last executing test programs: 7m51.269520945s ago: executing program 2 (id=1053): syz_emit_vhci(&(0x7f0000000180)=ANY=[], 0x3d) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x20000000) socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000025300)=""/102392, 0x18ff8) creat(&(0x7f0000000000)='./file0\x00', 0xb0) fanotify_init(0xf00, 0x1) mmap(&(0x7f00000db000/0x4000)=nil, 0x4000, 0x1000000, 0x30, r0, 0x0) 7m50.18177181s ago: executing program 2 (id=1054): socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x80000000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000007c0)={0x0, 0x0}) 7m48.065718219s ago: executing program 2 (id=1057): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x190, 0xf1f80502f07a58b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0xff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1) 7m44.810419984s ago: executing program 2 (id=1067): socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) r0 = socket$kcm(0x25, 0x1, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x10160) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200), 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x28, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f0000000000)={0xc}) pread64(0xffffffffffffffff, 0x0, 0x0, 0x80000000000000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000007c0)={0x0, 0x0}) 7m42.906964878s ago: executing program 2 (id=1072): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe", 0x3d) socket$inet_udp(0x2, 0x2, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0xffffffffffff8000, 0x0) close(0xffffffffffffffff) 7m41.567902786s ago: executing program 2 (id=1075): socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/157, 0x9d}], 0x1) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 7m25.884514209s ago: executing program 32 (id=1075): socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r1, 0xa, 0x12) futex(&(0x7f000000cffc)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000400)=[{&(0x7f00000004c0)=""/157, 0x9d}], 0x1) dup2(r1, r2) fcntl$setown(r1, 0x8, r0) tkill(r0, 0x13) 12.359714405s ago: executing program 0 (id=2349): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, 0x0) keyctl$join(0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, 0x0, &(0x7f00000003c0), &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 10.802068178s ago: executing program 3 (id=2351): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x40, 0x4, 0x2d7}) syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) r1 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0186415, &(0x7f0000000080)={&(0x7f0000f3b000/0x3000)=nil, 0x800, 0x2, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) epoll_create1(0x80000) setrlimit(0xb, &(0x7f0000000200)={0x4, 0x101}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xd44, 0x80000006, 0x2}, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffd6b, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [0x0], [], [], [0x0, 0x0, 0x2800000000]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000200)={r6}) 10.585458871s ago: executing program 1 (id=2353): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) fchdir(r1) symlink(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 9.120329792s ago: executing program 1 (id=2355): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0xc080) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000001) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001"], 0xd0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) 8.874232849s ago: executing program 0 (id=2356): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0xfe55, 0xfffffffffffffffc}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @empty, 0x7ff}], 0x1c) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x2c, r3, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x2c}}, 0x3000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000002700000095010000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000380)={0x0, 0x2, 0x1, [0x400, 0x0, 0x7ff, 0x5], [0x80000000, 0x2, 0x8, 0x1, 0x8, 0x4, 0x0, 0x8, 0x73, 0x3, 0x9, 0x6, 0xc, 0x10000, 0x1, 0x29, 0xffffffffffffffff, 0x0, 0xc3, 0x80000001, 0x2, 0xb, 0x401, 0x73, 0xfff, 0x6b, 0x1, 0xfffffffffffffffb, 0x44de, 0x80000000, 0xe000000000000, 0x8000000000000000, 0x5, 0x8, 0x401, 0x0, 0x6, 0x7ff, 0x0, 0xb05, 0x696, 0x8, 0x99b7, 0x2c45, 0xfffffffffffeffff, 0x7, 0x80000001, 0x81, 0xe49, 0x1a, 0x1600000000, 0xae, 0x8, 0x5, 0x60, 0x9, 0x3ff, 0xb1, 0x2, 0xd, 0x5, 0x3, 0x3, 0x3ff, 0x159e, 0x8, 0x9e, 0x5, 0xe9, 0x9, 0x3, 0xc, 0x401, 0x406, 0x9, 0x8, 0xfffffffffffffffb, 0x3, 0xc, 0xf3, 0x9, 0x4, 0x72, 0x1, 0x2249, 0x3, 0x6, 0x4800000000000000, 0x6, 0xff, 0x9, 0x9, 0xff, 0x72, 0x6, 0xd, 0x7f, 0x3, 0x2, 0x0, 0x180, 0x3ff, 0x4d0, 0x80, 0xf641, 0x7, 0x8000000000000000, 0x4, 0x4f9, 0x5317, 0x4, 0x80, 0x3, 0x0, 0x100, 0x3, 0x4, 0x4, 0x2, 0x4, 0x5f5]}) socket$netlink(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$nl_route(r5, &(0x7f0000000bc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000597fb1fec7490000000000184500000100000000000000000000008500000078"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040603000000000000000000010000080500010007000001"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000814) 8.772483664s ago: executing program 3 (id=2357): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r5, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) shutdown(0xffffffffffffffff, 0x1) r6 = fsopen(&(0x7f0000000280)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) fsopen(0x0, 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 7.280306504s ago: executing program 1 (id=2358): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x200) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) socket$inet6(0xa, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000200)={'wpan1\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c8", 0xb) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) 7.032950468s ago: executing program 0 (id=2359): syz_emit_ethernet(0x28b, &(0x7f00000003c0)={@link_local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0300", 0x255, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x19, 0x7, "b8a3e10000a3e1030000000900fec0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x19, 0x11, "3f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05"}]}}}}}}, 0x0) 6.957950825s ago: executing program 3 (id=2361): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r1, &(0x7f00000001c0)=""/64, 0xfdef) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10) 6.820484209s ago: executing program 4 (id=2362): r0 = io_uring_setup(0x7a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="84f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d246", 0x83}], 0x2}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdff", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000002c0)="b1", 0x1}], 0x1}}], 0x3, 0x2090) close_range(r0, 0xffffffffffffffff, 0x0) 6.818829652s ago: executing program 0 (id=2363): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r5 = socket(0x2c, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp=r5}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) 6.783737876s ago: executing program 3 (id=2364): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x3, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000055000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x32}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x27, 0xe, 0x0, &(0x7f0000000000)="f8ad48c5fce216efcc244f7f86dd", 0x0, 0x4000, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) syz_usb_connect(0x3, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x4f, 0x92, 0x35, 0x10, 0x45e, 0x4e6, 0xe0ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0xd, 0x7, 0x2, 0xc5, 0xd7, 0xe8, 0x1, [], [{{0x9, 0x5, 0x95, 0x2, 0x20, 0x5, 0x4, 0x1b}}, {{0x9, 0x5, 0xa, 0x6ee6b7cb81eeb83a, 0x3f7, 0xff, 0x80}}]}}]}}]}}, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$UHID_INPUT2(r3, &(0x7f0000000300)={0xc, {0x1e, "c8322bf2399ae3e5c3dacb24b3c32acbe4b5767bf25e573b86990b7f3e9c"}}, 0x24) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x100000000000006}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r5, 0x7a4, &(0x7f0000000540)={{@local, 0x2}, 0x621, 0x9, 0xffffffff, 0x7}) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup2(r6, r6) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r8 = openat$smackfs_cipso(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/smackfs/cipso2\x00', 0x2, 0x0) write$smackfs_cipso(r8, &(0x7f00000000c0)=ANY=[@ANYBLOB='.# 0'], 0x2e) r9 = gettid() r10 = getpid() r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r11, 0x107, 0xf, &(0x7f00000000c0)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) sendto$packet(r11, &(0x7f0000000180)="10031200e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r12}, 0x14) rt_tgsigqueueinfo(r10, r9, 0xb, &(0x7f0000000000)={0xc, 0xfffffffd, 0x3}) ioctl$KDFONTOP_SET_DEF(r7, 0x4b72, &(0x7f0000000140)={0x2, 0x1, 0x12, 0x13, 0xa7, 0x0}) ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f00000001c0)={0x1, 0x2, 0x1000, 0x2d, &(0x7f0000000040)="ae5735494103e76f5c0dfc43c3ccbfa61a9ae9f2feb8dfbe87fdc6a93d0cc54adf10dc2e1221e87ac46a8960fc", 0xcf, 0x0, &(0x7f00000000c0)="b3018c0c5fc2d13d4278a98876f968b62803fd65643a1d3a7e2030e17e568977f86d4d8bf2ab09144ee0bf39d44b824ce0e6d6f58808e139dd095b3d9c5a2cb7c1d2872e5258b7348c134bfc937feaf6d42ded218c1b8a0c161e3d1a7f85578e3e8c2133e5ef01c814873e6b402d1f435ca5754da7ef8a58c0b1bd99aff8120ce938d1068e9abb6a8d0d301929542a25c7d6bba0362cd5074daef0945bbc51ee79b54275cb0c6958d920ab0fdf109f1e810cbee9bab580598e7d2aa23fa0ac467675c31e2cb925c09dd0cecbaa3ffe"}) write$binfmt_script(r4, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=ANY=[@ANYBLOB="480000001000030400000000fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="000000004000000014001280090001007665746800000000", @ANYRES32=0x0, @ANYBLOB="0c001a"], 0x48}}, 0x0) 6.741101209s ago: executing program 1 (id=2365): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) fchdir(r1) symlink(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 6.357085587s ago: executing program 4 (id=2366): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, 0x0) keyctl$join(0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), 0x0, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 5.666050216s ago: executing program 1 (id=2368): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$NFC_CMD_GET_TARGET(0xffffffffffffffff, 0x0, 0xc080) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0x10000001) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xe2981) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x300, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001"], 0xd0}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x1c}}, 0x0) write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600, 0x0, 0x2000]}}], 0xffc8) 4.660903762s ago: executing program 4 (id=2370): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) prlimit64(r0, 0x5, &(0x7f0000000140)={0x8, 0x400100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, &(0x7f00000000c0)=0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = dup(r3) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x3f, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r5, 0x0) ftruncate(r5, 0x51a9497) r6 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) readv(r6, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) accept4$bt_l2cap(r7, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) socket$inet_udp(0x2, 0x2, 0x0) 4.537311483s ago: executing program 1 (id=2372): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305839, &(0x7f0000000140)={0x0, 0x2, 0x21a1, 0x100}) r3 = socket(0x1, 0x5, 0x0) close(r3) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000500)={0xe000200c}) mkdirat(0xffffffffffffff9c, 0x0, 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x800030, &(0x7f0000000640)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './cgroup'}}, {@workdir={'workdir', 0x3d, './file0'}}]}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) writev(r1, &(0x7f0000000440), 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_SNDBIT(r6, 0x4004556a, 0x2000000) sendmmsg$inet6(r5, &(0x7f0000000700)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000004700)='o', 0x1}], 0x1}}], 0x2, 0x8020) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r5, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x3, 0x1, [0x8]}, 0xa) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_INNER_EXPR={0x1c, 0x5, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x8890}, 0x24000000) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9401"}, @global=@item_4={0x3, 0x1, 0xb, "8500"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000180)={0x14, &(0x7f0000000080)={0x20, 0x24, 0x2, {0x2, 0xe}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x41f}}}, &(0x7f0000000480)={0x2c, &(0x7f0000000200)={0x20, 0xa, 0xa8, "ec78a74f484487ea9887d42181ca8adb88221ec91741fb15393c2f595fc857fb73f5823875bd5d76bc39db8f7eeba6932a0ff597774010a65fc9bf5bd164085dbde71df5d0d0ea0d9964f11613f3bff8d9beaaca2eafaf210c04e828ec43ccb964e90756c0bfee60b977b269f12d3799174b648408eab65e8cecd34a017738f8585f35b0d92468af3f6a980d0fe96760a4d35181f61a5af583f66b4fdbaefd93ac790e49abc66b94"}, &(0x7f0000000380)={0x0, 0xa, 0x1}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000400), &(0x7f00000004c0)=ANY=[@ANYBLOB="d8a006c8b84fb858434248eb3dd41f66a7185582885829ddb036fddc5a8bf0b09d8470904a5830b0108144cee9a580a7eb94d77f59840368396acd56f1ac88f3da107fcfaacaa538b38f7a732ee6608a44ecb4c9b3abb1222c8f028fbf2d824057b85e0a3399b210fcc7d861bd40627b6451124f6067c7ecf9a23cd9deca69368ff3b4a8bace2269698c8cc97935c105708cc08fca8b5dcaecced8f87103a7febe69b225bc83abc01d0c5c16f33d3c1b56b95304b9bf83da753e133aa030bd086f79166b7fcf0298ed1061cab5447fa17ff47c2a39a754366cad671edb5b6f61"]}) mount$cgroup2(0x0, 0x0, 0x0, 0x4000, 0x0) 4.297872371s ago: executing program 4 (id=2373): socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) io_uring_setup(0x4685, &(0x7f0000000440)={0x0, 0x2078, 0x20, 0x0, 0x3a3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r6, &(0x7f0000000100)=ANY=[@ANYBLOB="0c000000fe00010004"], 0x408100) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x1c9, 0x12) 4.151748762s ago: executing program 5 (id=2375): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x5, 0x200) ioctl$DRM_IOCTL_GET_MAP(r1, 0xc0286404, &(0x7f0000000180)={&(0x7f0000ffb000/0x2000)=nil}) bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) socket$inet6(0xa, 0x1, 0x0) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000200)={'wpan1\x00'}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6", 0xd) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) 3.845665291s ago: executing program 0 (id=2376): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x2f) set_mempolicy(0x3, &(0x7f0000000000)=0x5, 0x6) io_uring_setup(0x4479, &(0x7f0000000100)={0x0, 0x4000bcad, 0x20, 0x3, 0x2f5}) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @local}, 0x1158}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) r1 = fcntl$dupfd(r0, 0x406, r0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r6, 0x4020565a, &(0x7f0000000080)={0x5, 0x2}) close_range(r5, r6, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) 2.630053673s ago: executing program 4 (id=2377): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x9, &(0x7f0000000100)=[{0x2, 0x0, 0x5, 0x1}, {0x2, 0x7, 0x0, 0x1}, {0x6, 0xa3, 0x7, 0x1c}, {0xf65d, 0x7, 0x7, 0x859b}, {0x9, 0x53, 0x7f, 0xa331}, {0x5, 0x3, 0xe, 0x80000000}, {0x81, 0x0, 0x1, 0x401}, {0x9, 0x4, 0xc9, 0x4}, {0x7, 0x0, 0x4, 0x1ff}]}) ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, &(0x7f0000000700)={{}, "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"}) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x15, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x271c, 0x0, &(0x7f0000000000)) r2 = socket(0x15, 0x5, 0x0) getsockopt(r2, 0x200000000114, 0x2719, 0x0, &(0x7f0000000000)) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) landlock_create_ruleset(&(0x7f0000000140)={0x818, 0x3, 0x3}, 0x18, 0x0) unshare(0x22020600) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000400)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x1, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"}) syz_open_pts(0xffffffffffffffff, 0x0) read$watch_queue(0xffffffffffffffff, &(0x7f0000000340)=""/133, 0x85) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) ppoll(0x0, 0x0, &(0x7f0000000200)={0x77359400}, &(0x7f0000000240)={[0x2]}, 0x8) 2.511491434s ago: executing program 3 (id=2378): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6) fchdir(r1) symlink(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 2.386366004s ago: executing program 5 (id=2379): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000180)={0x40, 0x4, 0x2d7}) syz_open_procfs$pagemap(0x0, &(0x7f0000000280)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) madvise(&(0x7f0000cf6000/0x4000)=nil, 0x4000, 0x16) r1 = openat$drirender128(0xffffff9c, &(0x7f0000000040), 0x2000, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0186415, &(0x7f0000000080)={&(0x7f0000f3b000/0x3000)=nil, 0x800, 0x2, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x0, 0x0, 0x1, 0x1}, 0x21) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) epoll_create1(0x80000) setrlimit(0xb, &(0x7f0000000200)={0x4, 0x101}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xd44, 0x80000006, 0x2}, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0, 0xfffffffffffffd6b, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000440)={r5, 0x0, 0x0, 0x0, 0x0, [], [], [], [0x0, 0x0, 0x2800000000]}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.196392546s ago: executing program 0 (id=2380): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/key-users\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x106f) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(0xffffffffffffffff, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x0, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, &(0x7f0000000100)=0x808c) ioctl$DVB_DEMUX_DMX_REMOVE_PID(0xffffffffffffffff, 0x40026f34, &(0x7f0000000040)=0x1) ioctl$DVB_DEMUX_DMX_ADD_PID(0xffffffffffffffff, 0x40026f33, 0x0) keyctl$join(0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r6, 0x0, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, 