last executing test programs: 11.141198494s ago: executing program 3 (id=12327): syz_emit_vhci(0x0, 0x22) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0xd) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xd) syz_emit_vhci(0x0, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f00000003c0)=""/122, 0xffffffffffffff61}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_reconf_req={{0x19, 0x4, 0xe}, {0x8, 0x2, [0x3, 0x4, 0xdffd, 0xf570, 0x401]}}}}, 0x1b) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x4c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x1, @local, 0x4}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e24, @empty}, @in={0x2, 0x0, @broadcast}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x4c80) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x2, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x66, 0x8}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/4095, &(0x7f0000000580)=""/245}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000440)="b6ae74a9cddcb30346f9ca6e05dcb049b85b2ba489fe94f60eec8fd99e943d347d5c4e9031e39dd57bdad8e582e4650c53fc1f953c3d7145838f46f0dd5b40c1b669b61706d41b1601048a06143568a8f74a64329e8f00da56fa1f6ef3b42dbc6baabafd43646a1f05c23aa5e416c8aeb353ae1a5ef0657ccc830a364b8c00e881165f36d4fb903ed6f4816e0f05", 0x8e}, {&(0x7f0000001700)="789cbeacce628c6e29242c80fdbc857d95cc97515fe52d297accd10f89e09a36ad2a3817343e8a29523caf97fcce2d5bfb64ea2d50ac84aa5eb8dc6d846a390bc65d0aedcb6c2916b0d6842cb743a82d2c5e5cac4b6de52c42260c1046b63998e911bbaf054c330531491a63b009ba933a02e5662170259f5d9ea373d5b1b095e337e7e7b490cfbb4ff4a52cbfd425af82d5ca0d1253be6c7431f906610d5c358b2e57a53d776be16824030f2833b1f19cbee0e955dda4a6cc137d2c460f57d353bb75458d1561", 0xc7}, {&(0x7f0000001800)="d56b47453808de898f96b69746b4fb2179201698c22ac9a9013944063418f96828da7d464012abcc78ba05c649e28b12d1b521e7bbf8309ce15d46cf8ec4ba5f967810f0610a9b796ca874b35ef8498351c076142b2c242ff5568182b3fea700b0880fd583e3aefb92e9578986b3fe93c9a941f731f5c473d6cf3e7c4839d59c2d5a5192b3019d4c20ae07d2d6d8f94df207e1b7d7dba9c2dc5a94ed6efef7bf8531dc0c6904228d6f677865f6b77d416668c8c9cd9f26e0e2131dcc62d25d08365fb21bc740ea3e", 0xc8}, {&(0x7f0000001900)="5cba64899fcbb1df3009ed65050d89981036021f55d2497e8c7e44219c58f5475bd3e85ec39565cdb157736bf8b51ed26806c72d4ae46f59d4c50547fd8951f8915c5acd9cceb21b91fe943382138e2baca63344d4c00e5e4a161e7859dae5d71a810ff0dfea0c408a993d324109b62b4b49d8287cef2cf5e29d24ae47a2b5785dd1924fc073cce1b8e7ab6ece18fca84f095917b87605ed337fd5e722725ac0a18876394de4c650bd89d691c9", 0xad}, {&(0x7f0000000500)="d4550abd34df55aa2a794755fb48d15f7c523cba44ac33a713592c9e5bf8ef11944000fd25cef0c367346ca840133c3fc116e8cac8ce0e127743162e5aa5a3a6038f49f32dd86236f525c904110d", 0x4e}, {&(0x7f00000019c0)="76c18b3a75bbc9ec268e9ef42b6b63d7736b3a0dcb83f4875d354cc2b258f77d3d79292c6518ffb7256755dc4c5d427b6004327826466f87449175515fd68ef7076365d0bdba200a69a93d2ee43ee2c84cab4f73c98d874141816afd9025e2ea191b643ddb211bbb7fa14cd0fe185c43fce934f4ee133ff17c35fb122a5e93d0f216eca6a8353c4db6f1e0248d30cbd960ff5a252cbb1119c1c535fe64ce94ef0305", 0xa2}, {&(0x7f0000001a80)="8c9eaf5d487fe85bb760f5b981de6127620c91d035a20a83604998b6e11c8fea013d6522a9e437588ea1ee410c9b51bcbc23081df4a50a036da26f8c8a834ee64404ef94599c9d9795bff2c0bde97b50dee4955bf212c144fc2c2db68dddbcd71a5a68ebe93ddbe04bae08db4c5db894c74d7dedc3dbbfa3333d3ab06cb82d15ad3acc6306f8291c4645667c3438ae5d422569bb48f5c444c5c23832de4698e1ef103d266b7257647da2f1ca646b9b306fd5e84a53e7dd26929b9c2cd64a1b24a9bd902fa7867787283618ec3870378759ae99ffa13ea4c545", 0xd9}], 0x7, 0x5, 0xa, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x2, &(0x7f0000000280)=[{0x851, 0x9, 0x81, 0x1}, {0x9, 0x40, 0xfb, 0x166}]}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) 10.791563928s ago: executing program 1 (id=12328): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009214000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)) 9.876809614s