last executing test programs: 10m43.693362499s ago: executing program 2 (id=11): syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x19, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x6, &(0x7f0000000000)=0x9, 0x4) sched_setscheduler(0x0, 0x6, &(0x7f00000000c0)=0x2) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) r4 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r4, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r5 = socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={r4, r3}) close(r5) 10m42.159442856s ago: executing program 2 (id=12): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_xt={0x8c, 0xe, 0x0, 0x0, {{0x7}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8, 0x3, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x40}, @TCA_IPT_HOOK={0x8, 0x2, 0x1}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x29, 0x6, "d15b28dcc504109a4ea8e09a427f2101d317300efe289c4d8c8e8dcb0ab3c3510da419194b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000340)='s\xfb\t\x97ou\x8cI4\xa4\xff\x9c\xefL\xd4\xd4\x14)\xe0\xf2\x12Afxq9\x93\xdby\xceQU\xec\xebf\xa4Sv\xf8\xbd\x12\xf4\xe1\xfa\xf4\xb6\x1c\x05\x9c\xa9\xe6?\x1e0\xaf\xfe\xe5\xe2P`\x12\xcc\x94f', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) tkill(0x0, 0xb) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2000001a21428c6c08586dd61bcc1d7008c292a5b01000000000000000000000000000000000000000000000000000000000001"], 0x0) 10m35.868629045s ago: executing program 4 (id=15): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = semget$private(0x0, 0x2, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x40) syz_emit_ethernet(0x23, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @broadcast}, "dd"}}}}, 0x0) semctl$SETALL(r4, 0x0, 0x11, 0x0) io_setup(0x1, &(0x7f00000004c0)) openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0) shmat(0x0, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffcfff) mount(0x0, 0x0, &(0x7f0000000080)='squashfs\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) 10m35.811204918s ago: executing program 2 (id=16): ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x40247007, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x58, 0x0, 0x2, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_EXPECT_MASK={0x24, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x35}}, {0x8, 0x2, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @private=0xa010101}}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000054}, 0x4810) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x2, 0x3, 0xff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="08001c1fdbea8ca17b018bde00002800000000000000000000000000000049cb", 0x20}], 0x1}}], 0x1, 0x4800) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_FDB={0x4}]}, 0x1c}}, 0x0) 10m33.281376518s ago: executing program 2 (id=18): memfd_create(0x0, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x5d) execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) connect$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0x7, 0x4, 0x100, 0x3, 0x20}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x9, &(0x7f0000000180)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x1b}}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='tlb_flush\x00', r5}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r6) 10m30.358277414s ago: executing program 2 (id=21): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x193}, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) openat$dlm_plock(0xffffff9c, 0x0, 0x101400, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r4 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd', @ANYRESHEX, @ANYBLOB=',wfdno', @ANYRESHEX=r4]) read$FUSE(r4, &(0x7f00000024c0)={0x2020}, 0x2020) syz_fuse_handle_req(r4, &(0x7f0000000440)="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", 0x2000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 10m30.353600393s ago: executing program 4 (id=22): syz_open_dev$evdev(0x0, 0x0, 0x2002) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/14], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x3, 0xd, &(0x7f00000003c0)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = open(0x0, 0x0, 0x0) sync_file_range(r0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2a) eventfd(0x80200003) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) write$6lowpan_control(0xffffffffffffffff, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)=ANY=[@ANYBLOB="380000001214010027bd7000fddbdf250a00010002000000080015000000000008004f00000000000800"], 0x38}, 0x1, 0x0, 0x0, 0x40084}, 0x810) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x48, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x2}) r3 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$sysctl(r3, 0x0, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) 10m25.637931771s ago: executing program 2 (id=27): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000200)={0x87, 0x14, 0x40000}, 0xfffffd35) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x48212b8952c3aff5, 0x70bd24, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) fsopen(&(0x7f0000000280)='binfmt_misc\x00', 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000100)=0x10cd, 0x4) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x36) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 10m25.372828588s ago: executing program 4 (id=29): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x1043, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x80000011}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) r4 = socket(0x23, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) close_range(r4, r5, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0xebff0000) 10m19.537128668s ago: executing program 4 (id=34): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000070000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r6, 0x111, 0x3, 0x0, &(0x7f0000000080)) 10m17.96289227s ago: executing program 4 (id=36): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x8840) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000001a40)=""/102392, 0x18ff8) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00'}) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) lseek(r1, 0x5, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x6, [@enum={0x5, 0x1, 0x0, 0x6, 0x4, [{0x1000000, 0x10001}]}]}, {0x0, [0x5f, 0x0, 0x2e, 0x2e]}}, 0x0, 0x32, 0x0, 0x1, 0x1}, 0x28) r4 = syz_open_dev$dri(0x0, 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r4, 0xc05064a7, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000440)={0xffffffffffffffff, 0x2000, {0x0, 0x0, 0x0, 0x40008, 0x0, 0x13, 0x0, 0xe, 0x1c, "339f020bbe78b39843d601010000000000080d0ec0c1b4e9b1c4369d03741250ceaac50104000041dd17c18e8438ef2a565ef1e833236500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "e7431ae0778a8e17e2000000000000ffff0000000000000000000000000500", [0x1f00000000000000, 0x2]}}) ioctl$LOOP_GET_STATUS(r5, 0x4c03, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)) 10m13.578527635s ago: executing program 4 (id=39): socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x600540, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) inotify_init() ioctl$FBIOBLANK(r4, 0x4611, 0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) quotactl_fd$Q_GETFMT(r4, 0xffffffff80000402, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) ioprio_set$pid(0x3, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x20, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x0) ioprio_get$uid(0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r5, &(0x7f0000001600)=""/4103, 0x1007, 0x97) 10m9.639691077s ago: executing program 32 (id=27): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020}, 0x2020) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) mount_setattr(0xffffffffffffffff, 0x0, 0x100, &(0x7f0000000200)={0x87, 0x14, 0x40000}, 0xfffffd35) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r4, 0x48212b8952c3aff5, 0x70bd24, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x700) fsopen(&(0x7f0000000280)='binfmt_misc\x00', 0x1) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x3f, &(0x7f0000000100)=0x10cd, 0x4) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20c01, 0x36) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 9m57.865543603s ago: executing program 33 (id=39): socket$nl_route(0x10, 0x3, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x600540, 0x0) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x8001, 0x0, 0x9, 0x4, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0), 0x101800, 0x0) inotify_init() ioctl$FBIOBLANK(r4, 0x4611, 0x3) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) quotactl_fd$Q_GETFMT(r4, 0xffffffff80000402, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, 0x0) ioctl$IOMMU_HWPT_SET_DIRTY_TRACKING(r3, 0x3b8b, &(0x7f0000000040)={0x10, 0x1}) ioprio_set$pid(0x3, 0x0, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x20, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x0) ioprio_get$uid(0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xff00) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_flowlabel\x00') pread64(r5, &(0x7f0000001600)=""/4103, 0x1007, 0x97) 4m0.982469123s ago: executing program 3 (id=1224): r0 = socket(0x10, 0x803, 0x0) setresuid(0xee01, 0xee00, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000180)={0x3, 'vlan1\x00', {0x8}, 0x61c3}) 4m0.747347634s ago: executing program 3 (id=1227): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x80000006, @dev={0xfe, 0x80, '\x00', 0x3e}, 0xefce}, 0x1c) 4m0.511723266s ago: executing program 3 (id=1231): pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) unshare(0x40600) fallocate(r0, 0x21, 0x0, 0x2) 4m0.425468371s ago: executing program 3 (id=1232): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000), &(0x7f0000000140)=0x4) 3m59.642031505s ago: executing program 3 (id=1235): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) 3m59.392230989s ago: executing program 3 (id=1238): memfd_create(&(0x7f0000000680)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5Zy\xc2\x964\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xeb\v\xf8r\x10 >p\x95=N\xbepd\x99\xf9\x86k\xdf\xc7w\xff\x8f\x98\xd8\xe0C\xb2-[}\xb6\x88E5\xa0\xf9\x9f@I;\fn\xed\'\xe2\xf0\xe7_\xfa\x91\xba\x81\xbb\xda\xde\\\x98#g\xd1\xbb2\xd1WI\f\x9e\t\xe8\x1c{\xcd\x905\f=\xfe\'\x1ax\x91\xb7sB\xecN\x8e\x97$75\x16\xaaJ\x1e\'P\x12_D\xa2\x19dC(\xb4\xb8\x87]\x91\xefggP\x7f\xc4\a\xff\xcc\x19\x15\xae8m;nH\x9c\xda\x95\xf6\xe8F\x99\x99\x92M\xd0\xe5:\xcb\x19\xb4\xd2\xc5V\x8f\x8a\x1f\xe6\xc0\xfb$\xe9d\xe3\v[Y\x9e\xb9\xefY\xc7\"\x17\xc1|\xc3\xfe\xae\xf2\x12v\xc1\x01\xbc\xef0\xe4\x97\xcfa\xff]\xcdA\x84G\xab\xf5\x00\xe4\xac\x1b\x98\x95\xcd\f\xdc\xe6[\xd8\x16\bx\xad\xfeW8\xb4M\x9b\x96\'\xf8\x8f$\x94\xd14n/\xf1\xf2]\xb9\xfa?\x91\x0e\x1d\x83\xce\xff\x830\x88S\xba\xb9]\x967\xec\xaal+\xd9mbUJ\xe2Jw\f6\x8b\x94P8\x1b\xa8\xb5s\x82\x16\xe5~\xc1\xb6\xdf \x17\xd8\xa8CyL>\xd5q\xb7\xff-\xabj\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0\xeb\v\xf8r\x10 >p\x95=N\xbepd\x99\xf9\x86k\xdf\xc7w\xff\x8f\x98\xd8\xe0C\xb2-[}\xb6\x88E5\xa0\xf9\x9f@I;\fn\xed\'\xe2\xf0\xe7_\xfa\x91\xba\x81\xbb\xda\xde\\\x98#g\xd1\xbb2\xd1WI\f\x9e\t\xe8\x1c{\xcd\x905\f=\xfe\'\x1ax\x91\xb7sB\xecN\x8e\x97$75\x16\xaaJ\x1e\'P\x12_D\xa2\x19dC(\xb4\xb8\x87]\x91\xefggP\x7f\xc4\a\xff\xcc\x19\x15\xae8m;nH\x9c\xda\x95\xf6\xe8F\x99\x99\x92M\xd0\xe5:\xcb\x19\xb4\xd2\xc5V\x8f\x8a\x1f\xe6\xc0\xfb$\xe9d\xe3\v[Y\x9e\xb9\xefY\xc7\"\x17\xc1|\xc3\xfe\xae\xf2\x12v\xc1\x01\xbc\xef0\xe4\x97\xcfa\xff]\xcdA\x84G\xab\xf5\x00\xe4\xac\x1b\x98\x95\xcd\f\xdc\xe6[\xd8\x16\bx\xad\xfeW8\xb4M\x9b\x96\'\xf8\x8f$\x94\xd14n/\xf1\xf2]\xb9\xfa?\x91\x0e\x1d\x83\xce\xff\x830\x88S\xba\xb9]\x967\xec\xaal+\xd9mbUJ\xe2Jw\f6\x8b\x94P8\x1b\xa8\xb5s\x82\x16\xe5~\xc1\xb6\xdf \x17\xd8\xa8CyL>\xd5q\xb7\xff-\xabj0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="c752", 0x2}], 0x1}, 0x24048811) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000001280), 0x4) readv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/77, 0x4d}], 0x1) 1m20.516409355s ago: executing program 6 (id=2659): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000540)=@ethtool_link_settings={0x4d, 0x0, 0xf, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x3]}}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480b0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1m18.142821414s ago: executing program 6 (id=2667): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xae) 1m13.25543304s ago: executing program 7 (id=2681): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x0, 0x4, 0x0, 0x9}, 'syz0\x00', 0x20}) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, 0x0) 1m11.823385188s ago: executing program 7 (id=2689): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001980), 0x200) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000040), 0x800048, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 1m11.651143603s ago: executing program 7 (id=2690): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000001080)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4c22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8004}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x8002}, 0x90) 1m11.421735158s ago: executing program 7 (id=2691): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x7c}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) 1m10.751505046s ago: executing program 7 (id=2693): r0 = io_uring_setup(0x343b, &(0x7f00000003c0)={0x0, 0xed45, 0x1, 0x0, 0xe7}) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000600), r1) close_range(r0, 0xffffffffffffffff, 0x0) 1m9.547264006s ago: executing program 7 (id=2697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 1m1.861752706s ago: executing program 35 (id=2667): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82802, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r0, 0x400455c8, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xae) 58.700230034s ago: executing program 5 (id=2751): openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000003f00), 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) read$FUSE(r0, &(0x7f0000006100)={0x2020}, 0x2020) 58.600246352s ago: executing program 5 (id=2752): write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111}}, 0x20) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_timeval(r0, 0x1, 0x42, &(0x7f0000000100), 0x10) 58.514319708s ago: executing program 5 (id=2753): r0 = timerfd_create(0x0, 0x80000) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)) ioctl$TFD_IOC_SET_TICKS(r0, 0x40085400, &(0x7f0000000040)=0x8004) 58.43004484s ago: executing program 5 (id=2754): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb) 57.660893203s ago: executing program 5 (id=2755): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x4000}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0x3d, &(0x7f00000001c0)={0xb}, 0x8) sendmmsg$sock(r0, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="12ce38c4", 0x4}], 0x1, &(0x7f0000000340)=[@txtime={{0x18, 0x1, 0x3d, 0x6}}], 0x18}}], 0x1, 0x20000000) 57.57347993s ago: executing program 5 (id=2756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, 0x0) 55.866427552s ago: executing program 0 (id=2765): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000005c0)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000600), 0x12) 55.485517537s ago: executing program 0 (id=2767): creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) lchown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000100)={0x4, 0x26, 0x0, 0x8, 0x1, 0xa7f}) creat(&(0x7f00000002c0)='./file0\x00', 0x37) 55.318144141s ago: executing program 0 (id=2769): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000080a1f0e0000000000000000020000000900020073797a32000000000900010073797a30"], 0x54}, 0x1, 0x0, 0x0, 0x20048880}, 0x0) 54.147479402s ago: executing program 0 (id=2776): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) shutdown(r0, 0x1) connect$bt_rfcomm(r0, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x11}, 0xa) close(r0) 53.949829899s ago: executing program 0 (id=2778): io_setup(0x7, &(0x7f0000000100)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x42) io_submit(r0, 0x1, &(0x7f00000004c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f00000002c0)='G', 0x1, 0x0, 0x0, 0x2}]) 53.2290615s ago: executing program 0 (id=2781): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40, 0x1200}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) 52.617980044s ago: executing program 36 (id=2697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x8000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 41.313355754s ago: executing program 37 (id=2756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, 0x0) 37.030259695s ago: executing program 38 (id=2781): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xd40, 0x1200}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}, @IFLA_HSR_MULTICAST_SPEC={0x5, 0x3, 0x4}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x40010}, 0x8000) 17.014615699s ago: executing program 1 (id=2819): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x3, 0x18, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 16.87422455s ago: executing program 1 (id=2820): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x12, 0x3, 0x4, 0x6}, 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000011c0)={r0, &(0x7f00000001c0)="4addc3", &(0x7f0000000000)=@udp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x4, &(0x7f00000011c0)={r0, &(0x7f0000000040)="4addc3", 0x0}, 0x20) 16.775513927s ago: executing program 1 (id=2821): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) ioctl$TIOCL_SETVESABLANK(r1, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r1, 0x541c, &(0x7f0000000040)) 16.579255618s ago: executing program 1 (id=2822): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x0, 0x8000000008}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x0, 0x2, 0x9, 0xe71}) fcntl$lock(r0, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x40, 0x3}) 16.494534555s ago: executing program 1 (id=2823): r0 = gettid() r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000040)='signal_generate\x00', r1, 0x0, 0x1fffffffe}, 0xe) tkill(r0, 0x16) 16.388085339s ago: executing program 1 (id=2824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x489, 0x0, 0xa25}]}) 0s ago: executing program 39 (id=2824): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000240)={0x1, 0x0, [{0x489, 0x0, 0xa25}]}) kernel console output (not intermixed with test programs): r" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16595cf749 code=0x7ffc0000 [ 504.862741][ T37] audit: type=1326 audit(1764033776.104:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9577 comm="syz.0.