0x0}, 0x0) syz_io_uring_setup(0x2, &(0x7f0000000180)={0x0, 0x289b, 0x10000, 0x1, 0x323}, &(0x7f0000000000), 0x0, &(0x7f0000000000)) close_range(r0, 0xffffffffffffffff, 0x0) 963.734757ms ago: executing program 5 (id=2381): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0xfe55, 0xfffffffffffffffc}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in6={0xa, 0x0, 0x0, @empty, 0x7ff}], 0x1c) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d40)={0x2c, r3, 0x1, 0x4, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}]}, 0x2c}}, 0x3000c000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071116b00000000008510000002000000850000002700000095010000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000080), 0x4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r5, 0xc4089434, &(0x7f0000000380)={0x0, 0x2, 0x1, [0x400, 0x0, 0x7ff, 0x5], [0x80000000, 0x2, 0x8, 0x1, 0x8, 0x4, 0x0, 0x8, 0x73, 0x3, 0x9, 0x6, 0xc, 0x10000, 0x1, 0x29, 0xffffffffffffffff, 0x0, 0xc3, 0x80000001, 0x2, 0xb, 0x401, 0x73, 0xfff, 0x6b, 0x1, 0xfffffffffffffffb, 0x44de, 0x80000000, 0xe000000000000, 0x8000000000000000, 0x5, 0x8, 0x401, 0x0, 0x6, 0x7ff, 0x0, 0xb05, 0x696, 0x8, 0x99b7, 0x2c45, 0xfffffffffffeffff, 0x7, 0x80000001, 0x81, 0xe49, 0x1a, 0x1600000000, 0xae, 0x8, 0x5, 0x60, 0x9, 0x3ff, 0xb1, 0x2, 0xd, 0x5, 0x3, 0x3, 0x3ff, 0x159e, 0x8, 0x9e, 0x5, 0xe9, 0x9, 0x3, 0xc, 0x401, 0x406, 0x9, 0x8, 0xfffffffffffffffb, 0x3, 0xc, 0xf3, 0x9, 0x4, 0x72, 0x1, 0x2249, 0x3, 0x6, 0x4800000000000000, 0x6, 0xff, 0x9, 0x9, 0xff, 0x72, 0x6, 0xd, 0x7f, 0x3, 0x2, 0x0, 0x180, 0x3ff, 0x4d0, 0x80, 0xf641, 0x7, 0x8000000000000000, 0x4, 0x4f9, 0x5317, 0x4, 0x80, 0x3, 0x0, 0x100, 0x3, 0x4, 0x4, 0x2, 0x4, 0x5f5]}) socket$netlink(0x10, 0x3, 0x0) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r6, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$nl_route(r5, &(0x7f0000000bc0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES8=r1], 0x14}, 0x1, 0x0, 0x0, 0xc090}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x20, 0x6, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000597fb1fec7490000000000184500000100000000000000000000008500000078"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000040603000000000000000000010000080500010007000001"], 0x1c}, 0x1, 0x0, 0x0, 0xc0}, 0x20000814) 838.16433ms ago: executing program 5 (id=2382): r0 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) close(r0) 730.986946ms ago: executing program 5 (id=2383): ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) prlimit64(r0, 0x5, &(0x7f0000000140)={0x8, 0x400100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, &(0x7f00000000c0)=0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = dup(r3) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x3f, 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r5 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r5, 0x0) ftruncate(r5, 0x51a9497) r6 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, 0x0) readv(r6, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) accept4$bt_l2cap(r7, &(0x7f0000000200), 0x0, 0x800) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16) socket$inet_udp(0x2, 0x2, 0x0) 572.329762ms ago: executing program 5 (id=2384): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x4004) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) statx(0xffffffffffffff9c, 0x0, 0x100, 0x2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$unix(r5, &(0x7f0000000400)=@file={0x0, './file0\x00'}, 0x6e) shutdown(0xffffffffffffffff, 0x1) r6 = fsopen(&(0x7f0000000280)='ext4\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$VT_RESIZEX(0xffffffffffffffff, 0x560a, &(0x7f00000006c0)={0x4, 0x0, 0x0, 0x0, 0x132, 0x3}) fsopen(0x0, 0x1) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x14, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) 506.476µs ago: executing program 4 (id=2385): r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) fsync(r0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{}]}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x2, {{0x41, 0x2}, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000180)={0x41, 0x1}, 0x10) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f00000001c0)={{0x7, 0x3}, 0x6e}, 0x10) bind$tipc(r2, &(0x7f0000000200)=@id={0x1e, 0x3, 0x2, {0x4e22, 0x2}}, 0x10) sendmsg$tipc(r1, &(0x7f00000013c0)={&(0x7f0000000240)=@id={0x1e, 0x3, 0x3, {0x4e20, 0x2}}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="f40f4f85462353fb1f60d771ffd9dd2678dc5895d00d0586a28944eab30259f8132a2d8ce7e6", 0x26}], 0x2, &(0x7f0000001300)="2883edc9dd4701d95c264caa1c8b50d5895cab13b2d32406ddc1be16cfe68742a5b64860de03717ab042d99fe0fdfbcc9ccbbd08b8f9d3150aa93302ca3e4ebc81b13c29d2a0bb895cd42bf41a1b59f8ab4b9689f923ade0741a391ba2d69c785fe8bf04a611904f9a309931cce3cf9a3c42ad73e14a59f5f1f20fa516065f134c48f04abfe6c2adf48e7e4861d90197c0951ff6384b2c50464a265326e3232029d9ab4d6bda", 0xa6, 0x4048001}, 0x20000880) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000001400)={0x0, 0x39, "07b1c00a514093e954c77e07997afc40c7af87eca62a493915a2acebf4a39bae4449f2ef579134de7f394536874b575aa2d743b4951c407e45"}, &(0x7f0000001480)=0x41) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f00000014c0)={r5, 0x5492, 0x0, 0x9}, 0x10) r6 = syz_open_dev$hiddev(&(0x7f0000001500), 0x5, 0x0) ioctl$HIDIOCGPHYS(r6, 0x80404812, &(0x7f0000001540)) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f0000001580)="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") r7 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$TIOCSBRK(r7, 0x5427) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f00000016c0)={0x2, 0x0, 0x40, 0x3, r5}, &(0x7f0000001700)=0x10) bind$rxrpc(r8, &(0x7f0000001740)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0xabaf, @empty, 0x7}}, 0x24) syz_open_dev$MSR(&(0x7f0000001780), 0x5, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f00000017c0)={r5, 0x8}, &(0x7f0000001800)=0x8) sendmsg$NL80211_CMD_STOP_NAN(r8, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14000}, 0x4000001) ioctl$EVIOCGPHYS(r8, 0x80404507, &(0x7f0000001940)=""/4096) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, &(0x7f0000002940)={0x0, 0x1, {0x9, 0x2e, 0x12, 0x4, 0xb, 0x948b, 0x5, 0x11b}}) ioctl$PIO_UNIMAPCLR(r8, 0x4b68, &(0x7f0000002980)={0xffff, 0x7, 0x1}) syz_emit_ethernet(0x3d4, &(0x7f00000029c0)={@empty, @broadcast, @void, {@ipv6={0x86dd, @udp={0x8, 0x6, '%!h', 0x39e, 0x11, 0x0, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@fragment={0x84, 0x0, 0x1d, 0x0, 0x0, 0x1c, 0x64}, @hopopts={0x2b, 0xc, '\x00', [@jumbo={0xc2, 0x4, 0x9}, @calipso={0x7, 0x48, {0x0, 0x10, 0x8, 0xf8, [0x4, 0x3, 0x7e20, 0x4, 0x3ff, 0x1, 0xfff, 0x6]}}, @pad1, @jumbo={0xc2, 0x4, 0x28}, @pad1, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @dstopts={0x0, 0xd, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x6, [0x1, 0x0, 0x8, 0x3, 0x3, 0x87, 0x3]}}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2a}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast2}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}, @fragment={0x88, 0x0, 0x8, 0x0, 0x0, 0xf, 0x68}, @hopopts={0x3b, 0x22, '\x00', [@generic={0x79, 0x91, "c6d96bc750ce3929ea40a8445432bf1e01d5cf3fa4931f14c6c7dd52a9bcc1a0b3957f2af64cd6141fa4da8ceabfeed57a889da5838ab16f25f0f29ac35d26205583de8a7cc7177c340de725f3df971ac1112f3aae72a16bae14a195cc0da7d41ed847b6dae79d9ff9495d64f1340f4372cddbe29417140ba618f7915d12293cf7d1381681ee81b00d2da0efb41537b48f"}, @enc_lim={0x4, 0x1, 0x81}, @hao={0xc9, 0x10, @remote}, @pad1, @hao={0xc9, 0x10, @private1}, @generic={0xa, 0x4e, "ec61e5de4a2a1a0d708273607d36118b0ce850a9491daa1bdc014908874d719058a71120abc334b0ce18898fd04476fe12f1f098f348b0640ba32571ebf1aa5242539f71139f7ea375e773299282"}, @enc_lim={0x4, 0x1, 0x1a}, @ra]}, @hopopts={0xc, 0x20, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @calipso={0x7, 0x40, {0x2, 0xe, 0xf8, 0x2, [0x1000, 0x5, 0x7, 0x9, 0x1, 0x1a80, 0xf]}}, @ra={0x5, 0x2, 0xcc0}, @pad1, @jumbo={0xc2, 0x4, 0x8000}, @generic={0x9, 0x93, "096a9fdb2fbc8af2eb33c83cd9d498f23c9665f55e460e9ec6cbe41e18543e82ef65aaa90c4024488e731e80c8a2146f6226afb040c4bf019e08b1916544e23dd2601f82814772c3f6295231f27e912bc09e0ed167d8bd25ca9ea7ea9b9df668736e0cd7edb84a89d6d4115fa8dca8e7f0f88bb92af5dc4964232ef4ccd7dadd14c48f90d1823361500b988f2af8709df9137e"}, @pad1, @ra={0x5, 0x2, 0x400}, @enc_lim={0x4, 0x1, 0xf4}]}, @hopopts={0x21, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x2, [0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}]}], {0x4e21, 0x4e23, 0x5e, 0x0, @opaque="f3ff3d0b358f8e0b1582b73d2115a98eeae4edac17e9bc11df2109caff8f39023c747f77874b31cfa1d452056ca13ee915e5dee093b34dc244622559301a3da9ae35a1b21d3067b9826647b38be65ebc04cbe4c851b6"}}}}}}, &(0x7f0000002dc0)={0x0, 0x2, [0x557, 0xdd0, 0xfe5, 0x310]}) openat$dsp1(0xffffffffffffff9c, &(0x7f0000002e00), 0x10000, 0x0) 0s ago: executing program 3 (id=2386): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_udp(0x2, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xf32f, 0xfe000000}, &(0x7f00000000c0)=0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22}, 0x48) r5 = socket(0x2c, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000140), &(0x7f0000000080)=@udp=r5}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r6, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): LAN 0 to HW filter on device bond2 [ 520.898522][ T9170] ip6erspan0: entered promiscuous mode [ 520.924710][ T5184] usb 1-1: Using ep0 maxpacket: 16 [ 520.941050][ T5184] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 520.941079][ T5184] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 520.941118][ T5184] usb 1-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 520.941141][ T5184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.970812][ T5184] usb 1-1: config 0 descriptor?? [ 521.494508][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 521.646390][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 521.684869][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 521.684932][ T9] usb 2-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 521.684962][ T9] usb 2-1: config 0 interface 0 has no altsetting 0 [ 521.684999][ T9] usb 2-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 521.685024][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.831356][ T9] usb 2-1: config 0 descriptor?? [ 521.867553][ T9] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 522.966537][ T5861] usb 2-1: USB disconnect, device number 19 [ 523.808299][ T31] usb 1-1: USB disconnect, device number 27 [ 525.213801][ T31] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 526.483208][ T9207] SQUASHFS error: Failed to read block 0x0: -5 [ 526.796729][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 526.813648][ T31] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 526.813681][ T31] usb 2-1: config 0 has no interface number 0 [ 526.813735][ T31] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 526.845754][ T31] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 526.845775][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.845787][ T31] usb 2-1: Product: syz [ 526.845795][ T31] usb 2-1: Manufacturer: syz [ 526.845804][ T31] usb 2-1: SerialNumber: syz [ 526.940072][ T31] usb 2-1: config 0 descriptor?? [ 526.959709][ T9200] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 527.204114][ T9200] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 528.215777][ T31] asix 2-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 528.216094][ T31] asix 2-1:0.188: probe with driver asix failed with error -32 [ 529.934569][ T5861] usb 2-1: USB disconnect, device number 20 [ 530.805624][ T5965] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 530.984489][ T5965] usb 1-1: Using ep0 maxpacket: 16 [ 530.986910][ T5965] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 530.986969][ T5965] usb 1-1: config 0 interface 0 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 530.986995][ T5965] usb 1-1: config 0 interface 0 has no altsetting 0 [ 530.987026][ T5965] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 530.987049][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.033273][ T5965] usb 1-1: config 0 descriptor?? [ 531.105848][ T5965] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 531.277163][ T5965] usb 1-1: USB disconnect, device number 28 [ 532.945017][ T5965] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 535.205193][ T5965] usb 2-1: Using ep0 maxpacket: 32 [ 535.210134][ T5965] usb 2-1: config 0 has an invalid interface number: 188 but max is 0 [ 535.210165][ T5965] usb 2-1: config 0 has no interface number 0 [ 535.210219][ T5965] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 535.222927][ T5965] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 535.222961][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 535.222982][ T5965] usb 2-1: Product: syz [ 535.222997][ T5965] usb 2-1: Manufacturer: syz [ 535.223022][ T5965] usb 2-1: SerialNumber: syz [ 535.600911][ T5965] usb 2-1: config 0 descriptor?? [ 535.602359][ T9254] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 535.824789][ T5965] asix 2-1:0.188: probe with driver asix failed with error -71 [ 535.858133][ T5965] usb 2-1: USB disconnect, device number 21 [ 536.383330][ T9284] SQUASHFS error: Failed to read block 0x0: -5 [ 543.479232][ T9332] ±ÿ: renamed from lo [ 545.164504][ T9327] Bluetooth: hci3: command 0x0406 tx timeout [ 545.855545][ T9349] fuse: Unknown parameter 'fd0x0000000000000003' [ 554.045275][ T5815] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 554.058235][ T5815] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 554.064764][ T5815] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 554.067125][ T5815] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 554.067921][ T5815] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 554.074737][ T9] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 554.224567][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 554.228544][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.228566][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 554.228579][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 554.228605][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 554.228618][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.306251][ T9] usb 4-1: config 0 descriptor?? [ 554.888987][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 554.892206][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 554.939934][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 554.941934][ T9] usbhid 4-1:0.0: can't add hid device: -32 [ 554.965553][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -32 [ 555.710330][ T9] usb 4-1: USB disconnect, device number 15 [ 556.125158][ T9327] Bluetooth: hci5: command tx timeout [ 556.537200][ T9429] fuse: Unknown parameter 'fd0x0000000000000003' [ 557.867153][ T9450] netlink: 'syz.4.1122': attribute type 1 has an invalid length. [ 557.976856][ T43] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.204534][ T9327] Bluetooth: hci5: command tx timeout [ 558.257252][ T9450] 8021q: adding VLAN 0 to HW filter on device bond1 [ 558.276740][ T9453] ip6erspan0: entered promiscuous mode [ 558.308065][ T9453] bond1: (slave ip6erspan0): making interface the new active one [ 558.325678][ T9453] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 559.263593][ T43] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.040235][ T43] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.286603][ T9327] Bluetooth: hci5: command tx timeout [ 560.692606][ T9444] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 560.795022][ T43] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.013730][ T9401] chnl_net:caif_netlink_parms(): no params data found [ 561.804580][ T6920] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 561.954665][ T6920] usb 4-1: Using ep0 maxpacket: 16 [ 561.962417][ T6920] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 561.962446][ T6920] usb 4-1: config 0 has no interface number 0 [ 561.962490][ T6920] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 561.962530][ T6920] usb 4-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 561.962551][ T6920] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 561.987326][ T6920] usb 4-1: config 0 descriptor?? [ 562.028872][ T6920] usbhid 4-1:0.1: couldn't find an input interrupt endpoint [ 562.153531][ T9401] bridge0: port 1(bridge_slave_0) entered blocking state [ 562.153720][ T9401] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.153981][ T9401] bridge_slave_0: entered allmulticast mode [ 562.184098][ T9401] bridge_slave_0: entered promiscuous mode [ 562.202180][ T9401] bridge0: port 2(bridge_slave_1) entered blocking state [ 562.202324][ T9401] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.222610][ T9401] bridge_slave_1: entered allmulticast mode [ 562.232134][ T9401] bridge_slave_1: entered promiscuous mode [ 562.364606][ T9327] Bluetooth: hci5: command tx timeout [ 562.492183][ T9401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 562.544200][ T9401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.546442][ T43] bridge_slave_1: left allmulticast mode [ 562.546606][ T43] bridge_slave_1: left promiscuous mode [ 562.567876][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.725432][ T43] bridge_slave_0: left allmulticast mode [ 562.725456][ T43] bridge_slave_0: left promiscuous mode [ 562.727090][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.764575][ T31] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 562.938573][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 562.938636][ T31] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 562.938660][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.943512][ T31] usb 2-1: config 0 descriptor?? [ 562.979145][ T31] pwc: Askey VC010 type 2 USB webcam detected. [ 563.388498][ T31] pwc: recv_control_msg error -32 req 02 val 2b00 [ 563.390968][ T31] pwc: recv_control_msg error -32 req 02 val 2700 [ 563.392168][ T31] pwc: recv_control_msg error -32 req 02 val 2c00 [ 563.392973][ T31] pwc: recv_control_msg error -32 req 04 val 1000 [ 563.393728][ T31] pwc: recv_control_msg error -32 req 04 val 1300 [ 563.397975][ T31] pwc: recv_control_msg error -32 req 04 val 1400 [ 563.405973][ T31] pwc: recv_control_msg error -32 req 02 val 2000 [ 563.407436][ T31] pwc: recv_control_msg error -32 req 02 val 