last executing test programs: 5m50.060116522s ago: executing program 0 (id=1): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000180)={0x0, 0x5eab, 0x8, 0x8000, 0x400250}, &(0x7f0000000080)=0x0, &(0x7f0000000400)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x2007, @fd=r1, 0x6, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r2, 0x74d1, 0x4c3, 0x43, 0x0, 0xfffffffffffffd1d) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x10080, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100), 0xa000, 0x0) semtimedop(0x0, &(0x7f0000000180), 0x0, 0x0) llistxattr(&(0x7f00000001c0)='./file2\x00', &(0x7f0000000400)=""/84, 0x54) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) 5m48.721158874s ago: executing program 0 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xbcb7, 0x80, 0x3, 0x1000}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) pipe2(0x0, 0x80000) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/seq/clients\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000280)={0x2020}, 0x2020) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x4, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x30, 0x0, @fd=r1, 0x0, 0x0, 0x8, 0x77ccfad2b632319b, 0x161a24b4c8e61de9, {0x0, 0x0, r0}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB], &(0x7f0000000840)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 5m43.068974545s ago: executing program 0 (id=14): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) syz_io_uring_setup(0x9e, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r4, &(0x7f00000004c0)=""/57, 0x39) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x7f, 0x0}, 0x8) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r6, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$unix(0xffffffffffffffff, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) 5m32.856384009s ago: executing program 0 (id=17): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60407d29a874f4ec31c9effed55543a65a6b4d778cebcd43b7905f3960140bd783540a7353014bda8e9c7a34a5f428fd1f8eb11e837dd9d586487fdebcb1ecd3a003ff0fda4be617fecf1ff0ef2cdfb7fea73ca18874664d60a4b9423f3297bc8eb91b4ee1d73272ab28a7d7ab055a8eb58fe379de85338304e26e3620941b463e9049fd105c74c91cc4d71b0f76e2c2e4825106aa7ce2a3adbbc7a0443ece98c077b358e752b439132a0f27080ece2a94c320b002c77f82662675a7713c7067081cac15994698c41ff4754268ae2676384ff799783f55d7e5a1a092a01b965dc99cb7a9d98440c355927629f2bcf9dc2396eb2f5d25829715b24327642ac48f1201014a95e0e65e12cdf27e19043e3c5d3e798375cead35b9a93190a52cdecaaccc854a1d41ef365303f0e9b4fc969c9dab6df5e8a795b140fcc09e8a7b694d12932917facd8ceaa4e2d0d16bb0b95387fcd5ff136d8abddf94daf442bbff744591931872a36cf921ad69f2127386e8b0f9afee4da8d3fbec809fbb3ca0fded2859cf25d4c6155d396c5b9bd1a928923123f63f4c40688eae69990a9419456247bbaeb7948de84d2ff875414883bb1e503d4bfebc01bc12a53ea06bf38e571157bd642dac25dbee7832c58378374a39483d6721eec96c28911db21c0c006b42afc90000000000000000000000700000000000000000008ce4ea442c1a207108b35511186c5e860278f6463f52f3990ce08b1bfccc3cff4b5ae27b610aa9ba11b47d4f94c439e055cdbb2b12c983885c93ea4ab4ca1e02d831ae162ee104"], &(0x7f0000000100)='GPL\x00'}, 0x41) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wg2\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="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", 0x2e9}], 0x1}}], 0x1, 0x400c0) sendto$inet(r4, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0) 5m30.963579332s ago: executing program 0 (id=20): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x219}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000680), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f00000001c0)=0x2, 0x4) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc020aa08, &(0x7f0000000100)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r6 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r6, r5, &(0x7f00000000c0)=0x58, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x7, 0x2480) ioctl$HDIO_GETGEO(r7, 0x301, &(0x7f0000000180)) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000000)={0xf010000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) shutdown(r0, 0x0) recvmmsg(r8, &(0x7f0000002540), 0x0, 0x406, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) 5m26.848091018s ago: executing program 0 (id=24): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setrlimit(0xc, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000000008b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 5m17.80709213s ago: executing program 1 (id=30): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) syz_open_dev$sg(0x0, 0x0, 0x38dd80) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @raw_data="dea233684c996156af0d4bd8e3300217e750b8c97b7123d48003e7e1d3be5f710c41a1db6719881876e9bcc6e2f73c67cc6b675eb43188b5b7f9f898868de9a9c5d536d418ba283121a73a5aba55a87d2a2525295f4492bbde02ad8bc8e88779f2de06f38e99172df4d45b6f13c813dee4230c204a93172922b778fef7a1f89ce876bb89d44cd705bbb28db4869dfac20d928950507acd92c02d17f51b0a627539f6e0a0bdb92004bc6252cd35e8cd100962db9a83ad63a4e7e1ca17c1b6aac63fefa9bebe429d00"}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x24004080) r1 = add_key$user(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x1f) keyctl$revoke(0x3, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) close_range(r2, 0xffffffffffffffff, 0x2) r4 = syz_open_procfs(0x0, 0x0) r5 = socket(0x18, 0x0, 0x1) sendfile(r5, r4, 0x0, 0x8) r6 = open(0x0, 0x80242, 0x1df2a23c5997fa7b) r7 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x2) write$FUSE_CREATE_OPEN(r6, 0x0, 0x0) sendfile(r6, r6, 0x0, 0x7f04) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 5m14.321133664s ago: executing program 1 (id=35): syz_open_dev$evdev(&(0x7f0000000080), 0x6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/timer\x00', 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi0\x00', 0x8080, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000080)={0x0, 0x1, [0x2e9, 0x567, 0x865, 0x254]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100000b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$6lowpan_control(r3, &(0x7f0000000040)='connect aa:aa:aa:aa:aa:10 1', 0x1b) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) r5 = add_key$keyring(&(0x7f0000000340), 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r5) keyctl$search(0xa, r5, &(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1, 0x2e}, 0xffffffffffffffff) bind$rds(r4, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f00000006c0)=[@rdma_args={0x48, 0x114, 0x1, {{0x3, 0x2}, {0x0}, &(0x7f0000000340)=[{&(0x7f0000001140)=""/102, 0xffffff83}], 0x1, 0x60, 0xfffffffefffffffe}}], 0x48, 0x8004}, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) read$FUSE(r0, &(0x7f0000002280)={0x2020}, 0x2020) 5m10.287405295s ago: executing program 32 (id=24): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setrlimit(0xc, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413e850000000f00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100000000008b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000001200)=0x6d7c, 0x4) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e21, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 5m10.097068678s ago: executing program 1 (id=39): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0x10) sched_setparam(r0, &(0x7f0000000040)=0x1) ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, 0x0) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r5, 0x0) unlink(0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x10001}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x6, 0x4d, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", '\x00', "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]}) r7 = syz_open_dev$cec(&(0x7f0000000d00), 0x0, 0xc0b02) ioctl$CEC_TRANSMIT(r7, 0xc0386105, 0x0) ioctl$CEC_TRANSMIT(r7, 0xc0386105, &(0x7f0000000140)={0x100000000, 0x800, 0xf, 0x80000001, 0xfe1c, 0x6, "72aba977db089b65fdfdc5bd97abc350", 0x74, 0x3, 0xa7, 0x7, 0x8, 0x7, 0x29}) 5m6.052330022s ago: executing program 1 (id=47): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = socket$kcm(0x2, 0x3, 0x2) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x141800, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000200), 0x400080, 0x0) sendto$netrom(r3, &(0x7f0000000340), 0x0, 0x6a918f8f45b69a96, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x141100, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000140)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r5, 0xc0303e03, &(0x7f00000000c0)={"3c24139ed44aec57f2e2ad238a7b448ed886923c31d4b8affbf514fd00", r7, 0xffffffffffffffff}) ppoll(&(0x7f0000000000)=[{r8}], 0x1, 0x0, 0x0, 0x0) close_range(r4, r8, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x4e24, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000000)}, 0x20002880) socket(0x1e, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) syz_open_dev$sg(0x0, 0x0, 0x127081) 5m0.70472659s ago: executing program 1 (id=51): setsockopt$bt_BT_FLUSHABLE(0xffffffffffffffff, 0x112, 0x8, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x301f}, 0x3}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x1c, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000500)={r5, &(0x7f0000000340), 0x0}, 0x20) add_key(0x0, 0x0, &(0x7f00000001c0)="0000000000000004ff6943b80000000800003fecf20000000086070000", 0x1d, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='.dead\x00', &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2003041, 0x0) mount(0x0, 0x0, 0x0, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0) 4m54.646972167s ago: executing program 1 (id=53): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$I2C_TENBIT(r1, 0x704, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40010, r3, 0x2e9c9000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchdir(r2) r4 = syz_open_dev$video(&(0x7f0000001480), 0x7, 0x0) ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, 0x0) socket(0x200000100000011, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048d0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x6c6c9c9e, 0x0) read$msr(r6, &(0x7f000001b5c0)=""/102368, 0x18fe0) 4m38.641037258s ago: executing program 33 (id=53): r0 = getpid() syz_pidfd_open(r0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$I2C_TENBIT(r1, 0x704, 0x0) r2 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000180), 0x40400, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x40010, r3, 0x2e9c9000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) fchdir(r2) r4 = syz_open_dev$video(&(0x7f0000001480), 0x7, 0x0) ioctl$VIDIOC_S_FBUF(r4, 0x4030560b, 0x0) socket(0x200000100000011, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="1400000025000100000000000000040006"], 0x14}], 0x1, 0x0, 0x0, 0x400048d0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f0000000200), 0x6c6c9c9e, 0x0) read$msr(r6, &(0x7f000001b5c0)=""/102368, 0x18fe0) 31.034575913s ago: executing program 2 (id=607): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={r2}, &(0x7f0000000180)=0x8) 29.925439152s ago: executing program 2 (id=609): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0xeda7, 0x4}]}) 29.342986443s ago: executing program 5 (id=617): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002000002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000000600000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x8000000000000001}}, 0x30) syz_emit_ethernet(0x7a, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x1, 0x6, "d40040", 0x44, 0x2f, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x0, 0x1}, {0x1}, {}, {0x8, 0x88be, 0x3, {{0xc, 0x1, 0x8, 0x1, 0x1, 0x0, 0x4, 0x10}, 0x1, {0x7b40}}}, {0x8, 0x22eb, 0x2, {{0x3, 0x2, 0x2, 0x3, 0x0, 0x0, 0x1, 0x9}, 0x2, {0x3, 0xeb, 0x0, 0xd, 0x1, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}}, 0x0) 29.342621548s ago: executing program 2 (id=618): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x40, 0x13, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000008c0)={0x44, &(0x7f0000000400)=ANY=[@ANYBLOB="400601"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 29.151737902s ago: executing program 6 (id=619): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = syz_io_uring_setup(0x497, &(0x7f00000002c0)={0x0, 0x89b8, 0x800, 0x0, 0x207}, &(0x7f0000000040)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x2004, @fd=r0, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12, 0x1}) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 28.935723667s ago: executing program 5 (id=621): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000000)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000003680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 28.489102133s ago: executing program 6 (id=622): socket$phonet_pipe(0x23, 0x5, 0x2) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50) r0 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x7278, 0x0, 0x1, 0x18e}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x26c8, 0x0, 0x1, 0x0, 0x10) 26.855153599s ago: executing program 6 (id=626): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) getrlimit(0x1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x14, 0x0, 0x2, 0x2, 0x0, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) mlock(&(0x7f0000002000/0x1000)=nil, 0x1000) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) ioctl$TIOCSTI(r4, 0x5412, 0x0) ioctl$TCFLSH(r4, 0x540b, 0x2) 26.33561889s ago: executing program 3 (id=627): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000080000000b"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "231b"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4, @local=@item_012={0x2, 0x2, 0x2, "9006"}, @main=@item_4={0x3, 0x0, 0x8, "749e821c"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @main=@item_4={0x3, 0x0, 0x9, "85900eb7"}]}}, 0x0}, 0x0) 25.238809031s ago: executing program 2 (id=628): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001080)={{0x12, 0x1, 0x0, 0x78, 0x82, 0xb7, 0x40, 0x2c42, 0x1709, 0xcab7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xbf, 0x60, 0xe7}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000000)={0x0, 0x0, 0x1, "ac"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000780)={0x40, 0x17, 0x1, 'm'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000680)={0x44, &(0x7f0000000d00)=ANY=[@ANYBLOB="2000e3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 24.903297546s ago: executing program 4 (id=630): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x2a000}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8) 24.827706869s ago: executing program 4 (id=631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x48000) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x34, r1, 0x1, 0x70bd2a, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random='?'}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a8}]]}, 0x34}, 0x1, 0x0, 0x0, 0x44840}, 0x0) 24.70489131s ago: executing program 6 (id=632): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket(0xa, 0x3, 0x3a) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="020086dd0300000000003000000060ec970012302c00fe8000000000000000000000000000aaff0200000000000000000000000000013a"], 0xfdef) 24.335245858s ago: executing program 5 (id=633): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x2, 0xffff, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x10009, 0x52}]}}}}}}}, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0xda18, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x4, 0x0, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x3, 0x20000006}]}}}}}}}, 0x0) 24.102185157s ago: executing program 4 (id=634): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00'}, 0x18) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c46fdc300030700000000000000020003"], 0x58) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 24.028200578s ago: executing program 5 (id=635): r0 = socket$netlink(0x10, 0x3, 0x0) close_range(r0, r0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_score_adj\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_open_procfs(0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)='9', 0x1}], 0x1) 23.719258035s ago: executing program 4 (id=636): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r0, &(0x7f0000001940)=[{&(0x7f0000000040)=""/86, 0x56}, {0x0}], 0x2, 0xffff, 0x2, 0x1) 23.500252012s ago: executing program 4 (id=637): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x1}, 0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x1, 0x94, 0xfffffffd, 0x5}, 0x9c) 23.464142113s ago: executing program 6 (id=638): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x8, 0x1, 0x1, 0x7, 0xf, 0x2, 0xb5, 0x4}, 0x20) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) r1 = dup(r0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 23.330651299s ago: executing program 3 (id=639): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='yeah\x00', 0x5) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000840)="89000000120081ae08060cdc030000fe7f036e04000000000001ffca1b1f0000000024c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00150c00014003080c00bdad446b31007a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947e", 0x75}, {&(0x7f0000000140)="11d6cb557c8496a2fe7a81f38210bfa9b70ee09c", 0x14}], 0x2}, 0x0) 23.011948093s ago: executing program 5 (id=640): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000000280)="db", 0x1}], 0x1}, 0x41) recvmsg(r0, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) sendmsg$inet(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="1e3a", 0x2}], 0x1}, 