= 0.40 [ 508.620084][ T1235] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.620103][ T1235] usb 3-1: Manufacturer: ๖뭬㭳 [ 508.620118][ T1235] usb 3-1: SerialNumber: syz [ 508.952581][ T1235] usbhid 3-1:1.0: can't add hid device: -71 [ 508.952713][ T1235] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 508.982208][ T1235] usb 3-1: USB disconnect, device number 10 [ 509.073204][ T7847] hsr_slave_0: entered promiscuous mode [ 509.074584][ T7847] hsr_slave_1: entered promiscuous mode [ 509.103628][ T7847] debugfs: 'hsr0' already exists in 'hsr' [ 509.103658][ T7847] Cannot create hsr debugfs directory [ 509.110986][ T8155] lo speed is unknown, defaulting to 1000 [ 509.647771][ T8179] netlink: 104 bytes leftover after parsing attributes in process `syz.1.486'. [ 509.965429][ T5916] IPVS: starting estimator thread 0... [ 510.049819][ T5880] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 510.076235][ T8180] IPVS: using max 1 ests per chain, 2400 per kthread [ 510.265362][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.369530][ C0] vkms_vblank_simulate: vblank timer overrun [ 510.369619][ T5807] Bluetooth: hci3: command tx timeout [ 510.487189][ T5880] usb 3-1: Using ep0 maxpacket: 16 [ 510.495333][ T5880] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 510.495361][ T5880] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 510.495401][ T5880] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 510.495422][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.501622][ T5880] usb 3-1: config 0 descriptor?? [ 510.561418][ T5880] pxrc 3-1:0.0: Could not find endpoint [ 510.568633][ T5880] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 510.634333][ T8182] netlink: 'syz.1.488': attribute type 13 has an invalid length. [ 510.635283][ T1055] bridge_slave_1: left allmulticast mode [ 510.635301][ T1055] bridge_slave_1: left promiscuous mode [ 510.635558][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.702620][ T1055] bridge_slave_0: left allmulticast mode [ 510.702648][ T1055] bridge_slave_0: left promiscuous mode [ 510.702913][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 510.754420][ T990] usb 3-1: USB disconnect, device number 11 [ 510.814669][ T1055] bridge_slave_1: left allmulticast mode [ 510.814696][ T1055] bridge_slave_1: left promiscuous mode [ 510.814916][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 510.905831][ T1055] bridge_slave_0: left allmulticast mode [ 510.905858][ T1055] bridge_slave_0: left promiscuous mode [ 510.906089][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.268304][ T1055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.376119][ T1055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.467502][ T1055] bond0 (unregistering): Released all slaves [ 511.696069][ T1055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.792279][ T1055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 511.858079][ T1055] bond0 (unregistering): Released all slaves [ 512.129530][ T8198] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 513.703651][ T5807] Bluetooth: hci3: command tx timeout [ 513.877222][ T8210] netlink: 'syz.2.496': attribute type 1 has an invalid length. [ 513.877257][ T8210] netlink: 'syz.2.496': attribute type 1 has an invalid length. [ 514.121983][ T1055] hsr_slave_0: left promiscuous mode [ 514.218252][ T1055] hsr_slave_1: left promiscuous mode [ 514.219194][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.298562][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.358903][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.425073][ T5807] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 514.438988][ T5807] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 514.443594][ T5807] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 514.444921][ T5807] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 514.449120][ T5807] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 514.471774][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 515.013421][ T8242] netlink: 'syz.1.505': attribute type 5 has an invalid length. [ 515.162071][ T8247] netlink: 8 bytes leftover after parsing attributes in process `syz.4.507'. [ 515.897012][ T61] Bluetooth: hci3: command tx timeout [ 516.144975][ T1055] team0 (unregistering): Port device team_slave_1 removed [ 516.359414][ T1055] team0 (unregistering): Port device team_slave_0 removed [ 516.398502][ T8260] IPv6: Can't replace route, no match found [ 516.751921][ T61] Bluetooth: hci5: command tx timeout [ 516.914995][ T8264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.514'. [ 516.915037][ T8264] netlink: 20 bytes leftover after parsing attributes in process `syz.2.514'. [ 517.060757][ T8268] binder: 8267:8268 ioctl c0306201 0 returned -14 [ 517.168146][ T5895] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 517.233546][ T5895] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 517.382647][ T44] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 517.567264][ T1055] team0 (unregistering): Port device team_slave_1 removed [ 517.568608][ T44] usb 3-1: config 0 has no interfaces? [ 517.570152][ T44] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 517.570178][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 517.570205][ T44] usb 3-1: SerialNumber: syz [ 517.594181][ T44] usb 3-1: config 0 descriptor?? [ 517.736164][ T1055] team0 (unregistering): Port device team_slave_0 removed [ 517.931628][ T44] usb 3-1: USB disconnect, device number 12 [ 518.120425][ T61] Bluetooth: hci3: command tx timeout [ 518.653803][ T8155] chnl_net:caif_netlink_parms(): no params data found [ 518.852723][ T8284] random: crng reseeded on system resumption [ 518.979192][ T61] Bluetooth: hci5: command tx timeout [ 519.059750][ T8221] lo speed is unknown, defaulting to 1000 [ 519.082420][ T5916] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 519.253450][ T5916] usb 5-1: Using ep0 maxpacket: 32 [ 519.255823][ T5916] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 519.258914][ T5916] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 519.258939][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 519.258957][ T5916] usb 5-1: Product: syz [ 519.258968][ T5916] usb 5-1: Manufacturer: syz [ 519.258981][ T5916] usb 5-1: SerialNumber: syz [ 519.271980][ T5916] usb 5-1: config 0 descriptor?? [ 519.564056][ T5895] usb 5-1: USB disconnect, device number 6 [ 519.583149][ T8155] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.583284][ T8155] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.583488][ T8155] bridge_slave_0: entered allmulticast mode [ 519.588410][ T8155] bridge_slave_0: entered promiscuous mode [ 519.615381][ T8155] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.615578][ T8155] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.615773][ T8155] bridge_slave_1: entered allmulticast mode [ 519.625507][ T8155] bridge_slave_1: entered promiscuous mode [ 520.515509][ T8314] trusted_key: encrypted_key: insufficient parameters specified [ 520.577083][ T8314] trusted_key: encrypted_key: keylen parameter is missing [ 520.916930][ T8155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.279723][ T8155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.320148][ T61] Bluetooth: hci5: command tx timeout [ 522.830884][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 522.830984][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.336963][ T8155] team0: Port device team_slave_0 added [ 523.348960][ T8155] team0: Port device team_slave_1 added [ 523.595369][ T61] Bluetooth: hci5: command tx timeout [ 523.668843][ T8353] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 523.869636][ T8370] vivid-007: ================= START STATUS ================= [ 523.869779][ T8370] vivid-007: Generate PTS: true [ 523.869814][ T8370] vivid-007: Generate SCR: true [ 523.869841][ T8370] tpg source WxH: 320x240 (Y'CbCr) [ 523.869853][ T8370] tpg field: 1 [ 523.869860][ T8370] tpg crop: (0,0)/320x240 [ 523.869873][ T8370] tpg compose: (0,0)/320x240 [ 523.869885][ T8370] tpg colorspace: 8 [ 523.869893][ T8370] tpg transfer function: 0/0 [ 523.869901][ T8370] tpg Y'CbCr encoding: 0/0 [ 523.869909][ T8370] tpg quantization: 0/0 [ 523.869917][ T8370] tpg RGB range: 0/2 [ 523.869925][ T8370] vivid-007: ================== END STATUS ================== [ 524.206405][ T8155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.206423][ T8155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.206448][ T8155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 524.300823][ T8155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 524.300839][ T8155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.300864][ T8155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 524.359083][ T8378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.548'. [ 524.359144][ T8378] netlink: 20 bytes leftover after parsing attributes in process `syz.2.548'. [ 524.918645][ T8402] netlink: 'syz.1.554': attribute type 17 has an invalid length. [ 524.918680][ T8402] netlink: 148 bytes leftover after parsing attributes in process `syz.1.554'. [ 525.288398][ T8413] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 525.439620][ T61] Bluetooth: hci2: Malformed HCI Event [ 525.493264][ T8155] hsr_slave_0: entered promiscuous mode [ 525.494562][ T8155] hsr_slave_1: entered promiscuous mode [ 525.495522][ T8155] debugfs: 'hsr0' already exists in 'hsr' [ 525.495545][ T8155] Cannot create hsr debugfs directory [ 525.847495][ T8427] comedi comedi0: No channels found! [ 526.002891][ T8429] ubi31: attaching mtd0 [ 526.113013][ T8429] ubi31: scanning is finished [ 526.383554][ T8221] chnl_net:caif_netlink_parms(): no params data found [ 526.573064][ T1055] bridge_slave_1: left allmulticast mode [ 526.573092][ T1055] bridge_slave_1: left promiscuous mode [ 526.573332][ T1055] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.306545][ T8429] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 527.340402][ T1055] bridge_slave_0: left allmulticast mode [ 527.340437][ T1055] bridge_slave_0: left promiscuous mode [ 527.340701][ T1055] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.191507][ T1055] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.304091][ T1055] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.374734][ T1055] bond0 (unregistering): Released all slaves [ 529.107846][ T1055] hsr_slave_0: left promiscuous mode [ 529.163732][ T1055] hsr_slave_1: left promiscuous mode [ 529.164696][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.446037][ T1055] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.200800][ T1055] team0 (unregistering): Port device team_slave_1 removed [ 532.414809][ T1055] team0 (unregistering): Port device team_slave_0 removed [ 533.150988][ T8529] warning: `syz.4.592' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 533.198301][ T8532] sock: sock_timestamping_bind_phc: sock not bind to device [ 533.793810][ T992] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 533.822176][ T8221] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.822312][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.822539][ T8221] bridge_slave_0: entered allmulticast mode [ 533.828896][ T8221] bridge_slave_0: entered promiscuous mode [ 533.890890][ T8221] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.891015][ T8221] bridge0: port 2(bridge_slave_1) entered disabled state [ 533.891240][ T8221] bridge_slave_1: entered allmulticast mode [ 533.898141][ T8221] bridge_slave_1: entered promiscuous mode [ 533.974661][ T992] usb 5-1: Using ep0 maxpacket: 32 [ 533.977044][ T992] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 533.977072][ T992] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.982719][ T992] usb 5-1: config 0 descriptor?? [ 534.110224][ T992] as10x_usb: device has been detected [ 534.124916][ T992] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 534.226375][ T992] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 534.343579][ T992] as10x_usb: error during firmware upload part1 [ 534.344385][ T992] Registered device nBox DVB-T Dongle [ 534.385454][ T992] usb 5-1: USB disconnect, device number 7 [ 534.570244][ T8221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.588674][ T8221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.591588][ T992] Unregistered device nBox DVB-T Dongle [ 534.623467][ T992] as10x_usb: device has been disconnected [ 534.683291][ T8562] netlink: 'syz.2.601': attribute type 1 has an invalid length. [ 535.023342][ T8221] team0: Port device team_slave_0 added [ 535.032608][ T8221] team0: Port device team_slave_1 added [ 535.307809][ T8221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.307825][ T8221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.307847][ T8221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.413666][ T8221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.413684][ T8221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.413710][ T8221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.898839][ T5880] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 536.013560][ T8221] hsr_slave_0: entered promiscuous mode [ 536.014889][ T8221] hsr_slave_1: entered promiscuous mode [ 536.015848][ T8221] debugfs: 'hsr0' already exists in 'hsr' [ 536.015870][ T8221] Cannot create hsr debugfs directory [ 536.038076][ T8155] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 536.110801][ T8155] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 536.133033][ T5880] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 536.133063][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.133082][ T5880] usb 3-1: Product: syz [ 536.133097][ T5880] usb 3-1: Manufacturer: syz [ 536.133109][ T5880] usb 3-1: SerialNumber: syz [ 536.149266][ T5880] usb 3-1: config 0 descriptor?? [ 536.669177][ T8601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.617'. [ 536.961264][ T8155] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 537.065058][ T5880] usb-storage 3-1:0.0: USB Mass Storage device detected [ 537.192055][ T5880] usb 3-1: USB disconnect, device number 13 [ 537.242387][ T8155] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 539.185234][ T8221] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 539.247810][ T8221] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 539.293200][ T8221] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 539.322458][ T8634] netlink: 'syz.4.625': attribute type 4 has an invalid length. [ 539.326071][ T8221] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 539.529270][ T8155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.796068][ T8155] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.851876][ T1688] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.851959][ T1688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.882564][ T1725] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.883805][ T1725] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.639674][ T61] Bluetooth: hci5: command tx timeout [ 541.758204][ T8221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 541.761506][ T8660] netlink: 79 bytes leftover after parsing attributes in process `syz.4.633'. [ 541.867422][ T8221] 8021q: adding VLAN 0 to HW filter on device team0 [ 541.899543][ T1524] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.899625][ T1524] bridge0: port 1(bridge_slave_0) entered forwarding state [ 541.952986][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.953066][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 542.319980][ T8155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 542.712998][ T8221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 543.127338][ T8155] veth0_vlan: entered promiscuous mode [ 543.145682][ T8155] veth1_vlan: entered promiscuous mode [ 543.209562][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.242669][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.245049][ T8155] veth0_macvtap: entered promiscuous mode [ 544.389499][ T8155] veth1_macvtap: entered promiscuous mode [ 544.481113][ T8155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 544.510940][ T8155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 544.539659][ T1489] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.540032][ T1489] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.540973][ T1489] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.542058][ T1489] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 544.564577][ C1] vkms_vblank_simulate: vblank timer overrun [ 544.672871][ T8700] netlink: 'syz.1.644': attribute type 38 has an invalid length. [ 545.122603][ T1596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.122623][ T1596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.157065][ T5916] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 545.242786][ T1489] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 545.242805][ T1489] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 545.323913][ T5916] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 545.323952][ T5916] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 545.323976][ T5916] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 545.332870][ T5916] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 545.332898][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.332916][ T5916] usb 5-1: Product: syz [ 545.332929][ T5916] usb 5-1: Manufacturer: syz [ 545.332949][ T5916] usb 5-1: SerialNumber: syz [ 545.399602][ T5916] usb 5-1: config 0 descriptor?? [ 545.404348][ T8703] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 545.404541][ T8703] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 545.406742][ T5916] usb 5-1: ucan: probing device on interface #0 [ 545.543194][ T8221] veth0_vlan: entered promiscuous mode [ 545.623466][ T8221] veth1_vlan: entered promiscuous mode [ 545.742037][ T8221] veth0_macvtap: entered promiscuous mode [ 545.770857][ T8221] veth1_macvtap: entered promiscuous mode [ 545.822362][ T8221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.861655][ T5916] usb 5-1: ucan: device reported invalid tx-fifo size [ 545.861677][ T5916] usb 5-1: ucan: probe failed; try to update the device firmware [ 545.883120][ T8221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 545.907037][ T68] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.907311][ T68] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.907346][ T68] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 545.907379][ T68] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.080172][ T1235] usb 5-1: USB disconnect, device number 8 [ 546.180929][ C1] vkms_vblank_simulate: vblank timer overrun [ 546.280570][ T5895] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 546.280848][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 546.415387][ C1] vkms_vblank_simulate: vblank timer overrun [ 547.155988][ T5895] usb 3-1: device descriptor read/64, error -32 [ 547.412576][ T5895] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 547.412856][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 547.458468][ T7832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.458488][ T7832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.551628][ T5895] usb 3-1: device descriptor read/64, error -32 [ 547.596161][ T1725] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 547.596179][ T1725] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 547.671662][ T5895] usb usb3-port1: attempt power cycle [ 547.679892][ T990] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 548.876192][ T990] usb 5-1: config 118 has an invalid descriptor of length 0, skipping remainder of the config [ 548.876219][ T990] usb 5-1: config 118 has 0 interfaces, different from the descriptor's value: 1 [ 548.904383][ T5895] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 548.918021][ T990] usb 5-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 548.918048][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.918067][ T990] usb 5-1: Product: syz [ 548.918081][ T990] usb 5-1: Manufacturer: syz [ 548.918095][ T990] usb 5-1: SerialNumber: syz [ 550.440047][ T990] usb 5-1: USB disconnect, device number 9 [ 550.478059][ T8742] ALSA: mixer_oss: invalid OSS volume '' [ 551.537875][ T37] audit: type=1326 audit(1764098198.937:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8758 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81cb0f749 code=0x7ffc0000 [ 551.566181][ T37] audit: type=1326 audit(1764098198.965:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8758 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81cb0f749 code=0x7ffc0000 [ 551.566230][ T37] audit: type=1326 audit(1764098198.965:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8758 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd81cb0df90 code=0x7ffc0000 [ 551.566267][ T37] audit: type=1326 audit(1764098198.965:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8758 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd81cb10f77 code=0x7ffc0000 [ 551.566306][ T37] audit: type=1326 audit(1764098198.965:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8758 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd81cb0f749 code=0x7ffc0000 [ 551.566344][ T37] audit: type=1326 audit(1764098198.965:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8758 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7fd81cb10f77 code=0x7ffc0000 [ 551.566383][ T37] audit: type=1326 audit(1764098198.965:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8758 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd81cb0e3aa code=0x7ffc0000 [ 551.566419][ T37] audit: type=1326 audit(1764098198.965:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8758 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81cb0f749 code=0x7ffc0000 [ 551.566466][ T37] audit: type=1326 audit(1764098198.965:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8758 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fd81cb0f749 code=0x7ffc0000 [ 551.566503][ T37] audit: type=1326 audit(1764098198.965:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8758 comm="syz.6.666" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81cb0f749 code=0x7ffc0000 [ 551.793219][ T5895] usb 3-1: unable to read config index 0 descriptor/all [ 551.793269][ T5895] usb 3-1: can't read configurations, error -71 [ 552.822014][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 552.946196][ T8796] netlink: 52 bytes leftover after parsing attributes in process `syz.2.683'. [ 552.946224][ T8796] netlink: 52 bytes leftover after parsing attributes in process `syz.2.683'. [ 552.946240][ T8796] netlink: 52 bytes leftover after parsing attributes in process `syz.2.683'. [ 553.019390][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.019426][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 553.019463][ T9] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 553.019484][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.075135][ T9] usb 6-1: config 0 descriptor?? [ 553.147629][ T8802] netlink: 4 bytes leftover after parsing attributes in process `syz.6.684'. [ 553.596903][ T9] cm6533_jd 0003:0D8C:0022.0002: reserved main item tag 0xd [ 553.596943][ T9] cm6533_jd 0003:0D8C:0022.0002: item fetching failed at offset 4/5 [ 553.597779][ T9] cm6533_jd 0003:0D8C:0022.0002: parse failed [ 553.597880][ T9] cm6533_jd 0003:0D8C:0022.0002: probe with driver cm6533_jd failed with error -22 [ 553.751387][ T9] usb 6-1: USB disconnect, device number 2 [ 554.938712][ T5995] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 555.125569][ T5995] usb 5-1: config index 0 descriptor too short (expected 2084, got 36) [ 555.125630][ T5995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 555.125654][ T5995] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.125692][ T5995] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00 [ 555.125712][ T5995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.187648][ T5995] usb 5-1: config 0 descriptor?? [ 555.376086][ T8865] [U] [ 555.376129][ T8865] [U] [ 555.376163][ T8865] [U] [ 555.376197][ T8865] [U] [ 555.376304][ T8865] [U] [ 555.376346][ T8865] [U] [ 555.376380][ T8865] [U] [ 555.376413][ T8865] [U] [ 555.376477][ T8865] [U] [ 555.376510][ T8865] [U] [ 555.376545][ T8865] [U] [ 555.376578][ T8865] [U] [ 555.376620][ T8865] [U] [ 555.376652][ T8865] [U] [ 555.376685][ T8865] [U] [ 555.376718][ T8865] [U] [ 555.376788][ T8865] [U] [ 555.376820][ T8865] [U] [ 555.376852][ T8865] [U] [ 555.387910][ T8865] [U] [ 555.393453][ T8865] [U] [ 555.393492][ T8865] [U] [ 555.393524][ T8865] [U] [ 555.393559][ T8865] [U] [ 555.393629][ T8865] [U] [ 555.393663][ T8865] [U] [ 555.393697][ T8865] [U] [ 555.393731][ T8865] [U] [ 555.393773][ T8865] [U] [ 555.393807][ T8865] [U] [ 555.393839][ T8865] [U] [ 555.393873][ T8865] [U] [ 555.393926][ T8865] [U] [ 555.393959][ T8865] [U] [ 555.393991][ T8865] [U] [ 555.394024][ T8865] [U] [ 555.394064][ T8865] [U] [ 555.394107][ T8865] [U] [ 555.394141][ T8865] [U] [ 555.394173][ T8865] [U] [ 555.394231][ T8865] [U] [ 555.394264][ T8865] [U] [ 555.394299][ T8865] [U] [ 555.394357][ T8865] [U] [ 555.394406][ T8865] [U] [ 555.394440][ T8865] [U] [ 555.394475][ T8865] [U] [ 555.414828][ T8865] [U] [ 555.414925][ T8865] [U] [ 555.414960][ T8865] [U] [ 555.414994][ T8865] [U] [ 555.415028][ T8865] [U] [ 555.415070][ T8865] [U] [ 555.415103][ T8865] [U] [ 555.415135][ T8865] [U] [ 555.415168][ T8865] [U] [ 555.415234][ T8865] [U] [ 555.415268][ T8865] [U] [ 555.415301][ T8865] [U] [ 555.415336][ T8865] [U] [ 555.415385][ T8865] [U] [ 555.415420][ T8865] [U] [ 555.415453][ T8865] [U] [ 555.415488][ T8865] [U] [ 555.415543][ T8865] [U] [ 555.415576][ T8865] [U] [ 555.415609][ T8865] [U] [ 555.415643][ T8865] [U] [ 555.415684][ T8865] [U] [ 555.415716][ T8865] [U] [ 555.415749][ T8865] [U] [ 555.415781][ T8865] [U] [ 555.415835][ T8865] [U] [ 555.415868][ T8865] [U] [ 555.415901][ T8865] [U] [ 555.415934][ T8865] [U] [ 555.415973][ T8865] [U] [ 555.416006][ T8865] [U] [ 555.416039][ T8865] [U] [ 555.416072][ T8865] [U] [ 555.416141][ T8865] [U] [ 555.416175][ T8865] [U] [ 555.416210][ T8865] [U] [ 555.416244][ T8865] [U] [ 555.416285][ T8865] [U] [ 555.416319][ T8865] [U] [ 555.416359][ T8865] [U] [ 555.416393][ T8865] [U] [ 555.416449][ T8865] [U] [ 555.416482][ T8865] [U] [ 555.416516][ T8865] [U] [ 555.416549][ T8865] [U] [ 555.416589][ T8865] [U] [ 555.416621][ T8865] [U] [ 555.416654][ T8865] [U] [ 555.416687][ T8865] [U] [ 555.416740][ T8865] [U] [ 555.416774][ T8865] [U] [ 555.416806][ T8865] [U] [ 555.416840][ T8865] [U] [ 555.416879][ T8865] [U] [ 555.416912][ T8865] [U] [ 555.416944][ T8865] [U] [ 555.416977][ T8865] [U] [ 555.417031][ T8865] [U] [ 555.417065][ T8865] [U] [ 555.417098][ T8865] [U] [ 555.417142][ T8865] [U] [ 555.417191][ T8865] [U] [ 555.417225][ T8865] [U] [ 555.417257][ T8865] [U] [ 555.417290][ T8865] [U] [ 555.417349][ T8865] [U] [ 555.417384][ T8865] [U] [ 555.417417][ T8865] [U] [ 555.417451][ T8865] [U] [ 555.417507][ T8865] [U] [ 555.417541][ T8865] [U] [ 555.417575][ T8865] [U] [ 555.417609][ T8865] [U] [ 555.417664][ T8865] [U] [ 555.417698][ T8865] [U] [ 555.417730][ T8865] [U] [ 555.417772][ T8865] [U] [ 555.417821][ T8865] [U] [ 555.417855][ T8865] [U] [ 555.417898][ T8865] [U] [ 555.454285][ T8864] [U] [ 555.738214][ T5995] dragonrise 0003:0079:0006.0003: unknown main item tag 0x0 [ 555.738252][ T5995] dragonrise 0003:0079:0006.0003: unknown main item tag 0x0 [ 555.790737][ T5995] dragonrise 0003:0079:0006.0003: hidraw0: USB HID v0.00 Device [HID 0079:0006] on usb-dummy_hcd.4-1/input0 [ 555.790770][ T5995] dragonrise 0003:0079:0006.0003: no inputs found [ 555.790783][ T5995] dragonrise 0003:0079:0006.0003: force feedback init failed [ 555.986035][ T990] usb 5-1: USB disconnect, device number 10 [ 556.089912][ T8874] fido_id[8874]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 556.417654][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 556.419581][ T8881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.719'. [ 561.102256][ T9] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 561.554604][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.568662][ T9] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 561.568694][ T9] usb 3-1: config 0 interface 0 has no altsetting 0 [ 561.568728][ T9] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3138, bcdDevice= 0.00 [ 561.568750][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.723892][ C1] vkms_vblank_simulate: vblank timer overrun [ 561.838081][ C1] vkms_vblank_simulate: vblank timer overrun [ 562.265881][ C1] vkms_vblank_simulate: vblank timer overrun [ 562.513885][ T9] usb 3-1: config 0 descriptor?? [ 562.616412][ T8928] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 563.341884][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.423733][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.112100][ T9] ryos 0003:1E7D:3138.0004: hidraw0: USB HID v0.04 Device [HID 1e7d:3138] on usb-dummy_hcd.2-1/input0 [ 564.248566][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.364601][ T5894] usb 3-1: USB disconnect, device number 18 [ 564.394596][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.550131][ T8988] netlink: 32 bytes leftover after parsing attributes in process `syz.4.753'. [ 564.623207][ T8981] fido_id[8981]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 565.096973][ T9011] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001161 ! [ 565.537492][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.385987][ C1] vkms_vblank_simulate: vblank timer overrun [ 567.023968][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 567.023986][ T37] audit: type=1326 audit(1764098213.426:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9040 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 567.027018][ T37] audit: type=1326 audit(1764098213.426:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9040 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 567.027310][ T37] audit: type=1326 audit(1764098213.426:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9040 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 567.027584][ T37] audit: type=1326 audit(1764098213.426:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9040 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 567.027851][ T37] audit: type=1326 audit(1764098213.426:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9040 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 567.028685][ T37] audit: type=1326 audit(1764098213.426:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9040 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 567.028943][ T37] audit: type=1326 audit(1764098213.426:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9040 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 567.029205][ T37] audit: type=1326 audit(1764098213.426:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9040 comm="syz.4.777" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 567.085491][ T9044] netlink: 277 bytes leftover after parsing attributes in process `syz.4.781'. [ 567.921332][ T9071] overlay: ./file0 is not a directory [ 568.123543][ T61] Bluetooth: hci4: hcon ffff8880343fc000 sent 1 < count 243 [ 568.127192][ T61] Bluetooth: hci4: hcon ffff8880343fc000 sent 0 < count 65535 [ 569.346661][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.511837][ C0] vkms_vblank_simulate: vblank timer overrun [ 569.732619][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.191271][ C0] vkms_vblank_simulate: vblank timer overrun [ 570.547951][ C0] vkms_vblank_simulate: vblank timer overrun [ 571.460088][ C0] vkms_vblank_simulate: vblank timer overrun [ 571.952847][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.049193][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.269038][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.326026][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.662131][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.697375][ T9155] orangefs_mount: mount request failed with -4 [ 573.651255][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.299751][ T5916] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 574.694341][ T5916] usb 6-1: Using ep0 maxpacket: 16 [ 574.696919][ T5916] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 574.696952][ T5916] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 574.696994][ T5916] usb 6-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00 [ 574.697017][ T5916] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.712534][ T5916] usb 6-1: config 0 descriptor?? [ 576.065439][ T5916] kye 0003:0458:500F.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 576.066734][ T5916] kye 0003:0458:500F.0005: unknown main item tag 0x0 [ 576.066768][ T5916] kye 0003:0458:500F.0005: unknown main item tag 0x0 [ 576.066793][ T5916] kye 0003:0458:500F.0005: unknown main item tag 0x0 [ 576.066818][ T5916] kye 0003:0458:500F.0005: unknown main item tag 0x0 [ 576.066844][ T5916] kye 0003:0458:500F.0005: unknown main item tag 0x0 [ 576.066868][ T5916] kye 0003:0458:500F.0005: unknown main item tag 0x0 [ 576.066893][ T5916] kye 0003:0458:500F.0005: unknown main item tag 0x0 [ 576.066919][ T5916] kye 0003:0458:500F.0005: unknown main item tag 0x0 [ 576.066946][ T5916] kye 0003:0458:500F.0005: unknown main item tag 0x0 [ 576.066973][ T5916] kye 0003:0458:500F.0005: unknown main item tag 0x0 [ 576.680066][ T44] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 576.706000][ T5916] kye 0003:0458:500F.0005: hidraw0: USB HID v0.00 Device [HID 0458:500f] on usb-dummy_hcd.5-1/input0 [ 576.706035][ T5916] kye 0003:0458:500F.0005: tablet-enabling feature report not found [ 576.706049][ T5916] kye 0003:0458:500F.0005: tablet enabling failed [ 577.015409][ T5916] usb 6-1: USB disconnect, device number 3 [ 577.144986][ T44] usb 7-1: Using ep0 maxpacket: 8 [ 577.158249][ T44] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 577.158311][ T44] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 577.158333][ T44] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 577.158362][ T44] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 577.158383][ T44] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 577.158422][ T44] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 577.158443][ T44] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 577.441818][ T44] usb 7-1: GET_CAPABILITIES returned 0 [ 577.441848][ T44] usbtmc 7-1:16.0: can't read capabilities [ 578.175667][ T44] usb 7-1: USB disconnect, device number 2 [ 579.014948][ T9236] netlink: 'syz.5.851': attribute type 9 has an invalid length. [ 580.533843][ T37] audit: type=1326 audit(1764098226.064:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9269 comm="syz.1.865" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe08fcef749 code=0x0 [ 580.671024][ T44] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 580.833600][ T44] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 580.833648][ T44] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 580.836423][ T44] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 580.836451][ T44] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.836471][ T44] usb 5-1: Product: syz [ 580.836484][ T44] usb 5-1: Manufacturer: syz [ 580.836498][ T44] usb 5-1: SerialNumber: syz [ 580.909736][ T44] hub 5-1:1.0: bad descriptor, ignoring hub [ 580.909776][ T44] hub 5-1:1.0: probe with driver hub failed with error -5 [ 581.045795][ T5995] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 581.270163][ T44] usb 5-1: USB disconnect, device number 11 [ 581.387314][ T5995] usb 6-1: Using ep0 maxpacket: 8 [ 581.389945][ T5995] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 581.389979][ T5995] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 581.429423][ T5995] pvrusb2: Hardware description: Terratec Grabster AV400 [ 581.429447][ T5995] pvrusb2: ********** [ 581.429453][ T5995] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 581.429464][ T5995] pvrusb2: Important functionality might not be entirely working. [ 581.429472][ T5995] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 581.429482][ T5995] pvrusb2: ********** [ 582.077030][ T2371] pvrusb2: Invalid write control endpoint [ 582.305256][ T9277] pvrusb2: Invalid write control endpoint [ 582.307987][ T5995] usb 6-1: USB disconnect, device number 4 [ 582.501513][ T2371] pvrusb2: Invalid write control endpoint [ 582.501528][ T2371] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 582.501537][ T2371] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 582.501544][ T2371] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 582.501560][ T2371] pvrusb2: Device being rendered inoperable [ 582.558981][ T2371] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 582.559086][ T2371] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 582.587850][ T2371] pvrusb2: Attached sub-driver cx25840 [ 582.587865][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 582.587873][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 582.715545][ T9305] netlink: 100 bytes leftover after parsing attributes in process `syz.6.879'. [ 583.197279][ T9316] team0: Device gtp0 is of different type [ 583.600320][ T44] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 583.760783][ T44] usb 7-1: Using ep0 maxpacket: 16 [ 583.763499][ T44] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 583.763558][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 583.763584][ T44] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 583.763605][ T44] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 583.763627][ T44] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 583.765302][ T44] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 583.765328][ T44] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 583.765347][ T44] usb 7-1: Manufacturer: syz [ 583.770952][ T44] usb 7-1: config 0 descriptor?? [ 584.199175][ T44] rc_core: IR keymap rc-hauppauge not found [ 584.199194][ T44] Registered IR keymap rc-empty [ 584.199953][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 584.220368][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 584.245390][ T44] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 584.248942][ T44] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input10 [ 584.335179][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 584.360041][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 584.380927][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 584.403412][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 584.423657][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 584.444935][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 584.466632][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 584.487886][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 584.509116][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 584.530822][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 584.563077][ T44] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 584.612523][ T44] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version c8 [ 584.612551][ T44] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 584.648579][ T5995] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 584.655880][ T44] usb 7-1: USB disconnect, device number 3 [ 584.809763][ T5995] usb 5-1: Using ep0 maxpacket: 8 [ 584.814281][ T5995] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 584.814309][ T5995] usb 5-1: config 179 has no interface number 0 [ 584.814355][ T5995] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 584.814380][ T5995] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 584.814406][ T5995] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 584.814431][ T5995] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 584.814459][ T5995] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 584.814502][ T5995] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 584.814526][ T5995] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.895891][ T5894] kernel read not supported for file /dsp (pid: 5894 comm: kworker/0:4) [ 585.043879][ T9348] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 585.566253][ T44] usb 5-1: USB disconnect, device number 12 [ 585.566279][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 585.566701][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 585.614528][ T5995] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input11 [ 587.672668][ T9407] netlink: 12 bytes leftover after parsing attributes in process `syz.5.921'. [ 587.941671][ T37] audit: type=1326 audit(1764098232.995:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9416 comm="syz.6.