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=253 compat=0 ip=0x7f16595cf749 code=0x7ffc0000 [ 504.863200][ T37] audit: type=1326 audit(1764033776.104:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9577 comm="syz.0.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16595cf749 code=0x7ffc0000 [ 504.863522][ T37] audit: type=1326 audit(1764033776.104:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9577 comm="syz.0.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16595cf749 code=0x7ffc0000 [ 504.867698][ T37] audit: type=1326 audit(1764033776.104:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9577 comm="syz.0.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=254 compat=0 ip=0x7f16595cf749 code=0x7ffc0000 [ 504.984274][ T37] audit: type=1326 audit(1764033776.104:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9577 comm="syz.0.1169" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16595cf749 code=0x7ffc0000 [ 505.525104][ T5884] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 505.696154][ T9610] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1183'. [ 505.991879][ C1] vkms_vblank_simulate: vblank timer overrun [ 505.998086][ T5884] usb 7-1: Using ep0 maxpacket: 32 [ 506.000626][ T5884] usb 7-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 506.000659][ T5884] usb 7-1: config 0 interface 0 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 506.000686][ T5884] usb 7-1: config 0 interface 0 has no altsetting 0 [ 506.000721][ T5884] usb 7-1: New USB device found, idVendor=056e, idProduct=011c, bcdDevice= 0.00 [ 506.000743][ T5884] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.029214][ T5884] usb 7-1: config 0 descriptor?? [ 506.157199][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.234187][ C1] vkms_vblank_simulate: vblank timer overrun [ 506.774082][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.072310][ C1] vkms_vblank_simulate: vblank timer overrun [ 507.080918][ T5884] elecom 0003:056E:011C.0004: unknown main item tag 0x0 [ 507.080960][ T5884] elecom 0003:056E:011C.0004: unknown main item tag 0x0 [ 507.080983][ T5884] elecom 0003:056E:011C.0004: unknown main item tag 0x0 [ 507.081008][ T5884] elecom 0003:056E:011C.0004: unknown main item tag 0x0 [ 507.081040][ T5884] elecom 0003:056E:011C.0004: unknown main item tag 0x0 [ 507.108096][ T5884] elecom 0003:056E:011C.0004: hidraw0: USB HID v0.05 Device [HID 056e:011c] on usb-dummy_hcd.6-1/input0 [ 507.345125][ T9] usb 7-1: USB disconnect, device number 4 [ 508.096998][ T9627] fido_id[9627]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 508.169096][ T9642] netlink: 'syz.1.1196': attribute type 11 has an invalid length. [ 508.169124][ T9642] netlink: 'syz.1.1196': attribute type 1 has an invalid length. [ 508.169138][ T9642] netlink: 3593 bytes leftover after parsing attributes in process `syz.1.1196'. [ 508.235261][ T9630] syz.0.1193 (9630) used greatest stack depth: 16248 bytes left [ 508.535678][ T37] audit: type=1326 audit(1764033779.537:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9650 comm="syz.6.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00352f749 code=0x7ffc0000 [ 508.537129][ T37] audit: type=1326 audit(1764033779.537:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9650 comm="syz.6.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00352f749 code=0x7ffc0000 [ 508.537460][ T37] audit: type=1326 audit(1764033779.537:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9650 comm="syz.6.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fd00352f749 code=0x7ffc0000 [ 508.538863][ T37] audit: type=1326 audit(1764033779.537:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9650 comm="syz.6.1201" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00352f749 code=0x7ffc0000 [ 509.026476][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 509.026558][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.549831][ T9689] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1219'. [ 509.733159][ T9694] syz.6.1222 (9694): /proc/9693/oom_adj is deprecated, please use /proc/9693/oom_score_adj instead. [ 510.189941][ C1] vkms_vblank_simulate: vblank timer overrun [ 510.231015][ T9706] RDS: rds_bind could not find a transport for fe80::3e, load rds_tcp or rds_rdma? [ 510.496185][ C1] vkms_vblank_simulate: vblank timer overrun [ 511.451994][ T37] kauditd_printk_skb: 5 callbacks suppressed [ 511.452022][ T37] audit: type=1326 audit(1764033782.269:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9729 comm="syz.1.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 511.452507][ T37] audit: type=1326 audit(1764033782.269:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9729 comm="syz.1.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 511.454446][ T37] audit: type=1326 audit(1764033782.269:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9729 comm="syz.1.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 511.456597][ T37] audit: type=1326 audit(1764033782.269:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9729 comm="syz.1.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 511.577629][ T37] audit: type=1326 audit(1764033782.269:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9729 comm="syz.1.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 511.577685][ T37] audit: type=1326 audit(1764033782.391:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9729 comm="syz.1.1236" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 512.014179][ T9741] ubi: mtd0 is already attached to ubi31 [ 512.868922][ T9751] netlink: 32198 bytes leftover after parsing attributes in process `syz.0.1246'. [ 513.085857][ T9763] netlink: 'syz.6.1251': attribute type 3 has an invalid length. [ 515.423308][ T31] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 516.098498][ T31] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 516.098530][ T31] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 516.098550][ T31] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 516.098571][ T31] usb 6-1: config 220 has no interface number 2 [ 516.098661][ T31] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 516.098689][ T31] usb 6-1: config 220 interface 0 has no altsetting 0 [ 516.098708][ T31] usb 6-1: config 220 interface 76 has no altsetting 0 [ 516.098726][ T31] usb 6-1: config 220 interface 1 has no altsetting 0 [ 516.104625][ T31] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 516.104657][ T31] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 516.104678][ T31] usb 6-1: Product: syz [ 516.104693][ T31] usb 6-1: Manufacturer: syz [ 516.104708][ T31] usb 6-1: SerialNumber: syz [ 516.990079][ T31] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 516.990116][ T31] uvcvideo 6-1:220.0: No valid video chain found. [ 516.990184][ T31] usb 6-1: selecting invalid altsetting 0 [ 517.417259][ T31] usb 6-1: selecting invalid altsetting 0 [ 517.417971][ T31] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 517.626483][ T9803] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 517.643659][ T31] usb 6-1: USB disconnect, device number 3 [ 518.057771][ T9806] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1269'. [ 521.094537][ T9848] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1289'. [ 521.424072][ T9858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1294'. [ 522.193122][ T62] Bluetooth: hci2: command 0x0406 tx timeout [ 522.236440][ T37] audit: type=1326 audit(1764033792.354:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9874 comm="syz.5.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 522.237040][ T37] audit: type=1326 audit(1764033792.354:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9874 comm="syz.5.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 522.237094][ T37] audit: type=1326 audit(1764033792.354:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9874 comm="syz.5.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 522.237661][ T37] audit: type=1326 audit(1764033792.354:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9874 comm="syz.5.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 522.237713][ T37] audit: type=1326 audit(1764033792.354:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9874 comm="syz.5.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 522.238244][ T37] audit: type=1326 audit(1764033792.354:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9874 comm="syz.5.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 522.238295][ T37] audit: type=1326 audit(1764033792.354:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9874 comm="syz.5.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 522.238612][ T37] audit: type=1326 audit(1764033792.354:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9874 comm="syz.5.1302" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 525.015054][ T37] audit: type=1326 audit(1764033794.955:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=9903 comm="syz.5.1313" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a8921f749 code=0x0 [ 526.152005][ T9906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 528.746792][ T9941] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1330'. [ 529.031812][ T5958] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 529.208949][ T5958] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 529.208981][ T5958] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 529.209002][ T5958] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 529.209023][ T5958] usb 2-1: config 220 has no interface number 2 [ 529.209125][ T5958] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 529.209154][ T5958] usb 2-1: config 220 interface 0 has no altsetting 0 [ 529.209173][ T5958] usb 2-1: config 220 interface 76 has no altsetting 0 [ 529.209191][ T5958] usb 2-1: config 220 interface 1 has no altsetting 0 [ 529.285090][ T5958] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 529.285125][ T5958] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 529.285146][ T5958] usb 2-1: Product: syz [ 529.285257][ T5958] usb 2-1: Manufacturer: syz [ 529.285274][ T5958] usb 2-1: SerialNumber: syz [ 529.615582][ T5958] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 529.615620][ T5958] uvcvideo 2-1:220.0: No valid video chain found. [ 529.615704][ T5958] usb 2-1: selecting invalid altsetting 0 [ 529.794705][ T5958] usb 2-1: selecting invalid altsetting 0 [ 529.794749][ T5958] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 529.796943][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 529.816293][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 529.850854][ T5958] usb 2-1: USB disconnect, device number 7 [ 529.857807][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 529.878015][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 529.884689][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 531.305099][ T9962] tipc: Started in network mode [ 531.305135][ T9962] tipc: Node identity ac141441, cluster identity 4711 [ 531.316311][ T9962] tipc: Enabled bearer , priority 10 [ 532.117149][ T5805] Bluetooth: hci0: command tx timeout [ 532.771508][ T205] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.843091][ T991] tipc: Node number set to 2886997057 [ 533.140094][ T5805] Bluetooth: hci5: command 0x0406 tx timeout [ 533.204457][ T205] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.373993][ T9952] lo speed is unknown, defaulting to 1000 [ 533.613815][ T205] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.080037][ T205] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.333214][ T62] Bluetooth: hci0: command tx timeout [ 535.489535][ T9952] chnl_net:caif_netlink_parms(): no params data found [ 535.524904][ T205] bridge_slave_1: left allmulticast mode [ 535.524935][ T205] bridge_slave_1: left promiscuous mode [ 535.525204][ T205] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.694382][ T205] bridge_slave_0: left allmulticast mode [ 535.694414][ T205] bridge_slave_0: left promiscuous mode [ 535.694709][ T205] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.053516][ T31] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 536.213834][ T31] usb 2-1: Using ep0 maxpacket: 8 [ 536.216605][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.216638][ T31] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.216659][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 536.216702][ T31] usb 2-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00 [ 536.216724][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.556127][ T62] Bluetooth: hci0: command tx timeout [ 537.317330][ T31] usb 2-1: config 0 descriptor?? [ 537.932146][ T31] logitech 0003:046D:C293.0005: unknown main item tag 0x0 [ 537.932188][ T31] logitech 0003:046D:C293.0005: unknown main item tag 0x0 [ 537.932213][ T31] logitech 0003:046D:C293.0005: unknown main item tag 0x0 [ 537.932236][ T31] logitech 0003:046D:C293.0005: unknown main item tag 0x0 [ 537.985284][ T31] logitech 0003:046D:C293.0005: hidraw0: USB HID v0.00 Device [HID 046d:c293] on usb-dummy_hcd.1-1/input0 [ 537.985322][ T31] logitech 0003:046D:C293.0005: no inputs found [ 537.992310][T10119] tmpfs: Cannot disable swap on remount [ 538.359994][T10124] ntfs3(nullb0): Primary boot signature is not NTFS. [ 538.363557][T10124] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 538.416849][ T31] usb 2-1: USB disconnect, device number 8 [ 538.820169][ T62] Bluetooth: hci0: command tx timeout [ 538.959472][T10123] fido_id[10123]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 541.319612][T10153] ntfs3(nullb0): Primary boot signature is not NTFS. [ 541.320492][T10153] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 542.499777][ T205] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 542.586145][ T205] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 542.632421][ T205] bond0 (unregistering): Released all slaves [ 543.442365][ T205] tipc: Disabling bearer [ 543.443319][ T205] tipc: Left network mode [ 543.622193][T10171] batadv0: entered promiscuous mode [ 543.645717][T10171] macvtap1: entered promiscuous mode [ 543.648059][T10171] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 544.266913][ T37] audit: type=1326 audit(1764033812.963:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10184 comm="syz.5.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 544.267363][ T37] audit: type=1326 audit(1764033812.963:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10184 comm="syz.5.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 544.267684][ T37] audit: type=1326 audit(1764033812.963:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10184 comm="syz.5.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 544.268078][ T37] audit: type=1326 audit(1764033812.963:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10184 comm="syz.5.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 544.268389][ T37] audit: type=1326 audit(1764033812.963:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10184 comm="syz.5.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 544.268767][ T37] audit: type=1326 audit(1764033812.963:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10184 comm="syz.5.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 544.269112][ T37] audit: type=1326 audit(1764033812.963:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10184 comm="syz.5.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 544.269472][ T37] audit: type=1326 audit(1764033812.963:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10184 comm="syz.5.1421" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 544.788414][ T9952] bridge0: port 1(bridge_slave_0) entered blocking state [ 544.788651][ T9952] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.788900][ T9952] bridge_slave_0: entered allmulticast mode [ 544.792985][ T9952] bridge_slave_0: entered promiscuous mode [ 544.879138][T10192] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1423'. [ 544.881135][T10202] tipc: Enabling of bearer rejected, already enabled [ 544.884409][ T9952] bridge0: port 2(bridge_slave_1) entered blocking state [ 544.884795][ T9952] bridge0: port 2(bridge_slave_1) entered disabled state [ 544.885043][ T9952] bridge_slave_1: entered allmulticast mode [ 544.902054][ T9952] bridge_slave_1: entered promiscuous mode [ 545.150923][ T62] Bluetooth: hci1: Malformed LE Event: 0x1d [ 546.076699][T10243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1442'. [ 546.229434][ T9952] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.300760][ T9952] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 546.421641][T10253] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1446'. [ 547.310931][ T205] hsr_slave_0: left promiscuous mode [ 547.359033][ T205] hsr_slave_1: left promiscuous mode [ 547.360277][ T205] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 547.360306][ T205] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 547.409161][ T205] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 547.409192][ T205] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 547.631223][ T205] veth1_macvtap: left promiscuous mode [ 547.631300][ T205] veth0_macvtap: left promiscuous mode [ 547.631481][ T205] veth1_vlan: left promiscuous mode [ 547.631595][ T205] veth0_vlan: left promiscuous mode [ 548.503719][T10297] netlink: 'syz.1.1466': attribute type 1 has an invalid length. [ 552.101937][ T205] team0 (unregistering): Port device team_slave_1 removed [ 552.334711][ T205] team0 (unregistering): Port device team_slave_0 removed [ 555.133839][T10315] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1475'. [ 555.178668][ T9952] team0: Port device team_slave_0 added [ 555.257788][ T9952] team0: Port device team_slave_1 added [ 555.362456][T10336] ALSA: mixer_oss: invalid OSS volume '—ˆ†åÉY¢¤{õ›´žÜÿ¬¤Uøü°ŽDíÆD ' [ 555.362482][T10336] ALSA: mixer_oss: invalid OSS volume 'ß§«4cÑTÆÒÈ󯆩"¦m!lŠT.