0x41) sendmsg$sock(r0, &(0x7f0000000240)={&(0x7f00000001c0)=@ieee802154={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000001640)="06fce7f709eb02ab6dfda62da6c89b6b9bd4e4f45bd5869b9364d72cf3ea0fb1ad0fae083d9295d7c6030cd7061633bb6e0d6201ac8a9b41c9084663803e56184677bb7f87933ae73999419787f1725f54e0a9500cd259e439b51d623f149a9bb8d5029097292f64cf9af4d3ed168d543c909a7fe49e85ce5fe50837be6d7466e33481cefdfee0d2e05a6b9cf13606c5e745297e0b7a02860a11d0c81c1488864d30497f265a99b040cb81cf2c8de3579f0ff3449a3fcfae901c76915f79774d845e378f89fd95c24900dfd45bb74f6e7cbce33b5873930e6788f0a517b1f41239e3111b1ed4e539155116c530f32b08651247999d52f5a761eb62188095080e6f98ddb6f8f8d473cbe427b54dffefc31d379a0e53a5d04255165ec2f85f9e7378077d388299f66f9d04b1895b297ca4a47193cb0856dbbf9fd9cc84f718a4129b9e6df473510257ebec57efc821096931db195e5db71e1ce2db07ea53da67b215a4008948a6d7f676ff57da66bcb7a8a49e607aa96394cfe71a90b9dc4f485e853aa287007a20d06d1121a25eb0a784adada58fdd21f13e8dcca5b546e4d394a6956778657343a5025ebca31ca8b8fa90cfde396474af345524acff2c033f06d1d49821519d384da2e37eead7596fe1e323f693d2510637afe730ab5fbf06487cb4517c25e3a07a8f48a0a484182c089e4aa441cd3c73244d7cc77cba24478594eddfec41a825decc5c3fe2677e7594bf4032f6fa3b1b137fea8ba650377a78a1ecba4cfb4d00b51d7bd73ed087696bdb2c9748a5f19f76e3dfde5965e3f3cab04bb490d1ac81504f0671734e9e070d37dbc5a8edf33126ecc1c6c78f48c40f6619d322495f628b1a8808adb2ef460386fa995c5fcf426b5a4e2b4ac4756d65b753a69d0c3e3b5ad2f3f196d0100ab66be73c4e129bbbe9d8b375a2e1b4c8eefb692d2d2217092bd7cf642ca6b944287450e5734bbf577d5a20c1fcb8b74471d0925f766394d87ece4af89915b9587b976c537cc0d66b9733aa1b3c584cbf521665f1f391b324e7911a8322e26585ed8da5325df7276aab8b6010bdb80d9f7a38e7caca9c66edb3f0cf4bf4099d7be6948732792c1157b5fa43ee9f5bdfccf9f3f7cfbbf390fe64145fbfe75e9fa6f634842812c08f5c673d0e20eeefc49aa24eed47b51d8b2bb4c7faa40f4d91eb59dcf7e452e3c754e33cb11ef10857ad76a61592bda1c167fd0b147713c77e0ce247012727c71aa1b7a1794a010c5063be0a04321bf6553edf700cd78674411a12d64a1eaff4e8feda349f78e9ae7422a655d8dbb09f14f3a7d530a23dc3ea1efac914c78ae54034eb07dfb9b8070e6b59cc75da2e1a22b5ce7cb1fa27b86f5fe90f300d09daf763c0995f03d4e95e17ddb639f454f6e0a6d8a9544d7aecffd06d00bcf5cf1583f1b2b337d0ca06b5f92b82f51e98d13acd6d0948042d6671072f4917212e3e4b9b42d79cce77f748a44dbb2ca98316645efa99782ec6f8cac0af1de98aa20dfac8ad4c440a1ea764e822ab86014df66109ecafdeb3a5061ccd38ecf22e15f291af78308e765e3395168046bce426fa08a620407c9386707deb6cb6d80b8df9bcd5e6e797bbc84b41f6adcf014d2374c7cfbe3378b71b8875bb3eeaa24dd80d95cb22bf4f663d69670cca5e8bdbf05c76394de1a512c788b5825a811a81c9a3d13ae0699cf8328588f985139d3711e947cc4e730f8c6ca74e11f25365d139fd5c8e101ca7fcbf9c26d5173cb6ce1948155236b48bf5d4e4f41583c4f28706efb2c97f8c1ef62e2eb5edccd72de918e71eafc981186476844add6e7b6869695828b7278dcb44bde5aae3d8c2a98d84c317ca698ccf36e43150c43bb90fa96a5a82fb91a5b5b58613b81dd7150fdd1c5531e159c8d066ed842c5276c8dee3f875610c944cc09b6bb2a596051fb6bcca7cdf44a0477b8380fcaf7cab087835103751bea0642e1bef653c77de648693fe1df821ea46a77e1968f1382b32f7140db2d12f0ccd5366a7df22180a2b32576b633849921c645fb4cf55c1e9c242debfb8b05976ff00971b1e352c286f14d8228b0ace46f4e0afbfb1916a40863bc4ff2b8bff6dc8bd1198bc0a0c1cf78681c78e3b3cff1df42e7001b639ab625a65c20246f086d62d74a449079a6a5ba0a2271ae2599fb02f5bba184db0b7e19eb8ce581c09b6a83bd06c85efa4aae35596848c0df733d988f2fd2c4593f209cfb3677c27d863c990a41f42492d7a75ad639f4a015ba4e6f22fa286e4261d930adff2a046e39591989a6da27e57d46ce777b43342ce16dd51ee01ddbad5e01c41e5fb1617221b3c16f37bc9a0fc37d8b2fc4c74964c581992f513b926ec95c8ee28a1f8e6a56d2f51c5267e5114e3b133450a6fbcbddfea80f86dc3ad5a04fc59474afc13b07a2193c39349e6d607a5a668d8c75ed199f2928608980aa2e3017ba1d2de60f1b6ddafa9fb00a73e3941d35f39c7fa4a32e67fd89a0e7848f7be455e8e5d5a5efb4e833198d80d8197373e4bc1393c94d12ce9f4fd5acb621c85dc6a46f855c2c23ba861e14211d2c35518afa116256b7cc634a777ba97e2f810b48e93e01b1d13dbd5488e24025ccfa9d7e9fb7dce5e8ceebe65891457ccf26dfdb452521480e7c3dd205e5774b0fd4b7c22c6104f0f65adf50e1eb87fecd33dd550cfddea6a5ce1210ed3acc092978aaac5a813e081aeeb73fb24cb8ddcb646811c56cf7028f10ece1908ccd7fd01a4a50b7dd3da3f6e3d963e4952d0c7ddc1942cbb6b7b510a9f86ecab135ab37abbb924c32940b3f8f5a513bf42c691de80dbb7a02a86ff35c80d81ec4410e9066a957abfcaff4b375d5cc811ed38d3703156e1120af60717864c26b8bc2682742916b0c2c7a6ed7b60ae3700ee99f643da15fd037192b293d1c304133387f4d2305efff550c79bb6a3eb681372ad5158ff1917db2c1692333ad8cd6482c6b3d97e917c1dcf1d1a3a080a4649455dadbf2a0e9aeb426d5534ba6363ae91aec227931024ce35abb331171e9738ac072b929b044b7be21a06b8a07d62930e5c29cf29d359dddcd41e43e4d31f3b183fb39b673d1141d0ec434a3f90933d6ef9085164a92167572a150fe33e709fecf2f5900c8398abc4b66fd106d803e0c8aaa534c4384960fd3a912e5c8e87c965e93bcfbba0b53bda4b5cf00fe920dc5f3ffd69917c272b3676df18c8bd213b1231a5b1f5933672a5706d7a8823824762011c84a4776050cec8d5f2977fbaea66172b7fce7160add578200f0e234181e7c4a19cea43eec562432ba52657cb9d1dd66af54dd130dd56417d79664ce669bab1e7932c5e53ded5764878b21372dcdccbbe721edd20d9772e1969be3aa21e57c7f5e5fd75d0d328d63e811eae60be7af3cb4704fd561c24f86defda79ffda4a7ecb80ab4ba561a04d96cded48f51c2af1543984b8673af8fae8fa182d62433d750f5c7250388f102e793209a419a7953aeb754e18fc737bd812d8ec039cc8139def400d2e4aa9fad41c1dc715f7bb60b47ee20a1508264b6896724f6a61338af780c57a8149c91b5bfa48630a0dec693bf644ebadd3f79c5f67ede7e2c5ed13103249570111094de5dfaa10c66dd5182adfde19d132cccb1fd37578832acd441992e738f2348aee887116b421e2834878a32277a1e3194c6178f3b3a84310ad07ddd48bc791fbdda179dbd62f5dd3a28e2219e90e715dd5dd8ecfc5d9cc2e025f3fe788cf9fe78065a97917f63b90b84e0bcffafb794265db6a0f4523c194456ec5fba503f3a7e4bfaf10da428c72889cd7cb9ac326d2773380d1a5baac78e3decbd2cb01d536581335f0045e76a8a1eb343a6b0d3c7bfc656333956c52aa5657627e8673e7311e2f0929f7843c48d03f2f8a4459a92dc3018cbd9b29a905178a84a7b664f2e5fb69ab7b456fa57a733d92e8038cc319b55fa639d8f6487be5718d5aee0d152a21b26e4b2b5881b2e008a13ecdf0acd5c0bcb6e58313a73580bd5ea316633130065d4d2f03004d90b680e94e87ee2e0fd54b7980ffd5fd42c346e2349e9fcd1a902b7a41b1d4e4564153b8d367c13a366c4a1c01fe5876c0d5be12c6904a5f3f26abd0254f7fc332462ede0d58e97c745fa074b79c5878225559eaf512e8c0dc859180916711c0df6aaf6412cdd6e149e96139155cc0ac47246f2f032aeda2fc49c0ab33e417968943a151eab0ebda4d65717df42aa67dce6f96d032b03be064523ae681e1f62bcc9d219e667cdc900b2a8c1ee4a3f75f87c79cc0dbd6eabb4a7a5ace79059145d4f76cc4085f1d9eebdfe363c4a8a8b2e3ef839a05383c1bd3482e91afdef19eddb6d0e7dc73eb809003348a5a4fc8219550cf49ae6d1899a7aadcda7dfb7acf08e9fea068b81f897c989dcf9d996534d887374663d0d1b7496bd093dc8b0dc1677eb98acde272966a79f819612377c2f766749d10d478cb871b4bf52cc86b2e8eebb49c2c98c2172b5ff92048a97a4d084cd91517008d736bfdd0b729d97edcc09af97b6197f6020c3dfe85333aab216ee64884efda5ed2beeb623d0f44ba944ed5468819119b4b77d9d890710cb14699e88289dab94fd35ab20eea94ea6537351c7a66ca2d297d463fbc4a2ca4a38a703b631d44696f8474cbd99cf8272f6ae7239e675a9efcbd337dfb2b7334b10929b3c23f8f0a3554f6ff15d368231f5053ce24bd051274b71739ab61271b309cf434184f6d4f5a1d9fbf0d5e82df8c11f1d5805a8e0717455da8369975a7a480e7926ea656ccab0485e64318150c3fdfa7151a1f49ef93eb6ca911096cd3d389a6d80b1479dbf79cb71ce74344baa52aa2ff07b36a00804e8b44d23178406fa1af4c4a57b38fc9f21e88ad282449f70a038835279d052e9c49b67651b6fed6c19f067d2e1a0065109238b83f36081e0263c19f1becb114953e0907643b68bb7b690ce80d186470db7122aafde0f0d0e38cc8c690e1c336c433fb27c686ed63888d8f067078b3ed0603d7bf4eb23d6583f520a076eb1b4bb96dd604eef9b9d3778e5653a2914840f807f3292f108aca3a4cca04acef7be482b9687c0afe0ea0edc0ea9f566d40f3d90952202c431d46fd3a16d37ecb4adf65472bdef101793e13d88d955b3078c361c0b777b09f06ed787753567705736b96e4684a07c1bebf23cf2aaf2058860b67339b3bc0e75e71b03f77bfe787645b88a0eca741920ddb3a7a7248b620839a27f8681e4f2cf30f778aadecb310d219458abb584ac28a7dcf923bcf99f76fbc7808194953dcc4bf3e3f59914b118d97cf898a511a62aeca1669d75eb0ef657c9cb08afe332ca7964a661da814a5db7b9b3a6b43f3a75a3ed82f65dddd906f36a1c204b350a005ca2322860b68086eb5fa44015df3885e5ed46a3ea49050", 0xf00}, {&(0x7f0000000400)="32fc4094fba760c2950959914265df2c12ac344f7cee2fb62e34e1f7d1240805da7cdd648b0ca55d2ce95f35a29d03823b5c8fd9fe58ecd46510acc91e719dc211d8155089376a9e", 0x48}], 0x2, &(0x7f0000000500)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x10000}}], 0xa8}, 0x8800) recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x2) 22.510514773s ago: executing program 2 (id=641): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0xdffffffe, 0x80, 0x0, 0x0, "8100e1c8e80b598c36ff000800"}) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x102800) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 22.180417651s ago: executing program 3 (id=642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010005000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100008010bd408205140099bb0000000109022400011b00001009040000022a3e74000905015e"], 0x0) 22.169067731s ago: executing program 6 (id=643): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x70bd26, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4, 0xa00}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000008e04000000060000ffffffff"]) 22.146091528s ago: executing program 2 (id=644): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@arm64={0x1, 0xb, 0x0, '\x00', 0x7}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0x150002, 0x0, [0x3, 0xfffffffffffffffa, 0x5, 0x200, 0x6, 0x1, 0x9, 0xe8f]}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000000)) 21.691530792s ago: executing program 5 (id=645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) close(0x3) 20.623697172s ago: executing program 3 (id=646): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) sendfile(r1, r0, 0x0, 0x40008) 18.435346676s ago: executing program 4 (id=647): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0xc}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 18.405043027s ago: executing program 3 (id=648): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0) sendmsg$NFT_MSG_GETRULE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000000190a0102"], 0x44}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x4, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 15.314134962s ago: executing program 3 (id=649): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 6.979322104s ago: executing program 34 (id=643): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x70bd26, 0x25dfdbfd, {0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4, 0xa00}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000000000008e04000000060000ffffffff"]) 6.729471554s ago: executing program 35 (id=644): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@arm64={0x1, 0xb, 0x0, '\x00', 0x7}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0x150002, 0x0, [0x3, 0xfffffffffffffffa, 0x5, 0x200, 0x6, 0x1, 0x9, 0xe8f]}) ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000000)) 5.586924677s ago: executing program 36 (id=645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000001c0)={'syzkaller1\x00', @broadcast}) close(0x3) 3.979893174s ago: executing program 37 (id=647): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000010000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0xc}], 0x4) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 0s ago: executing program 38 (id=649): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000180)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.114' (ED25519) to the list of known hosts. [ 90.546178][ T5827] cgroup: Unknown subsys name 'net' [ 90.804632][ T5827] cgroup: Unknown subsys name 'cpuset' [ 90.869235][ T5827] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.162630][ T1234] cfg80211: failed to load regulatory.db [ 92.867841][ T5827] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.802391][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.806095][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.806870][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.808071][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.820994][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.822028][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.875808][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.877567][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.899781][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.901086][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.943996][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.945732][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.947479][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.969438][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.981463][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.982035][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.984466][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.989745][ T5159] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.993282][ T5159] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 96.002627][ T5159] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 96.052861][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 96.064187][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 96.069713][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 96.071553][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 96.072536][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.008616][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 97.084777][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 97.242863][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 97.264102][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 97.428022][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 98.000147][ T5844] Bluetooth: hci0: command tx timeout [ 98.000156][ T59] Bluetooth: hci1: command tx timeout [ 98.067098][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.067944][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.068372][ T5842] bridge_slave_0: entered allmulticast mode [ 98.072370][ T5842] bridge_slave_0: entered promiscuous mode [ 98.079435][ T5844] Bluetooth: hci2: command tx timeout [ 98.079446][ T59] Bluetooth: hci3: command tx timeout [ 98.160615][ T5844] Bluetooth: hci4: command tx timeout [ 98.200884][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.201076][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.201256][ T5842] bridge_slave_1: entered allmulticast mode [ 98.203188][ T5842] bridge_slave_1: entered promiscuous mode [ 98.330429][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.330572][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.330778][ T5839] bridge_slave_0: entered allmulticast mode [ 98.336413][ T5839] bridge_slave_0: entered promiscuous mode [ 98.651374][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.651520][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.651717][ T5839] bridge_slave_1: entered allmulticast mode [ 98.654617][ T5839] bridge_slave_1: entered promiscuous mode [ 98.811138][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.811284][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.811502][ T5846] bridge_slave_0: entered allmulticast mode [ 98.814481][ T5846] bridge_slave_0: entered promiscuous mode [ 99.012431][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.012580][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.012780][ T5847] bridge_slave_0: entered allmulticast mode [ 99.015651][ T5847] bridge_slave_0: entered promiscuous mode [ 99.051248][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.051964][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.052113][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.052290][ T5846] bridge_slave_1: entered allmulticast mode [ 99.055152][ T5846] bridge_slave_1: entered promiscuous mode [ 99.191458][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.191664][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.191849][ T5847] bridge_slave_1: entered allmulticast mode [ 99.194009][ T5847] bridge_slave_1: entered promiscuous mode [ 99.198168][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.302738][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.303012][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.303153][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.303331][ T5848] bridge_slave_0: entered allmulticast mode [ 99.305447][ T5848] bridge_slave_0: entered promiscuous mode [ 99.577403][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.577710][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.577818][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.577946][ T5848] bridge_slave_1: entered allmulticast mode [ 99.596649][ T5848] bridge_slave_1: entered promiscuous mode [ 99.773379][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.920409][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.924297][ T5842] team0: Port device team_slave_0 added [ 99.928407][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.064212][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.066111][ T5842] team0: Port device team_slave_1 added [ 100.078595][ T5844] Bluetooth: hci0: command tx timeout [ 100.078625][ T5844] Bluetooth: hci1: command tx timeout [ 100.154146][ T5839] team0: Port device team_slave_0 added [ 100.159051][ T59] Bluetooth: hci2: command tx timeout [ 100.159080][ T59] Bluetooth: hci3: command tx timeout [ 100.166762][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.238962][ T5844] Bluetooth: hci4: command tx timeout [ 100.624078][ T5839] team0: Port device team_slave_1 added [ 100.636435][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.753290][ T5846] team0: Port device team_slave_0 added [ 100.891894][ T5847] team0: Port device team_slave_0 added [ 100.893453][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.893468][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.893496][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.897406][ T5846] team0: Port device team_slave_1 added [ 101.063317][ T5847] team0: Port device team_slave_1 added [ 101.064859][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.064874][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.064902][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.180383][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.180396][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.180414][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.182834][ T5848] team0: Port device team_slave_0 added [ 101.362495][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.362509][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.362529][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.364731][ T5848] team0: Port device team_slave_1 added [ 101.591611][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.591629][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.591669][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.721126][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.721142][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.721170][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.725193][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.725208][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.725236][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.841240][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.841254][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.841273][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.942312][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.942328][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.942354][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.153273][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.153291][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.153318][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.163177][ T5844] Bluetooth: hci1: command tx timeout [ 102.163218][ T5844] Bluetooth: hci0: command tx timeout [ 102.172208][ T5842] hsr_slave_0: entered promiscuous mode [ 102.174038][ T5842] hsr_slave_1: entered promiscuous mode [ 102.239833][ T59] Bluetooth: hci3: command tx timeout [ 102.239868][ T59] Bluetooth: hci2: command tx timeout [ 102.319495][ T5844] Bluetooth: hci4: command tx timeout [ 102.321735][ T5839] hsr_slave_0: entered promiscuous mode [ 102.323188][ T5839] hsr_slave_1: entered promiscuous mode [ 102.324146][ T5839] debugfs: 'hsr0' already exists in 'hsr' [ 102.324260][ T5839] Cannot create hsr debugfs directory [ 102.800913][ T5846] hsr_slave_0: entered promiscuous mode [ 102.802251][ T5846] hsr_slave_1: entered promiscuous mode [ 102.803366][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 102.803390][ T5846] Cannot create hsr debugfs directory [ 102.896971][ T5847] hsr_slave_0: entered promiscuous mode [ 102.897894][ T5847] hsr_slave_1: entered promiscuous mode [ 102.907904][ T5847] debugfs: 'hsr0' already exists in 'hsr' [ 102.907933][ T5847] Cannot create hsr debugfs directory [ 103.149535][ T5848] hsr_slave_0: entered promiscuous mode [ 103.150850][ T5848] hsr_slave_1: entered promiscuous mode [ 103.151751][ T5848] debugfs: 'hsr0' already exists in 'hsr' [ 103.151775][ T5848] Cannot create hsr debugfs directory [ 104.238739][ T5844] Bluetooth: hci0: command tx timeout [ 104.238756][ T59] Bluetooth: hci1: command tx timeout [ 104.318915][ T5844] Bluetooth: hci2: command tx timeout [ 104.318924][ T5853] Bluetooth: hci3: command tx timeout [ 104.398895][ T59] Bluetooth: hci4: command tx timeout [ 104.725837][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.792353][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.814252][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.874872][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.016882][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.051793][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.090568][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.146415][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.316831][ T5846] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.361965][ T5846] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.396107][ T5846] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.445328][ T5846] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.641780][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.683438][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.744967][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.795078][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.804522][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.996448][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.016046][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.075329][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.115156][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.156055][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.190405][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.190935][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.251361][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.251524][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.316747][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.460271][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.519350][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.522721][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.522928][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.592618][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.592774][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.716420][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.745456][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.799669][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.799918][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.874354][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.876311][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.936421][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.005965][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.023081][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.023374][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.091525][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.091822][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.165429][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.196497][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.219296][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.219446][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.289724][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.289872][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.646533][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.687320][ T5842] veth0_vlan: entered promiscuous mode [ 107.749803][ T5842] veth1_vlan: entered promiscuous mode [ 107.905260][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.023463][ T5842] veth0_macvtap: entered promiscuous mode [ 108.065777][ T5839] veth0_vlan: entered promiscuous mode [ 108.067891][ T5842] veth1_macvtap: entered promiscuous mode [ 108.157614][ T5839] veth1_vlan: entered promiscuous mode [ 108.210915][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.254519][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.286363][ T5846] veth0_vlan: entered promiscuous mode [ 108.309128][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.312215][ T1117] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.341145][ T1117] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.360742][ T1117] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.379536][ T1117] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.427753][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.522484][ T5846] veth1_vlan: entered promiscuous mode [ 108.623521][ T5839] veth0_macvtap: entered promiscuous mode [ 108.705205][ T5839] veth1_macvtap: entered promiscuous mode [ 108.915983][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.936200][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.936225][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.985031][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.006505][ T5846] veth0_macvtap: entered promiscuous mode [ 109.087763][ T5846] veth1_macvtap: entered promiscuous mode [ 109.098126][ T1117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.098310][ T5847] veth0_vlan: entered promiscuous mode [ 109.113282][ T3574] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.113303][ T3574] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.115670][ T1117] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.136460][ T3574] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.152053][ T3574] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.229473][ T5847] veth1_vlan: entered promiscuous mode [ 109.363826][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.478277][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.478660][ T5848] veth0_vlan: entered promiscuous mode [ 109.554137][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.567387][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.636547][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.660768][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.664151][ T5848] veth1_vlan: entered promiscuous mode [ 109.704778][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.704801][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.752687][ T5847] veth0_macvtap: entered promiscuous mode [ 109.975842][ T5960] mmap: syz.2.3 (5960) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 110.075840][ T5962] ubi31: attaching mtd0 [ 110.136627][ T5962] ubi31: scanning is finished [ 110.136676][ T5962] ubi31: empty MTD device detected [ 110.643548][ T5847] veth1_macvtap: entered promiscuous mode [ 110.748772][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.748797][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.798874][ T5962] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 111.071687][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.086441][ T5848] veth0_macvtap: entered promiscuous mode [ 111.189166][ T5848] veth1_macvtap: entered promiscuous mode [ 111.203799][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.252157][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.252179][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.493357][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.516851][ T5967] input: syz1 as /devices/virtual/input/input5 [ 111.595798][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.651050][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.713188][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.713209][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.864350][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.882243][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.888524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.317044][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.758540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.758649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.758756][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.758829][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.758915][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.759000][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.759085][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.759170][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 113.759255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 114.094594][ T3595] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.522295][ T3574] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.528964][ T3574] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.549021][ T3574] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.096533][ T5999] process 'syz.2.9' launched './file0' with NULL argv: empty string added [ 118.067808][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.067831][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.614788][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.614811][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.716451][ T3563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.716472][ T3563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.455725][ T992] Process accounting resumed [ 131.850387][ T6026] Process accounting resumed [ 132.060994][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.061014][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.612594][ T6073] sctp: failed to load transform for md5: -2 [ 141.633356][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.633466][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.403324][ T6093] Zero length message leads to an empty skb [ 144.966527][ T6085] IPVS: starting estimator thread 0... [ 145.068918][ T6096] IPVS: using max 6 ests per chain, 14400 per kthread [ 145.405572][ T6089] Illegal XDP return value 4294967274 on prog (id 12) dev N/A, expect packet loss! [ 150.031202][ T6117] syz.3.32 (6117): drop_caches: 2 [ 156.298143][ T6154] ======================================================= [ 156.298143][ T6154] WARNING: The mand mount option has been deprecated and [ 156.298143][ T6154] and is ignored by this kernel. Remove the mand [ 156.298143][ T6154] option from the mount to silence this warning. [ 156.298143][ T6154] ======================================================= [ 156.314993][ T6154] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 157.908366][ T5853] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 157.918061][ T5853] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 157.927043][ T5853] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 157.930710][ T5853] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 157.932231][ T5853] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 158.047674][ T6162] syz.2.43 (6162) used greatest stack depth: 17040 bytes left [ 160.012596][ T5853] Bluetooth: hci5: command tx timeout [ 162.078757][ T5853] Bluetooth: hci5: command tx timeout [ 164.173860][ T5853] Bluetooth: hci5: command tx timeout [ 164.672924][ T6189] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 168.348597][ T5853] Bluetooth: hci5: command tx timeout [ 170.788379][ T6212] Bluetooth: MGMT ver 1.23 [ 180.906465][ T6227] loop9: detected capacity change from 0 to 7 [ 180.912764][ T6227] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.912913][ T6227] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.913033][ T6227] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.913745][ T6227] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.913905][ T6227] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.914039][ T6227] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.914154][ T6227] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.914232][ T6227] ldm_validate_partition_table(): Disk read failed. [ 180.914283][ T6227] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.914466][ T6227] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.914582][ T6227] Buffer I/O error on dev loop9, logical block 0, async page read [ 180.914758][ T6227] Dev loop9: unable to read RDB block 0 [ 180.915211][ T6227] loop9: unable to read partition table [ 180.915478][ T6227] loop9: partition table beyond EOD, truncated [ 180.915504][ T6227] loop_reread_partitions: partition scan of loop9 (þ被xüŸÑø éÚ¬§½dG¤´à–ƒÝ¡¯ â·û [ 180.915504][ T6227] ) failed (rc=-5) [ 182.524619][ T6248] block device autoloading is deprecated and will be removed. [ 182.750140][ T6247] vivid-005: kernel_thread() failed [ 183.096109][ T6246] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 185.731632][ T6264] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 185.986423][ T6269] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 187.085317][ T6272] ceph: No mds server is up or the cluster is laggy [ 187.115477][ T6274] syz.2.64 (6274) used greatest stack depth: 15704 bytes left [ 192.021233][ T6290] new mount options do not match the existing superblock, will be ignored [ 192.025363][ T6290] option changes via remount are deprecated (pid=6284 comm=syz.2.68) [ 193.602415][ T37] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.088324][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 195.112618][ T59] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 195.113823][ T59] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 195.115272][ T59] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 195.148108][ T59] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 195.243959][ T6160] chnl_net:caif_netlink_parms(): no params data found [ 197.432437][ T59] Bluetooth: hci2: command tx timeout [ 198.852780][ T6322] evm: overlay not supported [ 199.325353][ T37] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.438554][ T59] Bluetooth: hci2: command tx timeout [ 201.015123][ T37] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.106119][ T6337] Falling back ldisc for ptm1. [ 201.196250][ T6337] ucma_write: process 82 (syz.3.78) changed security contexts after opening file descriptor, this is not allowed. [ 201.648955][ T59] Bluetooth: hci2: command tx timeout [ 203.234772][ T6349] loop8: detected capacity change from 0 to 7 [ 203.588298][ T6349] Dev loop8: unable to read RDB block 7 [ 203.588349][ T6349] loop8: AHDI p1 p2 p3 [ 203.588382][ T6349] loop8: partition table partially beyond EOD, truncated [ 203.791356][ T6349] loop8: p1 start 1601398130 is beyond EOD, truncated [ 203.791387][ T6349] loop8: p2 start 1702059890 is beyond EOD, truncated [ 204.298908][ T59] Bluetooth: hci2: command tx timeout [ 204.656148][ T37] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.030345][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 205.031968][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 206.193694][ T6364] overlay: filesystem on ./bus not supported [ 208.592600][ T6381] netlink: 20 bytes leftover after parsing attributes in process `syz.3.86'. [ 209.255168][ T6381] workqueue: Failed to create a rescuer kthread for wq "nbd63-recv": -EINTR [ 209.298143][ T6160] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.298297][ T6160] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.298604][ T6160] bridge_slave_0: entered allmulticast mode [ 209.303039][ T6160] bridge_slave_0: entered promiscuous mode [ 209.311092][ T6381] block (null): Could not allocate knbd recv work queue. [ 209.312636][ T6381] nbd: failed to add new device [ 209.572360][ T6160] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.572641][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.574839][ T6160] bridge_slave_1: entered allmulticast mode [ 209.964504][ T6160] bridge_slave_1: entered promiscuous mode [ 210.410825][ T6388] hub 8-0:1.0: USB hub found [ 210.426263][ T6388] hub 8-0:1.0: 1 port detected [ 214.397550][ T6392] overlayfs: failed to resolve './file1': -2 [ 215.065114][ T6160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.011367][ T6401] ALSA: mixer_oss: invalid OSS volume '' [ 216.623948][ T37] bridge_slave_1: left allmulticast mode [ 216.624483][ T37] bridge_slave_1: left promiscuous mode [ 216.627287][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.830495][ T37] bridge_slave_0: left allmulticast mode [ 216.830529][ T37] bridge_slave_0: left promiscuous mode [ 216.830804][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.110667][ T6412] netlink: 'syz.4.93': attribute type 1 has an invalid length. [ 217.110684][ T6412] netlink: 132 bytes leftover after parsing attributes in process `syz.4.93'. [ 