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81cb0f749 code=0x7ffc0000 [ 587.941726][ T37] audit: type=1326 audit(1764098232.995:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9416 comm="syz.6.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81cb0f749 code=0x7ffc0000 [ 587.949741][ T37] audit: type=1326 audit(1764098232.995:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9416 comm="syz.6.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fd81cb0f749 code=0x7ffc0000 [ 587.950050][ T37] audit: type=1326 audit(1764098232.995:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9416 comm="syz.6.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81cb0f749 code=0x7ffc0000 [ 588.056880][ T37] audit: type=1326 audit(1764098232.995:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9416 comm="syz.6.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81cb0f749 code=0x7ffc0000 [ 588.057226][ T37] audit: type=1326 audit(1764098233.098:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9416 comm="syz.6.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd81cb0f749 code=0x7ffc0000 [ 588.057499][ T37] audit: type=1326 audit(1764098233.098:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9416 comm="syz.6.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81cb0f749 code=0x7ffc0000 [ 588.057768][ T37] audit: type=1326 audit(1764098233.098:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9416 comm="syz.6.929" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd81cb0f749 code=0x7ffc0000 [ 588.512252][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 588.512324][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 588.585871][ T9441] netlink: 'syz.1.939': attribute type 3 has an invalid length. [ 588.585893][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.939'. [ 588.685132][ T5916] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 588.842900][ T5916] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 588.842929][ T5916] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 588.844436][ T5916] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 588.844463][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 588.844482][ T5916] usb 7-1: SerialNumber: syz [ 588.945038][ T9456] netlink: 44 bytes leftover after parsing attributes in process `syz.5.946'. [ 589.178310][ T5916] usb 7-1: 0:2 : does not exist [ 589.272826][ T5916] usb 7-1: USB disconnect, device number 4 [ 589.437345][ T990] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 589.474030][ T61] Bluetooth: hci3: hcon ffff8880276e8000 sent 1 < count 6 [ 589.478689][ T61] Bluetooth: hci3: hcon ffff88805d26c000 sent 1 < count 243 [ 589.479395][ T61] Bluetooth: hci3: hcon ffff88805d26c000 sent 0 < count 65535 [ 589.542952][ T9461] udevd[9461]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 589.597704][ T990] usb 5-1: Using ep0 maxpacket: 8 [ 589.602921][ T990] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 589.602980][ T990] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 589.603007][ T990] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 589.603032][ T990] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 589.603058][ T990] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 589.604530][ T990] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 589.604586][ T990] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 589.604620][ T990] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 589.604644][ T990] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 589.604669][ T990] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 589.704797][ T990] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 589.754124][ T990] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 589.754161][ T990] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 589.754183][ T990] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 589.754207][ T990] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 589.824962][ T990] usb 5-1: string descriptor 0 read error: -22 [ 589.825117][ T990] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 589.825140][ T990] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.887493][ T990] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 590.075852][ T5995] usb 5-1: USB disconnect, device number 13 [ 590.426974][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.304532][ C1] vkms_vblank_simulate: vblank timer overrun [ 591.760031][ T9486] netlink: 'syz.6.958': attribute type 9 has an invalid length. [ 591.981918][ T990] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 592.153632][ T990] usb 6-1: Using ep0 maxpacket: 16 [ 592.193953][ T990] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 592.194016][ T990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 592.194044][ T990] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 592.194065][ T990] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 592.194087][ T990] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 592.206192][ T5995] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 592.279315][ T990] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 592.279345][ T990] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 592.279365][ T990] usb 6-1: Manufacturer: syz [ 592.343981][ T9501] netlink: 'syz.1.964': attribute type 9 has an invalid length. [ 592.344514][ T990] usb 6-1: config 0 descriptor?? [ 592.369220][ T5995] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 592.369245][ T5995] usb 5-1: config 0 has no interface number 0 [ 592.375066][ T5995] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 592.375095][ T5995] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 592.375113][ T5995] usb 5-1: Product: syz [ 592.375126][ T5995] usb 5-1: Manufacturer: syz [ 592.375140][ T5995] usb 5-1: SerialNumber: syz [ 592.385244][ T5995] usb 5-1: config 0 descriptor?? [ 592.520086][ C1] vkms_vblank_simulate: vblank timer overrun [ 592.644686][ T5995] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 592.721916][ T5995] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 592.722338][ T5995] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 592.722393][ T5995] usb 5-1: media controller created [ 592.754876][ T990] rc_core: IR keymap rc-hauppauge not found [ 592.754916][ T990] Registered IR keymap rc-empty [ 592.755085][ T990] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 592.783542][ T990] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 592.807362][ T990] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 592.860451][ C1] vkms_vblank_simulate: vblank timer overrun [ 592.867264][ T9489] usb 5-1: dvb_usb_ec168: I2C read not implemented [ 592.889782][ T990] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input12 [ 592.950677][ T990] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 593.034963][ T5995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 593.175341][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.182917][ T990] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 593.254388][ T990] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 593.358080][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.800913][ T990] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 593.820624][ T990] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 593.929016][ T5995] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 594.035508][ T5995] usb 5-1: USB disconnect, device number 14 [ 594.098460][ T990] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 594.120055][ T990] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 594.141226][ T990] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 594.162647][ T990] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 594.184209][ T990] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 594.209388][ T990] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 594.209413][ T990] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 594.259092][ T990] usb 6-1: USB disconnect, device number 5 [ 594.265363][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.970'. [ 594.884246][ T9548] netlink: 'syz.5.975': attribute type 9 has an invalid length. [ 597.394387][ T9544] netlink: 'syz.2.977': attribute type 9 has an invalid length. [ 598.415427][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz.4.996'. [ 598.474222][ T9602] netlink: 36 bytes leftover after parsing attributes in process `syz.4.996'. [ 598.752426][ T5995] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 598.909203][ T5995] usb 3-1: Using ep0 maxpacket: 16 [ 599.178021][ T5995] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 599.178070][ T5995] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 599.178091][ T5995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.236274][ T5995] usb 3-1: config 0 descriptor?? [ 600.628038][ T5995] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 601.346222][ T9629] 9pnet_fd: Insufficient options for proto=fd [ 601.459810][ T9632] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1007'. [ 601.460198][ T9632] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1007'. [ 601.624815][ T990] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 601.886922][ T9] usb 3-1: USB disconnect, device number 19 [ 602.108262][ T990] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 602.108294][ T990] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 602.131272][ T9638] netlink: 'syz.1.1008': attribute type 9 has an invalid length. [ 602.131299][ T9638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1008'. [ 602.331996][ T990] usb 6-1: config 0 descriptor?? [ 602.354317][ T990] cp210x 6-1:0.0: cp210x converter detected [ 602.355657][ T9641] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1010'. [ 602.830923][ T990] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 603.417931][ T9650] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1011'. [ 603.430850][ T990] usb 6-1: cp210x converter now attached to ttyUSB0 [ 604.048727][ T990] usb 6-1: USB disconnect, device number 6 [ 604.278569][ T990] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 604.575308][ T9] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 604.793450][ T9] usb 7-1: config 0 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 604.793486][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 604.793521][ T9] usb 7-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00 [ 604.793543][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 604.821339][ T9] usb 7-1: config 0 descriptor?? [ 605.100812][ T990] cp210x 6-1:0.0: device disconnected [ 605.487882][ T9] thrustmaster 0003:044F:B653.0007: hidraw0: USB HID v0.00 Device [HID 044f:b653] on usb-dummy_hcd.6-1/input0 [ 605.487918][ T9] thrustmaster 0003:044F:B653.0007: no inputs found [ 605.662702][ T5894] usb 7-1: USB disconnect, device number 5 [ 606.195469][ T9668] fido_id[9668]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 612.245393][ T5995] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 612.250207][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 612.381210][ T5995] usb 3-1: device descriptor read/64, error -32 [ 612.636004][ T5995] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 613.240230][ T5995] usb 3-1: Using ep0 maxpacket: 8 [ 613.867827][ T5995] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 613.867855][ T5995] usb 3-1: config 0 has no interface number 0 [ 613.867908][ T5995] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 613.867931][ T5995] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 613.867955][ T5995] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 613.867981][ T5995] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 613.868024][ T5995] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 613.868046][ T5995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 613.984921][ T5995] usb 3-1: config 0 descriptor?? [ 614.099484][ T5995] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 614.355022][ T9740] netlink: 'syz.1.1048': attribute type 9 has an invalid length. [ 617.357928][ T8653] usb 3-1: USB disconnect, device number 21 [ 617.370614][ T8653] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 618.002670][ T5995] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 618.167457][ T5995] usb 7-1: Using ep0 maxpacket: 16 [ 618.170352][ T5995] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 618.170384][ T5995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 618.220595][ T5995] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 618.220626][ T5995] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.220646][ T5995] usb 7-1: Product: syz [ 618.220659][ T5995] usb 7-1: Manufacturer: syz [ 618.220673][ T5995] usb 7-1: SerialNumber: syz [ 618.266610][ T5995] usb 7-1: config 0 descriptor?? [ 618.312393][ T5995] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 618.312428][ T5995] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 618.975961][ T5995] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 618.977223][ T5995] em28xx 7-1:0.0: Config register raw data: 0x41 [ 619.206538][ T9789] netlink: 'syz.4.1064': attribute type 9 has an invalid length. [ 619.235114][ T5995] usb 7-1: USB disconnect, device number 6 [ 619.237696][ T5995] em28xx 7-1:0.0: Disconnecting em28xx [ 619.439479][ T5995] em28xx 7-1:0.0: Freeing device [ 619.513705][ T9793] syzkaller1: entered promiscuous mode [ 619.513732][ T9793] syzkaller1: entered allmulticast mode [ 620.269078][ T5995] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 620.463845][ T5995] usb 7-1: Using ep0 maxpacket: 16 [ 620.466696][ T5995] usb 7-1: config 0 has an invalid interface number: 132 but max is 0 [ 620.466721][ T5995] usb 7-1: config 0 has no interface number 0 [ 620.470242][ T5995] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 620.470270][ T5995] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.470288][ T5995] usb 7-1: Product: syz [ 620.470302][ T5995] usb 7-1: Manufacturer: syz [ 620.470316][ T5995] usb 7-1: SerialNumber: syz [ 620.558984][ T5995] usb 7-1: config 0 descriptor?? [ 620.576105][ T5995] hub 7-1:0.132: bad descriptor, ignoring hub [ 620.576145][ T5995] hub 7-1:0.132: probe with driver hub failed with error -5 [ 621.165322][ T5995] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.132/input/input13 [ 621.806677][ T9807] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 622.850302][ T5894] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 623.950375][ T9805] netlink: 'syz.1.1065': attribute type 9 has an invalid length. [ 623.989134][ T5995] input: failed to attach handler mousedev to device input13, error: -2 [ 624.425254][ T5995] usb 7-1: USB disconnect, device number 7 [ 624.537070][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 624.537104][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 624.537124][ T5894] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 624.537165][ T5894] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 624.537186][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 624.617822][ T5894] usb 3-1: config 0 descriptor?? [ 624.952209][ T5995] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 625.778331][ T5995] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 625.778393][ T5995] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 625.778483][ T5995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 625.778510][ T5995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 625.778536][ T5995] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 625.778579][ T5995] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 625.778658][ T5995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 625.883192][ T5995] usb 7-1: config 0 descriptor?? [ 625.885219][ T9824] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 627.406342][ T5995] hid_parser_main: 59 callbacks suppressed [ 627.406369][ T5995] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 627.406474][ T5995] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 627.406512][ T5995] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 627.406539][ T5995] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 627.408795][ T5995] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 627.408830][ T5995] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 627.408855][ T5995] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 627.408963][ T5995] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 627.408989][ T5995] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 627.409015][ T5995] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0 [ 628.781508][ T5995] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 628.795887][ T5995] usb 7-1: USB disconnect, device number 8 [ 629.941322][ T9846] netlink: 'syz.1.1082': attribute type 9 has an invalid length. [ 630.165397][ T5894] usbhid 3-1:0.0: can't add hid device: -32 [ 630.165555][ T5894] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 630.897414][ T5894] usb 3-1: USB disconnect, device number 22 [ 631.299007][ T9859] ªªªªªª: renamed from wg2 (while UP) [ 632.571520][ T9887] netlink: 'syz.4.1097': attribute type 9 has an invalid length. [ 634.929944][ T9904] netlink: 'syz.1.1105': attribute type 11 has an invalid length. [ 634.929964][ T9904] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1105'. [ 634.938436][ T9904] netlink: 'syz.1.1105': attribute type 11 has an invalid length. [ 634.938457][ T9904] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1105'. [ 634.938749][ T9904] netlink: 'syz.1.1105': attribute type 11 has an invalid length. [ 634.938878][ T9904] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1105'. [ 636.151583][ T9910] netlink: 'syz.5.1107': attribute type 9 has an invalid length. [ 636.590261][ T9925] netlink: 'syz.4.1111': attribute type 9 has an invalid length. [ 640.166654][ T5807] Bluetooth: hci3: command 0x0406 tx timeout [ 640.183907][ T9955] i2c i2c-0: Invalid block write size 58 [ 644.414344][ T9988] netlink: 'syz.4.1131': attribute type 9 has an invalid length. [ 645.315969][T10000] netlink: 'syz.4.1135': attribute type 1 has an invalid length. [ 645.315991][T10000] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1135'. [ 649.755262][ T5995] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 649.928576][ T5995] usb 7-1: Using ep0 maxpacket: 8 [ 649.956523][ T5995] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 649.956589][ T5995] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 649.956612][ T5995] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 649.956644][ T5995] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 649.956668][ T5995] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 649.956709][ T5995] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 649.956732][ T5995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.297810][ T5995] usb 7-1: usb_control_msg returned -32 [ 650.297859][ T5995] usbtmc 7-1:16.0: can't read capabilities [ 652.641255][ T5995] usb 7-1: USB disconnect, device number 9 [ 652.890362][T10071] netlink: 'syz.5.1162': attribute type 9 has an invalid length. [ 652.911876][T10059] syz.2.1153 (10059) used greatest stack depth: 15832 bytes left [ 654.187367][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 654.187453][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 654.271623][T10101] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1171'. [ 654.740436][T10108] netlink: 'syz.6.1174': attribute type 9 has an invalid length. [ 655.356680][T10115] netlink: 'syz.4.1177': attribute type 9 has an invalid length. [ 656.151739][T10128] netlink: 'syz.2.1179': attribute type 9 has an invalid length. [ 657.361612][T10129] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 658.267345][ T37] audit: type=1326 audit(1764098298.786:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10154 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 658.267648][ T37] audit: type=1326 audit(1764098298.786:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10154 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 658.342628][ T37] audit: type=1326 audit(1764098298.786:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10154 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 658.374225][ T37] audit: type=1326 audit(1764098298.851:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10154 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 658.376721][ T37] audit: type=1326 audit(1764098298.889:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10154 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 658.426471][ T37] audit: type=1326 audit(1764098298.889:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10154 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 658.428349][ T37] audit: type=1326 audit(1764098298.936:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10154 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 658.429766][ T37] audit: type=1326 audit(1764098298.936:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10154 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 658.447131][ T37] audit: type=1326 audit(1764098298.936:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10154 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 658.490576][ T37] audit: type=1326 audit(1764098298.992:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10154 comm="syz.4.1188" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f49e580f749 code=0x7ffc0000 [ 659.409130][T10163] netlink: 'syz.1.1190': attribute type 9 has an invalid length. [ 660.321856][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1194'. [ 660.321905][T10174] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1194'. [ 660.321920][T10174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1194'. [ 661.441283][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1198'. [ 661.441306][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1198'. [ 661.506008][ T7826] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.508799][ T7826] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.508844][ T7826] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.508879][ T7826] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.509124][T10190] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1198'. [ 661.509141][T10190] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1198'. [ 661.574041][T10193] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1199'. [ 662.642035][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 663.747528][T10215] input: syz0 as /devices/virtual/input/input14 [ 664.205896][T10220] netlink: 'syz.4.1207': attribute type 9 has an invalid length. [ 664.764049][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 664.764080][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 664.764102][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 664.764144][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 664.764165][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 664.841065][ T9] usb 3-1: config 0 descriptor?? [ 670.122215][T10237] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 670.304341][ T9] usbhid 3-1:0.0: can't add hid device: -32 [ 670.304466][ T9] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 679.215243][T10272] tty tty1: ldisc open failed (-12), clearing slot 0 [ 685.071159][ T5894] usb 3-1: USB disconnect, device number 23 [ 686.739335][ T5807] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 686.744554][ T5807] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 686.753572][ T5807] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 686.755332][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 686.791392][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 687.717359][T10298] lo speed is unknown, defaulting to 1000 [ 689.169658][ T61] Bluetooth: hci0: command tx timeout [ 691.298912][ T5894] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 691.485661][ T61] Bluetooth: hci0: command tx timeout [ 691.839933][ T5894] usb 6-1: config 0 interface 0 has no altsetting 0 [ 691.839977][ T5894] usb 6-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 691.840000][ T5894] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.873282][ T5894] usb 6-1: config 0 descriptor?? [ 692.044104][ T5894] usb 6-1: can't set config #0, error -71 [ 692.937620][ T5894] usb 6-1: USB disconnect, device number 7 [ 693.672535][ T61] Bluetooth: hci0: command tx timeout [ 694.212776][T10298] chnl_net:caif_netlink_parms(): no params data found [ 695.893392][ T61] Bluetooth: hci0: command