îšÎ œ¾®ì' [ 555.362500][T10336] ALSA: mixer_oss: invalid OSS volume 'lg§' [ 555.362516][T10336] ALSA: mixer_oss: invalid OSS volume 'í)nÃäÃkëKi†·,r‚¾WY\ñZV‰Óå¼÷?J`G' [ 555.362556][T10336] ALSA: mixer_oss: invalid OSS volume 'kûO0ÍÇòª$ÛÒgÀ¾{ƒpl{ˆúy;_A¸RW§€' [ 555.362572][T10336] ALSA: mixer_oss: invalid OSS volume 'ò' [ 555.362602][T10336] ALSA: mixer_oss: invalid OSS volume 'sv«ˆ Fu{Qby>áñh%w¾áõ]' [ 555.362625][T10336] ALSA: mixer_oss: invalid OSS volume 'ŽEÙ“•= Øv?ïÌ@4Åä8î¶@»híüÉÆL' [ 555.362639][T10336] ALSA: mixer_oss: invalid OSS volume 'î+­³?>3Iq¡»0:i¸Ýq½|û—UëDœÅ™¯û' [ 555.362665][T10336] ALSA: mixer_oss: invalid OSS volume 'vÓ·*xrµýN0¡Ü—ƒácŒ†Až‚€åìdâhû' [ 555.362694][T10336] ALSA: mixer_oss: invalid OSS volume '±äJMÊïé œ%HœJ[~S' [ 555.362708][T10336] ALSA: mixer_oss: invalid OSS volume '¢ƒ‹èåœSQFº¦?­¸ü`ï*æ‹Éúù¹]ÙÔ5S' [ 557.028883][ T9952] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 557.028901][ T9952] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.028928][ T9952] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 557.033311][ T9952] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 557.033327][ T9952] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 557.033356][ T9952] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 557.635241][ T9952] hsr_slave_0: entered promiscuous mode [ 557.637041][ T9952] hsr_slave_1: entered promiscuous mode [ 557.643740][ T9952] debugfs: 'hsr0' already exists in 'hsr' [ 557.643775][ T9952] Cannot create hsr debugfs directory [ 557.653218][ T37] audit: type=1326 audit(1764033825.490:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10377 comm="syz.0.1500" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f16595cf749 code=0x0 [ 559.554699][T10408] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge0 [ 559.689291][ T37] audit: type=1326 audit(1764033827.380:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10407 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 559.689362][ T37] audit: type=1326 audit(1764033827.399:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10407 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 559.689411][ T37] audit: type=1326 audit(1764033827.399:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10407 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 559.689456][ T37] audit: type=1326 audit(1764033827.399:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10407 comm="syz.5.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 560.491967][ T9952] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 560.582807][T10440] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1519'. [ 560.582973][T10440] netlink: 2 bytes leftover after parsing attributes in process `syz.5.1519'. [ 560.841921][ T9952] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 560.872201][T10452] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 560.872232][T10452] CIFS mount error: No usable UNC path provided in device string! [ 560.872232][T10452] [ 560.872449][T10452] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 560.906492][T10446] tipc: Enabling of bearer rejected, failed to enable media [ 560.950250][ T9952] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 561.073460][ T9952] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 561.547444][ T5870] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 561.600937][ T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 561.720588][ T5870] usb 7-1: Using ep0 maxpacket: 32 [ 561.723089][ T5870] usb 7-1: config 0 has an invalid interface number: 124 but max is 0 [ 561.723116][ T5870] usb 7-1: config 0 has no interface number 0 [ 561.723156][ T5870] usb 7-1: config 0 interface 124 has no altsetting 0 [ 561.726423][ T5870] usb 7-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=88.47 [ 561.726453][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.726474][ T5870] usb 7-1: Product: syz [ 561.726488][ T5870] usb 7-1: Manufacturer: syz [ 561.726502][ T5870] usb 7-1: SerialNumber: syz [ 561.737708][ T5870] usb 7-1: config 0 descriptor?? [ 561.764342][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.764371][ T9] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 561.764424][ T9] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 561.764447][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.907421][ T9] usb 2-1: config 0 descriptor?? [ 561.939580][ T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 561.939768][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 561.990311][ T991] usb 7-1: USB disconnect, device number 5 [ 562.015170][ T9] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 562.016517][ T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 562.016591][ T9] usb 2-1: media controller created [ 562.055655][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 562.086843][ T9] dvb-usb: bulk message failed: -22 (6/0) [ 562.086987][ T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 562.107764][ T9952] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.131628][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 562.162239][ T9] dvb-usb: schedule remote query interval to 150 msecs. [ 562.162266][ T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 562.221660][ T5870] usb 2-1: USB disconnect, device number 9 [ 562.303616][ T9952] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.351364][ T6188] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.372408][ T6188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 562.451586][ T205] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.451779][ T205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.590843][ T5870] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 563.494681][T10508] ubi: mtd0 is already attached to ubi31 [ 564.113366][ T8691] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 564.203799][ T9952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.294662][ T8691] usb 2-1: Using ep0 maxpacket: 32 [ 564.314467][ T8691] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.314498][ T8691] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 564.314538][ T8691] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 564.314563][ T8691] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.361828][ T8691] usb 2-1: config 0 descriptor?? [ 564.658441][ T5883] usb 2-1: USB disconnect, device number 10 [ 564.957628][ T5958] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 565.056446][ T9952] veth0_vlan: entered promiscuous mode [ 565.070795][ T9952] veth1_vlan: entered promiscuous mode [ 565.128846][ T5958] usb 6-1: Using ep0 maxpacket: 8 [ 565.154474][ T5958] usb 6-1: unable to get BOS descriptor or descriptor too short [ 565.154577][ T5958] usb 6-1: too many configurations: 16, using maximum allowed: 8 [ 565.162625][ T5958] usb 6-1: config 4 interface 0 has no altsetting 0 [ 565.165909][ T5958] usb 6-1: config 4 interface 0 has no altsetting 0 [ 565.171638][ T5958] usb 6-1: config 4 interface 0 has no altsetting 0 [ 565.173349][ T5958] usb 6-1: config 4 interface 0 has no altsetting 0 [ 565.175136][ T5958] usb 6-1: config 4 interface 0 has no altsetting 0 [ 565.176595][ T5958] usb 6-1: config 4 interface 0 has no altsetting 0 [ 565.178084][ T5958] usb 6-1: config 4 interface 0 has no altsetting 0 [ 565.208938][ T5958] usb 6-1: config 4 interface 0 has no altsetting 0 [ 565.248743][ T5958] usb 6-1: string descriptor 0 read error: -22 [ 565.248931][ T5958] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 565.248956][ T5958] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 565.297426][ T9952] veth0_macvtap: entered promiscuous mode [ 565.312114][ T9952] veth1_macvtap: entered promiscuous mode [ 565.326788][ T5958] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 565.388170][ T5958] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 565.393434][ T9952] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.397729][ T5958] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 565.397786][ T5958] usb 6-1: media controller created [ 565.448905][ T9952] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.502986][T10571] batadv0: Device is already in use. [ 565.557491][T10553] usb 6-1: dvb_usb_au6610: wlen=0, aborting [ 565.590188][ T6188] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.590632][ T6188] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.590908][ T6188] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.591496][ T6188] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.614998][ T5958] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 565.770027][ T5958] zl10353_read_register: readreg error (reg=127, ret==0) [ 565.934926][ T5958] usb 6-1: USB disconnect, device number 4 [ 566.196007][ T205] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.196031][ T205] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.409824][ T205] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.409847][ T205] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 567.143240][T10610] ubi: mtd0 is already attached to ubi31 [ 567.506167][ T37] audit: type=1326 audit(1764033834.705:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10603 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 567.506227][ T37] audit: type=1326 audit(1764033834.705:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10603 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 567.506347][ T37] audit: type=1326 audit(1764033834.705:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10603 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 567.506397][ T37] audit: type=1326 audit(1764033834.705:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10603 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 567.506445][ T37] audit: type=1326 audit(1764033834.705:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10603 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 567.506493][ T37] audit: type=1326 audit(1764033834.705:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10603 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 567.506549][ T37] audit: type=1326 audit(1764033834.705:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10603 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 567.523659][ T37] audit: type=1326 audit(1764033834.724:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10603 comm="syz.1.1577" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 568.838398][T10652] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 568.839395][T10652] team0: Device macvtap2 is already an upper device of the team interface [ 569.034183][ T8691] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 569.190231][ T8691] usb 7-1: Using ep0 maxpacket: 32 [ 569.195685][ T8691] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 569.195713][ T8691] usb 7-1: config 0 has no interface number 0 [ 569.229606][ T8691] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 569.229640][ T8691] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 569.229660][ T8691] usb 7-1: Product: syz [ 569.229674][ T8691] usb 7-1: Manufacturer: syz [ 569.229688][ T8691] usb 7-1: SerialNumber: syz [ 569.258876][ T8691] usb 7-1: config 0 descriptor?? [ 569.294816][ T8691] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 569.294845][ T8691] usb 7-1: selecting invalid altsetting 1 [ 569.294862][ T8691] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 569.309296][ T8691] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 569.309979][ T8691] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 569.310036][ T8691] usb 7-1: media controller created [ 569.484686][ T8691] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 569.535116][T10665] syz.1.1604 uses obsolete (PF_INET,SOCK_PACKET) [ 569.559819][T10666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1603'. [ 569.686183][ T8691] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 569.686252][ T8691] zl10353_read_register: readreg error (reg=127, ret==-71) [ 569.686798][ T8691] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 569.758098][ T62] Bluetooth: hci1: unexpected event for opcode 0x2023 [ 569.917348][ T8691] usb 7-1: USB disconnect, device number 6 [ 570.866470][ T37] audit: type=1326 audit(1764033837.848:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10704 comm="syz.6.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00352f749 code=0x7ffc0000 [ 570.867313][ T37] audit: type=1326 audit(1764033837.848:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10704 comm="syz.6.1620" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00352f749 code=0x7ffc0000 [ 571.149240][ C0] vkms_vblank_simulate: vblank timer overrun [ 571.463725][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.087691][ C0] vkms_vblank_simulate: vblank timer overrun [ 572.187479][ C0] vkms_vblank_simulate: vblank timer overrun [ 573.010336][T10750] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1639'. [ 573.850791][ T5958] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 574.171529][T10589] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 574.203180][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.210381][ T5958] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 574.210410][ T5958] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 574.216236][ T5958] usb 7-1: config 0 descriptor?? [ 574.232449][ T5958] cp210x 7-1:0.0: cp210x converter detected [ 574.327159][ C0] vkms_vblank_simulate: vblank timer overrun [ 574.455457][T10589] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 574.455488][T10589] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 574.455508][T10589] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 574.455564][T10589] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 574.500840][T10589] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 574.500873][T10589] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 574.500892][T10589] usb 2-1: Product: syz [ 574.500908][T10589] usb 2-1: Manufacturer: syz [ 574.558242][T10589] cdc_wdm 2-1:1.0: skipping garbage [ 574.558262][T10589] cdc_wdm 2-1:1.0: skipping garbage [ 574.561062][T10589] cdc_wdm 2-1:1.0: probe with driver cdc_wdm failed with error -22 [ 574.703446][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 574.703534][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 574.745288][ T5958] usb 7-1: cp210x converter now attached to ttyUSB0 [ 574.831896][ T31] usb 2-1: USB disconnect, device number 11 [ 574.919380][ T5958] usb 7-1: USB disconnect, device number 7 [ 574.956912][ T5958] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 575.084508][ T5958] cp210x 7-1:0.0: device disconnected [ 575.308162][ T37] kauditd_printk_skb: 12 callbacks suppressed [ 575.308183][ T37] audit: type=1326 audit(1764033842.002:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10797 comm="syz.7.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4640f749 code=0x7ffc0000 [ 575.308236][ T37] audit: type=1326 audit(1764033842.002:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10797 comm="syz.7.1663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4640f749 code=0x7ffc0000 [ 575.763845][T10821] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1670'. [ 575.775715][T10823] Bluetooth: MGMT ver 1.23 [ 575.924546][ T5870] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 576.084871][ T5870] usb 7-1: Using ep0 maxpacket: 32 [ 576.089110][ T5870] usb 7-1: config 0 has an invalid interface number: 96 but max is 0 [ 576.089138][ T5870] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 576.089158][ T5870] usb 7-1: config 0 has no interface number 0 [ 576.089209][ T5870] usb 7-1: config 0 interface 96 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 11 [ 576.092674][ T5870] usb 7-1: New USB device found, idVendor=2040, idProduct=7500, bcdDevice=2b.ab [ 576.092702][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.092722][ T5870] usb 7-1: Product: syz [ 576.092737][ T5870] usb 7-1: Manufacturer: syz [ 576.092752][ T5870] usb 7-1: SerialNumber: syz [ 576.175055][ T5870] usb 7-1: config 0 descriptor?? [ 576.332592][ T37] audit: type=1326 audit(1764033842.956:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10839 comm="syz.5.1679" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9a8921f749 code=0x0 [ 576.454949][ T5870] pvrusb2: Hardware description: WinTV HVR-1950 Model 750xx [ 576.535741][ T5870] usb 7-1: USB disconnect, device number 8 [ 576.564491][ T2365] usb 7-1: Direct firmware load for v4l-pvrusb2-73xxx-01.fw failed with error -2 [ 576.564523][ T2365] usb 7-1: Falling back to sysfs fallback for: v4l-pvrusb2-73xxx-01.fw [ 576.878685][T10852] ip6gre0: entered promiscuous mode [ 577.051516][T10857] ipvlan2: entered promiscuous mode [ 577.061906][T10857] bridge0: port 3(ipvlan2) entered blocking state [ 577.062193][T10857] bridge0: port 3(ipvlan2) entered disabled state [ 577.062440][T10857] ipvlan2: entered allmulticast mode [ 577.062456][T10857] bridge0: entered allmulticast mode [ 577.066392][T10857] ipvlan2: left allmulticast mode [ 577.066406][T10857] bridge0: left allmulticast mode [ 578.951066][T10903] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1702'. [ 579.441292][T10589] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 579.450932][ T62] Bluetooth: hci5: ACL packet for unknown connection handle 200 [ 579.601731][T10589] usb 6-1: Using ep0 maxpacket: 32 [ 579.604448][T10589] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 579.604476][T10589] usb 6-1: config 0 has no interface number 0 [ 579.604528][T10589] usb 6-1: config 0 interface 67 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1 [ 579.608674][T10589] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 579.608702][T10589] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 579.608722][T10589] usb 6-1: Product: syz [ 579.608737][T10589] usb 6-1: Manufacturer: syz [ 579.608751][T10589] usb 6-1: SerialNumber: syz [ 579.683487][T10589] usb 6-1: config 0 descriptor?? [ 579.684558][T10913] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 579.712465][T10589] smsc95xx v2.0.0 [ 579.772826][T10928] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1712'. [ 579.933605][T10913] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 580.363571][T10589] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 580.363606][T10589] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 580.364344][T10589] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 580.364680][T10589] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -71 [ 580.436185][T10589] usb 6-1: USB disconnect, device number 5 [ 581.761973][ T37] audit: type=1326 audit(1764033848.045:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10967 comm="syz.5.