217.110707][ T6412] netlink: 'syz.4.93': attribute type 2 has an invalid length. [ 217.110716][ T6412] netlink: 'syz.4.93': attribute type 1 has an invalid length. [ 217.110725][ T6412] netlink: 2 bytes leftover after parsing attributes in process `syz.4.93'. [ 217.299477][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.306916][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.326752][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.327890][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.344863][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 219.428358][ T59] Bluetooth: hci0: command tx timeout [ 221.569842][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.023358][ T5845] Bluetooth: hci0: command tx timeout [ 222.224094][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.309801][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.319308][ T5845] Bluetooth: hci4: command 0x0406 tx timeout [ 222.974051][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.995981][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.437013][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.596430][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.699238][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.781340][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.059289][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.087436][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.117363][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.277254][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.336648][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.788459][ T59] Bluetooth: hci3: command 0x0406 tx timeout [ 224.788488][ T5159] Bluetooth: hci0: command tx timeout [ 224.790857][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 224.938199][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.076911][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.307430][ C1] vkms_vblank_simulate: vblank timer overrun [ 225.656825][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.028833][ C1] vkms_vblank_simulate: vblank timer overrun [ 226.089184][ T6464] Bluetooth: MGMT ver 1.23 [ 228.195830][ T5844] Bluetooth: hci0: command tx timeout [ 230.124161][ T5915] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 230.711996][ T6478] netlink: 'syz.3.102': attribute type 20 has an invalid length. [ 232.035282][ T6518] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 236.049883][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.099526][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.126067][ T37] bond0 (unregistering): Released all slaves [ 241.944834][ T6562] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 244.038802][ T6085] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 244.402196][ T6085] usb 5-1: config 0 has an invalid interface number: 128 but max is 0 [ 244.402226][ T6085] usb 5-1: config 0 has no interface number 0 [ 244.426926][ T6085] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 244.426967][ T6085] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.426988][ T6085] usb 5-1: Product: syz [ 244.427003][ T6085] usb 5-1: Manufacturer: syz [ 244.427019][ T6085] usb 5-1: SerialNumber: syz [ 244.725549][ T6085] usb 5-1: config 0 descriptor?? [ 245.298984][ T6085] usb 5-1: Firmware version (0.0) predates our first public release. [ 245.299011][ T6085] usb 5-1: Please update to version 0.2 or newer [ 246.858802][ T37] hsr_slave_0: left promiscuous mode [ 246.968741][ T37] hsr_slave_1: left promiscuous mode [ 246.971378][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.971470][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 247.382648][ T5853] Bluetooth: hci4: unexpected event for opcode 0x2060 [ 247.591307][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 247.591334][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.072982][ T37] veth1_macvtap: left promiscuous mode [ 248.073362][ T37] veth0_macvtap: left promiscuous mode [ 248.074249][ T37] veth1_vlan: left promiscuous mode [ 248.074662][ T37] veth0_vlan: left promiscuous mode [ 251.342666][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 251.356517][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 251.369966][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 251.371907][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 251.372761][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 253.445813][ T5853] Bluetooth: hci5: command tx timeout [ 253.579664][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.124'. [ 254.553819][ T6616] usb usb6: usbfs: process 6616 (syz.4.121) did not claim interface 46 before use [ 255.697600][ T5853] Bluetooth: hci5: command tx timeout [ 256.147918][ T6619] netlink: 'syz.3.127': attribute type 2 has an invalid length. [ 256.157386][ T6619] sctp: [Deprecated]: syz.3.127 (pid 6619) Use of struct sctp_assoc_value in delayed_ack socket option. [ 256.157386][ T6619] Use struct sctp_sack_info instead [ 257.795479][ T5853] Bluetooth: hci5: command tx timeout [ 259.109693][ T6640] syz.3.131 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 259.887113][ T5853] Bluetooth: hci5: command tx timeout [ 260.401898][ T6642] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.803727][ T5853] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 266.424006][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 266.424082][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 266.788233][ T6683] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input6 [ 266.961329][ T6684] netlink: 8 bytes leftover after parsing attributes in process `syz.3.143'. [ 267.984151][ T6690] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 269.792314][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 269.792345][ T6693] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 270.202151][ T37] team0 (unregistering): Port device team_slave_1 removed [ 272.575527][ T37] team0 (unregistering): Port device team_slave_0 removed [ 275.127252][ T6085] usb 5-1: USB disconnect, device number 2 [ 276.148695][ T10] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 276.330816][ T10] usb 3-1: config 1 interface 0 has no altsetting 0 [ 276.336936][ T10] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 276.336963][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.336982][ T10] usb 3-1: Product: syz [ 276.336995][ T10] usb 3-1: Manufacturer: syz [ 276.337009][ T10] usb 3-1: SerialNumber: syz [ 276.399552][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 276.421244][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 276.423117][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 276.446031][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 276.448364][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 278.034843][ T6730] Falling back ldisc for ttyprintk. [ 278.277143][ T10] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 278.640612][ T5853] Bluetooth: hci6: command tx timeout [ 280.564465][ T5915] usb 3-1: USB disconnect, device number 3 [ 280.626494][ T5915] usblp0: removed [ 280.728653][ T5853] Bluetooth: hci6: command tx timeout [ 282.134477][ T6790] netlink: 'syz.2.172': attribute type 12 has an invalid length. [ 282.195637][ T37] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.806629][ T5853] Bluetooth: hci6: command tx timeout [ 282.902570][ T6803] netlink: 'syz.4.177': attribute type 5 has an invalid length. [ 282.930631][ T37] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.993402][ T5853] Bluetooth: hci3: unexpected event for opcode 0x1005 [ 283.785246][ T6827] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 285.241477][ T5853] Bluetooth: hci6: command tx timeout [ 285.437735][ T6838] Falling back ldisc for ttyprintk. [ 285.808756][ T5943] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 285.854898][ T37] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.958594][ T5943] usb 3-1: Using ep0 maxpacket: 8 [ 285.962194][ T5943] usb 3-1: unable to get BOS descriptor or descriptor too short [ 285.964170][ T5943] usb 3-1: config 8 interface 0 altsetting 7 bulk endpoint 0x3 has invalid maxpacket 8 [ 285.964199][ T5943] usb 3-1: config 8 interface 0 has no altsetting 0 [ 285.967651][ T5943] usb 3-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5 [ 285.967679][ T5943] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.967699][ T5943] usb 3-1: Product: syz [ 285.967713][ T5943] usb 3-1: Manufacturer: syz [ 285.967727][ T5943] usb 3-1: SerialNumber: syz [ 286.072124][ T6837] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 286.102954][ T6599] chnl_net:caif_netlink_parms(): no params data found [ 286.336813][ T5943] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 286.336877][ T5943] usb 3-1: selecting invalid altsetting 0 [ 286.813074][ T5943] usb 3-1: USB disconnect, device number 4 [ 286.965605][ T37] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.115051][ T6203] udevd[6203]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 287.618689][ T6882] netlink: 44 bytes leftover after parsing attributes in process `syz.4.206'. [ 287.618715][ T6882] netlink: 43 bytes leftover after parsing attributes in process `syz.4.206'. [ 287.618735][ T6882] netlink: 'syz.4.206': attribute type 5 has an invalid length. [ 287.618748][ T6882] netlink: 43 bytes leftover after parsing attributes in process `syz.4.206'. [ 288.091362][ T6599] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.091525][ T6599] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.091759][ T6599] bridge_slave_0: entered allmulticast mode [ 288.103827][ T6599] bridge_slave_0: entered promiscuous mode [ 288.130161][ T6717] chnl_net:caif_netlink_parms(): no params data found [ 288.201641][ T6599] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.201792][ T6599] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.202046][ T6599] bridge_slave_1: entered allmulticast mode [ 288.209917][ T6599] bridge_slave_1: entered promiscuous mode [ 288.581721][ T6910] netlink: 'syz.2.216': attribute type 21 has an invalid length. [ 288.581744][ T6910] netlink: 128 bytes leftover after parsing attributes in process `syz.2.216'. [ 288.706174][ T6910] netlink: 'syz.2.216': attribute type 5 has an invalid length. [ 288.706199][ T6910] netlink: 3 bytes leftover after parsing attributes in process `syz.2.216'. [ 289.106923][ T6599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.189252][ T6599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.207974][ T6599] team0: Port device team_slave_0 added [ 291.508802][ T6599] team0: Port device team_slave_1 added [ 291.517312][ T37] bridge_slave_1: left allmulticast mode [ 291.517345][ T37] bridge_slave_1: left promiscuous mode [ 291.540075][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.633815][ T37] bridge_slave_0: left allmulticast mode [ 291.633854][ T37] bridge_slave_0: left promiscuous mode [ 291.634138][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.725044][ T37] bridge_slave_1: left allmulticast mode [ 291.725077][ T37] bridge_slave_1: left promiscuous mode [ 291.725335][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.810602][ T37] bridge_slave_0: left allmulticast mode [ 291.810638][ T37] bridge_slave_0: left promiscuous mode [ 291.811003][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.430829][ T37] bond0 (unregistering): Released all slaves [ 292.649315][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.714651][ T37] bond0 (unregistering): Released all slaves [ 294.249352][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.311333][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.363696][ T37] bond0 (unregistering): Released all slaves [ 294.421776][ T6717] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.421925][ T6717] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.422165][ T6717] bridge_slave_0: entered allmulticast mode [ 294.425212][ T6717] bridge_slave_0: entered promiscuous mode [ 294.590158][ T6717] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.590306][ T6717] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.590544][ T6717] bridge_slave_1: entered allmulticast mode [ 294.619163][ T6717] bridge_slave_1: entered promiscuous mode [ 295.053680][ T6599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.053699][ T6599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.053739][ T6599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.417264][ T6984] netlink: 132 bytes leftover after parsing attributes in process `syz.4.244'. [ 295.429693][ T6599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.429713][ T6599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 295.429744][ T6599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.668083][ T6987] 9pnet_virtio: no channels available for device syz [ 297.392970][ T6979] block nbd2: shutting down sockets [ 298.543895][ T6717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 299.534771][ T6717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.546047][ T7022] vti0: entered promiscuous mode [ 306.561134][ T6717] team0: Port device team_slave_0 added [ 307.081482][ T6717] team0: Port device team_slave_1 added [ 307.201585][ T7030] ubi31: attaching mtd0 [ 307.230639][ T7030] ubi31: scanning is finished [ 308.270486][ T7030] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 308.419116][ T37] hsr_slave_0: left promiscuous mode [ 308.571720][ T37] hsr_slave_1: left promiscuous mode [ 308.572660][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.572690][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.688811][ T5853] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 308.737598][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.737633][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.784763][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 308.804589][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 308.816774][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 308.827928][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 308.899116][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 309.112844][ T37] veth1_macvtap: left promiscuous mode [ 309.112973][ T37] veth0_macvtap: left promiscuous mode [ 309.113273][ T37] veth1_vlan: left promiscuous mode [ 309.113506][ T37] veth0_vlan: left promiscuous mode [ 309.321992][ T7048] netlink: 4400 bytes leftover after parsing attributes in process `syz.3.263'. [ 311.046772][ T5844] Bluetooth: hci0: command tx timeout [ 312.369446][ T37] team0 (unregistering): Port device team_slave_1 removed [ 312.609645][ T37] team0 (unregistering): Port device team_slave_0 removed [ 313.130805][ T5844] Bluetooth: hci0: command tx timeout [ 315.198722][ T5844] Bluetooth: hci0: command tx timeout [ 315.579320][ T6717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.579336][ T6717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.579363][ T6717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.604529][ T6717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.604549][ T6717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.604580][ T6717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.563784][ T7081] Bluetooth: MGMT ver 1.23 [ 316.594982][ T7081] sp0: Synchronizing with TNC [ 317.011160][ T7074] [U] è [ 317.278551][ T5844] Bluetooth: hci0: command tx timeout [ 317.310228][ T5929] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 317.558542][ T5929] usb 3-1: Using ep0 maxpacket: 16 [ 317.561229][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.561261][ T5929] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.561292][ T5929] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 317.561335][ T5929] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 317.561359][ T5929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.656038][ T5929] usb 3-1: config 0 descriptor?? [ 317.822221][ T7083] ip6erspan0: entered allmulticast mode [ 317.903951][ T6717] hsr_slave_0: entered promiscuous mode [ 317.907382][ T6717] hsr_slave_1: entered promiscuous mode [ 317.928843][ T6717] debugfs: 'hsr0' already exists in 'hsr' [ 317.928871][ T6717] Cannot create hsr debugfs directory [ 318.248968][ T5943] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 318.325509][ T5929] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input7 [ 318.418650][ T5943] usb 4-1: Using ep0 maxpacket: 8 [ 318.434700][ T5943] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.434731][ T5943] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.434754][ T5943] usb 4-1: config 0 interface 0 has no altsetting 0 [ 318.434788][ T5943] usb 4-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00 [ 318.434811][ T5943] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.566409][ T5943] usb 4-1: config 0 descriptor?? [ 318.587182][ T5929] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 318.636246][ T5928] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 318.660862][ T5929] usb 3-1: USB disconnect, device number 5 [ 318.828462][ T5928] usb 5-1: Using ep0 maxpacket: 32 [ 318.833077][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 318.833120][ T5928] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.833163][ T5928] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 318.833187][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.915192][ T5844] Bluetooth: hci3: Malformed LE Event: 0x0d [ 318.937311][ T5943] usbhid 4-1:0.0: can't add hid device: -71 [ 318.937451][ T5943] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 318.985691][ T7093] fido_id[7093]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 319.033019][ T5928] usb 5-1: config 0 descriptor?? [ 319.067698][ T5943] usb 4-1: USB disconnect, device number 2 [ 319.138501][ T5928] hub 5-1:0.0: USB hub found [ 319.258610][ T5928] hub 5-1:0.0: 29 ports detected [ 319.259654][ T5928] hub 5-1:0.0: insufficient power available to use all downstream ports [ 319.737086][ T7103] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 319.737115][ T7103] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 319.801869][ T7103] vhci_hcd vhci_hcd.0: Device attached [ 319.814094][ T7104] vhci_hcd: connection closed [ 319.834138][ T5928] usb 5-1: USB disconnect, device number 3 [ 319.850394][ T3595] vhci_hcd: stop threads [ 319.851426][ T3595] vhci_hcd: release socket [ 319.851495][ T3595] vhci_hcd: disconnect device [ 322.148538][ T7117] sp0: Synchronizing with TNC [ 322.472744][ T7114] [U] è [ 324.999775][ T5943] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 325.148562][ T5943] usb 3-1: Using ep0 maxpacket: 16 [ 325.151814][ T5943] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 325.151840][ T5943] usb 3-1: config 0 has no interface number 0 [ 325.151888][ T5943] usb 3-1: config 0 interface 1 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 325.151913][ T5943] usb 3-1: config 0 interface 1 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.151936][ T5943] usb 3-1: config 0 interface 1 has no altsetting 0 [ 325.151969][ T5943] usb 3-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 1.00 [ 325.151992][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.194825][ T5943] usb 3-1: config 0 descriptor?? [ 325.377813][ T7158] tmpfs: Unexpected value for 'usrquota' [ 325.419451][ T37] bridge_slave_1: left allmulticast mode [ 325.419485][ T37] bridge_slave_1: left promiscuous mode [ 325.421682][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.562073][ T37] bridge_slave_0: left allmulticast mode [ 325.562107][ T37] bridge_slave_0: left promiscuous mode [ 325.563127][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.703934][ T5943] chicony 0003:04F2:0418.0002: item fetching failed at offset 0/4 [ 325.704855][ T5943] chicony 0003:04F2:0418.0002: Chicony hid parse failed: -22 [ 325.704930][ T5943] chicony 0003:04F2:0418.0002: probe with driver chicony failed with error -22 [ 325.858534][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 325.908592][ T5915] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 325.922903][ T5943] usb 3-1: USB disconnect, device number 6 [ 326.008523][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 326.028547][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 326.028605][ T9] usb 5-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 326.028628][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.032964][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.040040][ T9] usb 5-1: config 0 descriptor?? [ 326.082266][ T5915] usb 4-1: config 0 has an invalid interface number: 117 but max is 0 [ 326.082292][ T5915] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 326.082310][ T5915] usb 4-1: config 0 has no interface number 0 [ 326.082358][ T5915] usb 4-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 326.082381][ T5915] usb 4-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 326.085869][ T5915] usb 4-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 326.085897][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.085918][ T5915] usb 4-1: Product: syz [ 326.085932][ T5915] usb 4-1: Manufacturer: syz [ 326.085947][ T5915] usb 4-1: SerialNumber: syz [ 326.182214][ T5915] usb 4-1: config 0 descriptor?? [ 326.252215][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.324434][ T37] bond0 (unregistering): Released all slaves [ 326.396880][ T5915] usbtouchscreen 4-1:0.117: probe with driver usbtouchscreen failed with error -71 [ 326.408941][ T7039] chnl_net:caif_netlink_parms(): no params data found [ 326.437155][ T6717] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 326.494946][ T5915] usb 4-1: USB disconnect, device number 3 [ 326.601224][ T9] waltop 0003:172F:0501.0003: unknown main item tag 0x0 [ 326.601266][ T9] waltop 0003:172F:0501.0003: unknown main item tag 0x0 [ 326.601291][ T9] waltop 0003:172F:0501.0003: unknown main item tag 0x0 [ 326.601318][ T9] waltop 0003:172F:0501.0003: unknown main item tag 0x0 [ 326.601344][ T9] waltop 0003:172F:0501.0003: unknown main item tag 0x0 [ 326.655604][ T9] waltop 0003:172F:0501.0003: hidraw0: USB HID v0.08 Device [HID 172f:0501] on usb-dummy_hcd.4-1/input0 [ 326.813055][ T9] usb 5-1: USB disconnect, device number 4 [ 326.821832][ T6717] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 326.979039][ T6717] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 326.982257][ T7167] fido_id[7167]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 327.718663][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.736306][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 327.740616][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 327.934242][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.138864][ T6074] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 328.293039][ T6074] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.293067][ T6074] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 328.297394][ T6074] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 328.297422][ T6074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 328.297441][ T6074] usb 3-1: SerialNumber: syz [ 328.591523][ T6074] usb 3-1: 0:2 : does not exist [ 328.623422][ T5915] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 328.678650][ T6074] usb 3-1: USB disconnect, device number 7 [ 328.753380][ T37] team0 (unregistering): Port device team_slave_1 removed [ 328.791985][ T5915] usb 5-1: Using ep0 maxpacket: 16 [ 328.794784][ T5915] usb 5-1: config 0 has an invalid interface number: 63 but max is 0 [ 328.794810][ T5915] usb 5-1: config 0 has no interface number 0 [ 328.794865][ T5915] usb 5-1: config 0 interface 63 altsetting 150 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 328.794893][ T5915] usb 5-1: config 0 interface 63 altsetting 150 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.794916][ T5915] usb 5-1: config 0 interface 63 altsetting 150 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.794944][ T5915] usb 5-1: config 0 interface 63 has no altsetting 0 [ 328.794979][ T5915] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00 [ 328.795003][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.812673][ T7060] udevd[7060]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 328.906041][ T5915] usb 5-1: config 0 descriptor?? [ 329.049898][ T37] team0 (unregistering): Port device team_slave_0 removed [ 329.340507][ T5915] uclogic 0003:28BD:0909.0004: interface is invalid, ignoring [ 329.539266][ T10] usb 5-1: USB disconnect, device number 5 [ 332.992912][ T6717] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 333.043531][ T5929] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 333.286337][ T5929] usb 5-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 333.286370][ T5929] usb 5-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 333.286391][ T5929] usb 5-1: Product: syz [ 333.286507][ T5929] usb 5-1: Manufacturer: syz [ 333.286523][ T5929] usb 5-1: SerialNumber: syz [ 333.354488][ T5929] usb 5-1: config 0 descriptor?? [ 333.587290][ T7039] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.587429][ T7039] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.587647][ T7039] bridge_slave_0: entered allmulticast mode [ 333.597081][ T7039] bridge_slave_0: entered promiscuous mode [ 333.616945][ T7039] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.617088][ T7039] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.617295][ T7039] bridge_slave_1: entered allmulticast mode [ 333.637350][ T7039] bridge_slave_1: entered promiscuous mode [ 334.048555][ T5929] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 334.050413][ T5929] asix 5-1:0.0: probe with driver asix failed with error -71 [ 334.089787][ T5929] usb 5-1: USB disconnect, device number 6 [ 334.122951][ T7039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.801027][ T7039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.521778][ T7039] team0: Port device team_slave_0 added [ 335.559129][ T7039] team0: Port device team_slave_1 added [ 337.889263][ T7254] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 338.477421][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 338.477439][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.477473][ T7039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.550452][ T7039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.550467][ T7039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.550488][ T7039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.878639][ T6074] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 339.031042][ T6074] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 339.031070][ T6074] usb 3-1: config 0 has no interface number 0 [ 339.031117][ T6074] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 339.031155][ T6074] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.044313][ T6074] usb 3-1: config 0 descriptor?? [ 340.131838][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 340.158717][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 340.160263][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 340.162188][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 340.163640][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 340.220716][ T6074] usb 3-1: selecting invalid altsetting 1 [ 340.222096][ T6074] dvb_ttusb_budget: ttusb_init_controller: error [ 340.222572][ T6074] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 340.744051][ T6074] DVB: Unable to find symbol cx22700_attach() [ 340.818555][ T10] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 340.875305][ T6074] DVB: Unable to find symbol tda10046_attach() [ 340.875321][ T6074] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 340.878300][ T6074] usb 3-1: USB disconnect, device number 8 [ 340.981157][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 340.981199][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 340.981235][ T10] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 340.981257][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.035672][ T10] usb 4-1: config 0 descriptor?? [ 341.330189][ T7039] hsr_slave_0: entered promiscuous mode [ 341.337316][ T7039] hsr_slave_1: entered promiscuous mode [ 341.340088][ T7039] debugfs: 'hsr0' already exists in 'hsr' [ 341.340113][ T7039] Cannot create hsr debugfs directory [ 341.499454][ T7298] snd_dummy snd_dummy.0: control 4:2:0:syz1:211 is already present [ 341.656104][ T5928] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 342.322189][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.338214][ T5928] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 342.338239][ T5928] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.338257][ T5928] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 342.338276][ T5928] usb 5-1: config 1 has no interface number 1 [ 342.338320][ T5928] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 342.475504][ T5928] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 342.475533][ T5928] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.475552][ T5928] usb 5-1: Product: syz [ 342.475566][ T5928] usb 5-1: Manufacturer: syz [ 342.475580][ T5928] usb 5-1: SerialNumber: syz [ 342.479012][ T10] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0 [ 342.479278][ T5853] Bluetooth: hci2: command tx timeout [ 342.639899][ T10] lenovo 0003:17EF:6047.0005: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 342.698542][ T10] usb 4-1: USB disconnect, device number 4 [ 342.910276][ T7302] fido_id[7302]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 342.974189][ T5928] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 342.974363][ T5928] usb 5-1: MIDIStreaming interface descriptor not found [ 343.080342][ T5928] usb 5-1: USB disconnect, device number 7 [ 343.108070][ T38] audit: type=1400 audit(1756973847.775:2): lsm=SMACK fn=smack_socket_sock_rcv_skb action=denied subject="*" object="_" requested=w pid=7306 comm="syz.2.345" src=1 dest=20000 netif=wpan0 [ 343.504632][ T7313] udevd[7313]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 343.609198][ T6237] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 343.658528][ T5929] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 343.778615][ T6237] usb 3-1: Using ep0 maxpacket: 32 [ 343.797233][ T6237] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 343.804234][ T6237] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 343.804263][ T6237] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.804284][ T6237] usb 3-1: Product: syz [ 343.804299][ T6237] usb 3-1: Manufacturer: syz [ 343.804313][ T6237] usb 3-1: SerialNumber: syz [ 343.841017][ T5929] usb 4-1: Using ep0 maxpacket: 32 [ 343.854113][ T5929] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 343.854142][ T5929] usb 4-1: config 0 interface 0 has no altsetting 0 [ 343.854171][ T5929] usb 4-1: New USB device found, idVendor=07c0, idProduct=1125, bcdDevice= 0.00 [ 343.854191][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.927412][ T6237] usb 3-1: config 0 descriptor?? [ 343.930122][ T7310] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 344.009063][ T5929] usb 4-1: config 0 descriptor?? [ 344.036846][ T6237] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 344.277592][ T6237] usb 3-1: USB disconnect, device number 9 [ 344.463766][ T5929] vrc2 0003:07C0:1125.0006: fixing up VRC-2 report descriptor [ 344.490502][ T5929] input: HID 07c0:1125 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:07C0:1125.0006/input/input9 [ 344.560195][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 344.568586][ T5853] Bluetooth: hci2: command tx timeout [ 344.699035][ T5929] vrc2 0003:07C0:1125.0006: input,hidraw0: USB HID v0.02 Joystick [HID 07c0:1125] on usb-dummy_hcd.3-1/input0 [ 344.711570][ T10] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 344.711604][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 344.725482][ T10] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 344.725514][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.725536][ T10] usb 5-1: Product: syz [ 344.725550][ T10] usb 5-1: Manufacturer: syz [ 344.725564][ T10] usb 5-1: SerialNumber: syz [ 344.913804][ T5929] usb 4-1: USB disconnect, device number 5 [ 344.981398][ T10] usb 5-1: config 0 descriptor?? [ 345.007844][ T10] usb 5-1: selecting invalid altsetting 0 [ 345.408904][ T10] usb 5-1: USB disconnect, device number 8 [ 345.521981][ T7091] udevd[7091]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 346.399223][ C1] vkms_vblank_simulate: vblank timer overrun [ 346.685448][ T5853] Bluetooth: hci2: command tx timeout [ 348.355036][ T7345] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 348.382755][ T7345] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 349.364971][ T5853] Bluetooth: hci2: command tx timeout [ 350.482892][ T7370] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 352.176605][ T7273] chnl_net:caif_netlink_parms(): no params data found [ 352.772569][ T5929] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 352.809772][ T7403] ubi31: attaching mtd0 [ 352.840547][ T7403] ubi31: scanning is finished [ 353.548840][ T5929] usb 4-1: Using ep0 maxpacket: 16 [ 353.585258][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 353.585291][ T5929] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 353.585313][ T5929] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 353.585415][ T5929] usb 4-1: New USB device found, idVendor=1e7d, idProduct=31ce, bcdDevice= 0.00 [ 353.585438][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.611156][ T5929] usb 4-1: config 0 descriptor?? [ 353.786447][ T7039] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 353.840758][ T7403] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 355.170023][ T5929] ryos 0003:1E7D:31CE.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:31ce] on usb-dummy_hcd.3-1/input0 [ 355.463406][ T5929] usb 4-1: USB disconnect, device number 6 [ 355.496838][ T7420] [U]  [ 355.496880][ T7420] [U] K{‘ [ 355.497197][ T7420] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖƯ¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 355.545073][ T7420] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 355.545651][ T7420] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 355.548290][ T7420] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)Ž¹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 355.595758][ T7039] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 355.692823][ T7420] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-É¿ß¿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 355.695731][ T7420] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 355.726621][ T6019] bridge_slave_1: left allmulticast mode [ 355.726658][ T6019] bridge_slave_1: left promiscuous mode [ 355.730638][ T6019] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.753653][ T7420] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 355.817993][ T7418] fido_id[7418]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 355.893600][ T7420] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/< 1 [ 370.648654][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 370.649957][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 370.651624][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 370.652490][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 371.496726][ T7596] capability: warning: `syz.3.426' uses deprecated v2 capabilities in a way that may be insecure [ 373.579614][ T5853] Bluetooth: hci5: command tx timeout [ 375.679022][ T5853] Bluetooth: hci5: command tx timeout [ 376.094261][ T7575] chnl_net:caif_netlink_parms(): no params data found [ 376.310871][ T7273] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 376.399202][ T7273] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 376.462687][ T7273] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 376.599252][ T7273] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 376.761223][ T7575] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.761487][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.761736][ T7575] bridge_slave_0: entered allmulticast mode [ 376.765736][ T7575] bridge_slave_0: entered promiscuous mode [ 376.826549][ T7575] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.826708][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.826942][ T7575] bridge_slave_1: entered allmulticast mode [ 376.831847][ T7575] bridge_slave_1: entered promiscuous mode [ 377.051032][ T7575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.071345][ T7575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.154511][ T67] bridge_slave_1: left allmulticast mode [ 377.154544][ T67] bridge_slave_1: left promiscuous mode [ 377.154825][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.220986][ T67] bridge_slave_0: left allmulticast mode [ 377.221020][ T67] bridge_slave_0: left promiscuous mode [ 377.221312][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.762333][ T5853] Bluetooth: hci5: command tx timeout [ 377.899497][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.000161][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.063031][ T67] bond0 (unregistering): Released all slaves [ 378.333218][ T7575] team0: Port device team_slave_0 added [ 378.337247][ T7575] team0: Port device team_slave_1 added [ 378.558690][ T67] hsr_slave_0: left promiscuous mode [ 378.581636][ T67] hsr_slave_1: left promiscuous mode [ 378.582644][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.626008][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.384619][ T67] team0 (unregistering): Port device team_slave_1 removed [ 379.549455][ T67] team0 (unregistering): Port device team_slave_0 removed [ 379.839268][ T5853] Bluetooth: hci5: command tx timeout [ 380.426906][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.426922][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.426939][ T7575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.445621][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.445637][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.445664][ T7575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.757243][ T7575] hsr_slave_0: entered promiscuous mode [ 380.766482][ T7575] hsr_slave_1: entered promiscuous mode [ 380.767466][ T7575] debugfs: 'hsr0' already exists in 'hsr' [ 380.767491][ T7575] Cannot create hsr debugfs directory [ 381.581592][ T7273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.834996][ T7273] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.861115][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.861368][ T3609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.883300][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.883573][ T3609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.786361][ T7273] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.094114][ T7575] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 383.143556][ T7575] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 383.173538][ T7575] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 383.240483][ T7575] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 383.513828][ T7273] veth0_vlan: entered promiscuous mode [ 383.558275][ T7273] veth1_vlan: entered promiscuous mode [ 383.723786][ T7575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.741774][ T7273] veth0_macvtap: entered promiscuous mode [ 383.810711][ T7273] veth1_macvtap: entered promiscuous mode [ 383.816178][ T7575] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.856186][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.856723][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.905086][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.956922][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.957164][ T3609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.962505][ T7273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.043703][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.045964][ T6506] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.046449][ T6506] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.046712][ T6506] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.695315][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.695339][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.793337][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.793359][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.347916][ T7575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.229582][ T7742] warning: `syz.2.432' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 387.700423][ T7575] veth0_vlan: entered promiscuous mode [ 387.742002][ T7575] veth1_vlan: entered promiscuous mode [ 387.866513][ T7575] veth0_macvtap: entered promiscuous mode [ 387.882891][ T7575] veth1_macvtap: entered promiscuous mode [ 387.971155][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.050068][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.094180][ T1107] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.094443][ T1107] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.094709][ T1107] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.094749][ T1107] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.632864][ T7773] binder: 7772:7773 ioctl c0306201 200000000640 returned -22 [ 388.854050][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.854070][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.966278][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.966302][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.149820][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 389.149899][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.019608][ T7784] sp0: Synchronizing with TNC [ 390.402281][ T7780] [U] è [ 391.524690][ T7801] sp0: Synchronizing with TNC [ 391.827930][ T7792] [U] è [ 393.673569][ T7813] syzkaller1: tun_chr_ioctl cmd 1074812118 [ 395.178570][ T44] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 395.338622][ T44] usb 4-1: Using ep0 maxpacket: 16 [ 395.341381][ T44] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 395.341415][ T44] usb 4-1: config 0 interface 0 has no altsetting 0 [ 395.341463][ T44] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 395.341487][ T44] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 395.355335][ T7835] input: syz0 as /devices/virtual/input/input10 [ 395.423332][ T44] usb 4-1: config 0 descriptor?? [ 395.908141][ T44] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 396.410690][ T7855] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input11 [ 397.029632][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.5.468'. [ 397.262206][ T44] usb 4-1: USB disconnect, device number 8 [ 397.504606][ T7859] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 397.874991][ T7866] fido_id[7866]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 398.349688][ T7882] netlink: 8 bytes leftover after parsing attributes in process `syz.4.477'. [ 399.798648][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 399.971547][ T10] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 399.971577][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.092757][ T10] usb 5-1: config 0 descriptor?? [ 400.155462][ T10] cp210x 5-1:0.0: cp210x converter detected [ 400.449240][ T7920] sp0: Synchronizing with TNC [ 400.783205][ T7912] [U] è [ 401.398178][ T10] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 401.439665][ T10] usb 5-1: cp210x converter now attached to ttyUSB0 [ 401.645008][ T10] usb 5-1: USB disconnect, device number 11 [ 401.677177][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 401.809824][ T10] cp210x 5-1:0.0: device disconnected [ 402.578974][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 402.729166][ T10] usb 6-1: Using ep0 maxpacket: 8 [ 402.735710][ T10] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 402.735740][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 402.735765][ T10] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 402.735788][ T10] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.735831][ T10] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 402.735853][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.071940][ T10] usb 6-1: GET_CAPABILITIES returned 0 [ 403.072002][ T10] usbtmc 6-1:16.0: can't read capabilities [ 403.809810][ T7967] sp0: Synchronizing with TNC [ 404.881103][ T7960] [U] è [ 405.566083][ T6085] usb 6-1: USB disconnect, device number 2 [ 405.808540][ T6074] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 405.958482][ T6074] usb 7-1: Using ep0 maxpacket: 16 [ 405.961046][ T6074] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.961077][ T6074] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.961114][ T6074] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 405.961137][ T6074] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.033968][ T6074] usb 7-1: config 0 descriptor?? [ 407.238724][ T8001] capability: warning: `syz.4.511' uses 32-bit capabilities (legacy support in use) [ 407.312992][ T6074] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0 [ 407.313032][ T6074] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0 [ 407.313060][ T6074] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0 [ 407.313088][ T6074] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0 [ 407.313115][ T6074] corsair 0003:1B1C:1B02.000A: unknown main item tag 0x0 [ 407.381847][ T6074] corsair 0003:1B1C:1B02.000A: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.6-1/input0 [ 407.500755][ T6074] corsair 0003:1B1C:1B02.000A: Read invalid backlight brightness: be. [ 407.902831][ T5915] usb 7-1: USB disconnect, device number 2 [ 408.844224][ T8014] sp0: Synchronizing with TNC [ 408.844708][ T8016] [U] è [ 409.078656][ T8010] fido_id[8010]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 409.749226][ T8024] tmpfs: Too small a size for current use [ 410.026989][ T8033] sp0: Synchronizing with TNC [ 410.408437][ T8025] [U] è [ 411.250102][ T6237] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 411.538525][ T6237] usb 5-1: Using ep0 maxpacket: 16 [ 411.545053][ T6237] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 411.545084][ T6237] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.627640][ T6237] usb 5-1: config 0 descriptor?? [ 411.642925][ T6237] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 412.272223][ T6085] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 412.433104][ T6085] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 412.433138][ T6085] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 412.433162][ T6085] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 412.433209][ T6085] usb 4-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 412.433233][ T6085] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 412.442480][ T6085] usb 4-1: config 0 descriptor?? [ 412.859439][ T5928] usb 5-1: USB disconnect, device number 12 [ 412.879668][ T8063] syz.5.527 uses obsolete (PF_INET,SOCK_PACKET) [ 413.026182][ T8067] sp0: Synchronizing with TNC [ 413.516286][ T8060] [U] è [ 414.131734][ T6085] razer 0003:1532:011B.000B: item fetching failed at offset 4/5 [ 414.158491][ T6085] razer 0003:1532:011B.000B: probe with driver razer failed with error -22 [ 414.199681][ T6085] usb 4-1: USB disconnect, device number 9 [ 418.554684][ T8123] sp0: Synchronizing with TNC [ 418.939146][ T8116] [U] è [ 420.368473][ T5928] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 420.531189][ T5928] usb 4-1: config 0 has no interfaces? [ 420.534845][ T5928] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 420.534874][ T5928] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.534895][ T5928] usb 4-1: Product: syz [ 420.534915][ T5928] usb 4-1: Manufacturer: syz [ 420.534934][ T5928] usb 4-1: SerialNumber: syz [ 420.586317][ T5928] usb 4-1: config 0 descriptor?? [ 420.821494][ T8139] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 420.824512][ T8139] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.831003][ T6085] usb 4-1: USB disconnect, device number 10 [ 421.628547][ T6085] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 421.816752][ T6085] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 421.816792][ T6085] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 421.816833][ T6085] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 421.816858][ T6085] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.836231][ T8161] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 421.896571][ T6085] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 422.273257][ T6085] usb 7-1: USB disconnect, device number 3 [ 426.221694][ T8257] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 427.011108][ T8271] sp0: Synchronizing with TNC [ 427.329646][ T8254] [U] è [ 428.590156][ T9] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 428.768460][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 428.782373][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 428.782399][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.782419][ T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.836383][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 428.836415][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.836436][ T9] usb 3-1: Product: syz [ 428.836450][ T9] usb 3-1: Manufacturer: syz [ 428.836465][ T9] usb 3-1: SerialNumber: syz [ 429.372928][ T9] usb 3-1: 0:2 : does not exist [ 430.700562][ T5944] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 430.724069][ T9] usb 3-1: 1:0: failed to get current value for ch 0 (-22) [ 430.819033][ T9] usb 3-1: USB disconnect, device number 10 [ 430.858606][ T5944] usb 4-1: Using ep0 maxpacket: 8 [ 430.864676][ T5944] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2 [ 430.864708][ T5944] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.864729][ T5944] usb 4-1: Product: syz [ 430.864744][ T5944] usb 4-1: Manufacturer: syz [ 430.864759][ T5944] usb 4-1: SerialNumber: syz [ 430.919868][ T5944] usb 4-1: config 0 descriptor?? [ 431.209973][ T5944] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 431.257275][ T7657] udevd[7657]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 431.410665][ T5928] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 431.498579][ T6237] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 431.562130][ T5928] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 431.562299][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.562327][ T5928] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 431.562350][ T5928] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 431.573902][ T5928] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 431.573931][ T5928] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 431.573952][ T5928] usb 6-1: Manufacturer: syz [ 431.608838][ T5928] usb 6-1: config 0 descriptor?? [ 431.711573][ T6237] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 431.711606][ T6237] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.713184][ T6237] usb 5-1: Product: syz [ 431.713203][ T6237] usb 5-1: Manufacturer: syz [ 431.713219][ T6237] usb 5-1: SerialNumber: syz [ 431.842455][ T6237] usb 5-1: config 0 descriptor?? [ 432.064169][ T5944] gspca_sunplus: reg_w_riv err -71 [ 432.064275][ T5944] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 432.103945][ T5944] usb 4-1: USB disconnect, device number 11 [ 432.189177][ T5928] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 432.398046][ T5928] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 432.499671][ T5928] usb 6-1: USB disconnect, device number 3 [ 432.645937][ T6237] usb 5-1: USB disconnect, device number 13 [ 433.123746][ T8356] fido_id[8356]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 435.536080][ T8394] syzkaller1: entered promiscuous mode [ 435.536109][ T8394] syzkaller1: entered allmulticast mode [ 435.538641][ T5944] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 435.708500][ T5944] usb 3-1: Using ep0 maxpacket: 8 [ 435.712073][ T5944] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 435.712104][ T5944] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.873239][ T5944] usb 3-1: config 0 descriptor?? [ 436.898695][ T5943] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 436.899287][ C0] raw-gadget.1 gadget.5: ignoring, device is not running [ 437.051828][ T5943] usb 6-1: device descriptor read/64, error -32 [ 437.310864][ T5943] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 437.481234][ T5943] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 437.481317][ T5943] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.481337][ T5943] usb 6-1: Product: syz [ 437.481350][ T5943] usb 6-1: Manufacturer: syz [ 437.481363][ T5943] usb 6-1: SerialNumber: syz [ 437.734811][ T5944] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 437.734859][ T5944] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 437.735311][ T5944] asix 3-1:0.0: probe with driver asix failed with error -71 [ 438.012942][ T5944] usb 3-1: USB disconnect, device number 11 [ 439.214792][ T8424] sp0: Synchronizing with TNC [ 439.268425][ T8425] [U] è [ 439.596069][ T5943] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 439.596123][ T5943] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 439.598294][ T5943] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 439.668499][ T6237] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 439.758687][ T5928] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 439.818690][ T6237] usb 4-1: Using ep0 maxpacket: 16 [ 439.821419][ T6237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.821450][ T6237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 439.821472][ T6237] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 439.821517][ T6237] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 439.821540][ T6237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.916421][ T5943] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71 [ 439.933318][ T6237] usb 4-1: config 0 descriptor?? [ 439.978782][ T5928] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 439.978876][ T5928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.978898][ T5928] usb 3-1: Product: syz [ 439.978912][ T5928] usb 3-1: Manufacturer: syz [ 439.978927][ T5928] usb 3-1: SerialNumber: syz [ 440.009097][ T5943] usb 6-1: USB disconnect, device number 5 [ 440.052002][ T5928] usb 3-1: config 0 descriptor?? [ 440.482650][ T6237] microsoft 0003:045E:07DA.000D: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 440.482685][ T6237] microsoft 0003:045E:07DA.000D: no inputs found [ 440.483426][ T6237] microsoft 0003:045E:07DA.000D: could not initialize ff, continuing anyway [ 440.566486][ T6237] usb 4-1: USB disconnect, device number 12 [ 440.750138][ T38] audit: type=1326 audit(1756973945.395:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8448 