ago: executing program 3 (id=12332): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) dup3(0xffffffffffffffff, r0, 0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = epoll_create1(0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x60000014}) read$char_usb(0xffffffffffffffff, &(0x7f0000000100)=""/169, 0xa9) epoll_pwait(r4, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) 8.930900366s ago: executing program 3 (id=12334): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 8.930506621s ago: executing program 4 (id=12335): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000020850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='contention_begin\x00', r0}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000300)=0x8) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000340)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000740)={0x2c, &(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="0b57273d393da884bc88561ce60f46435328a82c258a37258b13e25651e57762f6af40517901ff47bb325210783532e01f7a203eef6ce9cadca4177cd41a67faafbeb15f4770bfbc408d7eb06b55075d17bbb1f2f5237d8679ee0e44557a81d886af18aece79906d9304d860dbf7d2707fd17b7b964c967047d657d8b4cb51b16b069f3dc465ff19d9cb1216c2ac62658934b36ad311b83beb848060d39d65382b7a20be6e43c9ae8d052e9e97d8"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, "d57f8080fe2b7192eafe679eb137ff01e308000000000000000000000000b4a9"}) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x24) bind$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x24) r7 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x101, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r8, 0x0, &(0x7f0000000040)=0x100000001) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) listen(r8, 0x0) accept4(r8, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r7, 0xc0585604, &(0x7f0000000000)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r9, 0xc0045009, &(0x7f0000000000)=0x1) 7.614529357s ago: executing program 1 (id=12339): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x8, 0x4, &(0x7f0000000000)=@framed={{}, [@alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x20}]}, &(0x7f0000000040)='syzkaller\x00', 0x2}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x100400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) set_mempolicy(0x0, &(0x7f00000003c0)=0x8000000000000001, 0xe0) syz_usbip_server_init(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x13, 0x0, 0x0) r2 = socket$inet(0x2, 0x80000, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x0, @empty}, 0xfffffffffffffef0) listen(r1, 0x0) fchdir(0xffffffffffffffff) syz_usbip_server_init(0x4) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="0100010086380000000000e700"]) socket$nl_crypto(0x10, 0x3, 0x15) r4 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x32315559, 0x8}}) r5 = creat(&(0x7f0000000e00)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$UHID_GET_REPORT_REPLY(r5, &(0x7f0000000200), 0xa) setxattr$security_ima(&(0x7f0000000240)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), &(0x7f0000000180)=ANY=[], 0x2, 0x0) open(&(0x7f0000000080)='./file2aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f0000001140)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR}, 0x3) 6.883898585s ago: executing program 0 (id=12340): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff05002400"], 0x58}}, 0x0) 6.589130907s ago: executing program 0 (id=12341): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 6.242796041s ago: executing program 2 (id=12342): syz_emit_vhci(0x0, 0x22) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0xd) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xd) syz_emit_vhci(0x0, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f00000003c0)=""/122, 0xffffffffffffff61}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_reconf_req={{0x19, 0x4, 0xe}, {0x8, 0x2, [0x3, 0x4, 0xdffd, 0xf570, 