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 581.762583][ T37] audit: type=1326 audit(1764033848.045:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10967 comm="syz.5.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 581.762638][ T37] audit: type=1326 audit(1764033848.045:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10967 comm="syz.5.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 581.763190][ T37] audit: type=1326 audit(1764033848.045:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10967 comm="syz.5.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 581.763242][ T37] audit: type=1326 audit(1764033848.045:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10967 comm="syz.5.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 581.763940][ T37] audit: type=1326 audit(1764033848.045:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10967 comm="syz.5.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 581.763990][ T37] audit: type=1326 audit(1764033848.045:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10967 comm="syz.5.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 581.764040][ T37] audit: type=1326 audit(1764033848.045:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10967 comm="syz.5.1728" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 582.670137][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1742'. [ 582.670164][T11008] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1742'. [ 582.670192][T11008] netlink: 'syz.5.1742': attribute type 29 has an invalid length. [ 583.443606][T10989] syz.7.1736 (10989): drop_caches: 2 [ 584.032945][T11052] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1758'. [ 584.168531][T11052] veth0_macvtap: left promiscuous mode [ 585.640076][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1774'. [ 586.367296][T11116] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1783'. [ 586.617432][T11123] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1786'. [ 586.733852][T11127] usb usb8: usbfs: process 11127 (syz.5.1788) did not claim interface 4 before use [ 586.849365][ T37] audit: type=1326 audit(1764033852.807:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11128 comm="syz.1.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 586.849958][ T37] audit: type=1326 audit(1764033852.807:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11128 comm="syz.1.1789" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 587.650610][ T6046] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 587.815291][ T6046] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 587.815330][ T6046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 587.815356][ T6046] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 587.815399][ T6046] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 587.815424][ T6046] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.969584][ T6046] usb 6-1: config 0 descriptor?? [ 588.103453][T11169] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1807'. [ 588.443614][ T6046] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 588.443657][ T6046] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 588.443683][ T6046] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 588.443709][ T6046] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 588.443734][ T6046] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 588.443759][ T6046] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 588.443784][ T6046] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 588.443809][ T6046] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 588.443833][ T6046] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 588.443859][ T6046] sony 0003:054C:024B.0006: unknown main item tag 0x0 [ 588.445973][ T6046] sony 0003:054C:024B.0006: unexpected long global item [ 588.447487][ T6046] sony 0003:054C:024B.0006: parse failed [ 588.447605][ T6046] sony 0003:054C:024B.0006: probe with driver sony failed with error -22 [ 588.579330][ C1] vkms_vblank_simulate: vblank timer overrun [ 588.659292][ C1] vkms_vblank_simulate: vblank timer overrun [ 588.721637][ T6046] usb 6-1: USB disconnect, device number 6 [ 589.307417][ T6046] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 589.475400][ T6046] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 589.475435][ T6046] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.475456][ T6046] usb 2-1: Product: syz [ 589.475470][ T6046] usb 2-1: Manufacturer: syz [ 589.475485][ T6046] usb 2-1: SerialNumber: syz [ 589.551655][ T6046] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 589.697757][ T9] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 589.848494][T11214] tmpfs: Unknown parameter 'no' [ 590.323068][ T5884] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 590.485832][ T5884] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 590.485884][ T5884] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 590.485906][ T5884] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.496242][ T5884] usb 6-1: config 0 descriptor?? [ 590.814927][ T5863] usb 2-1: USB disconnect, device number 12 [ 590.858204][ T9] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 590.858871][ T9] ath9k_htc: Failed to initialize the device [ 591.017740][ T5863] usb 2-1: ath9k_htc: USB layer deinitialized [ 591.109754][ T5884] lenovo 0003:17EF:6047.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0 [ 591.200575][ T5884] lenovo 0003:17EF:6047.0007: Failed to switch F7/9/11 mode: -71 [ 591.217479][ T5884] lenovo 0003:17EF:6047.0007: Failed to switch middle button: -71 [ 591.296062][ T5884] lenovo 0003:17EF:6047.0007: Fn-lock setting failed: -71 [ 591.302874][ T5884] lenovo 0003:17EF:6047.0007: Sensitivity setting failed: -71 [ 591.363902][ T5884] usb 6-1: USB disconnect, device number 7 [ 591.466442][T11258] netlink: 'syz.7.1850': attribute type 3 has an invalid length. [ 591.468171][T11253] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1849'. [ 591.548844][T11248] fido_id[11248]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 591.752119][T11264] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1853'. [ 591.752648][T11264] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1853'. [ 591.759434][T11265] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1852'. [ 591.759457][T11265] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1852'. [ 591.956887][T11272] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1857'. [ 592.283640][ C1] vkms_vblank_simulate: vblank timer overrun [ 592.455807][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.005289][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.226183][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.508595][ C1] vkms_vblank_simulate: vblank timer overrun [ 593.530463][T11279] kthread_run failed with err -4 [ 595.301870][ T6046] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 595.490222][ T6046] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 595.490278][ T6046] usb 2-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 595.490302][ T6046] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.500904][ T6046] usb 2-1: config 0 descriptor?? [ 596.038832][ T6046] hid_mf 0003:0079:1846.0008: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.1-1/input0 [ 596.038880][ T6046] hid_mf 0003:0079:1846.0008: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 596.231952][T10589] usb 2-1: USB disconnect, device number 13 [ 596.252382][T11384] fido_id[11384]: Failed to read report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0079:1846.0008/report_descriptor': No such device [ 596.289980][ T9] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 596.472859][ T9] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.472889][ T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 596.472949][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 596.472998][ T9] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 596.473036][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.509001][T11379] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 596.513942][ T9] hub 6-1:1.0: bad descriptor, ignoring hub [ 596.513982][ T9] hub 6-1:1.0: probe with driver hub failed with error -5 [ 596.514913][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 596.514925][ T9] cdc_wdm 6-1:1.0: skipping garbage [ 596.701981][ T9] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 596.702006][ T9] cdc_wdm 6-1:1.0: Unknown control protocol [ 596.760398][ T9] usb 6-1: USB disconnect, device number 8 [ 596.905211][T11402] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1916'. [ 596.905236][T11402] tc_dump_action: action bad kind [ 597.555988][T11429] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1929'. [ 597.673976][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1931'. [ 597.687989][T11429] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 597.761346][T11429] bond1 (unregistering): Released all slaves [ 597.910576][T11443] tipc: Started in network mode [ 597.910596][T11443] tipc: Node identity , cluster identity 4711 [ 597.910611][T11443] tipc: Failed to set node id, please configure manually [ 597.910660][T11443] tipc: Enabling of bearer rejected, failed to enable media [ 598.117491][T11449] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1938'. [ 598.117520][T11449] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1938'. [ 598.117537][T11449] netlink: 'syz.5.1938': attribute type 5 has an invalid length. [ 598.117551][T11449] netlink: 'syz.5.1938': attribute type 6 has an invalid length. [ 598.117564][T11449] netlink: 35 bytes leftover after parsing attributes in process `syz.5.1938'. [ 598.267153][T11453] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 599.190526][ C0] vkms_vblank_simulate: vblank timer overrun [ 599.548510][ C0] vkms_vblank_simulate: vblank timer overrun [ 600.045971][T11487] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1955'. [ 600.374147][T11498] mac80211_hwsim hwsim17 wlan1: entered promiscuous mode [ 600.384420][T11498] macvtap0: entered promiscuous mode [ 600.580475][ T37] kauditd_printk_skb: 6 callbacks suppressed [ 600.580497][ T37] audit: type=1326 audit(1764033865.642:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11503 comm="syz.1.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 600.580783][ T37] audit: type=1326 audit(1764033865.642:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11503 comm="syz.1.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 600.580946][ T37] audit: type=1326 audit(1764033865.642:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11503 comm="syz.1.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 600.581195][ T37] audit: type=1326 audit(1764033865.642:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11503 comm="syz.1.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 600.581372][ T37] audit: type=1326 audit(1764033865.642:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11503 comm="syz.1.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 600.581623][ T37] audit: type=1326 audit(1764033865.642:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11503 comm="syz.1.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 600.581757][ T37] audit: type=1326 audit(1764033865.642:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11503 comm="syz.1.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 600.582012][ T37] audit: type=1326 audit(1764033865.642:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11503 comm="syz.1.1963" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f769973f749 code=0x7ffc0000 [ 601.188024][ C0] vkms_vblank_simulate: vblank timer overrun [ 601.289470][ C0] vkms_vblank_simulate: vblank timer overrun [ 601.450796][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.030031][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.103492][ C0] vkms_vblank_simulate: vblank timer overrun [ 602.313222][ C0] vkms_vblank_simulate: vblank timer overrun [ 607.640421][ T37] audit: type=1326 audit(1764033872.228:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11597 comm="syz.1.2000" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f769973f749 code=0x0 [ 607.877979][T11608] netlink: 'syz.0.2005': attribute type 6 has an invalid length. [ 607.879835][T11608] netlink: 'syz.0.2005': attribute type 6 has an invalid length. [ 609.826391][T11640] [U] kæ [ 610.339628][T11665] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.341456][T11665] bridge0: port 2(bridge_slave_1) entered blocking state [ 610.341681][T11665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.366820][T11665] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 610.491173][T11674] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2035'. [ 610.631922][T11681] input: syz1 as /devices/virtual/input/input10 [ 612.572179][ T3883] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.572237][ T3883] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.572278][ T3883] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.572315][ T3883] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 612.660369][T11722] input: syz0 as /devices/virtual/input/input11 [ 612.734785][T11726] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2055'. [ 612.735719][T11726] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2055'. [ 613.867580][ C0] vkms_vblank_simulate: vblank timer overrun [ 614.147832][ C0] vkms_vblank_simulate: vblank timer overrun [ 615.131905][ T37] audit: type=1326 audit(1764033880.260:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11770 comm="syz.6.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00352f749 code=0x7ffc0000 [ 615.131965][ T37] audit: type=1326 audit(1764033880.260:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11770 comm="syz.6.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00352f749 code=0x7ffc0000 [ 615.162277][ T37] audit: type=1326 audit(1764033880.288:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11770 comm="syz.6.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd00352f749 code=0x7ffc0000 [ 615.192760][ C0] vkms_vblank_simulate: vblank timer overrun [ 615.197355][ T37] audit: type=1326 audit(1764033880.288:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11770 comm="syz.6.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00352f749 code=0x7ffc0000 [ 615.202067][ T37] audit: type=1326 audit(1764033880.326:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11770 comm="syz.6.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fd00352f749 code=0x7ffc0000 [ 615.202118][ T37] audit: type=1326 audit(1764033880.326:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11770 comm="syz.6.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00352f749 code=0x7ffc0000 [ 615.202159][ T37] audit: type=1326 audit(1764033880.326:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11770 comm="syz.6.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fd00352f749 code=0x7ffc0000 [ 615.202199][ T37] audit: type=1326 audit(1764033880.326:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11770 comm="syz.6.2075" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd00352f749 code=0x7ffc0000 [ 615.332294][T11776] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2074'. [ 615.602374][T11781] loop5: detected capacity change from 0 to 7 [ 615.955084][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.414908][ C0] vkms_vblank_simulate: vblank timer overrun [ 617.110698][T11796] loop4: detected capacity change from 0 to 524287999 [ 617.474336][T11781] Dev loop5: unable to read RDB block 7 [ 617.481091][T11781] loop5: unable to read partition table [ 617.481366][T11781] loop5: partition table beyond EOD, truncated [ 617.481407][T11781] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 617.537218][ C0] invalid error, dev loop5, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2 [ 617.537375][ C0] Buffer I/O error on dev loop5, logical block 0, lost async page write [ 618.240334][T11825] loop5: detected capacity change from 0 to 7 [ 618.327095][ C0] vkms_vblank_simulate: vblank timer overrun [ 618.755618][T11825] Dev loop5: unable to read RDB block 7 [ 618.755677][T11825] loop5: unable to read partition table [ 618.755943][T11825] loop5: partition table beyond EOD, truncated [ 618.755985][T11825] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 618.822392][T11838] program syz.6.2102 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 618.905433][ T37] audit: type=1800 audit(1764033883.787:283): pid=11841 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.2104" name=20019C1437B3CFFCC3A25729EB7393A7C721518FF6ECA56673F56C7B548772D22972A7D6084F9A98F5323A22F412C0542BCD9F767C8DD5B24476638E93D8D6A0C536D278E3633A dev="mqueue" ino=31857 res=0 errno=0 [ 619.178802][T11853] netlink: 7 bytes leftover after parsing attributes in process `syz.5.2110'. [ 619.234842][T11851] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 619.235014][T11851] dvmrp1: linktype set to 804 [ 619.286861][T11856] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.2111'. [ 619.983333][T11885] program syz.6.2118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 620.948907][T11915] mkiss: ax0: crc mode is auto. [ 621.678459][ T37] audit: type=1326 audit(1764033886.387:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11940 comm="syz.5.