comm="syz.5.635" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f068752ebe9 code=0x0 [ 440.906094][ T8447] fido_id[8447]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 441.316549][ T5928] usb 3-1: f81604_read: reg: 100e failed: -EPROTO [ 441.362413][ T5928] usb 3-1: f81604_read: reg: 200f failed: -EPROTO [ 441.383338][ T5928] usb 3-1: USB disconnect, device number 12 [ 442.758490][ T5915] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 442.916637][ T5915] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 442.916699][ T5915] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 442.916722][ T5915] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 442.916746][ T5915] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 442.916788][ T5915] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.99 [ 442.916810][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.045710][ T5915] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 443.855866][ T5915] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 443.887655][ T5915] usb 4-1: USB disconnect, device number 13 [ 445.545427][ T8493] netlink: 48 bytes leftover after parsing attributes in process `syz.3.648'. [ 447.118359][ C0] sched: DL replenish lagged too much [ 448.486009][ T5928] usb 3-1: f81604_read: reg: 100f failed: -ENODEV [ 450.566692][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 450.566775][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 454.260896][ T8481] syzkaller1: entered promiscuous mode [ 454.260929][ T8481] syzkaller1: entered allmulticast mode [ 459.062943][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 459.084179][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 459.105175][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 459.106500][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 459.108131][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 459.363121][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 459.385244][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 459.386562][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 459.387645][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 459.390299][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 460.156090][ T5844] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 460.189983][ T5844] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 460.191744][ T5844] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 460.193515][ T5844] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 460.194782][ T5844] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 461.199920][ T5844] Bluetooth: hci0: command tx timeout [ 461.520727][ T5844] Bluetooth: hci6: command tx timeout [ 461.892468][ T5845] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 461.912074][ T5845] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 461.913468][ T5845] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 461.915434][ T5845] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 461.916256][ T5845] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 462.318811][ T5845] Bluetooth: hci7: command tx timeout [ 462.888563][ T5845] Bluetooth: hci2: command 0x0406 tx timeout [ 463.278521][ T5845] Bluetooth: hci0: command tx timeout [ 463.598714][ T5845] Bluetooth: hci6: command tx timeout [ 464.078583][ T5845] Bluetooth: hci8: command tx timeout [ 464.398621][ T5845] Bluetooth: hci7: command tx timeout [ 465.368404][ T5845] Bluetooth: hci0: command tx timeout [ 465.614373][ T5844] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 465.638613][ T5844] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 465.639952][ T5844] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 465.641585][ T5844] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 465.642446][ T5844] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 465.681683][ T5844] Bluetooth: hci6: command tx timeout [ 466.177903][ T5159] Bluetooth: hci8: command tx timeout [ 466.481019][ T5159] Bluetooth: hci7: command tx timeout [ 467.448612][ T5159] Bluetooth: hci0: command tx timeout [ 467.758573][ T5159] Bluetooth: hci6: command tx timeout [ 468.238523][ T5159] Bluetooth: hci8: command tx timeout [ 468.558652][ T5159] Bluetooth: hci7: command tx timeout [ 470.318577][ T5159] Bluetooth: hci8: command tx timeout [ 476.479300][ T5845] Bluetooth: hci9: command tx timeout [ 478.558593][ T5845] Bluetooth: hci9: command tx timeout [ 480.638625][ T5845] Bluetooth: hci9: command tx timeout [ 482.718454][ T5845] Bluetooth: hci9: command tx timeout [ 503.092901][ T5210] udevd[5210]: worker [7877] /devices/platform/dummy_hcd.2/usb3/3-1 is taking a long time [ 512.024830][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 512.024912][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 520.292772][ T5853] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 520.317254][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 520.326642][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 520.360728][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 520.387788][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 520.525475][ T5845] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 520.555774][ T5845] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 520.557441][ T5845] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 520.583197][ T5845] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 520.596510][ T5845] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 521.035536][ T5845] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 521.063304][ T5845] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 521.065039][ T5845] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 521.066909][ T5845] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 521.067819][ T5845] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 522.059779][ T5845] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 522.087512][ T5845] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 522.099711][ T5845] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 522.103278][ T5845] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 522.104144][ T5845] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 522.478783][ T5853] Bluetooth: hci3: command tx timeout [ 522.725168][ T5853] Bluetooth: hci10: command tx timeout [ 523.198576][ T5853] Bluetooth: hci11: command tx timeout [ 524.158612][ T5853] Bluetooth: hci12: command tx timeout [ 524.558895][ T5853] Bluetooth: hci3: command tx timeout [ 524.798843][ T5845] Bluetooth: hci10: command tx timeout [ 525.290017][ T5853] Bluetooth: hci11: command tx timeout [ 526.048106][ T5845] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 526.082324][ T5845] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 526.086757][ T5845] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 526.088143][ T5845] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 526.132188][ T5845] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 526.238522][ T5845] Bluetooth: hci12: command tx timeout [ 526.638874][ T5845] Bluetooth: hci3: command tx timeout [ 526.878845][ T5845] Bluetooth: hci10: command tx timeout [ 527.360960][ T5845] Bluetooth: hci11: command tx timeout [ 528.238555][ T5845] Bluetooth: hci13: command tx timeout [ 528.318485][ T5845] Bluetooth: hci12: command tx timeout [ 528.718909][ T5845] Bluetooth: hci3: command tx timeout [ 528.958655][ T5845] Bluetooth: hci10: command tx timeout [ 529.446006][ T5845] Bluetooth: hci11: command tx timeout [ 530.318529][ T5845] Bluetooth: hci13: command tx timeout [ 530.399620][ T5845] Bluetooth: hci12: command tx timeout [ 532.398479][ T5845] Bluetooth: hci13: command tx timeout [ 534.478521][ T5845] Bluetooth: hci13: command tx timeout [ 560.166441][ T5845] Bluetooth: hci5: command 0x0406 tx timeout [ 573.471642][ T1326] ieee802154 phy0 wpan0: encryption failed: -22 [ 573.471727][ T1326] ieee802154 phy1 wpan1: encryption failed: -22 [ 580.922744][ T5845] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 580.948589][ T5845] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 580.950221][ T5845] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 580.953856][ T5845] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 580.991726][ T5845] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 581.074376][ T5159] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 581.118893][ T5159] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 581.120543][ T5159] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 581.121824][ T5159] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 581.122904][ T5159] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 581.322828][ T5844] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 581.326219][ T5844] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 581.327593][ T5844] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 581.351152][ T5844] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 581.352792][ T5844] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 582.651266][ T8565] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 582.676293][ T8565] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 582.677757][ T8565] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 582.694749][ T8565] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 582.696143][ T8565] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 586.860804][ T8568] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 586.888964][ T8568] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 586.892408][ T8568] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 586.894642][ T8568] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 586.959155][ T8568] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 604.161678][ T39] INFO: task kworker/1:5:5928 blocked for more than 143 seconds. [ 604.161711][ T39] Not tainted syzkaller #0 [ 604.161723][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.161738][ T39] task:kworker/1:5 state:D stack:20408 pid:5928 tgid:5928 ppid:2 task_flags:0x4288060 flags:0x00004000 [ 604.161798][ T39] Workqueue: usb_hub_wq hub_event [ 604.161831][ T39] Call Trace: [ 604.161839][ T39] [ 604.161854][ T39] __schedule+0x16f3/0x4c20 [ 604.161920][ T39] ? __pfx___schedule+0x10/0x10 [ 604.161969][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 604.162002][ T39] rt_mutex_schedule+0x77/0xf0 [ 604.162024][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 604.162049][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 604.162091][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 604.162127][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 604.162152][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 604.162174][ T39] ? __lock_acquire+0xab9/0xd20 [ 604.162216][ T39] ? rcu_barrier+0x4c/0x570 [ 604.162254][ T39] ? rcu_barrier+0x4c/0x570 [ 604.162274][ T39] mutex_lock_nested+0x16a/0x1d0 [ 604.162295][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 604.162325][ T39] rcu_barrier+0x4c/0x570 [ 604.162359][ T39] netdev_run_todo+0x327/0xea0 [ 604.162395][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 604.162430][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 604.162461][ T39] ? unregister_netdevice_queue+0x33c/0x380 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 604.162499][ T39] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 604.162531][ T39] ? rtnl_net_dev_lock+0x257/0x2f0 [ 604.162563][ T39] ? rtnl_net_dev_lock+0x2de/0x2f0 [ 604.162594][ T39] unregister_netdev+0x52/0x60 [ 604.162615][ T39] f81604_disconnect+0x68/0xf0 [ 604.162649][ T39] usb_unbind_interface+0x26e/0x910 [ 604.162687][ T39] ? __pfx_usb_unbind_interface+0x10/0x10 [ 604.162715][ T39] device_release_driver_internal+0x4d6/0x800 [ 604.162746][ T39] bus_remo[ 604.162746][ T39] bus_remove_device+0x355/0x420 [ 604.162782][ T39] device_del+0x515/0x8e0 [ 604.162824][ T39] ? __pfx_device_del+0x10/0x10 [ 604.162858][ T39] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 604.162889][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 604.162927][ T39] usb_disable_device+0x3e9/0x8a0 [ 604.162961][ T39] usb_disconnect+0x316/0x940 [ 604.163005][ T39] hub_event+0x1cf5/0x4a20 [ 604.163060][ T39] ? do_raw_spin_lock+0x121/0x290 [ 604.163089][ T39] ? register_lock_class+0x51/0x320 [ 604.163145][ T39] ? __pfx_hub_event+0x10/0x10 [ 604.163169][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 604.163205][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 604.163233][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 604.163260][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 604.163289][ T39] process_scheduled_works+0xade/0x17b0 [ 604.163350][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 604.163395][ T39] worker_thread+0x8a0/0xda0 [ 604.163426][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 604.163465][ T39] ? __kthread_parkme+0x7b/0x200 [ 604.163506][ T39] kthread+0x70e/0x8a0 [ 604.163542][ T39] ? __pfx_worker_thread+0x10/0x10 [ 604.163569][ T39] ? __pfx_kthread+0x10/0x10 [ 604.163607][ T39] ? __pfx_kthread+0x10/0x10 [ 604.163641][ T39] ret_from_fork+0x3f9/0x770 [ 604.163673][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 604.163707][ T39] ? __switch_to_asm+0x39/0x70 [ 604.163727][ T39] ? __switch_to_asm+0x33/0x70 [ 604.163745][ T39] ? __pfx_kthread+0x10/0x10 [ 604.163778][ T39] ret_from_fork_asm+0x1a/0x30 [ 604.163828][ T39] [ 604.163863][ T39] INFO: task syz.6.643:8473 blocked for more than 143 seconds. [ 604.163878][ T39] Not tainted syzkaller #0 [ 604.163889][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.163898][ T39] task:syz.6.643 state:D stack:25128 pid:8473 tgid:8473 ppid:7575 task_flags:0x400040 flags:0x00004006 [ 604.163958][ T39] Call Trace: [ 604.163965][ T39] [ 604.163978][ T39] __schedule+0x16f3/0x4c20 [ 604.164012][ T39] ? sched_clock+0x3f/0x60 [ 604.164035][ T39] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 604.164068][ T39] ? __pfx___schedule+0x10/0x10 [ 604.164130][ T39] rt_mutex_schedule+0x77/0xf0 [ 604.164151][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 604.164189][ T39] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 604.164216][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 604.164241][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 604.164265][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 604.164300][ T39] ? rcu_barrier+0x4c/0x570 [ 604.164329][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 604.164357][ T39] ? rcu_barrier+0x4c/0x570 [ 604.164376][ T39] mutex_lock_nested+0x16a/0x1d0 [ 604.164397][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 604.164425][ T39] rcu_barrier+0x4c/0x570 [ 604.164459][ T39] kvm_mmu_uninit_vm+0x53/0x90 [ 604.164483][ T39] kvm_arch_destroy_vm+0x23d/0x280 [ 604.164513][ T39] kvm_put_kvm+0xf8e/0x1670 [ 604.164549][ T39] ? __pfx_kvm_vm_release+0x10/0x10 [ 604.164577][ T39] kvm_vm_release+0x46/0x50 [ 604.164604][ T39] __fput+0x45b/0xa80 [ 604.164640][ T39] task_work_run+0x1d4/0x260 [ 604.164665][ T39] ? __pfx_task_work_run+0x10/0x10 [ 604.164693][ T39] ? exit_to_user_mode_loop+0x40/0x110 [ 604.164726][ T39] exit_to_user_mode_loop+0xec/0x110 [ 604.164756][ T39] do_syscall_64+0x2bd/0x3b0 [ 604.164785][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 604.164813][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.164835][ T39] ? clear_bhb_loop+0x60/0xb0 [ 604.164861][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.164891][ T39] RIP: 0033:0x7f52241eebe9 [ 604.164913][ T39] RSP: 002b:00007ffca59006f8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 604.164934][ T39] RAX: 0000000000000000 RBX: 000000000006bef2 RCX: 00007f52241eebe9 [ 604.164949][ T39] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 604.164962][ T39] RBP: 00007f5224427da0 R08: 0000000000000001 R09: 00000006a59009ef [ 604.164976][ T39] R10: 0000001b2c220000 R11: 0000000000000246 R12: 00007f5224425fac [ 604.164990][ T39] R13: 00007f5224425fa0 R14: ffffffffffffffff R15: 00007ffca5900810 [ 604.165024][ T39] [ 604.165033][ T39] INFO: task syz.2.644:8474 blocked for more than 143 seconds. [ 604.165046][ T39] Not tainted syzkaller #0 [ 604.165057][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 604.165066][ T39] task:syz.2.644 state:D stack:25128 pid:8474 tgid:8474 ppid:5842 task_flags:0x400040 flags:0x00004004 [ 604.165130][ T39] Call Trace: [ 604.165137][ T39] [ 604.165150][ T39] __schedule+0x16f3/0x4c20 [ 604.165202][ T39] ? __lock_acquire+0xab9/0xd20 [ 604.165231][ T39] ? __pfx___schedule+0x10/0x10 [ 604.165276][ T39] ? schedule+0x91/0x360 [ 604.165307][ T39] schedule+0x165/0x360 [ 604.165335][ T39] schedule_timeout+0x9a/0x270 [ 604.165361][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 604.165401][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 604.165430][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 604.165455][ T39] ? wait_for_completion+0x267/0x5d0 [ 604.165485][ T39] wait_for_completion+0x2bf/0x5d0 [ 604.165528][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 604.165557][ T39] ? __raw_spin_lock_init+0x45/0x100 [ 604.165592][ T39] rcu_barrier+0x463/0x570 [ 604.165625][ T39] kvm_mmu_uninit_vm+0x53/0x90 [ 604.165648][ T39] kvm_arch_destroy_vm+0x23d/0x280 [ 604.165710][ T39] kvm_put_kvm+0xf8e/0x1670 [ 604.165745][ T39] ? __pfx_kvm_vm_release+0x10/0x10 [ 604.165774][ T39] kvm_vm_release+0x46/0x50 [ 604.165800][ T39] __fput+0x45b/0xa80 [ 604.165834][ T39] task_work_run+0x1d4/0x260 [ 604.165859][ T39] ? __pfx_task_work_run+0x10/0x10 [ 604.165887][ T39] ? exit_to_user_mode_loop+0x40/0x110 [ 604.165919][ T39] exit_to_user_mode_loop+0xec/0x110 [ 604.165948][ T39] do_syscall_64+0x2bd/0x3b0 [ 604.165976][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 604.166002][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.166023][ T39] ? clear_bhb_loop+0x60/0xb0 [ 604.166050][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 604.166070][ T39] RIP: 0033:0x7fd962baebe9 [ 604.166087][ T39] RSP: 002b:00007fffe7d23e38 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 604.166107][ T39] RAX: 0000000000000000 RBX: 000000000006bf13 RCX: 00007fd962baebe9 [ 604.166128][ T39] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 604.166141][ T39] RBP: 00007fd962de7da0 R08: 0000000000000001 R09: 00000006e7d2412f [ 