0x401]}}}}, 0x1b) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x3c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x1, @local, 0x4}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x4c80) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x2, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x66, 0x8}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/4095, &(0x7f0000000580)=""/245}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000440)="b6ae74a9cddcb30346f9ca6e05dcb049b85b2ba489fe94f60eec8fd99e943d347d5c4e9031e39dd57bdad8e582e4650c53fc1f953c3d7145838f46f0dd5b40c1b669b61706d41b1601048a06143568a8f74a64329e8f00da56fa1f6ef3b42dbc6baabafd43646a1f05c23aa5e416c8aeb353ae1a5ef0657ccc830a364b8c00e881165f36d4fb903ed6f4816e0f05", 0x8e}, {&(0x7f0000001700)="789cbeacce628c6e29242c80fdbc857d95cc97515fe52d297accd10f89e09a36ad2a3817343e8a29523caf97fcce2d5bfb64ea2d50ac84aa5eb8dc6d846a390bc65d0aedcb6c2916b0d6842cb743a82d2c5e5cac4b6de52c42260c1046b63998e911bbaf054c330531491a63b009ba933a02e5662170259f5d9ea373d5b1b095e337e7e7b490cfbb4ff4a52cbfd425af82d5ca0d1253be6c7431f906610d5c358b2e57a53d776be16824030f2833b1f19cbee0e955dda4a6cc137d2c460f57d353bb75458d1561", 0xc7}, {&(0x7f0000001800)="d56b47453808de898f96b69746b4fb2179201698c22ac9a9013944063418f96828da7d464012abcc78ba05c649e28b12d1b521e7bbf8309ce15d46cf8ec4ba5f967810f0610a9b796ca874b35ef8498351c076142b2c242ff5568182b3fea700b0880fd583e3aefb92e9578986b3fe93c9a941f731f5c473d6cf3e7c4839d59c2d5a5192b3019d4c20ae07d2d6d8f94df207e1b7d7dba9c2dc5a94ed6efef7bf8531dc0c6904228d6f677865f6b77d416668c8c9cd9f26e0e2131dcc62d25d08365fb21bc740ea3e", 0xc8}, {&(0x7f0000001900)="5cba64899fcbb1df3009ed65050d89981036021f55d2497e8c7e44219c58f5475bd3e85ec39565cdb157736bf8b51ed26806c72d4ae46f59d4c50547fd8951f8915c5acd9cceb21b91fe943382138e2baca63344d4c00e5e4a161e7859dae5d71a810ff0dfea0c408a993d324109b62b4b49d8287cef2cf5e29d24ae47a2b5785dd1924fc073cce1b8e7ab6ece18fca84f095917b87605ed337fd5e722725ac0a18876394de4c650bd89d691c9", 0xad}, {&(0x7f0000000500)="d4550abd34df55aa2a794755fb48d15f7c523cba44ac33a713592c9e5bf8ef11944000fd25cef0c367346ca840133c3fc116e8cac8ce0e127743162e5aa5a3a6038f49f32dd86236f525c904110d", 0x4e}, {&(0x7f00000019c0)="76c18b3a75bbc9ec268e9ef42b6b63d7736b3a0dcb83f4875d354cc2b258f77d3d79292c6518ffb7256755dc4c5d427b6004327826466f87449175515fd68ef7076365d0bdba200a69a93d2ee43ee2c84cab4f73c98d874141816afd9025e2ea191b643ddb211bbb7fa14cd0fe185c43fce934f4ee133ff17c35fb122a5e93d0f216eca6a8353c4db6f1e0248d30cbd960ff5a252cbb1119c1c535fe64ce94ef0305", 0xa2}, {&(0x7f0000001a80)="8c9eaf5d487fe85bb760f5b981de6127620c91d035a20a83604998b6e11c8fea013d6522a9e437588ea1ee410c9b51bcbc23081df4a50a036da26f8c8a834ee64404ef94599c9d9795bff2c0bde97b50dee4955bf212c144fc2c2db68dddbcd71a5a68ebe93ddbe04bae08db4c5db894c74d7dedc3dbbfa3333d3ab06cb82d15ad3acc6306f8291c4645667c3438ae5d422569bb48f5c444c5c23832de4698e1ef103d266b7257647da2f1ca646b9b306fd5e84a53e7dd26929b9c2cd64a1b24a9bd902fa7867787283618ec3870378759ae99ffa13ea4c545", 0xd9}], 0x7, 0x5, 0xa, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x2, &(0x7f0000000280)=[{0x851, 0x9, 0x81, 0x1}, {0x9, 0x40, 0xfb, 0x166}]}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) 5.928945413s ago: executing program 0 (id=12343): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'lblcr\x00'}, 0x2c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000009200)=[@in={0x2, 0x0, @remote}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @disassoc={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @val={0x8c, 0x18, {0x0, "24e5ea3c21c3", @long="5601f5f04ef706287517224b9d6d386c"}}}}]}, 0x54}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r0, 0x2, 0x0, 0x4}, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)={0x1c, r6, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x1c}}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x4, 0xc1, 0xf4, 0x0, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x20, 