tx timeout [ 705.563250][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 706.823959][ T9] usb 6-1: device not accepting address 8, error -71 [ 707.561250][ T9] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 708.646146][ T9] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 708.646174][ T9] usb 6-1: config 0 has no interface number 0 [ 708.646222][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 708.646249][ T9] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 708.646292][ T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 708.646315][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.652006][ T9] usb 6-1: config 0 descriptor?? [ 708.653489][T10337] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 708.715569][ T9] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 708.874105][ T5807] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 708.897672][ T5807] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 708.899879][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 708.901923][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 708.902784][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 710.710286][ T5880] usb 6-1: USB disconnect, device number 9 [ 711.108960][ T5807] Bluetooth: hci2: command tx timeout [ 711.839329][T10319] bridge0: port 3(syz_tun) entered disabled state [ 712.550424][ T61] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 712.566175][ T61] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 712.567566][ T61] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 712.568721][ T61] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 712.569555][ T61] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 712.591761][T10344] befs: (nbd5): No write support. Marking filesystem read-only [ 712.610829][T10344] befs: (nbd5): unable to read superblock [ 713.335404][ T5807] Bluetooth: hci2: command tx timeout [ 714.784537][ T5807] Bluetooth: hci6: command tx timeout [ 715.596387][ T5807] Bluetooth: hci2: command tx timeout [ 717.017389][ T5807] Bluetooth: hci6: command tx timeout [ 717.778815][ T5807] Bluetooth: hci2: command tx timeout [ 719.272153][ T5807] Bluetooth: hci6: command tx timeout [ 719.832128][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 719.832225][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 720.300936][ T61] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 720.324278][ T61] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 720.325708][ T61] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 720.327259][ T61] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 720.328027][ T61] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 721.451614][ T61] Bluetooth: hci6: command tx timeout [ 722.563275][ T61] Bluetooth: hci7: command tx timeout [ 724.252906][T10350] netlink: 'syz.5.1249': attribute type 7 has an invalid length. [ 724.252927][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1249'. [ 724.785412][ T61] Bluetooth: hci7: command tx timeout [ 726.922631][T10319] syz_tun (unregistering): left allmulticast mode [ 726.922660][T10319] syz_tun (unregistering): left promiscuous mode [ 726.922761][T10319] bridge0: port 3(syz_tun) entered disabled state [ 727.007779][ T61] Bluetooth: hci7: command tx timeout [ 729.240906][ T61] Bluetooth: hci7: command tx timeout [ 733.206974][T10298] bridge0: port 1(bridge_slave_0) entered blocking state [ 733.207096][T10298] bridge0: port 1(bridge_slave_0) entered disabled state [ 733.207791][T10298] bridge_slave_0: entered allmulticast mode [ 733.845822][T10298] bridge_slave_0: entered promiscuous mode [ 734.927614][T10298] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.927753][T10298] bridge0: port 2(bridge_slave_1) entered disabled state [ 734.928007][T10298] bridge_slave_1: entered allmulticast mode [ 734.930762][T10298] bridge_slave_1: entered promiscuous mode [ 745.199900][ T44] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 746.048212][ T44] usb 6-1: Using ep0 maxpacket: 32 [ 746.053763][ T44] usb 6-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 746.053791][ T44] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.053811][ T44] usb 6-1: Product: syz [ 746.053825][ T44] usb 6-1: Manufacturer: syz [ 746.053839][ T44] usb 6-1: SerialNumber: syz [ 746.060980][ T44] usb 6-1: config 0 descriptor?? [ 746.139863][ T44] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 746.735930][ T44] gspca_stk1135: reg_w 0x2 err -110 [ 746.736994][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 746.737005][ T44] gspca_stk1135: Sensor write failed [ 746.737036][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 746.737045][ T44] gspca_stk1135: Sensor write failed [ 746.737074][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 746.737083][ T44] gspca_stk1135: Sensor read failed [ 746.737112][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 746.737121][ T44] gspca_stk1135: Sensor read failed [ 746.737128][ T44] gspca_stk1135: Detected sensor type unknown (0x0) [ 746.737166][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 746.737175][ T44] gspca_stk1135: Sensor read failed [ 746.737205][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 746.737214][ T44] gspca_stk1135: Sensor read failed [ 746.737243][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 746.737252][ T44] gspca_stk1135: Sensor write failed [ 746.737281][ T44] gspca_stk1135: serial bus timeout: status=0x00 [ 746.737290][ T44] gspca_stk1135: Sensor write failed [ 746.737382][ T44] stk1135 6-1:0.0: probe with driver stk1135 failed with error -110 [ 749.391151][ T5895] usb 6-1: USB disconnect, device number 10 [ 751.191122][ T5807] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 751.203921][ T5807] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 751.205398][ T5807] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 751.206491][ T5807] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 751.207743][ T5807] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 752.210378][ T61] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 752.210425][ T61] CPU: 0 UID: 0 PID: 61 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 752.210449][ T61] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 752.210463][ T61] Workqueue: hci3 hci_rx_work [ 752.210497][ T61] Call Trace: [ 752.210509][ T61] [ 752.210519][ T61] dump_stack_lvl+0x189/0x250 [ 752.210556][ T61] ? __pfx_dump_stack_lvl+0x10/0x10 [ 752.210586][ T61] ? __pfx__printk+0x10/0x10 [ 752.210616][ T61] ? kernfs_path_from_node+0x2c/0x280 [ 752.210639][ T61] ? kernfs_path_from_node+0x243/0x280 [ 752.210659][ T61] ? kernfs_path_from_node+0x2c/0x280 [ 752.210684][ T61] sysfs_create_dir_ns+0x259/0x280 [ 752.210705][ T61] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 752.210732][ T61] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 752.210757][ T61] ? rt_spin_unlock+0x161/0x200 [ 752.210782][ T61] kobject_add_internal+0x5a5/0xb50 [ 752.210812][ T61] kobject_add+0x155/0x220 [ 752.210838][ T61] ? __pfx_kobject_add+0x10/0x10 [ 752.210866][ T61] ? get_device_parent+0x370/0x3a0 [ 752.210897][ T61] device_add+0x408/0xb50 [ 752.210926][ T61] hci_conn_add_sysfs+0xd5/0x1e0 [ 752.210948][ T61] le_conn_complete_evt+0xf39/0x1500 [ 752.210990][ T61] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 752.211020][ T61] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 752.211052][ T61] ? lockdep_hardirqs_on+0x9c/0x150 [ 752.211086][ T61] ? skb_pull_data+0xfb/0x200 [ 752.211121][ T61] hci_le_conn_complete_evt+0x187/0x450 [ 752.211157][ T61] hci_event_packet+0x78f/0x1200 [ 752.211185][ T61] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 752.211215][ T61] ? __pfx_hci_event_packet+0x10/0x10 [ 752.211248][ T61] ? hci_send_to_monitor+0xe2/0x570 [ 752.211282][ T61] hci_rx_work+0x46a/0xe80 [ 752.211315][ T61] ? process_scheduled_works+0x9ef/0x17b0 [ 752.211350][ T61] process_scheduled_works+0xae1/0x17b0 [ 752.211404][ T61] ? __pfx_process_scheduled_works+0x10/0x10 [ 752.211447][ T61] worker_thread+0x8a0/0xda0 [ 752.211499][ T61] kthread+0x711/0x8a0 [ 752.211532][ T61] ? __pfx_worker_thread+0x10/0x10 [ 752.211557][ T61] ? __pfx_kthread+0x10/0x10 [ 752.211583][ T61] ? rt_spin_unlock+0x150/0x200 [ 752.211614][ T61] ? rt_spin_unlock+0x161/0x200 [ 752.211633][ T61] ? __pfx_kthread+0x10/0x10 [ 752.211660][ T61] ret_from_fork+0x4bc/0x870 [ 752.211683][ T61] ? __pfx_ret_from_fork+0x10/0x10 [ 752.211714][ T61] ? __switch_to_asm+0x39/0x70 [ 752.211733][ T61] ? __switch_to_asm+0x33/0x70 [ 752.211749][ T61] ? __pfx_kthread+0x10/0x10 [ 752.211776][ T61] ret_from_fork_asm+0x1a/0x30 [ 752.211813][ T61] [ 752.211848][ T61] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 752.211892][ T61] Bluetooth: hci3: failed to register connection device [ 753.593817][ T61] Bluetooth: hci1: command tx timeout [ 757.010970][ T61] Bluetooth: hci1: command tx timeout [ 759.297558][ T61] Bluetooth: hci1: command tx timeout [ 761.456285][ T61] Bluetooth: hci1: command tx timeout [ 766.304544][ T5807] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 766.563546][ T5807] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 766.566706][ T5807] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 766.616774][ T5807] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 766.625967][ T5807] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 767.090678][ T5807] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 767.095592][ T5807] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 767.113293][ T5807] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 767.138044][ T5807] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 767.151215][ T5807] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 768.894472][ T5807] Bluetooth: hci4: command tx timeout [ 769.417928][ T5807] Bluetooth: hci8: command tx timeout [ 771.115073][ T5807] Bluetooth: hci4: command tx timeout [ 771.628045][ T5807] Bluetooth: hci8: command tx timeout [ 773.337645][ T5807] Bluetooth: hci4: command tx timeout [ 774.000263][ T5807] Bluetooth: hci8: command tx timeout [ 775.560198][ T5807] Bluetooth: hci4: command tx timeout [ 776.160342][ T5807] Bluetooth: hci8: command tx timeout [ 776.874028][ T61] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 776.903144][ T61] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 776.905815][ T61] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 777.164827][ T61] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 777.370189][ T61] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 779.577603][ T5807] Bluetooth: hci9: command tx timeout [ 782.142737][ T5807] Bluetooth: hci9: command tx timeout [ 782.473290][ T5807] Bluetooth: hci5: command 0x0406 tx timeout [ 784.364451][ T5807] Bluetooth: hci9: command tx timeout [ 785.297086][T10391] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 785.319855][T10391] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 785.321382][T10391] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 785.322810][T10391] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 785.353932][T10391] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 785.480408][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 785.480502][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 786.687879][ T61] Bluetooth: hci9: command tx timeout [ 787.702502][ T61] Bluetooth: hci10: command tx timeout [ 790.198266][ T61] Bluetooth: hci10: command tx timeout [ 792.619732][ T61] Bluetooth: hci10: command tx timeout [ 794.793181][ T61] Bluetooth: hci10: command tx timeout [ 797.621181][ C0] sched: DL replenish lagged too much [ 812.835061][T10391] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 812.968053][T10391] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 812.971055][T10391] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 812.972336][T10391] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 812.973281][T10391] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 815.224292][T10391] Bluetooth: hci11: command tx timeout [ 817.444728][T10391] Bluetooth: hci11: command tx timeout [ 819.667285][T10391] Bluetooth: hci11: command tx timeout [ 821.889689][T10391] Bluetooth: hci11: command tx timeout [ 829.768784][T10381] bridge_slave_0: left allmulticast mode [ 829.768819][T10381] bridge_slave_0: left promiscuous mode [ 829.769071][T10381] bridge0: port 1(bridge_slave_0) entered disabled state [ 832.771005][T10381] bridge_slave_1: left allmulticast mode [ 832.771034][T10381] bridge_slave_1: left promiscuous mode [ 832.771266][T10381] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.458345][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 835.473756][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 835.475232][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 835.494313][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 835.497960][T10411] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 835.575737][T10381] bond0: (slave bond_slave_0): Releasing backup interface [ 835.599679][T10391] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 