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 621.678521][ T37] audit: type=1326 audit(1764033886.387:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11940 comm="syz.5.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 621.678568][ T37] audit: type=1326 audit(1764033886.387:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11940 comm="syz.5.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 621.678617][ T37] audit: type=1326 audit(1764033886.387:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11940 comm="syz.5.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 621.678664][ T37] audit: type=1326 audit(1764033886.387:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11940 comm="syz.5.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 621.678711][ T37] audit: type=1326 audit(1764033886.387:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11940 comm="syz.5.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 621.678759][ T37] audit: type=1326 audit(1764033886.387:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11940 comm="syz.5.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 621.678815][ T37] audit: type=1326 audit(1764033886.387:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11940 comm="syz.5.2133" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9a8921f749 code=0x7ffc0000 [ 621.764653][T11949] tap0: tun_chr_ioctl cmd 1074025677 [ 621.764961][T11949] tap0: linktype set to 776 [ 621.914941][T11956] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2137'. [ 622.316489][ C1] sd 0:0:1:0: [sda] tag#5821 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 622.316582][ C1] sd 0:0:1:0: [sda] tag#5821 CDB: Write(6) 0a 00 00 00 01 00 00 00 04 00 00 10 [ 623.389156][T11979] netlink: 'syz.6.2146': attribute type 8 has an invalid length. [ 623.389182][T11979] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2146'. [ 623.896846][T11992] netlink: 'syz.1.2152': attribute type 5 has an invalid length. [ 624.026048][ T37] audit: type=1326 audit(1764033888.576:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11993 comm="syz.7.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4640f749 code=0x7ffc0000 [ 624.026111][ T37] audit: type=1326 audit(1764033888.576:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11993 comm="syz.7.2153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffb4640f749 code=0x7ffc0000 [ 624.132489][T11997] block nbd6: shutting down sockets [ 624.196895][T12007] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2158'. [ 624.805162][T12030] loop4: detected capacity change from 0 to 1 [ 624.816605][T12030] Dev loop4: unable to read RDB block 1 [ 624.816655][T12030] loop4: unable to read partition table [ 624.816923][T12030] loop4: partition table beyond EOD, truncated [ 624.816942][T12030] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 624.901306][T12033] netlink: 'syz.1.2169': attribute type 16 has an invalid length. [ 624.901333][T12033] netlink: 'syz.1.2169': attribute type 2 has an invalid length. [ 624.901347][T12033] netlink: 64094 bytes leftover after parsing attributes in process `syz.1.2169'. [ 625.125914][T12039] bond0: entered promiscuous mode [ 625.125941][T12039] bond_slave_0: entered promiscuous mode [ 625.126238][T12039] bond_slave_1: entered promiscuous mode [ 625.137803][T12039] dummy0: entered promiscuous mode [ 625.152180][T12039] hsr1: entered promiscuous mode [ 625.152270][T12039] hsr1: entered allmulticast mode [ 625.152283][T12039] bond0: entered allmulticast mode [ 625.152297][T12039] bond_slave_0: entered allmulticast mode [ 625.152316][T12039] bond_slave_1: entered allmulticast mode [ 625.152362][T12039] dummy0: entered allmulticast mode [ 625.229710][T12043] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2174'. [ 625.391319][T12051] netlink: 92 bytes leftover after parsing attributes in process `syz.5.2178'. [ 625.878653][ T62] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 626.072501][T12069] program syz.5.2186 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 627.383865][T12102] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 627.669780][T12116] netlink: 'syz.6.2207': attribute type 2 has an invalid length. [ 627.669833][T12116] netlink: 84 bytes leftover after parsing attributes in process `syz.6.2207'. [ 627.809414][T12118] tap0: tun_chr_ioctl cmd 1074025677 [ 627.809745][T12118] tap0: linktype set to 773 [ 628.724403][T12161] program syz.7.2228 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 628.746300][ T31] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 628.799846][T12163] dvmrp1: entered allmulticast mode [ 628.906896][ T31] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 628.906930][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.914106][ T31] usb 2-1: config 0 descriptor?? [ 628.939225][ T31] cp210x 2-1:0.0: cp210x converter detected [ 629.094345][T12169] ip6gre1: entered promiscuous mode [ 629.372218][ T31] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 629.381757][ T31] usb 2-1: cp210x converter now attached to ttyUSB0 [ 629.591301][ T9] usb 2-1: USB disconnect, device number 14 [ 629.612988][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 629.758488][ T9] cp210x 2-1:0.0: device disconnected [ 629.873043][ T62] Bluetooth: hci2: unexpected event for opcode 0x2060 [ 630.316663][ T62] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 630.316869][ T62] Bluetooth: hci1: Injecting HCI hardware error event [ 630.317999][ T62] Bluetooth: hci1: hardware error 0x00 [ 631.593826][T12211] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 632.030970][T12235] openvswitch: netlink: Message has 4 unknown bytes. [ 632.140965][ T9] kernel read not supported for file /bluetooth/6lowpan_control (pid: 9 comm: kworker/0:0) [ 632.161629][ T9] kernel write not supported for file /1432/loginuid (pid: 9 comm: kworker/0:0) [ 632.760649][T12264] netlink: 312 bytes leftover after parsing attributes in process `syz.1.2275'. [ 633.176393][T12283] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2282'. [ 633.532018][ T62] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 634.244499][ T6046] kernel read not supported for file /dsp1 (pid: 6046 comm: kworker/0:6) [ 634.268891][T12308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2293'. [ 636.627037][T12353] input: syz0 as /devices/virtual/input/input15 [ 638.338499][T12384] bridge0: entered promiscuous mode [ 638.338743][T12384] macvlan2: entered promiscuous mode [ 640.215969][ T9] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 640.429840][ T9] usb 6-1: config 0 has an invalid interface number: 251 but max is 0 [ 640.429873][ T9] usb 6-1: config 0 has no interface number 0 [ 640.433256][ T9] usb 6-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 640.433287][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.433306][ T9] usb 6-1: Product: syz [ 640.433321][ T9] usb 6-1: Manufacturer: syz [ 640.433336][ T9] usb 6-1: SerialNumber: syz [ 640.505291][ T9] usb 6-1: config 0 descriptor?? [ 640.567055][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 640.567140][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 641.676795][T12439] ip6gre1: entered promiscuous mode [ 641.676826][T12439] ip6gre1: entered allmulticast mode [ 641.698286][T12440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2347'. [ 641.737002][ T9] asix 6-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 641.737518][ T9] asix 6-1:0.251: probe with driver asix failed with error -524 [ 641.979539][ T9] usb 6-1: USB disconnect, device number 9 [ 642.152915][T12454] cifs: Unknown parameter 'mode' [ 642.664518][T11887] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 642.664857][T11887] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 642.693847][ T5958] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 643.515891][ T5958] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 643.538451][ T5863] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 645.041928][T12526] netlink: 'syz.1.2387': attribute type 2 has an invalid length. [ 645.724536][T12544] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2395'. [ 645.859052][ T2365] pvrusb2: request_firmware fatal error with code=-110 [ 645.859072][ T2365] pvrusb2: Failure uploading firmware1 [ 645.859080][ T2365] pvrusb2: Device initialization was not successful. [ 645.859088][ T2365] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 645.859099][ T2365] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 645.861207][ T5870] pvrusb2: Device being rendered inoperable [ 645.895704][T10376] udevd[10376]: setting mode of /dev/bus/usb/007/008 to 020664 failed: No such file or directory [ 645.895929][T10376] udevd[10376]: setting owner of /dev/bus/usb/007/008 to uid=0, gid=0 failed: No such file or directory [ 645.905704][T10376] udevd[10376]: failed to send result of seq 16074 to main daemon: Connection refused [ 646.233997][ T5870] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 646.335430][T12560] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2403'. [ 646.396015][ T5870] usb 7-1: config 0 has an invalid interface number: 168 but max is 0 [ 646.396046][ T5870] usb 7-1: config 0 has no interface number 0 [ 646.396100][ T5870] usb 7-1: New USB device found, idVendor=05ab, idProduct=0060, bcdDevice=11.06 [ 646.396133][ T5870] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.423099][ T5870] usb 7-1: config 0 descriptor?? [ 646.657476][T12533] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 646.662340][T12533] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 646.665344][ T5805] Bluetooth: hci5: Malformed LE Event: 0x0d [ 646.670222][ T5870] usb 7-1: string descriptor 0 read error: -71 [ 646.676285][ T5870] usb-storage 7-1:0.168: USB Mass Storage device detected [ 646.696532][ T5870] usb-storage 7-1:0.168: Quirks match for vid 05ab pid 0060: 2 [ 646.801460][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 646.827028][ T5870] usb 7-1: USB disconnect, device number 9 [ 646.968831][T12575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2409'. [ 647.021487][T12575] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2409'. [ 647.536223][ C0] vkms_vblank_simulate: vblank timer overrun [ 647.776905][ T5805] Bluetooth: hci0: link tx timeout [ 647.779524][ T5805] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 647.796867][ T5805] Bluetooth: hci0: link tx timeout [ 647.796889][ T5805] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 647.798110][T12600] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 648.402771][T12618] kvm: kvm [12617]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x882 [ 649.365008][T12637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2439'. [ 649.952829][ T5805] Bluetooth: hci0: command 0x0406 tx timeout [ 653.094373][T12680] netlink: 'syz.6.2454': attribute type 4 has an invalid length. [ 653.094398][T12680] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2454'. [ 653.161223][T12681] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 654.296811][T12707] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2468'. [ 654.570009][T12716] netlink: 'syz.6.2470': attribute type 3 has an invalid length. [ 654.880411][T12730] ALSA: mixer_oss: invalid OSS volume '' [ 655.426327][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 657.771145][T12787] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 658.328707][T12809] loop8: detected capacity change from 0 to 1 [ 658.362598][T12809] Dev loop8: unable to read RDB block 1 [ 658.362650][T12809] loop8: unable to read partition table [ 658.362918][T12809] loop8: partition table beyond EOD, truncated [ 658.362939][T12809] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 658.613432][T12817] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 658.613607][T12817] syzkaller0: linktype set to 1 [ 659.796748][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e3e2800: rx timeout, send abort [ 660.333817][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805e3e2800: abort rx timeout. Force session deactivation [ 660.419349][T12875] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2546'. [ 660.419384][T12875] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2546'. [ 660.533884][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2547'. [ 661.745080][ T6046] kernel read not supported for file /dsp (pid: 6046 comm: kworker/0:6) [ 661.901101][T12928] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2568'. [ 661.947718][T12913] ./file0: Can't open blockdev [ 662.315708][T12945] sp0: Synchronizing with TNC [ 662.327771][T12944] [U] è`` [ 664.809663][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2602'. [ 664.809699][T13005] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2602'. [ 665.051332][ T5863] IPVS: starting estimator thread 0... [ 665.150372][T13018] IPVS: using max 7 ests per chain, 16800 per kthread [ 666.016265][T13035] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2614'. [ 666.852233][T13054] ªªªªªª: renamed from vlan0 (while UP) [ 667.154289][ T9] kernel read not supported for file /dsp (pid: 9 comm: kworker/0:0) [ 668.041881][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.077673][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.115024][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.151274][T13094] netlink: 388 bytes leftover after parsing attributes in process `syz.7.2642'. [ 668.172439][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.207596][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.246642][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.283596][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.320208][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.360562][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.399292][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.437475][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.473784][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.512925][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.550117][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.588173][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.626368][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.664529][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.702914][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.738070][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.772831][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.808396][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.832863][T13106] loop4: detected capacity change from 0 to 1 [ 668.845431][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.882279][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.921861][ C1] vkms_vblank_simulate: vblank timer overrun [ 668.996592][T13106] Dev loop4: unable to read RDB block 1 [ 668.996643][T13106] loop4: unable to read partition table [ 668.996923][T13106] loop4: partition table beyond EOD, truncated [ 668.996943][T13106] loop_reread_partitions: partition scan of loop4 (þ被xü^>Ñà– ) failed (rc=-5) [ 669.023106][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.060953][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.097628][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.138367][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.177629][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.215212][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.541404][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.577654][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.611838][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.648294][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.684820][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.719939][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.755167][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.793496][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.832873][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.873233][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.914217][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.953132][ C1] vkms_vblank_simulate: vblank timer overrun [ 669.992581][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.029856][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.067403][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.106727][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.145329][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.183667][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.222597][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.260709][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.299049][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.339751][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.379335][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.379603][T13135] netlink: 'syz.6.2659': attribute type 10 has an invalid length. [ 670.414974][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.450334][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.544077][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.579919][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.617489][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.658500][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.697608][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.734448][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.775182][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.811410][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.850964][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.872713][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.911435][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.948343][ C1] vkms_vblank_simulate: vblank timer overrun [ 670.989077][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.027886][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.065911][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.086322][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.165308][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 671.713322][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.782020][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.820517][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.875008][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.922266][ C1] vkms_vblank_simulate: vblank timer overrun [ 671.966764][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.010706][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.037696][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.088458][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.129532][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.156438][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.225796][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.270452][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.302131][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.340743][ C1] vkms_vblank_simulate: vblank timer overrun [ 672.546969][T13135] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 673.219957][T13158] bond0: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 673.703638][ T57] Bluetooth: hci6: Frame reassembly failed (-84) [ 673.744219][ T37] kauditd_printk_skb: 14 callbacks suppressed [ 673.744240][ T37] audit: type=1326 audit(2000000039.501:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13168 comm="syz.7.