0x700, 0x1, 0x4}}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={0x0, @in={0x2, 0x4e22, @multicast1}, @can={0x1d, r10}, @can={0x1d, r11}, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x40}) ioctl$HIDIOCSREPORT(r9, 0xc018480d, &(0x7f0000000080)={0x2, 0x0, 0x8}) r12 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x92080, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r12, 0xc01064bd, &(0x7f00000000c0)={&(0x7f00000001c0)="b92d661cbaa0e1e341322a5334a129fbfdd448d2f8c4c7e34c265b497e80e8dbb990d4cb61c58cf8917a2f43375f21ceb932559c407c041e7253e9857ebfe886c53e08bde0b74a7eccc3621f98398080883744653a37fd13252ee45266bbef6b8602653d8114e4c2a9f89d3522a44a679fb35a747ab81c39c7f2533c8a32f2201f2472e0920ee6c5dbec59feed5594a2f24f0eae4edfeea397b48aabe60e242b20a437c4c5496dba3736782a6fc04828aa380bbfcda04b87e933801fba699276690eb5599a9c4775864795d8d56f53a3", 0xd0}) ioctl$USBDEVFS_CLEAR_HALT(r8, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) 5.712879478s ago: executing program 3 (id=12344): syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b000100000001090400"], 0x0) 5.661521181s ago: executing program 4 (id=12345): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) dup3(0xffffffffffffffff, r0, 0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = epoll_create1(0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x60000014}) read$char_usb(0xffffffffffffffff, &(0x7f0000000100)=""/169, 0xa9) epoll_pwait(r4, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) 4.463501357s ago: executing program 0 (id=12346): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x1, 0x8000}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000005d40)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000006240)={0x14, r3, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r6, @ANYBLOB="0000000200000000280012000c000100766574"], 0x48}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x58, 0x0, 0x0, 0x0, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x49}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x40801}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x5c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x61b6}]}, 0x5c}}, 0x0) 4.40472362s ago: executing program 4 (id=12347): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b15, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) 4.180021489s ago: executing program 2 (id=12348): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x20, 0x4, 0x0, 0x0, 0x80, 0x67, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x1, [{@private}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0xfe}, 0x65c}, {@rand_addr=0x64010100}, {@empty}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.168343171s ago: executing program 0 (id=12349): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000150300000009214000000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, &(0x7f0000000040)) 4.034348095s ago: executing program 1 (id=12350): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1f, 0x4, 0x0, 0x0, 0x7c, 0x67, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0xfe}, 0x65c}, {@rand_addr=0x64010100}, {@empty}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.641221031s ago: executing program 2 (id=12351): openat$vimc2(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_io_uring_setup(0xf3f, &(0x7f0000000580)={0x0, 0x9902, 0x20, 0x2, 0x279}, &(0x7f0000000600), &(0x7f0000000640)) r0 = syz_io_uring_setup(0x52ba, 0x0, &(0x7f0000000340), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x0) r1 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$int_in(r1, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) name_to_handle_at(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(0xffffffffffffffff, 0x47ba, 0x0, 0x0, 0x0, 0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x13, 