604.166154][ T39] R10: 0000001b30b20000 R11: 0000000000000246 R12: 00007fd962de5fac [ 604.166169][ T39] R13: 00007fd962de5fa0 R14: ffffffffffffffff R15: 00007fffe7d23f50 [ 604.166203][ T39] [ 604.166236][ T39] [ 604.166236][ T39] Showing all locks held in the system: [ 604.166247][ T39] 3 locks held by kworker/u8:0/12: [ 604.166259][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 604.166316][ T39] #1: ffffc90000117bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 604.166369][ T39] #2: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 604.166430][ T39] 2 locks held by ksoftirqd/0/15: [ 604.166442][ T39] #0: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 604.166495][ T39] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 604.166548][ T39] 6 locks held by ktimers/0/16: [ 604.166562][ T39] 3 locks held by kworker/u8:2/37: [ 604.166573][ T39] #0: ffff88802fb3f938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 604.166647][ T39] #1: ffffc90000ac7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 604.166705][ T39] #2: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 604.166757][ T39] 1 lock held by khungtaskd/39: [ 604.166769][ T39] #0: ffffffff8d9a8bc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 604.166853][ T39] 4 locks held by kworker/u9:1/5159: [ 604.166866][ T39] #0: ffff88804f9f3938 ((wq_completion)hci16#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 604.166926][ T39] #1: ffffc9000f707bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 604.166981][ T39] #2: ffff88808dec80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 604.167033][ T39] #3: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 604.167085][ T39] 2 locks held by getty/5597: [ 604.167096][ T39] #0: ffff88823bf708a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 604.167160][ T39] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 604.167213][ T39] 4 locks held by kworker/u9:3/5844: [ 604.167224][ T39] #0: ffff888066e02138 ((wq_completion)hci17#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 604.167284][ T39] #1: ffffc90004b27bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 604.167337][ T39] #2: ffff88808d4f00a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 604.167386][ T39] #3: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 604.167437][ T39] 4 locks held by kworker/u9:4/5845: [ 604.167450][ T39] #0: ffff8880291d4138 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 604.167508][ T39] #1: ffffc90004b37bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 604.167564][ T39] #2: ffff88808c5f80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 604.167620][ T39] #3: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 604.167671][ T39] 4 locks held by kworker/u9:5/5853: [ 604.167683][ T39] #0: ffff88808cc0f938 ((wq_completion)hci14#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 604.167741][ T39] #1: ffffc90004bf7bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 604.167796][ T39] #2: ffff88808cfa40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 604.167846][ T39] #3: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 604.167901][ T39] 6 locks held by kworker/1:5/5928: [ 604.167914][ T39] #0: ffff88801beafd38 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 604.167969][ T39] #1: ffffc90005107bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 604.168024][ T39] #2: ffff888146386188 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a20 [ 604.168073][ T39] #3: ffff8880365f4188 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xde/0x940 [ 604.168137][ T39] #4: ffff88805cc03150 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x800 [ 604.168187][ T39] #5: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 604.388402][ T39] 4 locks held by kworker/0:5/5944: [ 604.388421][ T39] #0: ffff888023d71138 ((wq_completion)wg-crypt-wg1){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 604.388494][ T39] #1: ffffc90005297bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 604.388583][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 604.388638][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 604.388694][ T39] 4 locks held by kworker/u8:23/6512: [ 604.388707][ T39] 4 locks held by kworker/u8:24/6513: [ 604.388719][ T39] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 604.388773][ T39] #1: ffffc900048cfbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 604.388836][ T39] #2: ffff88804b800898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 604.388889][ T39] #3: ffff8880b893f828 ((&c->lock)){+.+.}-{3:3}, at: ___slab_alloc+0x25c/0xdd0 [ 604.388947][ T39] 1 lock held by syz.3.415/7560: [ 604.388959][ T39] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 604.389020][ T39] 4 locks held by udevd/7877: [ 604.389031][ T39] #0: ffff88803c555950 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb8/0xe10 [ 604.389082][ T39] #1: ffff88805d7dac78 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 604.389145][ T39] #2: ffff88804a588f08 (kn->active#31){.+.+}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 604.389205][ T39] #3: ffff8880365f4188 (&dev->mutex){....}-{4:4}, at: serial_show+0x26/0xa0 [ 604.389253][ T39] 1 lock held by syz.6.643/8473: [ 604.389265][ T39] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 604.389315][ T39] 1 lock held by syz.2.644/8474: [ 604.389327][ T39] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 604.389377][ T39] 1 lock held by syz.5.645/8479: [ 604.389389][ T39] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 604.389437][ T39] 1 lock held by syz.4.647/8489: [ 604.389449][ T39] #0: ffffffff8d9ae570 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 604.389498][ T39] 4 locks held by kworker/0:11/8502: [ 604.389510][ T39] #0: ffff888049a13d38 ((wq_completion)wg-crypt-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 604.389570][ T39] #1: ffffc90006187bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 604.389626][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 604.389702][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 604.389757][ T39] 4 locks held by kworker/0:12/8505: [ 604.389770][ T39] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 604.389825][ T39] #1: ffffc9000627fbc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 604.389898][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 604.389953][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 604.390009][ T39] 3 locks held by syz-executor/8506: [ 604.390021][ T39] #0: ffff888051460e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 604.390075][ T39] #1: ffff8880514600a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 604.390131][ T39] #2: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 604.390192][ T39] 3 locks held by syz-executor/8509: [ 604.390204][ T39] #0: ffff88802d204e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 604.390255][ T39] #1: ffff88802d2040a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 604.390311][ T39] #2: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 604.390383][ T39] 4 locks held by kworker/0:13/8511: [ 604.390395][ T39] #0: ffff88805c285938 ((wq_completion)wg-crypt-wg2#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 604.390454][ T39] #1: ffffc9000694fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 604.390529][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 604.390582][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 604.390635][ T39] 4 locks held by syz-executor/8512: [ 604.390646][ T39] #0: ffff888053fd8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 604.390695][ T39] #1: ffff888053fd80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 604.390748][ T39] #2: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 604.390806][ T39] #3: ffff88805ea2cb58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 604.390874][ T39] 3 locks held by syz-executor/8515: [ 604.390885][ T39] #0: ffff88804cad8e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 604.390934][ T39] #1: ffff88804cad80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 604.390986][ T39] #2: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 604.391045][ T39] 2 locks held by syz-executor/8518: [ 604.391057][ T39] #0: ffff88802389ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 604.391108][ T39] #1: ffff88802389c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 604.391162][ T39] 4 locks held by kworker/0:14/8520: [ 604.391174][ T39] #0: ffff88803007c938 ((wq_completion)wg-crypt-wg1#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 604.391232][ T39] #1: ffffc90006177bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 604.391306][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 604.391359][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 604.391414][ T39] 4 locks held by kworker/0:17/8523: [ 604.391427][ T39] 1 lock held by syz-executor/8535: [ 604.391439][ T39] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 604.391487][ T39] 1 lock held by syz-executor/8537: [ 604.391499][ T39] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 604.391545][ T39] 1 lock held by syz-executor/8539: [ 604.391557][ T39] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 604.391605][ T39] 1 lock held by syz-executor/8542: [ 604.391617][ T39] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 604.391663][ T39] 1 lock held by syz-executor/8545: [ 604.391675][ T39] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 604.391723][ T39] 4 locks held by kworker/0:20/8553: [ 604.391735][ T39] #0: ffff88805c285138 ((wq_completion)wg-crypt-wg0#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 604.391794][ T39] #1: ffffc900061f7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 604.391856][ T39] #2: ffffffff8d84a7a0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 604.391910][ T39] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 604.391966][ T39] 1 lock held by syz-executor/8559: [ 604.391979][ T39] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 604.392026][ T39] 1 lock held by syz-executor/8560: [ 604.392038][ T39] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 604.392085][ T39] 1 lock held by syz-executor/8563: [ 604.392097][ T39] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 604.392144][ T39] 1 lock held by syz-executor/8567: [ 604.392156][ T39] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 604.392203][ T39] 4 locks held by kworker/u9:6/8570: [ 604.392214][ T39] #0: ffff88803988d938 ((wq_completion)hci18#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 604.392273][ T39] #1: ffffc90004f67bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 604.392327][ T39] #2: ffff88806e4180a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 604.392377][ T39] #3: ffffffff8ee3a2b8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 604.392428][ T39] 1 lock held by syz-executor/8572: [ 604.392440][ T39] #0: ffffffff8ecd2938 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 604.392489][ T39] [ 604.392495][ T39] ============================================= [ 604.392495][ T39] [ 604.392514][ T39] NMI backtrace for cpu 1 [ 604.392539][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 604.392563][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 604.392576][ T39] Call Trace: [ 604.392584][ T39] [ 604.392593][ T39] dump_stack_lvl+0x189/0x250 [ 604.392628][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.392679][ T39] ? __pfx__printk+0x10/0x10 [ 604.392716][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 604.392745][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 604.392772][ T39] ? __pfx__printk+0x10/0x10 [ 604.392802][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 604.392838][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 604.392866][ T39] watchdog+0xf93/0xfe0 [ 604.392900][ T39] ? watchdog+0x1de/0xfe0 [ 604.392934][ T39] kthread+0x70e/0x8a0 [ 604.392970][ T39] ? __pfx_watchdog+0x10/0x10 [ 604.392997][ T39] ? __pfx_kthread+0x10/0x10 [ 604.393035][ T39] ? __pfx_kthread+0x10/0x10 [ 604.393069][ T39] ret_from_fork+0x3f9/0x770 [ 604.393100][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 604.393135][ T39] ? __switch_to_asm+0x39/0x70 [ 604.393154][ T39] ? __switch_to_asm+0x33/0x70 [ 604.393173][ T39] ? __pfx_kthread+0x10/0x10 [ 604.393207][ T39] ret_from_fork_asm+0x1a/0x30 [ 604.393245][ T39] [ 604.393253][ T39] Sending NMI from CPU 1 to CPUs 0: [ 604.393282][ C0] NMI backtrace for cpu 0 [ 604.393297][ C0] CPU: 0 UID: 0 PID: 16 Comm: ktimers/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 604.393317][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 604.393329][ C0] RIP: 0010:__sanitizer_cov_trace_const_cmp1+0x2b/0xa0 [ 604.393355][ C0] Code: 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 08 f0 f5 91 65 44 8b 05 b7 8d 37 10 41 81 e0 00 00 ff 00 ba 00 01 00 00 23 91 0c 0b 00 00 <41> 89 d1 45 09 c1 74 12 45 85 c0 75 5f 85 d2 74 5b 83 b9 d4 15 00 [ 604.393371][ C0] RSP: 0018:ffffc90000156ef8 EFLAGS: 00000206 [ 604.393387][ C0] RAX: ffffffff88d80f7b RBX: 0000000000000000 RCX: ffff88801beed940 [ 604.393401][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 604.393412][ C0] RBP: ffff88803ce9ce80 R08: 0000000000000000 R09: 0000000000000100 [ 604.393424][ C0] R10: dffffc0000000000 R11: ffffed1009838589 R12: ffff88803ce9ce82 [ 604.393438][ C0] R13: 1ffff11006f06419 R14: 0000000000000000 R15: ffff888037832000 [ 604.393452][ C0] FS: 0000000000000000(0000) GS:ffff8881268c1000(0000) knlGS:0000000000000000 [ 604.393467][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 604.393479][ C0] CR2: 00007fb89e503f98 CR3: 0000000026c62000 CR4: 00000000003526f0 [ 604.393496][ C0] Call Trace: [ 604.393502][ C0] [ 604.393509][ C0] skb_release_data+0x3cb/0x7c0 [ 604.393542][ C0] consume_skb+0x9e/0xf0 [ 604.393566][ C0] nft_synproxy_eval_v4+0x376/0x560 [ 604.393600][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 604.393631][ C0] ? nf_ip_checksum+0x13c/0x510 [ 604.393662][ C0] nft_synproxy_do_eval+0x345/0x570 [ 604.393693][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 604.393732][ C0] nft_do_chain+0x40c/0x1920 [ 604.393759][ C0] ? __lock_acquire+0xab9/0xd20 [ 604.393787][ C0] ? sched_clock_cpu+0x74/0x430 [ 604.393805][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 604.393855][ C0] nft_do_chain_inet+0x25d/0x340 [ 604.393883][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 604.393910][ C0] ? __lock_acquire+0xab9/0xd20 [ 604.393940][ C0] ? NF_HOOK+0x9a/0x3a0 [ 604.393963][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 604.393991][ C0] nf_hook_slow+0xc2/0x220 [ 604.394017][ C0] NF_HOOK+0x206/0x3a0 [ 604.394039][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 604.394062][ C0] ? NF_HOOK+0x9a/0x3a0 [ 604.394089][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 604.394109][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 604.394134][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 604.394158][ C0] ? skb_dst+0x4f/0xd0 [ 604.394180][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 604.394203][ C0] NF_HOOK+0x309/0x3a0 [ 604.394225][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 604.394247][ C0] ? NF_HOOK+0x9a/0x3a0 [ 604.394268][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 604.394290][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 604.394318][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 604.394339][ C0] __netif_receive_skb+0x143/0x380 [ 604.394358][ C0] ? rt_spin_unlock+0x65/0x80 [ 604.394380][ C0] ? process_backlog+0x27b/0x900 [ 604.394400][ C0] process_backlog+0x31e/0x900 [ 604.394429][ C0] __napi_poll+0xb3/0x540 [ 604.394451][ C0] net_rx_action+0x707/0xe00 [ 604.394471][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 604.394505][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 604.394547][ C0] handle_softirqs+0x22f/0x710 [ 604.394575][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 604.394604][ C0] run_ktimerd+0xcf/0x190 [ 604.394629][ C0] ? __pfx_run_ktimerd+0x10/0x10 [ 604.394655][ C0] ? preempt_schedule_thunk+0x16/0x30 [ 604.394678][ C0] ? smpboot_thread_fn+0x5f4/0xa60 [ 604.394700][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 604.394721][ C0] smpboot_thread_fn+0x53f/0xa60 [ 604.394744][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 604.394771][ C0] kthread+0x70e/0x8a0 [ 604.394800][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 604.394843][ C0] ? __pfx_kthread+0x10/0x10 [ 604.394874][ C0] ? __pfx_kthread+0x10/0x10 [ 604.394902][ C0] ret_from_fork+0x3f9/0x770 [ 604.394926][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 604.394953][ C0] ? __switch_to_asm+0x39/0x70 [ 604.394969][ C0] ? __switch_to_asm+0x33/0x70 [ 604.394985][ C0] ? __pfx_kthread+0x10/0x10 [ 604.395012][ C0] ret_from_fork_asm+0x1a/0x30 [ 604.395039][ C0] [ 604.395285][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 604.395302][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 604.395325][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 604.395336][ T39] Call Trace: [ 604.395344][ T39] [ 604.395353][ T39] dump_stack_lvl+0x99/0x250 [ 604.395387][ T39] ? __asan_memcpy+0x40/0x70 [ 604.395411][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 604.395444][ T39] ? __pfx__printk+0x10/0x10 [ 604.395481][ T39] vpanic+0x281/0x750 [ 604.395516][ T39] ? __pfx_vpanic+0x10/0x10 [ 604.395545][ T39] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 604.395568][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 604.395609][ T39] panic+0xb9/0xc0 [ 604.395640][ T39] ? __pfx_panic+0x10/0x10 [ 604.395676][ T39] ? irq_work_queue+0xc3/0x140 [ 604.395708][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 604.395737][ T39] watchdog+0xfd2/0xfe0 [ 604.395771][ T39] ? watchdog+0x1de/0xfe0 [ 604.395806][ T39] kthread+0x70e/0x8a0 [ 604.395849][ T39] ? __pfx_watchdog+0x10/0x10 [ 604.395877][ T39] ? __pfx_kthread+0x10/0x10 [ 604.395916][ T39] ? __pfx_kthread+0x10/0x10 [ 604.395949][ T39] ret_from_fork+0x3f9/0x770 [ 604.395980][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 604.396029][ T39] ? __switch_to_asm+0x39/0x70 [ 604.396047][ T39] ? __switch_to_asm+0x33/0x70 [ 604.396066][ T39] ? __pfx_kthread+0x10/0x10 [ 604.396099][ T39] ret_from_fork_asm+0x1a/0x30 [ 604.396136][ T39] [ 604.396487][ T39] Kernel Offset: disabled