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4640f749 code=0x7ffc0000 [ 673.745253][ T37] audit: type=1326 audit(2000000039.501:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13168 comm="syz.7.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4640f749 code=0x7ffc0000 [ 673.810792][ T37] audit: type=1326 audit(2000000039.558:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13168 comm="syz.7.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4640f749 code=0x7ffc0000 [ 673.811402][ T37] audit: type=1326 audit(2000000039.558:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13168 comm="syz.7.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffb4640df90 code=0x7ffc0000 [ 673.812320][ T37] audit: type=1326 audit(2000000039.558:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13168 comm="syz.7.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4640f749 code=0x7ffc0000 [ 673.812373][ T37] audit: type=1326 audit(2000000039.558:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13168 comm="syz.7.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4640f749 code=0x7ffc0000 [ 673.813794][ T37] audit: type=1326 audit(2000000039.558:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13168 comm="syz.7.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4640f749 code=0x7ffc0000 [ 673.926615][ T37] audit: type=1326 audit(2000000039.670:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13168 comm="syz.7.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ffb4640f749 code=0x7ffc0000 [ 673.926673][ T37] audit: type=1326 audit(2000000039.670:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13168 comm="syz.7.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4640f749 code=0x7ffc0000 [ 673.926719][ T37] audit: type=1326 audit(2000000039.670:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13168 comm="syz.7.2674" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffb4640f749 code=0x7ffc0000 [ 675.097045][ T62] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 675.868037][ T5805] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 677.714861][T13185] input: syz0 as /devices/virtual/input/input16 [ 678.806564][ T6046] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 679.010151][ T6046] usb 2-1: Using ep0 maxpacket: 32 [ 679.013358][ T6046] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 679.013385][ T6046] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 679.013406][ T6046] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 679.013428][ T6046] usb 2-1: config 1 has no interface number 0 [ 679.013482][ T6046] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 679.013510][ T6046] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 679.013554][ T6046] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 679.013578][ T6046] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 679.167096][ T6046] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 679.558640][ T6046] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 680.127705][ T6046] usb 2-1: USB disconnect, device number 15 [ 680.166246][ T6046] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 683.677690][T13243] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2706'. [ 683.913834][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2708'. [ 688.111506][T13303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2732'. [ 689.830107][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 689.855316][ T5805] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 689.870673][ T5805] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 689.878897][ T5805] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 689.887006][ T5805] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 690.213350][T13321] lo speed is unknown, defaulting to 1000 [ 690.241062][T13328] netlink: 'syz.0.2743': attribute type 11 has an invalid length. [ 690.241087][T13328] netlink: 190972 bytes leftover after parsing attributes in process `syz.0.2743'. [ 691.074993][T13321] chnl_net:caif_netlink_parms(): no params data found [ 692.116414][T13167] Bluetooth: hci4: command tx timeout [ 692.226888][T13353] sock: sock_set_timeout: `syz.5.2752' (pid 13353) tries to set negative timeout [ 693.917635][T13321] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.920337][T13321] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.920606][T13321] bridge_slave_0: entered allmulticast mode [ 693.953856][T13321] bridge_slave_0: entered promiscuous mode [ 693.984497][T13321] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.984738][T13321] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.985026][T13321] bridge_slave_1: entered allmulticast mode [ 694.015442][T13321] bridge_slave_1: entered promiscuous mode [ 694.340027][T13167] Bluetooth: hci4: command tx timeout [ 694.349155][T13369] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2759'. [ 695.103928][T13321] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.109093][T13321] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.777197][T13393] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 696.563665][T13167] Bluetooth: hci4: command tx timeout [ 697.462770][T13321] team0: Port device team_slave_0 added [ 697.480971][T13321] team0: Port device team_slave_1 added [ 698.787285][T13167] Bluetooth: hci4: command tx timeout [ 698.939146][ T5805] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 698.965668][ T5805] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 698.968153][ T5805] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 698.989319][ T5805] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 699.003444][ T5805] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 699.561346][T13416] bond0: entered promiscuous mode [ 699.561372][T13416] bond_slave_0: entered promiscuous mode [ 699.561643][T13416] bond_slave_1: entered promiscuous mode [ 699.591871][T13416] batadv_slave_0: entered promiscuous mode [ 699.592391][T13416] batadv_slave_0: left promiscuous mode [ 699.775736][T13416] bond0: left promiscuous mode [ 699.775762][T13416] bond_slave_0: left promiscuous mode [ 699.776164][T13416] bond_slave_1: left promiscuous mode [ 701.134255][T13321] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 701.134284][T13321] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.134313][T13321] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 701.153781][T13321] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 701.153799][T13321] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 701.153823][T13321] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 701.267883][ T5805] Bluetooth: hci6: command tx timeout [ 702.068110][T13419] lo speed is unknown, defaulting to 1000 [ 702.168817][ T9] kernel read not supported for file /dsp (pid: 9 comm: kworker/0:0) [ 702.846736][T13419] chnl_net:caif_netlink_parms(): no params data found [ 703.320180][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 703.449501][T13321] hsr_slave_0: entered promiscuous mode [ 703.451144][T13321] hsr_slave_1: entered promiscuous mode [ 703.452269][T13321] debugfs: 'hsr0' already exists in 'hsr' [ 703.452297][T13321] Cannot create hsr debugfs directory [ 703.491271][ T5805] Bluetooth: hci6: command tx timeout [ 705.714887][ T5805] Bluetooth: hci6: command tx timeout [ 706.066108][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 706.066191][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 707.938474][ T5805] Bluetooth: hci6: command tx timeout [ 710.624159][T13167] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 710.657087][T13167] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 710.658737][T13167] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 710.660708][T13167] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 710.661658][T13167] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 711.549044][ C0] vkms_vblank_simulate: vblank timer overrun [ 712.822611][ C0] vkms_vblank_simulate: vblank timer overrun [ 712.900873][T13167] Bluetooth: hci0: command tx timeout [ 713.021463][T13146] bond0: (slave syz_tun): Releasing backup interface [ 713.534036][T13419] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.534195][T13419] bridge0: port 1(bridge_slave_0) entered disabled state [ 713.534469][T13419] bridge_slave_0: entered allmulticast mode [ 713.566440][T13419] bridge_slave_0: entered promiscuous mode [ 713.608714][T13419] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.608895][T13419] bridge0: port 2(bridge_slave_1) entered disabled state [ 713.609124][T13419] bridge_slave_1: entered allmulticast mode [ 713.614480][T13419] bridge_slave_1: entered promiscuous mode [ 714.311584][ T5805] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 714.336920][ T5805] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 714.368782][ T5805] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 714.370920][ T5805] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 714.371967][ T5805] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 715.122513][T13167] Bluetooth: hci0: command tx timeout [ 715.544781][ T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 715.702643][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 715.702674][ T9] usb 2-1: config 0 has no interface number 0 [ 715.705946][ T9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 715.705975][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.705995][ T9] usb 2-1: Product: syz [ 715.706010][ T9] usb 2-1: Manufacturer: syz [ 715.706025][ T9] usb 2-1: SerialNumber: syz [ 715.769910][ T9] usb 2-1: config 0 descriptor?? [ 715.975034][T13419] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 716.097991][ T9] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 716.122643][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 716.123113][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 716.123174][ T9] usb 2-1: media controller created [ 716.190254][T13419] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 716.208114][T13462] lo speed is unknown, defaulting to 1000 [ 716.268380][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 716.313367][T13477] usb 2-1: dvb_usb_ec168: I2C read not implemented [ 716.352930][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 716.423940][ T9] usb 2-1: USB disconnect, device number 16 [ 716.580126][T13167] Bluetooth: hci5: command tx timeout [ 717.346245][T13167] Bluetooth: hci0: command tx timeout [ 717.476505][ T991] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 717.659770][ T991] usb 2-1: unable to get BOS descriptor or descriptor too short [ 717.662138][ T991] usb 2-1: not running at top speed; connect to a high speed hub [ 717.663759][ T991] usb 2-1: config 129 has an invalid interface number: 51 but max is 0 [ 717.663784][ T991] usb 2-1: config 129 has no interface number 0 [ 717.663838][ T991] usb 2-1: config 129 interface 51 altsetting 1 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 717.663868][ T991] usb 2-1: config 129 interface 51 has no altsetting 0 [ 717.776105][ T991] usb 2-1: New USB device found, idVendor=c6fc, idProduct=c78f, bcdDevice=5d.62 [ 717.776139][ T991] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.776159][ T991] usb 2-1: Product: syz [ 717.776174][ T991] usb 2-1: Manufacturer: syz [ 717.776189][ T991] usb 2-1: SerialNumber: syz [ 718.172542][ T991] usb 2-1: USB disconnect, device number 17 [ 718.800118][T13167] Bluetooth: hci5: command tx timeout [ 719.079260][T13472] lo speed is unknown, defaulting to 1000 [ 719.127726][T13419] team0: Port device team_slave_0 added [ 719.230106][T13419] team0: Port device team_slave_1 added [ 719.570917][T13167] Bluetooth: hci0: command tx timeout [ 720.973420][T13419] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 720.973441][T13419] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 720.973468][T13419] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 721.024148][T13167] Bluetooth: hci5: command tx timeout [ 721.143951][T13419] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 721.143971][T13419] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 721.144000][T13419] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 723.247528][T13167] Bluetooth: hci5: command tx timeout [ 724.130726][T13419] hsr_slave_0: entered promiscuous mode [ 724.143504][T13419] hsr_slave_1: entered promiscuous mode [ 724.156252][T13419] debugfs: 'hsr0' already exists in 'hsr' [ 724.156285][T13419] Cannot create hsr debugfs directory [ 724.231244][T13321] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 725.665088][T13321] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 731.848941][T13321] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 732.808445][T13504] netlink: 'syz.1.2815': attribute type 21 has an invalid length. [ 732.808471][T13504] netlink: 'syz.1.2815': attribute type 1 has an invalid length. [ 732.808485][T13504] netlink: 'syz.1.2815': attribute type 2 has an invalid length. [ 732.808499][T13504] netlink: 9062 bytes leftover after parsing attributes in process `syz.1.2815'. [ 732.813147][T13321] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 734.968979][T13462] chnl_net:caif_netlink_parms(): no params data found [ 735.014331][T13472] chnl_net:caif_netlink_parms(): no params data found [ 751.410380][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 751.448278][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 751.462823][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 751.464908][ T5805] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 751.465966][ T5805] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 751.607103][T13462] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.607311][T13462] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.607578][T13462] bridge_slave_0: entered allmulticast mode [ 751.641339][T13462] bridge_slave_0: entered promiscuous mode [ 751.666568][T13472] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.666732][T13472] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.667019][T13472] bridge_slave_0: entered allmulticast mode [ 751.671958][T13472] bridge_slave_0: entered promiscuous mode [ 751.717236][T13462] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.717437][T13462] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.718081][T13462] bridge_slave_1: entered allmulticast mode [ 751.721535][T13462] bridge_slave_1: entered promiscuous mode [ 751.723632][T13472] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.723786][T13472] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.724822][T13472] bridge_slave_1: entered allmulticast mode [ 751.796948][T13472] bridge_slave_1: entered promiscuous mode [ 753.699010][ T5805] Bluetooth: hci2: command tx timeout [ 753.947941][T13167] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 753.968347][T13167] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 753.988654][T13167] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 753.990064][T13167] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 753.990998][T13167] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 755.918921][ T5805] Bluetooth: hci2: command tx timeout [ 755.936421][T13419] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 756.260729][ T5805] Bluetooth: hci3: command tx timeout [ 756.341578][T13462] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 756.367927][T13472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 758.142451][ T5805] Bluetooth: hci2: command tx timeout [ 758.483841][ T5805] Bluetooth: hci3: command tx timeout [ 759.638243][T13419] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 759.911707][T13462] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.941252][T13472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 759.991908][T13419] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 