835.814425][T10391] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 835.823867][T10391] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 835.845594][T10411] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 835.846473][T10411] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 837.159660][T10381] bond0: (slave bond_slave_1): Releasing backup interface [ 838.113819][T10411] Bluetooth: hci7: command tx timeout [ 838.114584][T10411] Bluetooth: hci0: command tx timeout [ 840.304472][T10411] Bluetooth: hci0: command tx timeout [ 840.304482][T10391] Bluetooth: hci7: command tx timeout [ 840.518583][T10381] team0: Port device team_slave_0 removed [ 842.442301][T10411] Bluetooth: hci2: command 0x0406 tx timeout [ 842.461225][T10381] team0: Port device team_slave_1 removed [ 842.490116][T10411] Bluetooth: hci7: command tx timeout [ 842.688196][T10391] Bluetooth: hci0: command tx timeout [ 842.722196][T10381] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 842.722227][T10381] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 844.078079][T10381] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 844.078108][T10381] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 844.883752][T10411] Bluetooth: hci7: command tx timeout [ 844.883785][T10411] Bluetooth: hci0: command tx timeout [ 845.570869][T10381] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 845.739533][T10382] team0: Mode changed to "loadbalance" [ 846.615880][T10411] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 846.645836][T10411] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 846.654941][T10411] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 846.671264][T10411] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 846.673132][T10411] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 847.886063][T10411] Bluetooth: hci6: command 0x0406 tx timeout [ 848.941603][T10411] Bluetooth: hci1: command tx timeout [ 851.159345][T10411] Bluetooth: hci1: command tx timeout [ 851.163472][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 851.163544][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 853.346283][T10391] Bluetooth: hci1: command tx timeout [ 855.132060][T10411] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 855.135446][T10411] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 855.137352][T10411] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 855.138515][T10411] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 855.140862][T10411] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 855.568664][T10411] Bluetooth: hci1: command tx timeout [ 865.997180][T10411] Bluetooth: hci12: command tx timeout [ 868.561323][T10411] Bluetooth: hci12: command tx timeout [ 870.976297][T10411] Bluetooth: hci12: command tx timeout [ 873.177548][T10411] Bluetooth: hci12: command tx timeout [ 874.876084][T10409] lo speed is unknown, defaulting to 1000 [ 875.763203][T10408] lo speed is unknown, defaulting to 1000 [ 877.754158][T10415] lo speed is unknown, defaulting to 1000 [ 878.048431][T10417] lo speed is unknown, defaulting to 1000 [ 880.869742][T10391] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 880.891963][T10391] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 880.893494][T10391] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 880.894662][T10391] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 880.895747][T10391] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 883.096524][T10391] Bluetooth: hci3: command tx timeout [ 885.326392][T10391] Bluetooth: hci3: command tx timeout [ 886.417715][T10426] lo speed is unknown, defaulting to 1000 [ 887.537722][T10411] Bluetooth: hci3: command tx timeout [ 889.418525][ T38] INFO: task syz.1.1230:10319 blocked for more than 143 seconds. [ 889.418550][ T38] Not tainted syzkaller #0 [ 889.418560][ T38] Blocked by coredump. [ 889.418566][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 889.418574][ T38] task:syz.1.1230 state:D stack:20616 pid:10319 tgid:10316 ppid:5815 task_flags:0x40044c flags:0x00080003 [ 889.418629][ T38] Call Trace: [ 889.418636][ T38] [ 889.418650][ T38] __schedule+0x16f3/0x4c20 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 889.418708][ T38] ? __pfx___schedule+0x10/0x10 [ 889.418751][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 889.418780][ T38] rt_mutex_schedule+0x77/0xf0 [ 889.418799][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 889.418820][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 889.418861][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 889.418884][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 889.418906][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 889.418925][ T38] ? __lock_acquire+0xab9/0xd20 [ 889.418960][ T38] ? rcu_barrier+0x4c/0x570 [ 889.418993][ T38] ? rcu_barrier+0x4c/0x570 [ 889.419009][ T38] mutex_lock_nested+0x16a/0x1d0 [ 889.419029][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 889.419055][ T38] rcu_barrier+0x4c/0x570 [ 889.419085][ T38] netdev_run_todo+0x327/0xea0 [ 889.419112][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 889.419140][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 889.419161][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 889.419197][ T38] ? netdev_state_change+0x1ca/0x220 [ 889.419225][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 889.419249][ T38] tun_chr_close+0x13f/0x1c0 [ 889.419272][ T38] __fput+0x45b/0xa80 [ 889.419304][ T38] task_work_run+0x1d4/0x260 [ 889.419326][ T38] ? __pfx_task_work_run+0x10/0x10 [ 889.419344][ T38] ? do_exit+0x6b0/0x2300 [ 889.419369][ T38] ? do_exit+0x6b0/0x2300 [ 889.419399][ T38] do_exit+0x6b5/0x2300 [ 889.419423][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 889.419461][ T38] ? __pfx_do_exit+0x10/0x10 [ 889.419483][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 889.419503][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 889.419539][ T38] do_group_exit+0x21c/0x2d0 [ 889.419556][ T38] ? rt_spin_unlock+0x161/0x200 [ 889.419581][ T38] get_signal+0x125d/0x1310 [ 889.419626][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 889.419647][ T38] ? __fget_files+0x3a6/0x420 [ 889.419672][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 889.419711][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 889.419738][ T38] exit_to_user_mode_loop+0x72/0x130 [ 889.419762][ T38] do_syscall_64+0x2bd/0xfa0 [ 889.419786][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 889.419809][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.419828][ T38] ? clear_bhb_loop+0x60/0xb0 [ 889.419850][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.419868][ T38] RIP: 0033:0x7fe08fcef749 [ 889.419898][ T38] RSP: 002b:00007fe08df4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 889.419917][ T38] RAX: fffffffffffffe00 RBX: 00007fe08ff45fa0 RCX: 00007fe08fcef749 [ 889.419931][ T38] RDX: 0000000000000001 RSI: 00002000000005c0 RDI: 0000000000000003 [ 889.419943][ T38] RBP: 00007fe08fd73f91 R08: 0000000000000000 R09: 0000000000000000 [ 889.419955][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 889.419965][ T38] R13: 00007fe08ff46038 R14: 00007fe08ff45fa0 R15: 00007fffe2b8ba48 [ 889.419998][ T38] [ 889.420006][ T38] INFO: task syz.6.1241:10317 blocked for more than 143 seconds. [ 889.420019][ T38] Not tainted syzkaller #0 [ 889.420028][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 889.420037][ T38] task:syz.6.1241 state:D stack:25160 pid:10317 tgid:10317 ppid:8221 task_flags:0x400040 flags:0x00080002 [ 889.420086][ T38] Call Trace: [ 889.420092][ T38] [ 889.420104][ T38] __schedule+0x16f3/0x4c20 [ 889.420152][ T38] ? __lock_acquire+0xab9/0xd20 [ 889.420176][ T38] ? __pfx___schedule+0x10/0x10 [ 889.420223][ T38] ? schedule+0x91/0x360 [ 889.420251][ T38] schedule+0x165/0x360 [ 889.420276][ T38] schedule_timeout+0x9a/0x270 [ 889.420299][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 889.420337][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 889.420360][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 889.420382][ T38] ? wait_for_completion+0x267/0x5d0 [ 889.420409][ T38] wait_for_completion+0x2bf/0x5d0 [ 889.420447][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 889.420479][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 889.420506][ T38] rcu_barrier+0x463/0x570 [ 889.420536][ T38] kvm_mmu_uninit_vm+0x53/0x90 [ 889.420563][ T38] kvm_arch_destroy_vm+0x23d/0x280 [ 889.420590][ T38] kvm_put_kvm+0x6ca/0xa80 [ 889.420623][ T38] ? __pfx_kvm_vm_release+0x10/0x10 [ 889.420646][ T38] kvm_vm_release+0x46/0x50 [ 889.420668][ T38] __fput+0x45b/0xa80 [ 889.420698][ T38] task_work_run+0x1d4/0x260 [ 889.420719][ T38] ? __pfx_task_work_run+0x10/0x10 [ 889.420742][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 889.420769][ T38] exit_to_user_mode_loop+0xe9/0x130 [ 889.420798][ T38] do_syscall_64+0x2bd/0xfa0 [ 889.420821][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 889.420845][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.420863][ T38] ? clear_bhb_loop+0x60/0xb0 [ 889.420885][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 889.420902][ T38] RIP: 0033:0x7fd81cb0f749 [ 889.420917][ T38] RSP: 002b:00007ffe977faee8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 889.420935][ T38] RAX: 0000000000000000 RBX: 00007fd81cd67da0 RCX: 00007fd81cb0f749 [ 889.420948][ T38] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 889.420959][ T38] RBP: 00007fd81cd67da0 R08: 0000000000000094 R09: 00000007977fb1df [ 889.420971][ T38] R10: 00000000003ffd48 R11: 0000000000000246 R12: 00000000000a24af [ 889.420983][ T38] R13: 00007ffe977fafe0 R14: ffffffffffffffff R15: 00007ffe977fb000 [ 889.421016][ T38] [ 889.421043][ T38] [ 889.421043][ T38] Showing all locks held in the system: [ 889.421056][ T38] 6 locks held by kworker/u8:1/13: [ 889.421067][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 889.421122][ T38] #1: ffffc90000127ba0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 889.421168][ T38] #2: ffff88805aeab300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 889.421222][ T38] #3: ffff88805addf520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 889.421269][ T38] #4: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 889.421312][ T38] #5: ffff88813ff25d58 (&n->list_lock){+.+.}-{3:3}, at: get_partial_node+0x44/0x420 [ 889.421356][ T38] 3 locks held by ksoftirqd/1/30: [ 889.421368][ T38] 1 lock held by khungtaskd/38: [ 889.421378][ T38] #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 889.421422][ T38] 6 locks held by kworker/u8:2/43: [ 889.421433][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 889.421482][ T38] #1: ffffc90000b47ba0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 889.421528][ T38] #2: ffff8880556be300 (&devlink->lock_key#7){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 889.421579][ T38] #3: ffff888035deb920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 889.421626][ T38] #4: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 889.421668][ T38] #5: ffff88813ff25d58 (&n->list_lock){+.+.}-{3:3}, at: get_partial_node+0x44/0x420 [ 889.421712][ T38] 6 locks held by kworker/u8:4/68: [ 889.421723][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 889.421772][ T38] #1: ffffc9000153fba0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 889.421818][ T38] #2: ffff888039a1d300 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 889.421869][ T38] #3: ffff88805b96b920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 889.421916][ T38] #4: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 889.421959][ T38] #5: ffff88813ff25d58 (&n->list_lock){+.+.}-{3:3}, at: get_partial_node+0x44/0x420 [ 889.422007][ T38] 3 locks held by kworker/u8:5/1055: [ 889.422018][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 889.422066][ T38] #1: ffffc90004b2fba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 889.422111][ T38] #2: ffffffff8e863978 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 889.422160][ T38] 6 locks held by kworker/u8:9/1443: [ 889.422170][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 889.422224][ T38] #1: ffffc9000592fba0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 889.422270][ T38] #2: ffff8880365bd300 (&devlink->lock_key#4){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 889.422321][ T38] #3: ffff888035df4120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 889.422368][ T38] #4: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 889.422411][ T38] #5: ffff88813ff25d58 (&n->list_lock){+.+.}-{3:3}, at: get_partial_node+0x44/0x420 [ 889.422453][ T38] 7 locks held by kworker/u8:12/1524: [ 889.422464][ T38] 6 locks held by kworker/u8:14/1596: [ 889.422475][ T38] 6 locks held by kworker/u8:16/1631: [ 889.422484][ T38] #0: ffff88813ff69938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 889.422534][ T38] #1: ffffc9000612fba0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 889.422580][ T38] #2: ffff88805b217300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 889.422632][ T38] #3: ffff88805c606d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 889.422679][ T38] #4: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1c1/0x3e0 [ 889.422721][ T38] #5: ffff88813ff25d58 (&n->list_lock){+.