2100 [ 563.409003][ T31] pwc: recv_control_msg error -32 req 04 val 1500 [ 563.411194][ T31] pwc: recv_control_msg error -32 req 02 val 2500 [ 563.411851][ T31] pwc: recv_control_msg error -32 req 02 val 2400 [ 563.619091][ T31] pwc: recv_control_msg error -71 req 02 val 2900 [ 563.619604][ T31] pwc: recv_control_msg error -71 req 02 val 2800 [ 563.629499][ T31] pwc: recv_control_msg error -71 req 04 val 1100 [ 563.636298][ T31] pwc: recv_control_msg error -71 req 04 val 1200 [ 563.660782][ T31] pwc: Registered as video103. [ 563.689190][ T31] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input17 [ 563.806161][ T31] usb 2-1: USB disconnect, device number 22 [ 564.523169][ T31] usb 4-1: USB disconnect, device number 16 [ 566.237585][ T9557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1155'. [ 566.266595][ T9557] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1155'. [ 566.294464][ T5184] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 566.385050][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 566.618787][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 566.618928][ T5184] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.618942][ T5184] usb 1-1: config 0 has no interfaces? [ 566.618962][ T5184] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 566.618975][ T5184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.674603][ T5184] usb 1-1: config 0 descriptor?? [ 566.707668][ T43] bond0 (unregistering): Released all slaves [ 566.841744][ T9540] netlink: 'syz.4.1150': attribute type 12 has an invalid length. [ 566.908019][ T31] usb 1-1: USB disconnect, device number 29 [ 567.023031][ T9401] team0: Port device team_slave_0 added [ 567.036494][ T9401] team0: Port device team_slave_1 added [ 567.125421][ T9401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 567.125440][ T9401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.125467][ T9401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 567.128263][ T9401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 567.128278][ T9401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.128305][ T9401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 567.494595][ T31] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 567.644920][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 567.647402][ T31] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 567.647431][ T31] usb 2-1: config 0 has no interface number 0 [ 567.647477][ T31] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 567.647520][ T31] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 567.647544][ T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.659533][ T31] usb 2-1: config 0 descriptor?? [ 567.672045][ T31] usbhid 2-1:0.1: couldn't find an input interrupt endpoint [ 568.531975][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.532052][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.860939][ T9401] hsr_slave_0: entered promiscuous mode [ 568.862384][ T9401] hsr_slave_1: entered promiscuous mode [ 568.864201][ T9401] debugfs: 'hsr0' already exists in 'hsr' [ 568.864226][ T9401] Cannot create hsr debugfs directory [ 568.913609][ T9610] netlink: 'syz.4.1168': attribute type 12 has an invalid length. [ 569.794539][ T43] hsr_slave_0: left promiscuous mode [ 569.889387][ T43] hsr_slave_1: left promiscuous mode [ 569.893716][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 569.893828][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.108938][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.108977][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.165011][ T43] batman_adv: batadv0: Interface deactivated: macsec1 [ 570.165041][ T43] batman_adv: batadv0: Removing interface: macsec1 [ 570.367047][ T36] usb 2-1: USB disconnect, device number 23 [ 570.480249][ T43] veth1_macvtap: left promiscuous mode [ 570.480367][ T43] veth0_macvtap: left promiscuous mode [ 570.482514][ T43] veth1_vlan: left promiscuous mode [ 570.483175][ T43] veth0_vlan: left promiscuous mode [ 571.540031][ T43] team0 (unregistering): Port device team_slave_1 removed [ 571.629358][ T43] team0 (unregistering): Port device team_slave_0 removed [ 572.917363][ T811] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 573.095413][ T811] usb 4-1: Using ep0 maxpacket: 8 [ 573.110232][ T811] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 573.110264][ T811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 573.110285][ T811] usb 4-1: Product: syz [ 573.110299][ T811] usb 4-1: Manufacturer: syz [ 573.110314][ T811] usb 4-1: SerialNumber: syz [ 573.156025][ T811] usb 4-1: config 0 descriptor?? [ 573.186192][ T811] gspca_main: se401-2.14.0 probing 047d:5003 [ 573.581220][ T811] gspca_se401: Wrong descriptor type [ 573.789830][ T5861] usb 4-1: USB disconnect, device number 17 [ 573.926573][ T9669] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.927298][ T9669] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.207133][ T9] libceph: connect (1)[c::]:6789 error -101 [ 574.207351][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 574.288564][ T9691] ceph: No mds server is up or the cluster is laggy [ 574.603174][ T9669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 574.621039][ T9669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 574.654507][ T36] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 574.821402][ T36] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 574.821435][ T36] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 574.821459][ T36] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 574.851334][ T36] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 574.851365][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 574.851384][ T36] usb 4-1: Product: syz [ 574.851398][ T36] usb 4-1: Manufacturer: syz [ 574.851411][ T36] usb 4-1: SerialNumber: syz [ 575.099950][ T36] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 575.287669][ T5861] usb 4-1: USB disconnect, device number 18 [ 575.292903][ T5861] usblp0: removed [ 575.394528][ T36] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 575.558297][ T36] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 575.558361][ T36] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 575.558376][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.565601][ T36] usb 2-1: config 0 descriptor?? [ 575.599995][ T36] pwc: Askey VC010 type 2 USB webcam detected. [ 575.999318][ T36] pwc: recv_control_msg error -32 req 02 val 2b00 [ 576.002524][ T36] pwc: recv_control_msg error -32 req 02 val 2700 [ 576.002808][ T785] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.004182][ T36] pwc: recv_control_msg error -32 req 02 val 2c00 [ 576.009122][ T36] pwc: recv_control_msg error -32 req 04 val 1000 [ 576.030770][ T36] pwc: recv_control_msg error -32 req 04 val 1300 [ 576.045577][ T36] pwc: recv_control_msg error -32 req 04 val 1400 [ 576.046435][ T36] pwc: recv_control_msg error -32 req 02 val 2000 [ 576.047636][ T36] pwc: recv_control_msg error -32 req 02 val 2100 [ 576.049123][ T36] pwc: recv_control_msg error -32 req 04 val 1500 [ 576.054795][ T36] pwc: recv_control_msg error -32 req 02 val 2500 [ 576.060488][ T36] pwc: recv_control_msg error -32 req 02 val 2400 [ 576.120350][ T785] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.144481][ T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 576.169179][ T785] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.171875][ T785] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 576.289756][ T36] pwc: recv_control_msg error -71 req 02 val 2900 [ 576.293797][ T9401] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 576.294594][ T36] pwc: recv_control_msg error -71 req 02 val 2800 [ 576.296132][ T36] pwc: recv_control_msg error -71 req 04 val 1100 [ 576.296619][ T36] pwc: recv_control_msg error -71 req 04 val 1200 [ 576.306679][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 576.322080][ T10] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 576.322113][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.322143][ T10] usb 4-1: Product: syz [ 576.322158][ T10] usb 4-1: Manufacturer: syz [ 576.322172][ T10] usb 4-1: SerialNumber: syz [ 576.333073][ T36] pwc: Registered as video103. [ 576.443414][ T9401] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 576.476703][ T36] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 576.513583][ T10] usb 4-1: config 0 descriptor?? [ 576.562607][ T36] usb 2-1: USB disconnect, device number 24 [ 576.592348][ T9401] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 576.707974][ T9401] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 576.781742][ T6920] usb 4-1: USB disconnect, device number 19 [ 576.903569][ T43] IPVS: stop unused estimator thread 0... [ 577.464199][ T9401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.632397][ T9740] ceph: No mds server is up or the cluster is laggy [ 578.633837][ T10] libceph: connect (1)[c::]:6789 error -101 [ 578.634056][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 579.093821][ T10] libceph: connect (1)[c::]:6789 error -101 [ 579.094049][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 579.112046][ T9401] 8021q: adding VLAN 0 to HW filter on device team0 [ 579.206235][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 579.206392][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 579.259195][ T1617] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.259319][ T1617] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.222213][ T9401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.299864][ T10] libceph: connect (1)[c::]:6789 error -101 [ 583.300089][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 583.415377][ T9790] ceph: No mds server is up or the cluster is laggy [ 587.543017][ T9401] veth0_vlan: entered promiscuous mode [ 587.605358][ T9401] veth1_vlan: entered promiscuous mode [ 587.667940][ T9401] veth0_macvtap: entered promiscuous mode [ 587.695144][ T9401] veth1_macvtap: entered promiscuous mode [ 587.769899][ T9401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 587.802995][ T9401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 587.834506][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.834850][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.835076][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 587.835133][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.829077][ T1426] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.829099][ T1426] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.968861][ T1617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 589.968884][ T1617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.907811][ T36] libceph: connect (1)[c::]:6789 error -101 [ 591.907951][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 591.934896][ T36] libceph: connect (1)[c::]:6789 error -101 [ 591.935139][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 592.376848][ T36] libceph: connect (1)[c::]:6789 error -101 [ 592.377089][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 592.432953][ T9861] ceph: No mds server is up or the cluster is laggy [ 595.883746][ T9900] syz.4.1232 (9900) used greatest stack depth: 17600 bytes left [ 597.084918][ T5861] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 598.314445][ T5861] usb 1-1: Using ep0 maxpacket: 8 [ 598.322317][ T5861] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 598.322352][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.322373][ T5861] usb 1-1: Product: syz [ 598.322388][ T5861] usb 1-1: Manufacturer: syz [ 598.322403][ T5861] usb 1-1: SerialNumber: syz [ 598.866741][ T5861] usb 1-1: config 0 descriptor?? [ 598.889592][ T5861] gspca_main: se401-2.14.0 probing 047d:5003 [ 599.338462][ T5861] gspca_se401: Wrong descriptor type [ 599.558352][ T5861] usb 1-1: USB disconnect, device number 30 [ 599.989553][ T5965] libceph: connect (1)[c::]:6789 error -101 [ 599.989770][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 600.073736][ T9944] ceph: No mds server is up or the cluster is laggy [ 601.279707][ T9974] binder: BINDER_SET_CONTEXT_MGR already set [ 601.279725][ T9974] binder: 9971:9974 ioctl 4018620d 200000000040 returned -16 [ 618.399923][T10145] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input19 [ 619.580216][ T5815] Bluetooth: hci5: command 0x0405 tx timeout [ 620.527982][T10172] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1294'. [ 620.824589][ T36] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 621.146978][ T36] usb 2-1: Using ep0 maxpacket: 16 [ 621.164424][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 621.164467][ T36] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 621.164489][ T36] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 621.164736][ T36] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 621.164759][ T36] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 621.331084][ T36] usb 2-1: config 0 descriptor?? [ 622.316748][ T36] hid_parser_main: 21 callbacks suppressed [ 622.316768][ T36] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 622.316787][ T36] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 622.316802][ T36] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 622.316817][ T36] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 622.316831][ T36] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 622.316846][ T36] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 622.316861][ T36] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 622.316875][ T36] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 622.316890][ T36] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 622.316904][ T36] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 622.424595][ T36] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 622.424638][ T36] microsoft 0003:045E:07DA.0003: no inputs found [ 622.424653][ T36] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 622.857932][ T31] usb 2-1: USB disconnect, device number 25 [ 625.984495][ T36] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 626.134413][ T36] usb 6-1: Using ep0 maxpacket: 32 [ 626.137893][ T36] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 626.137925][ T36] usb 6-1: config 0 has no interface number 0 [ 626.137978][ T36] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 626.165107][ T36] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 626.165129][ T36] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.165141][ T36] usb 6-1: Product: syz [ 626.165149][ T36] usb 6-1: Manufacturer: syz [ 626.165158][ T36] usb 6-1: SerialNumber: syz [ 626.233130][ T36] usb 6-1: config 0 descriptor?? [ 626.234993][T10195] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 626.454135][T10195] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 627.315060][ T36] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 627.315084][ T36] asix 6-1:0.188 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 627.315282][ T36] asix 6-1:0.188: probe with driver asix failed with error -61 [ 629.469830][ T9] usb 6-1: USB disconnect, device number 2 [ 630.895505][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.895586][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.365348][T10236] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 642.045457][T10317] ceph: No mds server is up or the cluster is laggy [ 642.183395][ T5184] libceph: connect (1)[c::]:6789 error -101 [ 642.183523][ T5184] libceph: mon0 (1)[c::]:6789 connect error [ 647.325213][T10380] ceph: No mds server is up or the cluster is laggy [ 647.325752][ T9] libceph: connect (1)[c::]:6789 error -101 [ 647.325969][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 648.437731][ T9] libceph: connect (1)[c::]:6789 error -101 [ 648.437972][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 651.565943][ T36] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 651.754155][ T36] usb 1-1: Using ep0 maxpacket: 8 [ 651.765503][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 651.765541][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 651.765563][ T36] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 651.765585][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 651.765608][ T36] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 651.765697][ T36] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 651.765722][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 651.851629][ T36] usb 1-1: config 0 descriptor?? [ 651.928968][ T5815] Bluetooth: hci4: urb ffff888026a8e200 submission failed (90) [ 652.073805][ T36] usb 1-1: USB disconnect, device number 31 [ 653.875123][ T36] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 654.034593][ T36] usb 1-1: Using ep0 maxpacket: 16 [ 654.039778][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 654.039814][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 654.039837][ T36] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 654.039883][ T36] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 654.039908][ T36] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.086119][ T36] usb 1-1: config 0 descriptor?? [ 654.523077][ T36] hid_parser_main: 24 callbacks suppressed [ 654.523104][ T36] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 654.523131][ T36] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 654.523157][ T36] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 654.523182][ T36] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 654.523206][ T36] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 654.523231][ T36] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 654.523255][ T36] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 654.523279][ T36] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 654.523305][ T36] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 654.523330][ T36] microsoft 0003:045E:07DA.0004: unknown main item tag 0x0 [ 654.636837][ T36] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 654.636873][ T36] microsoft 0003:045E:07DA.0004: no inputs found [ 654.636888][ T36] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 654.778619][ T36] usb 1-1: USB disconnect, device number 32 [ 657.774464][ T811] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 657.948908][ T811] usb 4-1: Using ep0 maxpacket: 8 [ 657.951516][ T811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 657.951554][ T811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 657.951578][ T811] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 657.951603][ T811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 657.951625][ T811] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 657.951666][ T811] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 657.951691][ T811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.968970][ T811] usb 4-1: config 0 descriptor?? [ 658.029077][ T5815] Bluetooth: hci4: urb ffff888021aebf00 submission failed (90) [ 658.877425][ T811] usb 4-1: USB disconnect, device number 20 [ 660.320390][ T5861] libceph: connect (1)[c::]:6789 error -101 [ 660.320534][ T5861] libceph: mon0 (1)[c::]:6789 connect error [ 660.452225][T10523] ceph: No mds server is up or the cluster is laggy [ 660.534706][ T5861] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 660.716910][ T5861] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 660.716942][ T5861] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 660.716964][ T5861] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 660.717021][ T5861] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 660.719433][ T5861] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 660.719464][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 660.719485][ T5861] usb 6-1: Product: syz [ 660.719501][ T5861] usb 6-1: Manufacturer: syz [ 660.823711][ T5861] cdc_wdm 6-1:1.0: skipping garbage [ 660.823735][ T5861] cdc_wdm 6-1:1.0: skipping garbage [ 660.845585][ T5861] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 660.845610][ T5861] cdc_wdm 6-1:1.0: Unknown control protocol [ 661.022281][ T5184] usb 6-1: USB disconnect, device number 3 [ 661.259715][T10553] syzkaller0: entered promiscuous mode [ 661.259735][T10553] syzkaller0: entered allmulticast mode [ 661.534438][ T5861] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 661.687570][ T5861] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 661.687605][ T5861] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.687626][ T5861] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 661.687680][ T5861] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 661.716721][ T5861] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 661.716756][ T5861] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 661.716778][ T5861] usb 6-1: Product: syz [ 661.716793][ T5861] usb 6-1: Manufacturer: syz [ 661.729304][ T5861] cdc_wdm 6-1:1.0: skipping garbage [ 661.729320][ T5861] cdc_wdm 6-1:1.0: skipping garbage [ 661.797794][ T5861] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 661.797818][ T5861] cdc_wdm 6-1:1.0: Unknown control protocol [ 662.434381][ T5184] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 663.056973][ T5184] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.057037][ T5184] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 663.057155][ T5184] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.113943][ T5184] usb 1-1: config 0 descriptor?? [ 663.154809][ T5184] pwc: Askey VC010 type 2 USB webcam detected. [ 663.494569][ T5861] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 663.577103][ T5965] usb 6-1: USB disconnect, device number 4 [ 663.633727][ T5184] pwc: recv_control_msg error -32 req 02 val 2b00 [ 663.636091][ T5184] pwc: recv_control_msg error -32 req 02 val 2700 [ 663.636965][ T5184] pwc: recv_control_msg error -32 req 02 val 2c00 [ 663.637770][ T5184] pwc: recv_control_msg error -32 req 04 val 1000 [ 663.638520][ T5184] pwc: recv_control_msg error -32 req 04 val 1300 [ 663.639424][ T5184] pwc: recv_control_msg error -32 req 04 val 1400 [ 663.645462][ T5861] usb 2-1: Using ep0 maxpacket: 16 [ 663.647930][ T5861] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 663.647955][ T5861] usb 2-1: config 0 has no interface number 0 [ 663.647999][ T5861] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 663.648023][ T5861] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 663.648058][ T5861] usb 2-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.00 [ 663.648080][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 663.662342][ T5184] pwc: recv_control_msg error -32 req 02 val 2000 [ 663.691348][ T5861] usb 2-1: config 0 descriptor?? [ 663.694289][ T5184] pwc: recv_control_msg error -32 req 02 val 2100 [ 663.726445][ T5184] pwc: recv_control_msg error -32 req 04 val 1500 [ 663.762134][ T5184] pwc: recv_control_msg error -32 req 02 val 2500 [ 663.771315][ T5184] pwc: recv_control_msg error -32 req 02 val 2400 [ 663.973288][ T5184] pwc: recv_control_msg error -71 req 02 val 2900 [ 663.973926][ T5184] pwc: recv_control_msg error -71 req 02 val 2800 [ 663.988952][ T5184] pwc: recv_control_msg error -71 req 04 val 1100 [ 663.989612][ T5184] pwc: recv_control_msg error -71 req 04 val 1200 [ 664.010897][ T5184] pwc: Registered as video103. [ 664.022120][ T5184] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input20 [ 664.042720][ T5184] usb 1-1: USB disconnect, device number 33 [ 664.326157][ T5861] usbhid 2-1:0.1: can't add hid device: -71 [ 664.326299][ T5861] usbhid 2-1:0.1: probe with driver usbhid failed with error -71 [ 664.386612][ T5861] usb 2-1: USB disconnect, device number 26 [ 665.044564][ T5965] libceph: connect (1)[c::]:6789 error -101 [ 665.044794][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 665.071868][T10594] ceph: No mds server is up or the cluster is laggy [ 673.413971][ T811] libceph: connect (1)[c::]:6789 error -101 [ 673.416138][ T811] libceph: mon0 (1)[c::]:6789 connect error [ 673.465436][T10678] ceph: No mds server is up or the cluster is laggy [ 673.468167][ T811] libceph: connect (1)[c::]:6789 error -101 [ 673.468295][ T811] libceph: mon0 (1)[c::]:6789 connect error [ 673.569404][ T5815] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 673.569426][ T5815] CPU: 0 UID: 0 PID: 5815 Comm: kworker/u9:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 673.569445][ T5815] Tainted: [L]=SOFTLOCKUP [ 673.569450][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 673.569459][ T5815] Workqueue: hci1 hci_rx_work [ 673.569486][ T5815] Call Trace: [ 673.569491][ T5815] [ 673.569497][ T5815] dump_stack_lvl+0xe8/0x150 [ 673.569521][ T5815] sysfs_create_dir_ns+0x271/0x2a0 [ 673.569538][ T5815] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 673.569558][ T5815] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 673.569575][ T5815] ? rt_spin_unlock+0x160/0x200 [ 673.569595][ T5815] kobject_add_internal+0x631/0xd10 [ 673.569616][ T5815] kobject_add+0x163/0x240 [ 673.569636][ T5815] ? __pfx_kobject_add+0x10/0x10 [ 673.569656][ T5815] ? get_device_parent+0x370/0x3a0 [ 673.569674][ T5815] device_add+0x408/0xb80 [ 673.569692][ T5815] hci_conn_add_sysfs+0xd5/0x210 [ 673.569713][ T5815] le_conn_complete_evt+0x10e6/0x16b0 [ 673.569735][ T5815] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 673.569751][ T5815] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 673.569765][ T5815] ? lockdep_hardirqs_on+0x7a/0x110 [ 673.569779][ T5815] ? skb_pull_data+0xfb/0x200 [ 673.569799][ T5815] hci_le_conn_complete_evt+0x187/0x470 [ 673.569819][ T5815] hci_event_packet+0x659/0xef0 [ 673.569835][ T5815] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 673.569852][ T5815] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 673.569866][ T5815] ? __pfx_hci_event_packet+0x10/0x10 [ 673.569879][ T5815] ? rt_spin_unlock+0x14f/0x200 [ 673.569902][ T5815] ? hci_send_to_monitor+0xe2/0x590 [ 673.569920][ T5815] hci_rx_work+0x3ee/0x1030 [ 673.569937][ T5815] ? process_scheduled_works+0xa8d/0x18c0 [ 673.569956][ T5815] process_scheduled_works+0xb6e/0x18c0 [ 673.569992][ T5815] ? __pfx_process_scheduled_works+0x10/0x10 [ 673.570019][ T5815] ? assign_work+0x3d5/0x5e0 [ 673.570039][ T5815] worker_thread+0xa53/0xfc0 [ 673.570074][ T5815] kthread+0x388/0x470 [ 673.570087][ T5815] ? __pfx_worker_thread+0x10/0x10 [ 673.570103][ T5815] ? __pfx_kthread+0x10/0x10 [ 673.570117][ T5815] ret_from_fork+0x51e/0xb90 [ 673.570137][ T5815] ? __pfx_ret_from_fork+0x10/0x10 [ 673.570154][ T5815] ? __switch_to+0xc7d/0x1450 [ 673.570172][ T5815] ? __pfx_kthread+0x10/0x10 [ 673.570186][ T5815] ret_from_fork_asm+0x1a/0x30 [ 673.570208][ T5815] [ 673.572439][ T5815] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 673.572481][ T5815] Bluetooth: hci1: failed to register connection device [ 675.474505][ T5184] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 675.604397][ T5184] usb 4-1: device descriptor read/64, error -71 [ 675.915305][ T5184] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 676.664571][ T5184] usb 4-1: device descriptor read/64, error -71 [ 676.777335][ T5184] usb usb4-port1: attempt power cycle [ 677.165161][ T5184] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 678.151155][ T5184] usb 4-1: device descriptor read/8, error -71 [ 679.886786][ T5965] libceph: connect (1)[c::]:6789 error -101 [ 679.886977][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 679.914005][T10751] ceph: No mds server is up or the cluster is laggy [ 683.199625][T10779] syzkaller0: entered promiscuous mode [ 683.199644][T10779] syzkaller0: entered allmulticast mode [ 687.004851][T10806] netlink: 'syz.5.1506': attribute type 12 has an invalid length. [ 687.294121][ T5184] libceph: connect (1)[c::]:6789 error -101 [ 687.294581][ T5184] libceph: mon0 (1)[c::]:6789 connect error [ 687.329309][T10810] ceph: No mds server is up or the cluster is laggy [ 691.411787][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.411879][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 697.480264][T10884] ceph: No mds server is up or the cluster is laggy [ 697.495040][ T36] libceph: connect (1)[c::]:6789 error -101 [ 697.495265][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 697.655877][T10896] netlink: 'syz.4.1536': attribute type 12 has an invalid length. [ 699.964176][T10929] pim6reg: entered allmulticast mode [ 704.274936][ T36] libceph: connect (1)[c::]:6789 error -101 [ 704.275127][ T36] libceph: mon0 (1)[c::]:6789 connect error [ 704.358378][T10965] ceph: No mds server is up or the cluster is laggy [ 706.848670][T10985] syzkaller0: entered promiscuous mode [ 706.848700][T10985] syzkaller0: entered allmulticast mode [ 709.748515][ T31] libceph: connect (1)[c::]:6789 error -101 [ 709.748756][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 709.771583][ T31] libceph: connect (1)[c::]:6789 error -101 [ 709.771799][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 709.896290][T11008] ceph: No mds server is up or the cluster is laggy [ 710.368002][T11024] pim6reg: entered allmulticast mode [ 713.342990][T11056] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 713.371028][ T5815] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 713.371063][ T5815] CPU: 1 UID: 0 PID: 5815 Comm: kworker/u9:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 713.371097][ T5815] Tainted: [L]=SOFTLOCKUP [ 713.371106][ T5815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 713.371121][ T5815] Workqueue: hci3 hci_rx_work [ 713.371152][ T5815] Call Trace: [ 713.371161][ T5815] [ 713.371172][ T5815] dump_stack_lvl+0xe8/0x150 [ 713.371211][ T5815] sysfs_create_dir_ns+0x271/0x2a0 [ 713.371239][ T5815] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 713.371274][ T5815] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 713.371304][ T5815] ? rt_spin_unlock+0x160/0x200 [ 713.371340][ T5815] kobject_add_internal+0x631/0xd10 [ 713.371382][ T5815] kobject_add+0x163/0x240 [ 713.371418][ T5815] ? __pfx_kobject_add+0x10/0x10 [ 713.371455][ T5815] ? get_device_parent+0x370/0x3a0 [ 713.371490][ T5815] device_add+0x408/0xb80 [ 713.371523][ T5815] hci_conn_add_sysfs+0xd5/0x210 [ 713.371563][ T5815] le_conn_complete_evt+0x10e6/0x16b0 [ 713.371605][ T5815] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 713.371635][ T5815] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 713.371661][ T5815] ? lockdep_hardirqs_on+0x7a/0x110 [ 713.371700][ T5815] ? skb_pull_data+0xfb/0x200 [ 713.371737][ T5815] hci_le_conn_complete_evt+0x187/0x470 [ 713.371775][ T5815] hci_event_packet+0x659/0xef0 [ 713.371807][ T5815] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 713.371837][ T5815] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 713.371864][ T5815] ? __pfx_hci_event_packet+0x10/0x10 [ 713.371887][ T5815] ? rt_spin_unlock+0x14f/0x200 [ 713.371931][ T5815] ? hci_send_to_monitor+0xe2/0x590 [ 713.371966][ T5815] hci_rx_work+0x3ee/0x1030 [ 713.371998][ T5815] ? process_scheduled_works+0xa8d/0x18c0 [ 713.372032][ T5815] process_scheduled_works+0xb6e/0x18c0 [ 713.372101][ T5815] ? __pfx_process_scheduled_works+0x10/0x10 [ 713.372143][ T5815] ? assign_work+0x3d5/0x5e0 [ 713.372182][ T5815] worker_thread+0xa53/0xfc0 [ 713.372246][ T5815] kthread+0x388/0x470 [ 713.372271][ T5815] ? __pfx_worker_thread+0x10/0x10 [ 713.372302][ T5815] ? __pfx_kthread+0x10/0x10 [ 713.372328][ T5815] ret_from_fork+0x51e/0xb90 [ 713.372366][ T5815] ? __pfx_ret_from_fork+0x10/0x10 [ 713.372397][ T5815] ? __switch_to+0xc7d/0x1450 [ 713.372429][ T5815] ? __pfx_kthread+0x10/0x10 [ 713.372456][ T5815] ret_from_fork_asm+0x1a/0x30 [ 713.372499][ T5815] [ 713.372534][ T5815] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 713.372579][ T5815] Bluetooth: hci3: failed to register connection device [ 714.401570][ T31] libceph: connect (1)[c::]:6789 error -101 [ 714.401825][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 714.791507][ T31] libceph: connect (1)[c::]:6789 error -101 [ 714.791711][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 715.124013][T11068] ceph: No mds server is up or the cluster is laggy [ 716.845249][T11094] syzkaller0: entered promiscuous mode [ 716.845278][T11094] syzkaller0: entered allmulticast mode [ 717.687927][T11107] syz.5.1597 (11107) used greatest stack depth: 16480 bytes left [ 717.905785][ T31] libceph: connect (1)[c::]:6789 error -101 [ 717.906019][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 718.012897][T11111] ceph: No mds server is up or the cluster is laggy [ 718.847047][ T31] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 718.848101][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 719.025049][ T31] usb 4-1: device descriptor read/64, error -32 [ 719.230534][T11118] pim6reg: entered allmulticast mode [ 719.264371][ T31] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 719.427326][ T31] usb 4-1: device descriptor read/64, error -71 [ 719.538069][ T31] usb usb4-port1: attempt power cycle [ 720.285693][ T811] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 720.374427][ T31] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 720.395140][ T31] usb 4-1: device descriptor read/8, error -71 [ 720.514494][ T811] usb 2-1: device descriptor read/64, error -71 [ 720.634481][ T31] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 720.655136][ T31] usb 4-1: device descriptor read/8, error -71 [ 720.766934][ T31] usb usb4-port1: unable to enumerate USB device [ 720.824404][ T811] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 720.954349][ T811] usb 2-1: device descriptor read/64, error -71 [ 721.074980][ T811] usb usb2-port1: attempt power cycle [ 721.424341][ T811] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 721.445141][ T811] usb 2-1: device descriptor read/8, error -71 [ 721.773146][T11157] syzkaller0: entered promiscuous mode [ 721.773175][T11157] syzkaller0: entered allmulticast mode [ 724.162286][ T5965] libceph: connect (1)[c::]:6789 error -101 [ 724.162508][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 724.376755][T11185] ceph: No mds server is up or the cluster is laggy [ 724.499243][ T31] libceph: connect (1)[c::]:6789 error -101 [ 724.564529][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 725.245738][ T5965] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 725.345208][ T811] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 725.484485][ T811] usb 4-1: device descriptor read/64, error -71 [ 725.562834][ T5965] usb 2-1: device descriptor read/64, error -71 [ 726.364624][ T811] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 726.543117][ T5965] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 726.674360][ T811] usb 4-1: device descriptor read/64, error -71 [ 726.717477][ T5965] usb 2-1: device descriptor read/64, error -71 [ 726.785371][ T811] usb usb4-port1: attempt power cycle [ 726.827724][ T5965] usb usb2-port1: attempt power cycle [ 727.177952][ T811] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 727.184680][ T5965] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 727.205702][ T811] usb 4-1: device descriptor read/8, error -71 [ 727.206277][ T5965] usb 2-1: device descriptor read/8, error -71 [ 727.464579][ T5965] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 727.466327][ T811] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 727.485808][ T811] usb 4-1: device descriptor read/8, error -71 [ 727.602780][ T811] usb usb4-port1: unable to enumerate USB device [ 727.674458][ T5965] usb 2-1: device not accepting address 34, error -71 [ 727.674942][ T5965] usb usb2-port1: unable to enumerate USB device [ 729.169509][T11249] ±ÿ: renamed from lo (while UP) [ 729.985817][ T5184] libceph: connect (1)[c::]:6789 error -101 [ 729.986038][ T5184] libceph: mon0 (1)[c::]:6789 connect error [ 730.054341][ T5965] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 730.088921][T11263] ceph: No mds server is up or the cluster is laggy [ 730.184396][ T5965] usb 4-1: device descriptor read/64, error -71 [ 730.446254][ T5965] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 730.574435][ T5184] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 730.624500][ T6920] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 730.656913][ T5965] usb 4-1: device descriptor read/64, error -71 [ 730.714386][ T5184] usb 2-1: device descriptor read/64, error -71 [ 730.773362][ T5965] usb usb4-port1: attempt power cycle [ 730.784487][ T6920] usb 1-1: Using ep0 maxpacket: 8 [ 730.808000][ T6920] usb 1-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 730.808032][ T6920] usb 1-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 730.808074][ T6920] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 730.808099][ T6920] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 730.964399][ T5184] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 731.094366][ T5184] usb 2-1: device descriptor read/64, error -71 [ 731.103565][T11279] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 731.103916][T11279] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 731.127998][ T5965] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 731.158408][ T5965] usb 4-1: device descriptor read/8, error -71 [ 731.358287][ T5184] usb usb2-port1: attempt power cycle [ 731.494359][ T5965] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 731.516580][ T5965] usb 4-1: device descriptor read/8, error -71 [ 731.638531][ T5965] usb usb4-port1: unable to enumerate USB device [ 731.708387][ T5184] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 731.725443][ T5184] usb 2-1: device descriptor read/8, error -71 [ 731.964510][ T5184] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 731.986365][ T5184] usb 2-1: device descriptor read/8, error -71 [ 732.094935][ T5184] usb usb2-port1: unable to enumerate USB device [ 733.634430][ T5965] usb 1-1: USB disconnect, device number 34 [ 733.678988][T11318] netlink: 'syz.1.1656': attribute type 1 has an invalid length. [ 734.047136][T11318] 8021q: adding VLAN 0 to HW filter on device bond3 [ 735.150311][ T5965] libceph: connect (1)[c::]:6789 error -101 [ 735.192044][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 735.540267][ T5965] libceph: connect (1)[c::]:6789 error -101 [ 735.588534][ T5965] libceph: mon0 (1)[c::]:6789 connect error [ 735.622668][T11344] ceph: No mds server is up or the cluster is laggy [ 735.854390][ T5965] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 735.984347][ T5965] usb 1-1: device descriptor read/64, error -71 [ 736.224401][ T5965] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 736.354685][ T5965] usb 1-1: device descriptor read/64, error -71 [ 736.364748][ T5861] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 736.465004][ T5965] usb usb1-port1: attempt power cycle [ 736.554674][ T5861] usb 2-1: Using ep0 maxpacket: 8 [ 736.562124][ T5861] usb 2-1: config 179 has an invalid descriptor of length 52, skipping remainder of the config [ 736.562155][ T5861] usb 2-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 736.562197][ T5861] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 736.562222][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 736.804351][ T5965] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 736.813781][T11363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 736.814970][T11363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 737.114348][ T5965] usb 1-1: device descriptor read/8, error -71 [ 737.434443][ T5965] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 737.455302][ T5965] usb 1-1: device descriptor read/8, error -71 [ 737.564964][ T5965] usb usb1-port1: unable to enumerate USB device [ 737.638466][T11388] netlink: 'syz.5.1672': attribute type 1 has an invalid length. [ 737.712665][T11388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 737.738973][T11391] ip6erspan0: entered promiscuous mode [ 737.758498][T11391] bond1: (slave ip6erspan0): making interface the new active one [ 737.775125][T11391] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 738.090225][T11402] fuse: Bad value for 'fd' [ 739.581600][ T9] usb 2-1: USB disconnect, device number 39 [ 741.214446][ T5965] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 741.380080][ T5965] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 741.383405][ T5965] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 741.383439][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 741.383461][ T5965] usb 4-1: Product: syz [ 741.383478][ T5965] usb 4-1: Manufacturer: syz [ 741.383493][ T5965] usb 4-1: SerialNumber: syz [ 741.552565][T11448] fuse: Bad value for 'fd' [ 744.940603][ T5815] Bluetooth: hci5: command 0x0405 tx timeout [ 744.985432][ T6920] usb 4-1: USB disconnect, device number 37 [ 750.694437][T11284] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 750.753479][T11505] fuse: Bad value for 'fd' [ 750.844356][T11284] usb 1-1: Using ep0 maxpacket: 16 [ 750.848525][T11284] usb 1-1: config 0 has an invalid interface number: 13 but max is 0 [ 750.848556][T11284] usb 1-1: config 0 has no interface number 0 [ 750.848606][T11284] usb 1-1: config 0 interface 13 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 750.848635][T11284] usb 1-1: config 0 interface 13 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 32 [ 750.848661][T11284] usb 1-1: config 0 interface 13 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1015 [ 750.848686][T11284] usb 1-1: config 0 interface 13 has no altsetting 0 [ 750.928310][T11284] usb 1-1: New USB device found, idVendor=045e, idProduct=04e6, bcdDevice=e0.ca [ 750.928346][T11284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.928369][T11284] usb 1-1: Product: syz [ 750.928384][T11284] usb 1-1: Manufacturer: syz [ 750.928400][T11284] usb 1-1: SerialNumber: syz [ 750.984735][T11284] usb 1-1: config 0 descriptor?? [ 750.986731][T11501] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 750.986885][T11501] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 752.853914][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.853997][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.393816][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1703'. [ 753.393843][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1703'. [ 753.960799][T11284] ipaq 1-1:0.13: PocketPC PDA converter detected [ 753.961155][T11284] usb 1-1: active config #0 != 1 ?? [ 755.207366][T11284] usb 1-1: USB disconnect, device number 39 [ 756.698714][T11546] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 759.924586][ T5861] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 760.128355][ T5861] usb 1-1: Using ep0 maxpacket: 16 [ 760.416109][ T5861] usb 1-1: config 0 has an invalid interface number: 13 but max is 0 [ 760.416141][ T5861] usb 1-1: config 0 has no interface number 0 [ 760.416190][ T5861] usb 1-1: config 0 interface 13 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 760.416219][ T5861] usb 1-1: config 0 interface 13 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 32 [ 760.416246][ T5861] usb 1-1: config 0 interface 13 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1015 [ 760.416272][ T5861] usb 1-1: config 0 interface 13 has no altsetting 0 [ 760.483308][ T5861] usb 1-1: New USB device found, idVendor=045e, idProduct=04e6, bcdDevice=e0.ca [ 760.483344][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.483365][ T5861] usb 1-1: Product: syz [ 760.483380][ T5861] usb 1-1: Manufacturer: syz [ 760.483395][ T5861] usb 1-1: SerialNumber: syz [ 760.550592][ T5861] usb 1-1: config 0 descriptor?? [ 760.572341][T11575] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 760.572820][T11575] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 761.227114][T11572] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1721'. [ 761.227142][T11572] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1721'. [ 761.773703][ T5861] ipaq 1-1:0.13: PocketPC PDA converter detected [ 761.784807][ T5861] usb 1-1: active config #0 != 1 ?? [ 761.814013][ T5861] usb 1-1: USB disconnect, device number 40 [ 763.829846][T11610] netlink: 'syz.5.1734': attribute type 12 has an invalid length. [ 770.374680][T11647] netlink: 'syz.5.1748': attribute type 12 has an invalid length. [ 775.769882][T11691] netlink: 'syz.3.1759': attribute type 12 has an invalid length. [ 780.580664][T11284] libceph: connect (1)[c::]:6789 error -101 [ 780.580890][T11284] libceph: mon0 (1)[c::]:6789 connect error [ 781.046127][T11728] ceph: No mds server is up or the cluster is laggy [ 781.069429][T11284] libceph: connect (1)[c::]:6789 error -101 [ 781.069884][T11284] libceph: mon0 (1)[c::]:6789 connect error [ 782.304978][T11743] netlink: 'syz.1.1772': attribute type 12 has an invalid length. [ 785.809009][T11767] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1781'. [ 785.811335][T11767] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.868157][T11767] bridge_slave_1 (unregistering): left allmulticast mode [ 785.868181][T11767] bridge_slave_1 (unregistering): left promiscuous mode [ 785.868249][T11767] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.488160][ T5184] libceph: connect (1)[c::]:6789 error -101 [ 788.488396][ T5184] libceph: mon0 (1)[c::]:6789 connect error [ 788.489189][ T5184] libceph: connect (1)[c::]:6789 error -101 [ 788.489401][ T5184] libceph: mon0 (1)[c::]:6789 connect error [ 788.489528][T11789] ceph: No mds server is up or the cluster is laggy [ 788.748365][ T5184] libceph: connect (1)[c::]:6789 error -101 [ 788.752501][ T5184] libceph: mon0 (1)[c::]:6789 connect error [ 789.258287][ T6920] libceph: connect (1)[c::]:6789 error -101 [ 789.544729][ T6920] libceph: mon0 (1)[c::]:6789 connect error [ 794.415719][T11834] netlink: 'syz.0.1797': attribute type 12 has an invalid length. [ 797.547655][T11855] ceph: No mds server is up or the cluster is laggy [ 797.548266][ T811] libceph: connect (1)[c::]:6789 error -101 [ 797.548904][ T811] libceph: mon0 (1)[c::]:6789 connect error [ 798.099697][T11872] netlink: 'syz.4.1809': attribute type 12 has an invalid length. [ 801.104370][T11284] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 801.267329][T11284] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 801.267360][T11284] usb 2-1: config 0 has no interfaces? [ 801.267393][T11284] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 801.267419][T11284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.273955][T11284] usb 2-1: config 0 descriptor?? [ 801.292272][T11911] netlink: 'syz.4.1821': attribute type 12 has an invalid length. [ 801.738594][T11284] libceph: connect (1)[c::]:6789 error -101 [ 801.738729][T11284] libceph: mon0 (1)[c::]:6789 connect error [ 801.792738][T11922] ceph: No mds server is up or the cluster is laggy [ 802.053995][ T37] kauditd_printk_skb: 23 callbacks suppressed [ 802.054021][ T37] audit: type=1326 audit(1775306887.705:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11928 comm="syz.5.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430c78c819 code=0x7ffc0000 [ 802.055534][ T37] audit: type=1326 audit(1775306887.735:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11928 comm="syz.5.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f430c78c819 code=0x7ffc0000 [ 802.056884][ T37] audit: type=1326 audit(1775306887.735:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11928 comm="syz.5.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430c78c819 code=0x7ffc0000 [ 802.057309][ T37] audit: type=1326 audit(1775306887.735:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11928 comm="syz.5.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f430c78c819 code=0x7ffc0000 [ 802.169105][ T37] audit: type=1326 audit(1775306887.835:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11928 comm="syz.5.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430c78c819 code=0x7ffc0000 [ 802.169253][ T37] audit: type=1326 audit(1775306887.845:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11928 comm="syz.5.1827" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f430c78c819 code=0x7ffc0000 [ 803.934755][ T5861] usb 2-1: USB disconnect, device number 40 [ 804.111438][T11967] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1838'. [ 806.144474][ T5861] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 806.296770][ T5861] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 806.296801][ T5861] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 806.296843][ T5861] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 806.296868][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.347402][ T5861] usb 4-1: config 0 descriptor?? [ 806.434377][T11284] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 806.559285][ T6920] libceph: connect (1)[c::]:6789 error -101 [ 806.559515][ T6920] libceph: mon0 (1)[c::]:6789 connect error [ 806.614605][T11284] usb 1-1: Using ep0 maxpacket: 32 [ 806.619211][T11284] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 806.621460][T11284] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 806.621487][T11284] usb 1-1: config 0 has no interface number 0 [ 806.621539][T11284] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 806.623240][T11284] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 806.623264][T11284] usb 1-1: config 0 has no interface number 0 [ 806.623313][T11284] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 806.725259][T11284] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 806.725292][T11284] usb 1-1: config 0 has no interface number 0 [ 806.725347][T11284] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 806.726997][T11284] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 806.727022][T11284] usb 1-1: config 0 has no interface number 0 [ 806.727070][T11284] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 806.728538][T11284] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 806.728562][T11284] usb 1-1: config 0 has no interface number 0 [ 806.728610][T11284] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 806.730040][T11284] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 806.730064][T11284] usb 1-1: config 0 has no interface number 0 [ 806.730112][T11284] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 806.731554][T11284] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 806.731577][T11284] usb 1-1: config 0 has no interface number 0 [ 806.731626][T11284] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 806.733162][T11284] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 806.733185][T11284] usb 1-1: config 0 has no interface number 0 [ 806.733234][T11284] usb 1-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 806.904703][ T6920] libceph: connect (1)[c::]:6789 error -101 [ 806.905120][ T6920] libceph: mon0 (1)[c::]:6789 connect error [ 806.975368][T11284] usb 1-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 806.975405][T11284] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.975427][T11284] usb 1-1: Product: syz [ 806.975442][T11284] usb 1-1: Manufacturer: syz [ 806.975456][T11284] usb 1-1: SerialNumber: syz [ 806.999537][T12008] ceph: No mds server is up or the cluster is laggy [ 807.033966][T11284] usb 1-1: config 0 descriptor?? [ 807.042305][T11284] etas_es58x 1-1:0.2: Starting syz syz (Serial Number syz) [ 807.268072][T12002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 807.268400][T12002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 807.321791][ T5861] usb 1-1: USB disconnect, device number 41 [ 807.488559][ T9327] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 807.488592][ T9327] CPU: 1 UID: 0 PID: 9327 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 807.488624][ T9327] Tainted: [L]=SOFTLOCKUP [ 807.488633][ T9327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 807.488648][ T9327] Workqueue: hci5 hci_rx_work [ 807.488679][ T9327] Call Trace: [ 807.488688][ T9327] [ 807.488697][ T9327] dump_stack_lvl+0xe8/0x150 [ 807.488737][ T9327] sysfs_create_dir_ns+0x271/0x2a0 [ 807.488766][ T9327] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 807.488803][ T9327] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 807.488836][ T9327] ? rt_spin_unlock+0x160/0x200 [ 807.488874][ T9327] kobject_add_internal+0x631/0xd10 [ 807.488916][ T9327] kobject_add+0x163/0x240 [ 807.488952][ T9327] ? __pfx_kobject_add+0x10/0x10 [ 807.488991][ T9327] ? get_device_parent+0x370/0x3a0 [ 807.489027][ T9327] device_add+0x408/0xb80 [ 807.489061][ T9327] hci_conn_add_sysfs+0xd5/0x210 [ 807.489102][ T9327] le_conn_complete_evt+0x10e6/0x16b0 [ 807.489146][ T9327] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 807.489175][ T9327] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 807.489201][ T9327] ? lockdep_hardirqs_on+0x7a/0x110 [ 807.489230][ T9327] ? skb_pull_data+0xfb/0x200 [ 807.489265][ T9327] hci_le_conn_complete_evt+0x187/0x470 [ 807.489304][ T9327] hci_event_packet+0x659/0xef0 [ 807.489336][ T9327] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 807.489367][ T9327] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 807.489394][ T9327] ? __pfx_hci_event_packet+0x10/0x10 [ 807.489424][ T9327] ? rt_spin_unlock+0x14f/0x200 [ 807.489469][ T9327] ? hci_send_to_monitor+0xe2/0x590 [ 807.489504][ T9327] hci_rx_work+0x3ee/0x1030 [ 807.489537][ T9327] ? process_scheduled_works+0xa8d/0x18c0 [ 807.489573][ T9327] process_scheduled_works+0xb6e/0x18c0 [ 807.489644][ T9327] ? __pfx_process_scheduled_works+0x10/0x10 [ 807.489684][ T9327] ? assign_work+0x3d5/0x5e0 [ 807.489723][ T9327] worker_thread+0xa53/0xfc0 [ 807.489789][ T9327] kthread+0x388/0x470 [ 807.489815][ T9327] ? __pfx_worker_thread+0x10/0x10 [ 807.489845][ T9327] ? __pfx_kthread+0x10/0x10 [ 807.489872][ T9327] ret_from_fork+0x51e/0xb90 [ 807.489910][ T9327] ? __pfx_ret_from_fork+0x10/0x10 [ 807.489942][ T9327] ? __switch_to+0xc7d/0x1450 [ 807.489976][ T9327] ? __pfx_kthread+0x10/0x10 [ 807.490002][ T9327] ret_from_fork_asm+0x1a/0x30 [ 807.490046][ T9327] [ 807.490078][ T9327] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 807.490119][ T9327] Bluetooth: hci5: failed to register connection device [ 809.730550][ T5184] usb 4-1: USB disconnect, device number 38 [ 812.858967][T12066] syzkaller0: entered promiscuous mode [ 812.858987][T12066] syzkaller0: entered allmulticast mode [ 814.291511][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.291597][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.974637][ T5874] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 816.242002][ T5874] usb 4-1: config 0 has no interfaces? [ 816.250596][ T5874] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 816.250616][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.250628][ T5874] usb 4-1: Product: syz [ 816.250637][ T5874] usb 4-1: Manufacturer: syz [ 816.250645][ T5874] usb 4-1: SerialNumber: syz [ 817.105187][ T5874] usb 4-1: config 0 descriptor?? [ 818.404092][ T5874] usb 4-1: USB disconnect, device number 39 [ 818.573180][T12118] syzkaller0: entered promiscuous mode [ 818.573199][T12118] syzkaller0: entered allmulticast mode [ 825.914401][ T811] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 826.069397][ T811] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 826.069416][ T811] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 826.069439][ T811] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 826.069453][ T811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.148517][ T811] usb 1-1: config 0 descriptor?? [ 830.237515][ T811] usb 1-1: USB disconnect, device number 42 [ 830.631934][T12226] bridge0: port 1(bridge_slave_0) entered disabled state [ 830.638583][T12226] bridge0: port 2(bridge_slave_1) entered disabled state [ 836.554284][ T9706] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 836.707664][ T9706] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 836.707684][ T9706] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 836.707706][ T9706] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 836.707720][ T9706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 836.761058][ T9706] usb 2-1: config 0 descriptor?? [ 841.424323][ T5874] usb 2-1: USB disconnect, device number 41 [ 849.712815][ T9327] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 851.026535][T12391] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 859.755482][T12430] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 859.924593][ T5874] IPVS: starting estimator thread 0... [ 860.044559][T12438] IPVS: using max 7 ests per chain, 16800 per kthread [ 860.543184][T12452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1985'. [ 860.543209][T12452] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1985'. [ 860.823276][T12377] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 861.418894][T12464] netlink: 'syz.5.1992': attribute type 1 has an invalid length. [ 861.472639][T12464] 8021q: adding VLAN 0 to HW filter on device bond2 [ 863.495645][T12478] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 864.307892][T12491] bridge0: port 1(bridge_slave_0) entered disabled state [ 864.786929][T12502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2003'. [ 865.024338][ T6920] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 865.446029][ T6920] usb 1-1: Using ep0 maxpacket: 16 [ 865.449361][ T6920] usb 1-1: config 0 has an invalid interface number: 13 but max is 0 [ 865.449391][ T6920] usb 1-1: config 0 has no interface number 0 [ 865.449439][ T6920] usb 1-1: config 0 interface 13 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 865.449468][ T6920] usb 1-1: config 0 interface 13 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 32 [ 865.449494][ T6920] usb 1-1: config 0 interface 13 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1015 [ 865.449519][ T6920] usb 1-1: config 0 interface 13 has no altsetting 0 [ 865.453470][ T6920] usb 1-1: New USB device found, idVendor=045e, idProduct=04e6, bcdDevice=e0.ca [ 865.453502][ T6920] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.453523][ T6920] usb 1-1: Product: syz [ 865.453537][ T6920] usb 1-1: Manufacturer: syz [ 865.453551][ T6920] usb 1-1: SerialNumber: syz [ 865.465674][ T6920] usb 1-1: config 0 descriptor?? [ 865.475157][T12503] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 865.475341][T12503] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 866.049624][T12503] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2001'. [ 866.049652][T12503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2001'. [ 866.293086][ T5815] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 866.495904][ T6920] ipaq 1-1:0.13: PocketPC PDA converter detected [ 866.496305][ T6920] usb 1-1: active config #0 != 1 ?? [ 866.520736][ T6920] usb 1-1: USB disconnect, device number 43 [ 867.024395][ T5861] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 867.874996][ T5861] usb 4-1: Using ep0 maxpacket: 32 [ 867.968034][ T5861] usb 4-1: too many configurations: 17, using maximum allowed: 8 [ 868.188713][ T5861] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 868.188745][ T5861] usb 4-1: config 0 has no interface number 0 [ 868.188806][ T5861] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 868.191253][ T5861] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 868.191278][ T5861] usb 4-1: config 0 has no interface number 0 [ 868.191348][ T5861] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 868.212748][ T5861] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 868.212779][ T5861] usb 4-1: config 0 has no interface number 0 [ 868.212829][ T5861] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 868.213875][ T5861] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 868.213898][ T5861] usb 4-1: config 0 has no interface number 0 [ 868.213946][ T5861] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 868.215134][ T5861] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 868.215158][ T5861] usb 4-1: config 0 has no interface number 0 [ 868.215205][ T5861] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 868.216211][ T5861] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 868.216233][ T5861] usb 4-1: config 0 has no interface number 0 [ 868.216298][ T5861] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 868.217317][ T5861] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 868.217341][ T5861] usb 4-1: config 0 has no interface number 0 [ 868.217386][ T5861] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 868.224404][ T5861] usb 4-1: config 0 has an invalid interface number: 2 but max is 0 [ 868.224435][ T5861] usb 4-1: config 0 has no interface number 0 [ 868.224502][ T5861] usb 4-1: config 0 interface 2 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 868.282544][ T5861] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 868.282576][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.282596][ T5861] usb 4-1: Product: syz [ 868.282609][ T5861] usb 4-1: Manufacturer: syz [ 868.282623][ T5861] usb 4-1: SerialNumber: syz [ 868.318542][ T5861] usb 4-1: config 0 descriptor?? [ 868.352999][ T5861] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz) [ 868.592473][T12537] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 868.593099][T12537] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 868.610457][ T811] usb 4-1: USB disconnect, device number 40 [ 868.680013][T12558] tmpfs: Bad value for 'mpol' [ 869.732212][T12580] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2029'. [ 869.743831][T12580] ip6erspan0: entered promiscuous mode [ 871.004415][ T811] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 871.207056][ T811] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 871.207117][ T811] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 871.207141][ T811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.248687][ T811] usb 4-1: config 0 descriptor?? [ 871.260578][ T811] pwc: Askey VC010 type 2 USB webcam detected. [ 872.326104][ T811] pwc: recv_control_msg error -32 req 02 val 2b00 [ 872.327242][ T811] pwc: recv_control_msg error -32 req 02 val 2700 [ 872.328258][ T811] pwc: recv_control_msg error -32 req 02 val 2c00 [ 872.329245][ T811] pwc: recv_control_msg error -32 req 04 val 1000 [ 872.330270][ T811] pwc: recv_control_msg error -32 req 04 val 1300 [ 872.331142][ T811] pwc: recv_control_msg error -32 req 04 val 1400 [ 872.332190][ T811] pwc: recv_control_msg error -32 req 02 val 2000 [ 872.333126][ T811] pwc: recv_control_msg error -32 req 02 val 2100 [ 872.334314][ T811] pwc: recv_control_msg error -32 req 04 val 1500 [ 872.335349][ T811] pwc: recv_control_msg error -32 req 02 val 2500 [ 872.336324][ T811] pwc: recv_control_msg error -32 req 02 val 2400 [ 872.342235][ T811] pwc: recv_control_msg error -32 req 02 val 2600 [ 872.345057][ T811] pwc: recv_control_msg error -32 req 02 val 2900 [ 872.345605][ T811] pwc: recv_control_msg error -71 req 02 val 2800 [ 872.346321][ T811] pwc: recv_control_msg error -71 req 04 val 1100 [ 872.346823][ T811] pwc: recv_control_msg error -71 req 04 val 1200 [ 872.352494][ T811] pwc: Registered as video103. [ 872.472834][ T811] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21 [ 872.551799][ T811] usb 4-1: USB disconnect, device number 41 [ 875.096466][T12641] 9p: Bad value for 'rfdno' [ 875.971234][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.971395][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.016434][T12643] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2048'. [ 876.964330][ T811] usb 4-1: new full-speed USB device number 42 using dummy_hcd [ 877.123642][ T811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 877.123682][ T811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.123707][ T811] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 877.123753][ T811] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 877.123779][ T811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.186103][ T811] usb 4-1: config 0 descriptor?? [ 877.244328][ T5874] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 877.397329][ T5874] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 877.397394][ T5874] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 877.397419][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.409430][ T5874] usb 1-1: config 0 descriptor?? [ 877.461739][ T5874] pwc: Askey VC010 type 2 USB webcam detected. [ 877.761979][ T811] usbhid 4-1:0.0: can't add hid device: -71 [ 877.762123][ T811] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 877.795264][ T811] usb 4-1: USB disconnect, device number 42 [ 877.875064][ T5874] pwc: recv_control_msg error -32 req 02 val 2b00 [ 877.876167][ T5874] pwc: recv_control_msg error -32 req 02 val 2700 [ 877.877203][ T5874] pwc: recv_control_msg error -32 req 02 val 2c00 [ 877.878240][ T5874] pwc: recv_control_msg error -32 req 04 val 1000 [ 877.880512][ T5874] pwc: recv_control_msg error -32 req 04 val 1300 [ 877.911505][ T5874] pwc: recv_control_msg error -32 req 04 val 1400 [ 877.912547][ T5874] pwc: recv_control_msg error -32 req 02 val 2000 [ 877.913232][ T5874] pwc: recv_control_msg error -32 req 02 val 2100 [ 877.915253][ T5874] pwc: recv_control_msg error -32 req 04 val 1500 [ 877.916083][ T5874] pwc: recv_control_msg error -32 req 02 val 2500 [ 877.917048][ T5874] pwc: recv_control_msg error -32 req 02 val 2400 [ 877.920143][ T5874] pwc: recv_control_msg error -32 req 02 val 2600 [ 877.922701][ T5874] pwc: recv_control_msg error -32 req 02 val 2900 [ 877.934604][ T5874] pwc: recv_control_msg error -71 req 02 val 2800 [ 877.935335][ T5874] pwc: recv_control_msg error -71 req 04 val 1100 [ 877.935824][ T5874] pwc: recv_control_msg error -71 req 04 val 1200 [ 877.957582][ T5874] pwc: Registered as video103. [ 877.983867][ T5874] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 878.021519][ T5874] usb 1-1: USB disconnect, device number 44 [ 879.258968][T12685] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2062'. [ 879.529806][T12377] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 886.654314][ T5874] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 886.806516][ T5874] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 886.806550][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.855890][ T5874] usb 4-1: config 0 descriptor?? [ 886.887498][ T5874] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 887.262253][ T5874] gp8psk: usb in 128 operation failed. [ 887.262724][ T5874] gp8psk: usb in 137 operation failed. [ 887.262741][ T5874] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 887.262787][ T5874] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 887.349148][ T5874] usb 4-1: USB disconnect, device number 43 [ 891.316754][T12377] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 891.336271][T12793] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 891.646321][T12802] Bluetooth: hci2: command 0x0406 tx timeout [ 894.126584][T12802] Bluetooth: hci2: command 0x0406 tx timeout [ 894.464435][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 894.735281][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 894.901892][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 894.901945][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 894.901961][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 894.901975][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 894.901988][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 895.024689][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 895.024952][ T9] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 895.024977][ T9] usb 2-1: Manufacturer: syz [ 895.086341][ T9] usb 2-1: config 0 descriptor?? [ 895.911159][ T9] rc_core: IR keymap rc-hauppauge not found [ 895.911185][ T9] Registered IR keymap rc-empty [ 895.911609][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 895.924311][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 895.950021][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 895.985340][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input23 [ 895.992919][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.018604][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.034407][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.054676][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.074444][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.095159][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.114798][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.134790][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.154966][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.174716][ T9] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 896.250537][ T9] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 896.250566][ T9] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 896.319452][ T9] usb 2-1: USB disconnect, device number 42 [ 897.354318][T12848] 9p: Bad value for 'rfdno' [ 898.007408][T12850] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 898.054461][ T811] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 898.211180][ T811] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 898.211202][ T811] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 898.211216][ T811] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 898.224412][ T811] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 898.224519][ T811] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 898.224543][ T811] usb 1-1: Product: syz [ 898.224558][ T811] usb 1-1: Manufacturer: syz [ 898.224574][ T811] usb 1-1: SerialNumber: syz [ 898.507123][T12858] tmpfs: Bad value for 'mpol' [ 899.426532][ T811] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 45 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 899.569667][ T9] usb 1-1: USB disconnect, device number 45 [ 899.572433][ T9] usblp0: removed [ 899.822178][T12863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2109'. [ 899.822203][T12863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2109'. [ 900.310589][T12865] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2111'. [ 904.487425][ T5815] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 904.947251][T12802] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 904.947284][T12802] CPU: 0 UID: 0 PID: 12802 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 904.947316][T12802] Tainted: [L]=SOFTLOCKUP [ 904.947324][T12802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 904.947338][T12802] Workqueue: hci2 hci_rx_work [ 904.947369][T12802] Call Trace: [ 904.947377][T12802] [ 904.947387][T12802] dump_stack_lvl+0xe8/0x150 [ 904.947426][T12802] sysfs_create_dir_ns+0x271/0x2a0 [ 904.947455][T12802] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 904.947487][T12802] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 904.947516][T12802] ? rt_spin_unlock+0x160/0x200 [ 904.947548][T12802] kobject_add_internal+0x631/0xd10 [ 904.947584][T12802] kobject_add+0x163/0x240 [ 904.947615][T12802] ? __pfx_kobject_add+0x10/0x10 [ 904.947652][T12802] ? get_device_parent+0x370/0x3a0 [ 904.947686][T12802] device_add+0x408/0xb80 [ 904.947717][T12802] hci_conn_add_sysfs+0xd5/0x210 [ 904.947769][T12802] le_conn_complete_evt+0x10e6/0x16b0 [ 904.947809][T12802] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 904.947840][T12802] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 904.947866][T12802] ? lockdep_hardirqs_on+0x7a/0x110 [ 904.947894][T12802] ? skb_pull_data+0xfb/0x200 [ 904.947935][T12802] hci_le_conn_complete_evt+0x187/0x470 [ 904.947967][T12802] hci_event_packet+0x659/0xef0 [ 904.947994][T12802] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 904.948022][T12802] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 904.948046][T12802] ? __pfx_hci_event_packet+0x10/0x10 [ 904.948067][T12802] ? rt_spin_unlock+0x14f/0x200 [ 904.948110][T12802] ? hci_send_to_monitor+0xe2/0x590 [ 904.948142][T12802] hci_rx_work+0x3ee/0x1030 [ 904.948173][T12802] ? process_scheduled_works+0xa8d/0x18c0 [ 904.948208][T12802] process_scheduled_works+0xb6e/0x18c0 [ 904.948277][T12802] ? __pfx_process_scheduled_works+0x10/0x10 [ 904.948319][T12802] ? assign_work+0x3d5/0x5e0 [ 904.948355][T12802] worker_thread+0xa53/0xfc0 [ 904.948418][T12802] kthread+0x388/0x470 [ 904.948444][T12802] ? __pfx_worker_thread+0x10/0x10 [ 904.948474][T12802] ? __pfx_kthread+0x10/0x10 [ 904.948500][T12802] ret_from_fork+0x51e/0xb90 [ 904.948536][T12802] ? __pfx_ret_from_fork+0x10/0x10 [ 904.948565][T12802] ? __switch_to+0xc7d/0x1450 [ 904.948597][T12802] ? __pfx_kthread+0x10/0x10 [ 904.948622][T12802] ret_from_fork_asm+0x1a/0x30 [ 904.948663][T12802] [ 904.948791][T12802] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 904.948832][T12802] Bluetooth: hci2: failed to register connection device [ 906.308842][T12906] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2121'. [ 906.357819][T12906] ip6erspan0: entered promiscuous mode [ 907.004375][ T5815] Bluetooth: hci2: command 0x0406 tx timeout [ 907.882950][ T9706] usb 4-1: new full-speed USB device number 44 using dummy_hcd [ 908.791769][T12923] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2127'. [ 908.791797][T12923] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2127'. [ 908.836438][ T9706] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 908.836476][ T9706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 908.843650][ T9706] usb 4-1: config 0 descriptor?? [ 908.884359][ T9706] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 909.084319][ T5815] Bluetooth: hci2: command 0x0406 tx timeout [ 909.261752][ T9706] gp8psk: usb in 128 operation failed. [ 909.262251][ T9706] gp8psk: usb in 137 operation failed. [ 909.262267][ T9706] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 909.262314][ T9706] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 