760.368738][ T5805] Bluetooth: hci2: command tx timeout [ 760.707748][ T5805] Bluetooth: hci3: command tx timeout [ 761.367056][T13546] lo speed is unknown, defaulting to 1000 [ 761.629968][T13419] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 762.931286][ T5805] Bluetooth: hci3: command tx timeout [ 763.351288][T13167] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 763.378478][T13167] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 763.392504][T13167] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 763.394458][T13167] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 763.395463][T13167] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 765.667772][ T5805] Bluetooth: hci4: command tx timeout [ 766.122081][T13462] team0: Port device team_slave_0 added [ 766.134567][T13472] team0: Port device team_slave_0 added [ 766.161688][T13462] team0: Port device team_slave_1 added [ 766.165339][T13472] team0: Port device team_slave_1 added [ 766.266653][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 767.895900][ T5805] Bluetooth: hci4: command tx timeout [ 769.376332][T13551] lo speed is unknown, defaulting to 1000 [ 770.115488][ T5805] Bluetooth: hci4: command tx timeout [ 771.748198][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 771.748313][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 772.338738][ T5805] Bluetooth: hci4: command tx timeout [ 774.374530][T13167] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 774.401264][T13167] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 774.420006][T13167] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 774.421794][T13167] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 774.422734][T13167] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 774.569343][T13462] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.569362][T13462] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.569392][T13462] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.627913][T13472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 774.627930][T13472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.627955][T13472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 774.774153][T13472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 774.774173][T13472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 774.774202][T13472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 774.942788][T13554] lo speed is unknown, defaulting to 1000 [ 776.436088][T13472] hsr_slave_0: entered promiscuous mode [ 776.442384][T13472] hsr_slave_1: entered promiscuous mode [ 776.471202][T13472] debugfs: 'hsr0' already exists in 'hsr' [ 776.471236][T13472] Cannot create hsr debugfs directory [ 776.486814][T13559] lo speed is unknown, defaulting to 1000 [ 776.701220][T13167] Bluetooth: hci6: command tx timeout [ 778.867167][ T5805] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 778.907352][ T5805] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 778.913035][ T5805] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 778.925143][ T5805] Bluetooth: hci6: command tx timeout [ 778.935988][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 778.936952][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 781.148615][ T62] Bluetooth: hci0: command tx timeout [ 781.149255][ T62] Bluetooth: hci6: command tx timeout [ 781.912501][T13564] lo speed is unknown, defaulting to 1000 [ 782.080109][T13546] chnl_net:caif_netlink_parms(): no params data found [ 783.372121][T13167] Bluetooth: hci6: command tx timeout [ 783.372159][T13167] Bluetooth: hci0: command tx timeout [ 784.362550][T13551] chnl_net:caif_netlink_parms(): no params data found [ 784.564948][T13554] chnl_net:caif_netlink_parms(): no params data found [ 785.595350][ T62] Bluetooth: hci0: command tx timeout [ 787.818983][ T62] Bluetooth: hci0: command tx timeout [ 793.702019][T13546] bridge0: port 1(bridge_slave_0) entered blocking state [ 793.702255][T13546] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.702535][T13546] bridge_slave_0: entered allmulticast mode [ 793.706729][T13546] bridge_slave_0: entered promiscuous mode [ 793.797890][T13546] bridge0: port 2(bridge_slave_1) entered blocking state [ 793.798078][T13546] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.798396][T13546] bridge_slave_1: entered allmulticast mode [ 793.802101][T13546] bridge_slave_1: entered promiscuous mode [ 796.558657][T13559] chnl_net:caif_netlink_parms(): no params data found [ 797.345020][T13551] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.345228][T13551] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.345902][T13551] bridge_slave_0: entered allmulticast mode [ 797.350949][T13551] bridge_slave_0: entered promiscuous mode [ 798.660673][T13546] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 798.687277][T13551] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.687437][T13551] bridge0: port 2(bridge_slave_1) entered disabled state [ 798.687723][T13551] bridge_slave_1: entered allmulticast mode [ 798.715550][T13551] bridge_slave_1: entered promiscuous mode [ 799.850177][T13546] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 800.813281][T13554] bridge0: port 1(bridge_slave_0) entered blocking state [ 800.813457][T13554] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.813727][T13554] bridge_slave_0: entered allmulticast mode [ 800.817976][T13554] bridge_slave_0: entered promiscuous mode [ 802.476305][T13554] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.476477][T13554] bridge0: port 2(bridge_slave_1) entered disabled state [ 802.476754][T13554] bridge_slave_1: entered allmulticast mode [ 802.480107][T13554] bridge_slave_1: entered promiscuous mode [ 803.159336][T13551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 804.490150][T13546] team0: Port device team_slave_0 added [ 804.565389][T13551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 807.428995][T13546] team0: Port device team_slave_1 added [ 810.307423][T13554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 816.055583][T13167] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 816.060241][T13167] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 816.061939][T13167] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 816.092317][T13167] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 816.093403][T13167] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 816.351372][T13554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 818.351873][T13167] Bluetooth: hci1: command tx timeout [ 818.431526][ T62] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 818.454994][ T62] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 818.477828][ T62] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 818.490843][ T62] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 818.491916][ T62] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 819.042151][T13551] team0: Port device team_slave_0 added [ 819.077132][T13559] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.077323][T13559] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.077661][T13559] bridge_slave_0: entered allmulticast mode [ 819.161459][T13559] bridge_slave_0: entered promiscuous mode [ 820.575885][T13167] Bluetooth: hci1: command tx timeout [ 820.750619][T13167] Bluetooth: hci5: command tx timeout [ 821.180849][T13564] chnl_net:caif_netlink_parms(): no params data found [ 822.799001][T13167] Bluetooth: hci1: command tx timeout [ 822.969577][T13167] Bluetooth: hci5: command tx timeout [ 823.498970][ T6190] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 823.650857][T13559] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.651032][T13559] bridge0: port 2(bridge_slave_1) entered disabled state [ 823.651350][T13559] bridge_slave_1: entered allmulticast mode [ 823.655484][T13559] bridge_slave_1: entered promiscuous mode [ 825.071095][T13167] Bluetooth: hci1: command tx timeout [ 825.193604][T13167] Bluetooth: hci5: command tx timeout [ 827.417003][T13167] Bluetooth: hci5: command tx timeout [ 827.926046][ T62] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 827.943990][ T62] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 827.945919][ T62] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 827.947325][ T62] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 827.948233][ T62] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 830.153687][ T62] Bluetooth: hci2: command tx timeout [ 831.134742][T13554] team0: Port device team_slave_0 added [ 832.377466][ T62] Bluetooth: hci2: command tx timeout [ 832.705655][T13559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.778937][T13559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 833.428980][T13593] lo speed is unknown, defaulting to 1000 [ 834.310763][T13598] lo speed is unknown, defaulting to 1000 [ 834.611947][ T62] Bluetooth: hci2: command tx timeout [ 836.270260][T13559] team0: Port device team_slave_0 added [ 836.824838][ T62] Bluetooth: hci2: command tx timeout [ 837.429014][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 837.429130][ T1320] ieee802154 phy1 wpan1: encryption failed: -22 [ 837.761925][T13559] team0: Port device team_slave_1 added [ 837.793564][T13604] lo speed is unknown, defaulting to 1000 [ 837.795633][T13564] bridge0: port 1(bridge_slave_0) entered blocking state [ 837.795790][T13564] bridge0: port 1(bridge_slave_0) entered disabled state [ 837.796559][T13564] bridge_slave_0: entered allmulticast mode [ 837.832536][T13564] bridge_slave_0: entered promiscuous mode [ 838.944960][T13167] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 838.982428][T13167] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 838.998887][T13167] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 839.000550][T13167] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 839.002336][T13167] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 839.119910][T13564] bridge0: port 2(bridge_slave_1) entered blocking state [ 839.120069][T13564] bridge0: port 2(bridge_slave_1) entered disabled state [ 839.120339][T13564] bridge_slave_1: entered allmulticast mode [ 839.150164][T13564] bridge_slave_1: entered promiscuous mode [ 841.186401][T13167] Bluetooth: hci3: command tx timeout [ 841.309956][T13564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 841.404319][T13564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.419041][T13167] Bluetooth: hci3: command tx timeout [ 843.513602][ T62] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 843.546519][ T62] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 843.548268][ T62] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 843.565277][ T62] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 843.566180][ T62] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 845.629733][T13610] lo speed is unknown, defaulting to 1000 [ 845.645197][T13167] Bluetooth: hci3: command tx timeout [ 845.804916][T13167] Bluetooth: hci4: command tx timeout [ 846.738274][T13615] lo speed is unknown, defaulting to 1000 [ 847.648438][T13593] chnl_net:caif_netlink_parms(): no params data found [ 847.857497][T13167] Bluetooth: hci3: command tx timeout [ 847.901149][T13598] chnl_net:caif_netlink_parms(): no params data found [ 848.031738][T13167] Bluetooth: hci4: command tx timeout [ 850.263235][T13167] Bluetooth: hci4: command tx timeout [ 852.476151][T13167] Bluetooth: hci4: command tx timeout [ 853.042678][T13604] chnl_net:caif_netlink_parms(): no params data found [ 856.227117][T13593] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.227367][T13593] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.230607][T13593] bridge_slave_0: entered allmulticast mode [ 856.234901][T13593] bridge_slave_0: entered promiscuous mode [ 856.644416][T13610] chnl_net:caif_netlink_parms(): no params data found [ 856.699680][T13593] bridge0: port 2(bridge_slave_1) entered blocking state [ 856.699849][T13593] bridge0: port 2(bridge_slave_1) entered disabled state [ 856.700161][T13593] bridge_slave_1: entered allmulticast mode [ 856.704071][T13593] bridge_slave_1: entered promiscuous mode [ 856.705855][T13598] bridge0: port 1(bridge_slave_0) entered blocking state [ 856.706017][T13598] bridge0: port 1(bridge_slave_0) entered disabled state [ 856.706332][T13598] bridge_slave_0: entered allmulticast mode [ 856.716506][T13598] bridge_slave_0: entered promiscuous mode [ 857.348737][T13598] bridge0: port 2(bridge_slave_1) entered blocking state [ 857.348928][T13598] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.349244][T13598] bridge_slave_1: entered allmulticast mode [ 857.356458][T13598] bridge_slave_1: entered promiscuous mode [ 861.001290][T13593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.163618][T13593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.191542][T13598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.193653][T13604] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.193822][T13604] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.194095][T13604] bridge_slave_0: entered allmulticast mode [ 863.197534][T13604] bridge_slave_0: entered promiscuous mode [ 863.231860][T13598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.828276][T13604] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.828554][T13604] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.829601][T13604] bridge_slave_1: entered allmulticast mode [ 863.832653][T13604] bridge_slave_1: entered promiscuous mode [ 868.343596][T13593] team0: Port device team_slave_0 added [ 869.047780][T13598] team0: Port device team_slave_0 added [ 869.048876][T13615] chnl_net:caif_netlink_parms(): no params data found [ 869.502900][T13593] team0: Port device team_slave_1 added [ 869.526557][T13604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.544638][T13598] team0: Port device team_slave_1 added [ 870.006700][T13610] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.006930][T13610] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.007208][T13610] bridge_slave_0: entered allmulticast mode [ 870.035562][T13610] bridge_slave_0: entered promiscuous mode [ 870.057227][T13604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.273684][T13610] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.273844][T13610] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.274181][T13610] bridge_slave_1: entered allmulticast mode [ 871.277807][T13610] bridge_slave_1: entered promiscuous mode [ 872.281258][T13593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.281280][T13593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.281308][T13593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.235395][T13598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.235415][T13598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.235444][T13598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.308288][T13593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.308307][T13593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.308337][T13593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.907382][T13604] team0: Port device team_slave_0 added [ 874.910959][T13598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.910977][T13598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.911005][T13598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 875.034329][T13610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 875.057555][T13604] team0: Port device team_slave_1 added [ 875.167422][T13610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.070097][T13604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 880.070117][T13604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 880.070144][T13604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 880.678606][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 880.708202][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 880.727645][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 880.729393][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 880.730392][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 881.256739][T13615] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.257250][T13615] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.257627][T13615] bridge_slave_0: entered allmulticast mode [ 881.288519][T13615] bridge_slave_0: entered promiscuous mode [ 881.313429][T13610] team0: Port device team_slave_0 added [ 881.315421][T13604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 881.315436][T13604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.315465][T13604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.176649][T13615] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.176809][T13615] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.177096][T13615] bridge_slave_1: entered allmulticast mode [ 882.181982][T13615] bridge_slave_1: entered promiscuous mode [ 882.214455][T13610] team0: Port device team_slave_1 added [ 882.255530][T13598] hsr_slave_0: entered promiscuous mode [ 882.257440][T13598] hsr_slave_1: entered promiscuous mode [ 882.258836][T13598] debugfs: 'hsr0' already exists in 'hsr' [ 882.258863][T13598] Cannot create hsr debugfs directory [ 883.019614][T13167] Bluetooth: hci0: command tx timeout [ 883.052988][ T62] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 883.057418][ T62] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 883.059078][ T62] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 883.060498][ T62] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 883.100367][ T62] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 885.232327][ T62] Bluetooth: hci0: command tx timeout [ 885.317485][ T62] Bluetooth: hci1: command tx timeout [ 887.455252][T13167] Bluetooth: hci0: command tx timeout [ 887.541242][T13167] Bluetooth: hci1: command tx timeout [ 888.542301][T13615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 888.557068][T13610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 888.557088][T13610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 