+.}-{3:3}, at: get_partial_node+0x44/0x420 [ 889.422763][ T38] 3 locks held by kworker/u8:19/1725: [ 889.422774][ T38] #0: ffff88802f933138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 889.422819][ T38] #1: ffffc9000641fba0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 889.422863][ T38] #2: ffffffff8e863978 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x119/0x15a0 [ 889.422918][ T38] 2 locks held by getty/5568: [ 889.422928][ T38] #0: ffff88823bf2a8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 889.422973][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 889.423022][ T38] 1 lock held by syz-executor/5809: [ 889.423033][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 889.423079][ T38] 3 locks held by kworker/1:6/5916: [ 889.423089][ T38] #0: ffff88813ff55138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 889.423134][ T38] #1: ffffc90004fafba0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 889.423179][ T38] #2: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 889.423228][ T38] 4 locks held by kworker/u8:8/7826: [ 889.423243][ T38] 4 locks held by kworker/0:1/8706: [ 889.423253][ T38] 1 lock held by syz.4.1233/10293: [ 889.423264][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 889.423305][ T38] 1 lock held by syz-executor/10298: [ 889.423316][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 889.423358][ T38] 1 lock held by syz.1.1230/10319: [ 889.423368][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 889.423410][ T38] 1 lock held by syz.6.1241/10317: [ 889.423420][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 889.423462][ T38] 2 locks held by syz-executor/10338: [ 889.423473][ T38] #0: ffffffff8e856a80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 889.423513][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 889.423555][ T38] 2 locks held by syz-executor/10342: [ 889.423566][ T38] #0: ffffffff8e856a80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 889.423605][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 889.423647][ T38] 1 lock held by syz.5.1256/10382: [ 889.423657][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 889.423700][ T38] 2 locks held by syz-executor/10404: [ 889.423710][ T38] #0: ffffffff8e856a80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 889.423750][ T38] #1: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 889.423792][ T38] 2 locks held by syz-executor/10408: [ 889.423802][ T38] #0: ffffffff8ed65f80 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 889.423849][ T38] #1: ffffffff8e863978 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 889.423890][ T38] 3 locks held by syz-executor/10409: [ 889.423900][ T38] #0: ffffffff8ed65f80 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 889.423946][ T38] #1: ffffffff8e863978 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 889.423986][ T38] #2: ffff88813ff25d58 (&n->list_lock){+.+.}-{3:3}, at: get_partial_node+0x44/0x420 [ 889.424027][ T38] 1 lock held by syz-executor/10415: [ 889.424038][ T38] #0: ffffffff8e863978 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 889.424078][ T38] 2 locks held by syz-executor/10417: [ 889.424089][ T38] #0: ffffffff8ed7fb28 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 889.424135][ T38] #1: ffffffff8e863978 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 889.424175][ T38] 2 locks held by syz-executor/10426: [ 889.424186][ T38] #0: ffffffff8e856a80 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 889.424231][ T38] #1: ffffffff8e863978 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 889.424274][ T38] [ 889.424279][ T38] ============================================= [ 889.424279][ T38] [ 889.424289][ T38] NMI backtrace for cpu 1 [ 889.424308][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 889.424338][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 889.424348][ T38] Call Trace: [ 889.424355][ T38] [ 889.424362][ T38] dump_stack_lvl+0x189/0x250 [ 889.424391][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 889.424416][ T38] ? __pfx__printk+0x10/0x10 [ 889.424450][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 889.424473][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 889.424497][ T38] ? __pfx__printk+0x10/0x10 [ 889.424522][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 889.424544][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 889.424567][ T38] watchdog+0xf60/0xfa0 [ 889.424596][ T38] ? watchdog+0x1e2/0xfa0 [ 889.424625][ T38] kthread+0x711/0x8a0 [ 889.424652][ T38] ? __pfx_watchdog+0x10/0x10 [ 889.424675][ T38] ? __pfx_kthread+0x10/0x10 [ 889.424696][ T38] ? rt_spin_unlock+0x150/0x200 [ 889.424720][ T38] ? rt_spin_unlock+0x161/0x200 [ 889.424738][ T38] ? __pfx_kthread+0x10/0x10 [ 889.424762][ T38] ret_from_fork+0x4bc/0x870 [ 889.424786][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 889.424814][ T38] ? __switch_to_asm+0x39/0x70 [ 889.424830][ T38] ? __switch_to_asm+0x33/0x70 [ 889.424846][ T38] ? __pfx_kthread+0x10/0x10 [ 889.424869][ T38] ret_from_fork_asm+0x1a/0x30 [ 889.424904][ T38] [ 889.424911][ T38] Sending NMI from CPU 1 to CPUs 0: [ 889.424937][ C0] NMI backtrace for cpu 0 [ 889.424951][ C0] CPU: 0 UID: 0 PID: 1596 Comm: kworker/u8:14 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 889.424975][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 889.424985][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 889.425007][ C0] RIP: 0010:__this_cpu_preempt_check+0xe/0x20 [ 889.425023][ C0] Code: 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 fe 48 c7 c7 e0 df 3d 8b bd fe ff ff cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 [ 889.425037][ C0] RSP: 0018:ffffc90005e6deb8 EFLAGS: 00000046 [ 889.425050][ C0] RAX: 0000000000000008 RBX: ffff8880279e9e00 RCX: ffffffff924b9518 [ 889.425062][ C0] RDX: 0000000000000002 RSI: ffffffff8cf656a0 RDI: ffffffff8b3ddfe0 [ 889.425073][ C0] RBP: ffffc90005e6df90 R08: ffffffff8ed64277 R09: 1ffffffff1dac84e [ 889.425085][ C0] R10: dffffc0000000000 R11: fffffbfff1dac84f R12: ffff8880279eaaa0 [ 889.425096][ C0] R13: 0000000000000a02 R14: ffff8880279ea960 R15: 0000000000000008 [ 889.425107][ C0] FS: 0000000000000000(0000) GS:ffff888126df6000(0000) knlGS:0000000000000000 [ 889.425120][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 889.425131][ C0] CR2: 00007f19dcb1652c CR3: 00000000233b0000 CR4: 00000000003526f0 [ 889.425146][ C0] Call Trace: [ 889.425151][ C0] [ 889.425157][ C0] lockdep_hardirqs_on_prepare+0x1b4/0x2a0 [ 889.425178][ C0] trace_hardirqs_on+0x28/0x40 [ 889.425198][ C0] _raw_spin_unlock_irqrestore+0x85/0x110 [ 889.425219][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 889.425244][ C0] rt_spin_lock+0x16d/0x3e0 [ 889.425261][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 889.425279][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 889.425300][ C0] ___slab_alloc+0x12f/0x1400 [ 889.425314][ C0] ? kasan_save_track+0x4f/0x80 [ 889.425331][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 889.425349][ C0] ? dst_alloc+0x105/0x170 [ 889.425365][ C0] ? ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 889.425385][ C0] ? ip_route_output_key_hash+0x174/0x280 [ 889.425403][ C0] ? ip_route_output_flow+0x2a/0x150 [ 889.425419][ C0] ? ref_tracker_alloc+0x13b/0x450 [ 889.425439][ C0] ? nft_synproxy_eval_v4+0x36e/0x560 [ 889.425461][ C0] __slab_alloc+0xc6/0x1f0 [ 889.425474][ C0] ? ref_tracker_alloc+0x13b/0x450 [ 889.425494][ C0] __kmalloc_cache_noprof+0xec/0x6c0 [ 889.425512][ C0] ? ret_from_fork+0x4bc/0x870 [ 889.425527][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 889.425541][ C0] ? ref_tracker_alloc+0x13b/0x450 [ 889.425562][ C0] ref_tracker_alloc+0x13b/0x450 [ 889.425582][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 889.425606][ C0] ? dst_alloc+0x105/0x170 [ 889.425623][ C0] ? rcu_is_watching+0x15/0xb0 [ 889.425639][ C0] dst_init+0xd9/0x450 [ 889.425657][ C0] dst_alloc+0x12a/0x170 [ 889.425683][ C0] ip_route_output_key_hash_rcu+0x1560/0x23e0 [ 889.425706][ C0] ? ip_route_output_key_hash+0xc1/0x280 [ 889.425725][ C0] ip_route_output_key_hash+0x174/0x280 [ 889.425743][ C0] ? __lock_acquire+0xab9/0xd20 [ 889.425761][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 889.425787][ C0] ip_route_output_flow+0x2a/0x150 [ 889.425803][ C0] ? ip_route_me_harder+0x6ae/0xf10 [ 889.425825][ C0] ip_route_me_harder+0x6c4/0xf10 [ 889.425849][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 889.425875][ C0] ? rcu_is_watching+0x15/0xb0 [ 889.425893][ C0] synproxy_send_tcp+0x3a7/0x700 [ 889.425916][ C0] synproxy_send_client_synack+0x8bb/0xe20 [ 889.425939][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 889.425956][ C0] ? nft_jhash_dump+0xf8/0x400 [ 889.425978][ C0] ? synproxy_pernet+0x45/0x270 [ 889.426000][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 889.426022][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 889.426043][ C0] ? nf_ip_checksum+0x13c/0x510 [ 889.426064][ C0] nft_synproxy_do_eval+0x345/0x570 [ 889.426086][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 889.426106][ C0] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 889.426130][ C0] nft_do_chain+0x40c/0x1920 [ 889.426155][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 889.426185][ C0] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 889.426201][ C0] nft_do_chain_inet+0x25d/0x340 [ 889.426222][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 889.426246][ C0] ? NF_HOOK+0x9a/0x3a0 [ 889.426261][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 889.426280][ C0] nf_hook_slow+0xc5/0x220 [ 889.426298][ C0] NF_HOOK+0x206/0x3a0 [ 889.426313][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 889.426329][ C0] ? NF_HOOK+0x9a/0x3a0 [ 889.426342][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 889.426356][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 889.426372][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 889.426388][ C0] ? skb_dst+0x4f/0xd0 [ 889.426402][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 889.426418][ C0] NF_HOOK+0x30c/0x3a0 [ 889.426433][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 889.426447][ C0] ? NF_HOOK+0x9a/0x3a0 [ 889.426461][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 889.426477][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 889.426496][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 889.426509][ C0] __netif_receive_skb+0x143/0x380 [ 889.426532][ C0] ? process_backlog+0x27b/0x900 [ 889.426546][ C0] process_backlog+0x31e/0x900 [ 889.426565][ C0] __napi_poll+0xb6/0x540 [ 889.426587][ C0] net_rx_action+0x5f7/0xda0 [ 889.426607][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 889.426623][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 889.426645][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 889.426666][ C0] handle_softirqs+0x22f/0x710 [ 889.426687][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 889.426708][ C0] __local_bh_enable_ip+0x1a0/0x2e0 [ 889.426725][ C0] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 889.426743][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 889.426760][ C0] ? rt_spin_unlock+0x150/0x200 [ 889.426778][ C0] ? rt_spin_unlock+0x161/0x200 [ 889.426795][ C0] ? cfg80211_put_bss+0x20e/0x270 [ 889.426812][ C0] ? cfg80211_put_bss+0x45/0x270 [ 889.426829][ C0] ieee80211_ibss_rx_queued_mgmt+0x11fd/0x2af0 [ 889.426847][ C0] ? __lock_acquire+0xab9/0xd20 [ 889.426868][ C0] ? do_raw_spin_lock+0x121/0x290 [ 889.426887][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xfab/0x2af0 [ 889.426905][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 889.426922][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 889.426942][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 889.426966][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 889.426986][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 889.427011][ C0] ? rt_mutex_slowunlock+0x493/0x8a0 [ 889.427039][ C0] ieee80211_iface_work+0x85f/0x12d0 [ 889.427061][ C0] cfg80211_wiphy_work+0x2bb/0x470 [ 889.427081][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 889.427099][ C0] process_scheduled_works+0xae1/0x17b0 [ 889.427127][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 889.427151][ C0] worker_thread+0x8a0/0xda0 [ 889.427179][ C0] kthread+0x711/0x8a0 [ 889.427199][ C0] ? __pfx_worker_thread+0x10/0x10 [ 889.427216][ C0] ? __pfx_kthread+0x10/0x10 [ 889.427234][ C0] ? rt_spin_unlock+0x150/0x200 [ 889.427253][ C0] ? rt_spin_unlock+0x161/0x200 [ 889.427268][ C0] ? __pfx_kthread+0x10/0x10 [ 889.427288][ C0] ret_from_fork+0x4bc/0x870 [ 889.427305][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 889.427325][ C0] ? __switch_to_asm+0x39/0x70 [ 889.427339][ C0] ? __switch_to_asm+0x33/0x70 [ 889.427352][ C0] ? __pfx_kthread+0x10/0x10 [ 889.427372][ C0] ret_from_fork_asm+0x1a/0x30 [ 889.427393][ C0] [ 889.760262][T10411] Bluetooth: hci3: command tx timeout