909.306602][ T9706] usb 4-1: USB disconnect, device number 44 [ 911.724432][T12946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2134'. [ 911.800891][T12946] ip6erspan0: entered promiscuous mode [ 912.485163][T12802] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 912.485196][T12802] CPU: 1 UID: 0 PID: 12802 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 912.485227][T12802] Tainted: [L]=SOFTLOCKUP [ 912.485235][T12802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 912.485249][T12802] Workqueue: hci1 hci_rx_work [ 912.485279][T12802] Call Trace: [ 912.485286][T12802] [ 912.485296][T12802] dump_stack_lvl+0xe8/0x150 [ 912.485331][T12802] sysfs_create_dir_ns+0x271/0x2a0 [ 912.485358][T12802] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 912.485391][T12802] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 912.485422][T12802] ? rt_spin_unlock+0x160/0x200 [ 912.485459][T12802] kobject_add_internal+0x631/0xd10 [ 912.485500][T12802] kobject_add+0x163/0x240 [ 912.485536][T12802] ? __pfx_kobject_add+0x10/0x10 [ 912.485573][T12802] ? get_device_parent+0x370/0x3a0 [ 912.485609][T12802] device_add+0x408/0xb80 [ 912.485643][T12802] hci_conn_add_sysfs+0xd5/0x210 [ 912.485683][T12802] le_conn_complete_evt+0x10e6/0x16b0 [ 912.485713][T12802] ? lockdep_hardirqs_on+0x7a/0x110 [ 912.485748][T12802] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 912.485783][T12802] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 912.485823][T12802] ? skb_pull_data+0xfb/0x200 [ 912.485859][T12802] hci_le_conn_complete_evt+0x187/0x470 [ 912.485893][T12802] hci_event_packet+0x659/0xef0 [ 912.485924][T12802] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 912.485957][T12802] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 912.485984][T12802] ? __pfx_hci_event_packet+0x10/0x10 [ 912.486006][T12802] ? rt_spin_unlock+0x14f/0x200 [ 912.486048][T12802] ? hci_send_to_monitor+0xe2/0x590 [ 912.486082][T12802] hci_rx_work+0x3ee/0x1030 [ 912.486115][T12802] ? process_scheduled_works+0xa8d/0x18c0 [ 912.486151][T12802] process_scheduled_works+0xb6e/0x18c0 [ 912.486221][T12802] ? __pfx_process_scheduled_works+0x10/0x10 [ 912.486263][T12802] ? assign_work+0x3d5/0x5e0 [ 912.486302][T12802] worker_thread+0xa53/0xfc0 [ 912.486370][T12802] kthread+0x388/0x470 [ 912.486395][T12802] ? __pfx_worker_thread+0x10/0x10 [ 912.486425][T12802] ? __pfx_kthread+0x10/0x10 [ 912.486452][T12802] ret_from_fork+0x51e/0xb90 [ 912.486490][T12802] ? __pfx_ret_from_fork+0x10/0x10 [ 912.486521][T12802] ? __switch_to+0xc7d/0x1450 [ 912.486555][T12802] ? __pfx_kthread+0x10/0x10 [ 912.486583][T12802] ret_from_fork_asm+0x1a/0x30 [ 912.486626][T12802] [ 912.486659][T12802] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 912.486700][T12802] Bluetooth: hci1: failed to register connection device [ 913.810993][T12964] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2139'. [ 913.811012][T12964] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2139'. [ 914.164618][ T6920] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 914.164763][ T5874] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 914.385033][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 914.386257][ T6920] usb 2-1: Using ep0 maxpacket: 16 [ 914.393449][ T5874] usb 1-1: config 9 has an invalid interface number: 68 but max is 3 [ 914.393481][ T5874] usb 1-1: config 9 has an invalid interface number: 88 but max is 3 [ 914.393503][ T5874] usb 1-1: config 9 has an invalid interface number: 241 but max is 3 [ 914.393581][ T5874] usb 1-1: config 9 has an invalid interface number: 153 but max is 3 [ 914.393603][ T5874] usb 1-1: config 9 has no interface number 0 [ 914.393620][ T5874] usb 1-1: config 9 has no interface number 1 [ 914.393638][ T5874] usb 1-1: config 9 has no interface number 2 [ 914.393759][ T5874] usb 1-1: config 9 has no interface number 3 [ 914.393928][ T5874] usb 1-1: config 9 interface 88 altsetting 159 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 914.393958][ T5874] usb 1-1: config 9 interface 88 altsetting 159 has an invalid descriptor for endpoint zero, skipping [ 914.394005][ T5874] usb 1-1: config 9 interface 241 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 914.394086][ T5874] usb 1-1: config 9 interface 241 altsetting 9 endpoint 0x3 has an invalid bInterval 187, changing to 7 [ 914.398872][ T5874] usb 1-1: config 9 interface 241 altsetting 9 endpoint 0xC has an invalid bInterval 148, changing to 7 [ 914.399062][ T5874] usb 1-1: config 9 interface 153 altsetting 128 endpoint 0x8 has invalid wMaxPacketSize 0 [ 914.399090][ T5874] usb 1-1: config 9 interface 153 altsetting 128 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 914.399120][ T5874] usb 1-1: config 9 interface 153 altsetting 128 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 914.399206][ T5874] usb 1-1: config 9 interface 153 altsetting 128 has a duplicate endpoint with address 0x7, skipping [ 914.399235][ T5874] usb 1-1: config 9 interface 153 altsetting 128 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 914.399263][ T5874] usb 1-1: config 9 interface 68 has no altsetting 0 [ 914.399283][ T5874] usb 1-1: config 9 interface 88 has no altsetting 0 [ 914.399303][ T5874] usb 1-1: config 9 interface 241 has no altsetting 0 [ 914.399378][ T5874] usb 1-1: config 9 interface 153 has no altsetting 0 [ 914.534447][T12802] Bluetooth: hci1: command 0x0406 tx timeout [ 914.637114][ T6920] usb 2-1: config 0 has an invalid interface number: 13 but max is 0 [ 914.637148][ T6920] usb 2-1: config 0 has no interface number 0 [ 914.637199][ T6920] usb 2-1: config 0 interface 13 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 914.637227][ T6920] usb 2-1: config 0 interface 13 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 32 [ 914.637254][ T6920] usb 2-1: config 0 interface 13 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1015 [ 914.637279][ T6920] usb 2-1: config 0 interface 13 has no altsetting 0 [ 914.642134][ T5874] usb 1-1: New USB device found, idVendor=16d5, idProduct=6502, bcdDevice=dd.1f [ 914.642168][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.642189][ T5874] usb 1-1: Product: ဌ [ 914.642259][ T5874] usb 1-1: Manufacturer: ï‚— [ 914.642330][ T5874] usb 1-1: SerialNumber: 㿔㋥ [ 914.736758][ T6920] usb 2-1: New USB device found, idVendor=045e, idProduct=04e6, bcdDevice=e0.ca [ 914.736794][ T6920] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.736816][ T6920] usb 2-1: Product: syz [ 914.736832][ T6920] usb 2-1: Manufacturer: syz [ 914.736847][ T6920] usb 2-1: SerialNumber: syz [ 914.838047][ T6920] usb 2-1: config 0 descriptor?? [ 914.840259][T12970] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 914.840575][T12970] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 915.196634][T12967] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2140'. [ 915.196660][T12967] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2140'. [ 915.242802][ T5874] hub 1-1:9.68: Invalid hub with more than one config or interface [ 915.243175][ T5874] hub 1-1:9.68: probe with driver hub failed with error -22 [ 915.273834][ T5874] option 1-1:9.68: GSM modem (1-port) converter detected [ 915.386806][ T5874] hub 1-1:9.88: Invalid hub with more than one config or interface [ 915.386856][ T5874] hub 1-1:9.88: probe with driver hub failed with error -22 [ 915.392311][ T5874] option 1-1:9.88: GSM modem (1-port) converter detected [ 915.513164][ T5874] hub 1-1:9.241: Invalid hub with more than one config or interface [ 915.513301][ T5874] hub 1-1:9.241: probe with driver hub failed with error -22 [ 915.533798][ T5874] option 1-1:9.241: GSM modem (1-port) converter detected [ 915.568398][ T5874] hub 1-1:9.153: Invalid hub with more than one config or interface [ 915.568506][ T5874] hub 1-1:9.153: probe with driver hub failed with error -22 [ 915.569868][T12987] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2147'. [ 915.571299][ T5874] option 1-1:9.153: GSM modem (1-port) converter detected [ 915.621014][T12802] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 915.621046][T12802] CPU: 1 UID: 0 PID: 12802 Comm: kworker/u9:1 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 915.621084][T12802] Tainted: [L]=SOFTLOCKUP [ 915.621092][T12802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 915.621108][T12802] Workqueue: hci3 hci_rx_work [ 915.621139][T12802] Call Trace: [ 915.621147][T12802] [ 915.621157][T12802] dump_stack_lvl+0xe8/0x150 [ 915.621196][T12802] sysfs_create_dir_ns+0x271/0x2a0 [ 915.621224][T12802] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 915.621261][T12802] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 915.621293][T12802] ? rt_spin_unlock+0x160/0x200 [ 915.621328][T12802] kobject_add_internal+0x631/0xd10 [ 915.621370][T12802] kobject_add+0x163/0x240 [ 915.621405][T12802] ? __pfx_kobject_add+0x10/0x10 [ 915.621443][T12802] ? get_device_parent+0x370/0x3a0 [ 915.621478][T12802] device_add+0x408/0xb80 [ 915.621510][T12802] hci_conn_add_sysfs+0xd5/0x210 [ 915.621550][T12802] le_conn_complete_evt+0x10e6/0x16b0 [ 915.621593][T12802] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 915.621623][T12802] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 915.621649][T12802] ? lockdep_hardirqs_on+0x7a/0x110 [ 915.621677][T12802] ? skb_pull_data+0xfb/0x200 [ 915.621711][T12802] hci_le_conn_complete_evt+0x187/0x470 [ 915.621749][T12802] hci_event_packet+0x659/0xef0 [ 915.621780][T12802] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 915.621813][T12802] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 915.621848][T12802] ? __pfx_hci_event_packet+0x10/0x10 [ 915.621871][T12802] ? rt_spin_unlock+0x14f/0x200 [ 915.621916][T12802] ? hci_send_to_monitor+0xe2/0x590 [ 915.621951][T12802] hci_rx_work+0x3ee/0x1030 [ 915.621983][T12802] ? process_scheduled_works+0xa8d/0x18c0 [ 915.622018][T12802] process_scheduled_works+0xb6e/0x18c0 [ 915.622088][T12802] ? __pfx_process_scheduled_works+0x10/0x10 [ 915.622127][T12802] ? assign_work+0x3d5/0x5e0 [ 915.622166][T12802] worker_thread+0xa53/0xfc0 [ 915.622230][T12802] kthread+0x388/0x470 [ 915.622256][T12802] ? __pfx_worker_thread+0x10/0x10 [ 915.622286][T12802] ? __pfx_kthread+0x10/0x10 [ 915.622313][T12802] ret_from_fork+0x51e/0xb90 [ 915.622350][T12802] ? __pfx_ret_from_fork+0x10/0x10 [ 915.622380][T12802] ? __switch_to+0xc7d/0x1450 [ 915.622413][T12802] ? __pfx_kthread+0x10/0x10 [ 915.622438][T12802] ret_from_fork_asm+0x1a/0x30 [ 915.622476][T12802] [ 915.625086][T12802] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 915.625138][T12802] Bluetooth: hci3: failed to register connection device [ 915.824445][ T811] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 915.824715][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 915.958874][ T811] usb 4-1: device descriptor read/64, error -32 [ 916.023116][ T6920] ipaq 2-1:0.13: PocketPC PDA converter detected [ 916.023461][ T6920] usb 2-1: active config #0 != 1 ?? [ 916.050819][ T5874] usb 1-1: USB disconnect, device number 46 [ 916.086185][ T5874] option 1-1:9.68: device disconnected [ 916.134672][ T6920] usb 2-1: USB disconnect, device number 43 [ 916.161104][ T5874] option 1-1:9.88: device disconnected [ 916.176397][ T5874] option 1-1:9.241: device disconnected [ 916.201485][ T5874] option 1-1:9.153: device disconnected [ 916.234928][ T811] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 916.534961][ T811] usb 4-1: Using ep0 maxpacket: 8 [ 917.406277][ T5815] Bluetooth: hci1: command 0x0406 tx timeout [ 917.470948][ T811] usb 4-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 917.470983][ T811] usb 4-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 917.471012][ T811] usb 4-1: Product: syz [ 917.471027][ T811] usb 4-1: Manufacturer: syz [ 917.471043][ T811] usb 4-1: SerialNumber: syz [ 917.529448][ T811] usb 4-1: config 0 descriptor?? [ 917.561769][ T811] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 917.644522][ T5815] Bluetooth: hci3: command 0x0406 tx timeout [ 917.929182][ T811] gspca_zc3xx: reg_w_i err -71 [ 917.929295][ T811] gspca_zc3xx 4-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 917.952092][ T811] usb 4-1: USB disconnect, device number 46 [ 919.724334][ T5815] Bluetooth: hci3: command 0x0406 tx timeout [ 922.584493][ T9327] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 922.693108][ T9706] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 923.065329][ T9706] usb 4-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 923.065363][ T9706] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.070943][ T9706] usb 4-1: config 0 descriptor?? [ 923.078075][ T9706] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 923.314301][ T9327] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:201' [ 923.314334][ T9327] CPU: 1 UID: 0 PID: 9327 Comm: kworker/u9:2 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 923.314365][ T9327] Tainted: [L]=SOFTLOCKUP [ 923.314372][ T9327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 923.314388][ T9327] Workqueue: hci5 hci_rx_work [ 923.314416][ T9327] Call Trace: [ 923.314424][ T9327] [ 923.314435][ T9327] dump_stack_lvl+0xe8/0x150 [ 923.314472][ T9327] sysfs_create_dir_ns+0x271/0x2a0 [ 923.314501][ T9327] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 923.314535][ T9327] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 923.314565][ T9327] ? rt_spin_unlock+0x160/0x200 [ 923.314600][ T9327] kobject_add_internal+0x631/0xd10 [ 923.314639][ T9327] kobject_add+0x163/0x240 [ 923.314675][ T9327] ? __pfx_kobject_add+0x10/0x10 [ 923.314712][ T9327] ? get_device_parent+0x370/0x3a0 [ 923.314743][ T9327] device_add+0x408/0xb80 [ 923.314775][ T9327] hci_conn_add_sysfs+0xd5/0x210 [ 923.314811][ T9327] le_conn_complete_evt+0x10e6/0x16b0 [ 923.314853][ T9327] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 923.314883][ T9327] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 923.314908][ T9327] ? lockdep_hardirqs_on+0x7a/0x110 [ 923.314935][ T9327] ? skb_pull_data+0xfb/0x200 [ 923.314968][ T9327] hci_le_conn_complete_evt+0x187/0x470 [ 923.315006][ T9327] hci_event_packet+0x659/0xef0 [ 923.315046][ T9327] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 923.315076][ T9327] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 923.315103][ T9327] ? __pfx_hci_event_packet+0x10/0x10 [ 923.315124][ T9327] ? rt_spin_unlock+0x14f/0x200 [ 923.315167][ T9327] ? hci_send_to_monitor+0xe2/0x590 [ 923.315199][ T9327] hci_rx_work+0x3ee/0x1030 [ 923.315228][ T9327] ? process_scheduled_works+0xa8d/0x18c0 [ 923.315261][ T9327] process_scheduled_works+0xb6e/0x18c0 [ 923.315328][ T9327] ? __pfx_process_scheduled_works+0x10/0x10 [ 923.315369][ T9327] ? assign_work+0x3d5/0x5e0 [ 923.315408][ T9327] worker_thread+0xa53/0xfc0 [ 923.315471][ T9327] kthread+0x388/0x470 [ 923.315497][ T9327] ? __pfx_worker_thread+0x10/0x10 [ 923.315527][ T9327] ? __pfx_kthread+0x10/0x10 [ 923.315553][ T9327] ret_from_fork+0x51e/0xb90 [ 923.315586][ T9327] ? __pfx_ret_from_fork+0x10/0x10 [ 923.315614][ T9327] ? __switch_to+0xc7d/0x1450 [ 923.315646][ T9327] ? __pfx_kthread+0x10/0x10 [ 923.315672][ T9327] ret_from_fork_asm+0x1a/0x30 [ 923.315715][ T9327] [ 923.316171][ T9327] kobject: kobject_add_internal failed for hci5:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 923.316371][ T9327] Bluetooth: hci5: failed to register connection device [ 923.484726][ T9706] gp8psk: usb in 128 operation failed. [ 923.485322][ T9706] gp8psk: usb in 137 operation failed. [ 923.485341][ T9706] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 923.485386][ T9706] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 923.490614][ T9706] usb 4-1: USB disconnect, device number 47 [ 925.334483][ T9327] Bluetooth: hci5: command 0x0405 tx timeout [ 927.404450][ T5815] Bluetooth: hci5: command 0x0405 tx timeout [ 930.105471][ T5815] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 932.804419][T13161] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 934.161548][T13173] syzkaller0: entered promiscuous mode [ 934.161579][T13173] syzkaller0: entered allmulticast mode [ 934.425081][ T9706] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 934.864236][ T9706] usb 1-1: Using ep0 maxpacket: 16 [ 934.873788][ T9706] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.873850][ T9706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 934.873881][ T9706] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 934.873903][ T9706] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 934.873926][ T9706] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 934.875999][ T9706] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 934.876030][ T9706] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 934.876051][ T9706] usb 1-1: Manufacturer: syz [ 934.887736][ T9706] usb 1-1: config 0 descriptor?? [ 935.544354][ T9706] rc_core: IR keymap rc-hauppauge not found [ 935.544378][ T9706] Registered IR keymap rc-empty [ 935.544553][ T9706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 935.564735][ T9706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 935.587964][ T9706] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 935.592779][ T9706] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input24 [ 935.620656][ T9706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 935.636647][ T9706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 935.663533][ C0] mceusb 1-1:0.0: short-range (0x17) receiver active [ 935.663875][ T9706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 935.686185][ T9706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 935.704601][ T9706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 935.725208][ T9706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 935.744491][ T9706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 935.764641][ T9706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 935.784401][ T9706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 935.806641][ T9706] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 935.861779][ T9706] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 935.862522][ T9706] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x17 active) [ 935.944535][ T9706] usb 1-1: USB disconnect, device number 47 [ 937.322809][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.329307][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.574864][ T36] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 939.754273][ T36] usb 1-1: Using ep0 maxpacket: 16 [ 939.886131][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 939.886621][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 939.886690][ T36] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 939.886755][ T36] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 939.886817][ T36] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 939.985412][ T36] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 939.990028][ T36] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 939.990127][ T36] usb 1-1: Manufacturer: syz [ 940.342230][ T36] usb 1-1: config 0 descriptor?? [ 940.837341][ T36] rc_core: IR keymap rc-hauppauge not found [ 940.837359][ T36] Registered IR keymap rc-empty [ 940.837890][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 940.854579][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 940.876302][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 940.896990][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input25 [ 940.920663][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 940.935387][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 940.961379][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 940.967180][ C1] mceusb 1-1:0.0: short-range (0x17) receiver active [ 940.979757][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 940.994378][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 941.015157][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 941.034452][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 941.054493][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 941.074485][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 941.094677][ T36] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 941.166652][ T36] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 941.166748][ T36] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x17 active) [ 941.199753][ T36] usb 1-1: USB disconnect, device number 48 [ 942.653606][T13264] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.666998][T13264] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.078036][T13268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2230'. [ 943.190318][T13268] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.698908][T13268] bridge_slave_1 (unregistering): left allmulticast mode [ 943.698942][T13268] bridge_slave_1 (unregistering): left promiscuous mode [ 943.699036][T13268] bridge0: port 2(bridge_slave_1) entered disabled state [ 948.979484][T13332] syzkaller0: entered promiscuous mode [ 948.979514][T13332] syzkaller0: entered allmulticast mode [ 951.580325][T13357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2256'. [ 955.112663][T13400] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2269'. [ 958.080075][ T9706] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 958.162833][T13427] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 958.226763][ T9706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 958.226802][ T9706] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.226828][ T9706] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 958.226873][ T9706] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 958.226898][ T9706] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.477480][ T9706] usb 2-1: config 0 descriptor?? [ 958.966960][ T9706] usbhid 2-1:0.0: can't add hid device: -71 [ 958.967108][ T9706] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 958.994467][ T9706] usb 2-1: USB disconnect, device number 44 [ 959.142818][T13435] bridge0: port 1(bridge_slave_0) entered disabled state [ 959.177527][T13435] bridge0: port 2(bridge_slave_1) entered disabled state [ 964.678433][ T5815] Bluetooth: hci3: Invalid handle: 0x20c9 > 0x0eff [ 964.767011][ T5861] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 965.265485][ T5874] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 965.707227][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 965.707265][ T5861] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 965.707295][ T5861] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 965.707338][ T5861] usb 2-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 965.707361][ T5861] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 965.807569][T13490] block device autoloading is deprecated and will be removed. [ 966.022204][ T5861] usb 2-1: config 0 descriptor?? [ 966.060810][ T5874] usb 4-1: config 0 has no interfaces? [ 966.063271][ T5874] usb 4-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 966.063302][ T5874] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 966.063321][ T5874] usb 4-1: Product: syz [ 966.063335][ T5874] usb 4-1: Manufacturer: syz [ 966.063349][ T5874] usb 4-1: SerialNumber: syz [ 966.109748][ T5874] usb 4-1: config 0 descriptor?? [ 966.716759][ T5861] usbhid 2-1:0.0: can't add hid device: -71 [ 966.716897][ T5861] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 967.737613][ T5861] usb 2-1: USB disconnect, device number 45 [ 969.378113][ T5861] usb 4-1: USB disconnect, device number 48 [ 971.727217][ T5815] Bluetooth: hci5: Invalid handle: 0x20c9 > 0x0eff [ 974.094755][ T9] usb 4-1: new full-speed USB device number 49 using dummy_hcd [ 974.887463][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 974.887502][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 974.887526][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 974.887571][ T9] usb 4-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 974.887595][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 974.893619][ T9] usb 4-1: config 0 descriptor?? [ 976.196267][ T9] usbhid 4-1:0.0: can't add hid device: -71 [ 976.196412][ T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 976.232603][ T9] usb 4-1: USB disconnect, device number 49 [ 976.839533][ T5815] Bluetooth: hci5: Invalid handle: 0x20c9 > 0x0eff [ 980.211658][T13599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2329'. [ 980.211685][T13599] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2329'. [ 981.352132][ T37] audit: type=1326 audit(1775307067.025:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13616 comm="syz.0.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634728c819 code=0x7ffc0000 [ 981.352752][ T37] audit: type=1326 audit(1775307067.025:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13616 comm="syz.0.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f634728c819 code=0x7ffc0000 [ 981.352806][ T37] audit: type=1326 audit(1775307067.025:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13616 comm="syz.0.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634728c819 code=0x7ffc0000 [ 981.353190][ T37] audit: type=1326 audit(1775307067.025:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13616 comm="syz.0.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f634728c819 code=0x7ffc0000 [ 981.456976][ T37] audit: type=1326 audit(1775307067.135:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13616 comm="syz.0.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634728c819 code=0x7ffc0000 [ 981.457039][ T37] audit: type=1326 audit(1775307067.135:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=13616 comm="syz.0.2336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f634728c819 code=0x7ffc0000 [ 981.636298][ T5861] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 982.264301][ T5861] usb 4-1: Using ep0 maxpacket: 16 [ 982.286011][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 982.286049][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 982.286073][ T5861] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 982.286118][ T5861] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 982.286143][ T5861] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.367652][ T5861] usb 4-1: config 0 descriptor?? [ 982.934240][ T5874] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 982.970423][ T5861] microsoft 0003:045E:07DA.0005: global environment stack underflow [ 982.970449][ T5861] microsoft 0003:045E:07DA.0005: item 0 4 1 11 parsing failed [ 982.974656][ T5861] microsoft 0003:045E:07DA.0005: parse failed [ 982.974776][ T5861] microsoft 0003:045E:07DA.0005: probe with driver microsoft failed with error -22 [ 983.117339][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 983.117388][ T5874] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 983.117412][ T5874] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 983.117529][ T5874] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 983.117554][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 983.197884][ T5874] usb 1-1: config 0 descriptor?? [ 983.537634][ T5861] usb 4-1: USB disconnect, device number 50 [ 986.246588][ T5874] usbhid 1-1:0.0: can't add hid device: -71 [ 986.253505][ T5874] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 986.281602][ T5874] usb 1-1: USB disconnect, device number 49 [ 986.523521][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2348'. [ 986.523547][T13667] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2348'. [ 987.795039][T13671] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 988.076279][T13675] faux_driver vgem: [drm] Unknown color mode 727; guessing buffer size. [ 991.645166][T13697] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 992.614254][ T36] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 992.764185][ T36] usb 4-1: Using ep0 maxpacket: 16 [ 992.766754][ T36] usb 4-1: config 0 has an invalid interface number: 13 but max is 0 [ 992.766784][ T36] usb 4-1: config 0 has no interface number 0 [ 992.766832][ T36] usb 4-1: config 0 interface 13 altsetting 7 has an endpoint descriptor with address 0x95, changing to 0x85 [ 992.766859][ T36] usb 4-1: config 0 interface 13 altsetting 7 bulk endpoint 0x85 has invalid maxpacket 32 [ 992.766884][ T36] usb 4-1: config 0 interface 13 altsetting 7 bulk endpoint 0xA has invalid maxpacket 1015 [ 992.766910][ T36] usb 4-1: config 0 interface 13 has no altsetting 0 [ 992.772181][ T36] usb 4-1: New USB device found, idVendor=045e, idProduct=04e6, bcdDevice=e0.ca [ 992.772214][ T36] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 992.772236][ T36] usb 4-1: Product: syz [ 992.772252][ T36] usb 4-1: Manufacturer: syz [ 992.772268][ T36] usb 4-1: SerialNumber: syz [ 992.884401][ T36] usb 4-1: config 0 descriptor?? [ 992.885373][T13713] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 992.885506][T13713] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 993.225374][T13727] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2364'. [ 993.225400][T13727] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2364'. [ 994.310410][ T5815] Bluetooth: hci3: Ignoring HCI_Connection_Complete for existing connection [ 994.470411][ T36] ipaq 4-1:0.13: PocketPC PDA converter detected [ 994.470798][ T36] usb 4-1: active config #0 != 1 ?? [ 994.534413][ T36] usb 4-1: USB disconnect, device number 51 [ 994.654318][ T10] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 994.806039][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 994.808783][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 994.808820][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 994.808845][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 994.808891][ T10] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 994.808917][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 994.912905][ T10] usb 2-1: config 0 descriptor?? [ 997.668009][ T10] microsoft 0003:045E:07DA.0006: global environment stack underflow [ 997.668036][ T10] microsoft 0003:045E:07DA.0006: item 0 4 1 11 parsing failed [ 997.694327][ T10] microsoft 0003:045E:07DA.0006: parse failed [ 997.695582][ T10] microsoft 0003:045E:07DA.0006: probe with driver microsoft failed with error -22 [ 997.993843][T11284] usb 2-1: USB disconnect, device number 46 [ 998.152734][ T5815] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 998.775889][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.775973][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.823143][T13635] ------------[ cut here ]------------ [ 999.823161][T13635] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 999.823176][T13635] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#0: kworker/0:4/13635 [ 999.823223][T13635] Modules linked in: [ 999.823245][T13635] CPU: 0 UID: 0 PID: 13635 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 999.823275][T13635] Tainted: [L]=SOFTLOCKUP [ 999.823282][T13635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 999.823296][T13635] Workqueue: events drm_fb_helper_damage_work [ 999.823323][T13635] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 999.823352][T13635] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ea b9 d3 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 999.823370][T13635] RSP: 0018:ffffc900056bf8c0 EFLAGS: 00010246 [ 999.823388][T13635] RAX: 1ffff11004a5c000 RBX: ffffffff8f7558b0 RCX: 0000000000000000 [ 999.823404][T13635] RDX: ffffffff8bbf6340 RSI: ffffffff8bc121e0 RDI: ffffffff8f7558b0 [ 999.823420][T13635] RBP: ffffc900056bf9a8 R08: 0000000000000000 R09: 0000000000000000 [ 999.823435][T13635] R10: dffffc0000000000 R11: fffffbfff1ed4e37 R12: ffffffff8bc121e0 [ 999.823451][T13635] R13: ffff8880252e0000 R14: 0000000000000000 R15: ffffffff8bbf6340 [ 999.823475][T13635] FS: 0000000000000000(0000) GS:ffff888126335000(0000) knlGS:0000000000000000 [ 999.823493][T13635] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 999.823509][T13635] CR2: 00007fffb0cd196c CR3: 0000000032f3e000 CR4: 00000000003526f0 [ 999.823530][T13635] Call Trace: [ 999.823540][T13635] [ 999.823557][T13635] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 999.823586][T13635] ? rt_spin_unlock+0x14f/0x200 [ 999.823620][T13635] ? __pfx_autoremove_wake_function+0x10/0x10 [ 999.823656][T13635] ? rt_spin_unlock+0x160/0x200 [ 999.823691][T13635] ? drm_vblank_get+0x147/0x260 [ 999.823721][T13635] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 999.823749][T13635] drm_fb_helper_damage_work+0x131/0x6f0 [ 999.823791][T13635] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 999.823828][T13635] ? process_scheduled_works+0xa8d/0x18c0 [ 999.823859][T13635] ? process_scheduled_works+0xa8d/0x18c0 [ 999.823892][T13635] process_scheduled_works+0xb6e/0x18c0 [ 999.823961][T13635] ? __pfx_process_scheduled_works+0x10/0x10 [ 999.824002][T13635] ? assign_work+0x3d5/0x5e0 [ 999.824040][T13635] worker_thread+0xa53/0xfc0 [ 999.824155][T13635] kthread+0x388/0x470 [ 999.824180][T13635] ? __pfx_worker_thread+0x10/0x10 [ 999.824207][T13635] ? __pfx_kthread+0x10/0x10 [ 999.824230][T13635] ret_from_fork+0x51e/0xb90 [ 999.824263][T13635] ? __pfx_ret_from_fork+0x10/0x10 [ 999.824289][T13635] ? __switch_to+0xc7d/0x1450 [ 999.824319][T13635] ? __pfx_kthread+0x10/0x10 [ 999.824343][T13635] ret_from_fork_asm+0x1a/0x30 [ 999.824384][T13635] [ 999.824394][T13635] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 999.824411][T13635] CPU: 0 UID: 0 PID: 13635 Comm: kworker/0:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 999.824439][T13635] Tainted: [L]=SOFTLOCKUP [ 999.824447][T13635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 999.824468][T13635] Workqueue: events drm_fb_helper_damage_work [ 999.824495][T13635] Call Trace: [ 999.824504][T13635] [ 999.824512][T13635] vpanic+0x56c/0xa60 [ 999.824542][T13635] ? __pfx__printk+0x10/0x10 [ 999.824565][T13635] ? __pfx_vpanic+0x10/0x10 [ 999.824591][T13635] ? is_bpf_text_address+0x292/0x2b0 [ 999.824619][T13635] ? is_bpf_text_address+0x26/0x2b0 [ 999.824670][T13635] panic+0xc5/0xd0 [ 999.824698][T13635] ? __pfx_panic+0x10/0x10 [ 999.824737][T13635] ? ret_from_fork_asm+0x1a/0x30 [ 999.824764][T13635] __warn+0x315/0x4f0 [ 999.824791][T13635] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 999.824820][T13635] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 999.824848][T13635] __report_bug+0x29a/0x540 [ 999.824877][T13635] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 999.824904][T13635] ? __pfx___report_bug+0x10/0x10 [ 999.824950][T13635] report_bug_entry+0x19a/0x290 [ 999.824973][T13635] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 999.824997][T13635] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 999.825022][T13635] handle_bug+0xce/0x200 [ 999.825049][T13635] exc_invalid_op+0x1a/0x50 [ 999.825074][T13635] asm_exc_invalid_op+0x1a/0x20 [ 999.825095][T13635] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 999.825121][T13635] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 ea b9 d3 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 999.825139][T13635] RSP: 0018:ffffc900056bf8c0 EFLAGS: 00010246 [ 999.825157][T13635] RAX: 1ffff11004a5c000 RBX: ffffffff8f7558b0 RCX: 0000000000000000 [ 999.825173][T13635] RDX: ffffffff8bbf6340 RSI: ffffffff8bc121e0 RDI: ffffffff8f7558b0 [ 999.825189][T13635] RBP: ffffc900056bf9a8 R08: 0000000000000000 R09: 0000000000000000 [ 999.825202][T13635] R10: dffffc0000000000 R11: fffffbfff1ed4e37 R12: ffffffff8bc121e0 [ 999.825216][T13635] R13: ffff8880252e0000 R14: 0000000000000000 R15: ffffffff8bbf6340 [ 999.825256][T13635] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 999.825283][T13635] ? rt_spin_unlock+0x14f/0x200 [ 999.825311][T13635] ? __pfx_autoremove_wake_function+0x10/0x10 [ 999.825344][T13635] ? rt_spin_unlock+0x160/0x200 [ 999.825374][T13635] ? drm_vblank_get+0x147/0x260 [ 999.825402][T13635] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 999.825428][T13635] drm_fb_helper_damage_work+0x131/0x6f0 [ 999.825475][T13635] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 999.825511][T13635] ? process_scheduled_works+0xa8d/0x18c0 [ 999.825538][T13635] ? process_scheduled_works+0xa8d/0x18c0 [ 999.825567][T13635] process_scheduled_works+0xb6e/0x18c0 [ 999.825634][T13635] ? __pfx_process_scheduled_works+0x10/0x10 [ 999.825673][T13635] ? assign_work+0x3d5/0x5e0 [ 999.825710][T13635] worker_thread+0xa53/0xfc0 [ 999.825775][T13635] kthread+0x388/0x470 [ 999.825797][T13635] ? __pfx_worker_thread+0x10/0x10 [ 999.825826][T13635] ? __pfx_kthread+0x10/0x10 [ 999.825850][T13635] ret_from_fork+0x51e/0xb90 [ 999.825882][T13635] ? __pfx_ret_from_fork+0x10/0x10 [ 999.825910][T13635] ? __switch_to+0xc7d/0x1450 [ 999.825940][T13635] ? __pfx_kthread+0x10/0x10 [ 999.825962][T13635] ret_from_fork_asm+0x1a/0x30 [ 999.826003][T13635] [ 999.826820][T13635] Kernel Offset: disabled