888.557117][T13610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 889.137112][T13615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 889.162707][T13610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 889.162728][T13610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 889.162758][T13610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 889.275058][T13604] hsr_slave_0: entered promiscuous mode [ 889.277040][T13604] hsr_slave_1: entered promiscuous mode [ 889.280041][T13604] debugfs: 'hsr0' already exists in 'hsr' [ 889.280070][T13604] Cannot create hsr debugfs directory [ 889.678848][T13167] Bluetooth: hci0: command tx timeout [ 889.764926][T13167] Bluetooth: hci1: command tx timeout [ 890.006795][T13646] lo speed is unknown, defaulting to 1000 [ 890.718851][T13615] team0: Port device team_slave_0 added [ 890.747535][T13649] lo speed is unknown, defaulting to 1000 [ 891.988926][T13167] Bluetooth: hci1: command tx timeout [ 892.159141][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 892.621938][ T62] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 892.649380][ T62] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 892.660739][ T62] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 892.670163][ T62] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 892.671235][ T62] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 894.076121][T13615] team0: Port device team_slave_1 added [ 894.983993][T13167] Bluetooth: hci5: command tx timeout [ 897.206249][T13167] Bluetooth: hci5: command tx timeout [ 898.274638][T13610] hsr_slave_0: entered promiscuous mode [ 898.276627][T13610] hsr_slave_1: entered promiscuous mode [ 898.277993][T13610] debugfs: 'hsr0' already exists in 'hsr' [ 898.278021][T13610] Cannot create hsr debugfs directory [ 898.898814][T13615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 898.898835][T13615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 898.898864][T13615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 899.027902][T13615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 899.027922][T13615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 899.027951][T13615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 899.429836][T13167] Bluetooth: hci5: command tx timeout [ 899.686545][ T38] INFO: task syz.0.2781:13416 blocked for more than 143 seconds. [ 899.686574][ T38] Not tainted syzkaller #0 [ 899.686585][ T38] Blocked by coredump. [ 899.686592][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 899.686603][ T38] task:syz.0.2781 state:D stack:22184 pid:13416 tgid:13415 ppid:5808 task_flags:0x40054c flags:0x00080001 [ 899.686668][ T38] Call Trace: [ 899.686677][ T38] [ 899.686693][ T38] __schedule+0x16f3/0x4c20 [ 899.686753][ T38] ? finish_task_switch+0x266/0x950 [ 899.686791][ T38] ? __pfx___schedule+0x10/0x10 [ 899.686844][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 899.686888][ T38] rt_mutex_schedule+0x77/0xf0 [ 899.686911][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 899.686937][ T38] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 899.686984][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 899.687013][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 899.687039][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 899.687061][ T38] ? __lock_acquire+0xab9/0xd20 [ 899.687103][ T38] ? rcu_barrier+0x4c/0x570 [ 899.687141][ T38] ? rcu_barrier+0x4c/0x570 [ 899.687161][ T38] mutex_lock_nested+0x16a/0x1d0 [ 899.687184][ T38] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 899.687211][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 899.687241][ T38] rcu_barrier+0x4c/0x570 [ 899.687268][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 899.687295][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 899.687323][ T38] netdev_run_todo+0x327/0xea0 [ 899.687355][ T38] ? __pfx_netif_state_change+0x10/0x10 [ 899.687388][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 899.687415][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 899.687457][ T38] ? netdev_state_change+0x1ca/0x220 [ 899.687482][ T38] ? __pfx_tun_chr_close+0x10/0x10 [ 899.687509][ T38] tun_chr_close+0x13f/0x1c0 [ 899.687538][ T38] __fput+0x45b/0xa80 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 899.687576][ T38] task_work_run+0x1d4/0x260 [ 899.687601][ T38] ? __pfx_task_work_run+0x10/0x10 [ 899.687622][ T38] ? do_exit+0x6b0/0x2300 [ 899.687654][ T38] ? do_exit+0x6b0/0x2300 [ 899.687690][ T38] do_exit+0x6b5/0x2300 [ 899.687721][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 899.687765][ T38] ? __pfx_do_exit+0x10/0x10 [ 899.687793][ T38] ? rt_mutex_slowunlock+0x493/0x8a0 [ 899.687817][ T38] ? rt_spin_lock+0x1c1/0x3e0 [ 899.687867][ T38] do_group_exit+0x21c/0x2d0 [ 899.687888][ T38] ? rt_spin_unlock+0x161/0x200 [ 899.687916][ T38] get_signal+0x125d/0x1310 [ 899.687970][ T38] arch_do_signal_or_restart+0xa0/0x790 [ 899.687999][ T38] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 899.688023][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 899.688069][ T38] ? exit_to_user_mode_loop+0x40/0x130 [ 899.688103][ T38] exit_to_user_mode_loop+0x72/0x130 [ 899.688130][ T38] do_syscall_64+0x2bd/0xfa0 [ 899.688158][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 899.688187][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.688209][ T38] ? clear_bhb_loop+0x60/0xb0 [ 899.688237][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.688258][ T38] RIP: 0033:0x7f16595cf749 [ 899.688277][ T38] RSP: 002b:00007f1657836038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 899.688299][ T38] RAX: 0000000000000050 RBX: 00007f1659825fa0 RCX: 00007f16595cf749 [ 899.688314][ T38] RDX: 0000000000008000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 899.688328][ T38] RBP: 00007f1659653f91 R08: 0000000000000000 R09: 0000000000000000 [ 899.688342][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 899.688355][ T38] R13: 00007f1659826038 R14: 00007f1659825fa0 R15: 00007fffa824f798 [ 899.688394][ T38] [ 899.688440][ T38] [ 899.688440][ T38] Showing all locks held in the system: [ 899.688451][ T38] 4 locks held by ktimers/1/29: [ 899.688464][ T38] 1 lock held by khungtaskd/38: [ 899.688476][ T38] #0: ffffffff8d5aa880 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 899.688553][ T38] 2 locks held by getty/5561: [ 899.688564][ T38] #0: ffff88823bf608a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 899.688618][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 899.688681][ T38] 6 locks held by kworker/u8:17/6190: [ 899.688693][ T38] #0: ffff888019ad4938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 899.688747][ T38] #1: ffffc900056c7ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 899.688799][ T38] #2: ffffffff8e856ac0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 899.688847][ T38] #3: ffff88805f0b20d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 899.688904][ T38] #4: ffff88805f0b5300 (&devlink->lock_key#10){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 899.688956][ T38] #5: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 899.689014][ T38] 1 lock held by syz-executor/13321: [ 899.689026][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 899.689075][ T38] 1 lock held by syz.5.2756/13361: [ 899.689087][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 899.689134][ T38] 1 lock held by syz.0.2781/13416: [ 899.689144][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 899.689193][ T38] 1 lock held by syz-executor/13419: [ 899.689204][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 899.689253][ T38] 1 lock held by syz-executor/13462: [ 899.689270][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 899.689318][ T38] 1 lock held by syz-executor/13472: [ 899.689329][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 899.689379][ T38] 1 lock held by syz.1.2824/13533: [ 899.689390][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 899.689438][ T38] 1 lock held by syz-executor/13546: [ 899.689450][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 899.689499][ T38] 1 lock held by syz-executor/13551: [ 899.689511][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 899.689560][ T38] 1 lock held by syz-executor/13554: [ 899.689571][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 899.689619][ T38] 1 lock held by syz-executor/13559: [ 899.689631][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 899.689679][ T38] 1 lock held by syz-executor/13564: [ 899.689690][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 899.689741][ T38] 1 lock held by syz-executor/13593: [ 899.689752][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 899.689801][ T38] 1 lock held by syz-executor/13598: [ 899.689812][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 899.689868][ T38] 1 lock held by syz-executor/13604: [ 899.689880][ T38] #0: ffffffff8d5b0230 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 899.689929][ T38] 2 locks held by syz-executor/13610: [ 899.689940][ T38] #0: ffffffff8dfed780 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 899.689993][ T38] #1: ffffffff8e8639b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 899.690041][ T38] 1 lock held by syz-executor/13615: [ 899.690053][ T38] #0: ffffffff8e8639b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 899.690102][ T38] 1 lock held by syz-executor/13646: [ 899.690112][ T38] #0: ffffffff8e8639b8 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37d/0x1df0 [ 899.690166][ T38] 2 locks held by syz-executor/13649: [ 899.690177][ T38] #0: ffffffff8e856ac0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 899.690224][ T38] #1: ffffffff8e8639b8 (rtnl_mutex){+.+.}-{4:4}, at: register_netdev+0x18/0x60 [ 899.690275][ T38] 5 locks held by syz-executor/13658: [ 899.690287][ T38] #0: ffffffff8e856ac0 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 899.690333][ T38] #1: ffffffff8e5cc3e0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 899.690385][ T38] #2: ffffffff8e5cc620 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 899.690435][ T38] #3: ffff88803349d118 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 899.690486][ T38] #4: ffffffff8e8639b8 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 899.690533][ T38] [ 899.690538][ T38] ============================================= [ 899.690538][ T38] [ 899.690548][ T38] NMI backtrace for cpu 0 [ 899.690562][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 899.690584][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 899.690596][ T38] Call Trace: [ 899.690604][ T38] [ 899.690612][ T38] dump_stack_lvl+0x189/0x250 [ 899.690648][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 899.690678][ T38] ? __pfx__printk+0x10/0x10 [ 899.690718][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 899.690746][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 899.690773][ T38] ? __pfx__printk+0x10/0x10 [ 899.690802][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 899.690829][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 899.690856][ T38] watchdog+0xf60/0xfa0 [ 899.690900][ T38] ? watchdog+0x1e2/0xfa0 [ 899.690936][ T38] kthread+0x711/0x8a0 [ 899.690969][ T38] ? __pfx_watchdog+0x10/0x10 [ 899.690996][ T38] ? __pfx_kthread+0x10/0x10 [ 899.691023][ T38] ? rt_spin_unlock+0x150/0x200 [ 899.691051][ T38] ? rt_spin_unlock+0x161/0x200 [ 899.691073][ T38] ? __pfx_kthread+0x10/0x10 [ 899.691104][ T38] ret_from_fork+0x4bc/0x870 [ 899.691130][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 899.691163][ T38] ? __switch_to_asm+0x39/0x70 [ 899.691182][ T38] ? __switch_to_asm+0x33/0x70 [ 899.691200][ T38] ? __pfx_kthread+0x10/0x10 [ 899.691231][ T38] ret_from_fork_asm+0x1a/0x30 [ 899.691272][ T38] [ 899.691280][ T38] Sending NMI from CPU 0 to CPUs 1: [ 899.691311][ C1] NMI backtrace for cpu 1 [ 899.691326][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 899.691345][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 899.691354][ C1] RIP: 0010:rcu_is_watching+0x55/0xb0 [ 899.691372][ C1] Code: cd f9 8c 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 7c 7e 7b 00 48 c7 c3 d8 d4 a3 91 49 03 1e 48 89 d8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 75 34 8b 03 65 ff 0d a9 b2 fd 0f 74 11 83 e0 [ 899.691385][ C1] RSP: 0018:ffffc90000a3eab8 EFLAGS: 00000a02 [ 899.691400][ C1] RAX: 1ffff1101712669b RBX: ffff8880b89334d8 RCX: fdd5d224f7ed5b00 [ 899.691413][ C1] RDX: 0000000000000000 RSI: ffffffff8b3ddfc0 RDI: ffffffff8b3ddf80 [ 899.691424][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff81736c15 [ 899.691435][ C1] R10: ffffc90000a3ebf8 R11: ffffffff81aacc60 R12: 1ffff92000147d75 [ 899.691446][ C1] R13: ffffc90000a3ebe0 R14: ffffffff8cf9cdd8 R15: dffffc0000000000 [ 899.691458][ C1] FS: 0000000000000000(0000) GS:ffff888126ef6000(0000) knlGS:0000000000000000 [ 899.691471][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 899.691482][ C1] CR2: 00007ffdec7b1f34 CR3: 000000004d0c6000 CR4: 00000000003526f0 [ 899.691499][ C1] Call Trace: [ 899.691505][ C1] [ 899.691511][ C1] ? __napi_poll+0xb6/0x540 [ 899.691533][ C1] ? unwind_next_frame+0xa5/0x2390 [ 899.691552][ C1] unwind_next_frame+0xd4/0x2390 [ 899.691574][ C1] ? unwind_next_frame+0xa5/0x2390 [ 899.691594][ C1] ? process_backlog+0x31e/0x900 [ 899.691610][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 899.691631][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 899.691649][ C1] arch_stack_walk+0x11c/0x150 [ 899.691671][ C1] ? __napi_poll+0xb6/0x540 [ 899.691693][ C1] stack_trace_save+0x9c/0xe0 [ 899.691709][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 899.691724][ C1] ? kmem_cache_free+0x19a/0x910 [ 899.691747][ C1] ? __lock_acquire+0xab9/0xd20 [ 899.691768][ C1] kasan_save_track+0x3e/0x80 [ 899.691785][ C1] ? kasan_save_track+0x3e/0x80 [ 899.691802][ C1] ? __kasan_save_free_info+0x46/0x50 [ 899.691817][ C1] ? __kasan_slab_free+0x5c/0x80 [ 899.691835][ C1] ? kmem_cache_free+0x19a/0x910 [ 899.691853][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 899.691873][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 899.691893][ C1] ? nft_do_chain+0x40c/0x1920 [ 899.691919][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 899.691938][ C1] ? nf_hook_slow+0xc5/0x220 [ 899.691955][ C1] ? NF_HOOK+0x206/0x3a0 [ 899.691968][ C1] ? NF_HOOK+0x30c/0x3a0 [ 899.691981][ C1] ? __netif_receive_skb+0x143/0x380 [ 899.692001][ C1] ? process_backlog+0x31e/0x900 [ 899.692015][ C1] ? __napi_poll+0xb6/0x540 [ 899.692053][ C1] __kasan_save_free_info+0x46/0x50 [ 899.692069][ C1] __kasan_slab_free+0x5c/0x80 [ 899.692088][ C1] kmem_cache_free+0x19a/0x910 [ 899.692106][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 899.692136][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 899.692160][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 899.692183][ C1] ? nf_ip_checksum+0x13c/0x510 [ 899.692205][ C1] nft_synproxy_do_eval+0x345/0x570 [ 899.692225][ C1] ? rt_spin_lock+0x1c1/0x3e0 [ 899.692245][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 899.692266][ C1] ? rt_spin_unlock+0x150/0x200 [ 899.692289][ C1] nft_do_chain+0x40c/0x1920 [ 899.692316][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 899.692346][ C1] ? try_to_take_rt_mutex+0x840/0xb00 [ 899.692370][ C1] nft_do_chain_inet+0x25d/0x340 [ 899.692390][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 899.692410][ C1] ? __lock_acquire+0xab9/0xd20 [ 899.692434][ C1] ? NF_HOOK+0x9a/0x3a0 [ 899.692449][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 899.692470][ C1] nf_hook_slow+0xc5/0x220 [ 899.692489][ C1] NF_HOOK+0x206/0x3a0 [ 899.692504][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 899.692520][ C1] ? NF_HOOK+0x9a/0x3a0 [ 899.692534][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 899.692547][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 899.692564][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 899.692580][ C1] ? skb_dst+0x4f/0xd0 [ 899.692595][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 899.692612][ C1] NF_HOOK+0x30c/0x3a0 [ 899.692628][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 899.692642][ C1] ? NF_HOOK+0x9a/0x3a0 [ 899.692656][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 899.692672][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 899.692692][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 899.692706][ C1] __netif_receive_skb+0x143/0x380 [ 899.692730][ C1] ? process_backlog+0x27b/0x900 [ 899.692744][ C1] process_backlog+0x31e/0x900 [ 899.692764][ C1] __napi_poll+0xb6/0x540 [ 899.692787][ C1] net_rx_action+0x5f7/0xda0 [ 899.692801][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 899.692822][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 899.692848][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 899.692878][ C1] handle_softirqs+0x22f/0x710 [ 899.692901][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 899.692923][ C1] run_ktimerd+0xcf/0x190 [ 899.692943][ C1] ? __pfx_run_ktimerd+0x10/0x10 [ 899.692966][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 899.692983][ C1] smpboot_thread_fn+0x542/0xa60 [ 899.693002][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 899.693024][ C1] kthread+0x711/0x8a0 [ 899.693046][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 899.693064][ C1] ? __pfx_kthread+0x10/0x10 [ 899.693083][ C1] ? rt_spin_unlock+0x150/0x200 [ 899.693102][ C1] ? rt_spin_unlock+0x161/0x200 [ 899.693125][ C1] ? __pfx_kthread+0x10/0x10 [ 899.693146][ C1] ret_from_fork+0x4bc/0x870 [ 899.693164][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 899.693185][ C1] ? __switch_to_asm+0x39/0x70 [ 899.693199][ C1] ? __switch_to_asm+0x33/0x70 [ 899.693213][ C1] ? __pfx_kthread+0x10/0x10 [ 899.693234][ C1] ret_from_fork_asm+0x1a/0x30 [ 899.693257][ C1] [ 901.664873][T13167] Bluetooth: hci5: command tx timeout [ 901.962833][T13658] lo speed is unknown, defaulting to 1000 [ 903.144523][ T1320] ieee802154 phy0 wpan0: encryption failed: -22 [ 903.144610][ T1320] ieee802154 phy1 wpan1: encryption failed: -22