0x2000ac0a, r3) getpeername(0xffffffffffffffff, &(0x7f00000002c0)=@tipc=@id, &(0x7f0000000240)=0x80) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newsa={0x104, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in=@remote, 0x0, 0x3c}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r6 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r6, &(0x7f0000000040)=ANY=[@ANYBLOB='target PCI:14:\t'], 0x16) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_DREG={0x8}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(r7, &(0x7f00000001c0)={0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) 3.420161238s ago: executing program 1 (id=12352): sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, 0x0) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, 0x0) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x18) ioctl$SNDCTL_DSP_STEREO(0xffffffffffffffff, 0xc0045003, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) io_setup(0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x0, 0x141101) r2 = dup(r1) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) 3.308780531s ago: executing program 4 (id=12353): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x22, 0x4, 0x0, 0x0, 0x88, 0x67, 0x0, 0x0, 0x0, 0x0, @multicast2, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x1, [{@private=0xa010102}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0xfe}, 0x65c}, {@rand_addr=0x64010100}, {@empty}, {@multicast1}, {@private=0xa010100, 0x7}]}, @timestamp_prespec={0x44, 0x4, 0x0, 0x3, 0x8}, @noop, @noop, @noop, @end, @rr={0x7, 0x17, 0x0, [@dev, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.272380617s ago: executing program 3 (id=12354): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f0009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "08405af3"}, @local=@item_4, @local=@item_4={0x3, 0x2, 0x0, "6fe695cd"}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCGREPORT(r1, 0x400c4807, 0x0) 3.259644622s ago: executing program 1 (id=12355): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000020850000007200000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='contention_begin\x00', r0}, 0x10) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000300)=0x8) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) openat$smackfs_cipsonum(0xffffffffffffff9c, &(0x7f0000000340)='/sys/fs/smackfs/mapped\x00', 0x2, 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000740)={0x2c, &(0x7f0000000240)=ANY=[@ANYRES16=r1, @ANYBLOB="0b57273d393da884bc88561ce60f46435328a82c258a37258b13e25651e57762f6af40517901ff47bb325210783532e01f7a203eef6ce9cadca4177cd41a67faafbeb15f4770bfbc408d7eb06b55075d17bbb1f2f5237d8679ee0e44557a81d886af18aece79906d9304d860dbf7d2707fd17b7b964c967047d657d8b4cb51b16b069f3dc465ff19d9cb1216c2ac62658934b36ad311b83beb848060d39d65382b7a20be6e43c9ae8d052e9e97d8"], 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000200), 0x4, 0x0) ioctl$EVIOCSKEYCODE_V2(r4, 0x40284504, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x0, "d57f8080fe2b7192eafe679eb137ff01e308000000000000000000000000b4a9"}) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x24) bind$rxrpc(r5, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x24) r7 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x101, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$int_in(r8, 0x5421, 0x0) bind$bt_l2cap(r8, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe) listen(r8, 0x0) accept4(r8, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r7, 0xc0585604, &(0x7f0000000000)) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r9, 0xc0045009, &(0x7f0000000000)=0x1) 2.56736185s ago: executing program 4 (id=12356): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @remote, 0x0, 0x0, 'lblcr\x00'}, 0x2c) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000009200)=[@in={0x2, 0x0, @remote}], 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000180)={0x54, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x38, 0x33, @disassoc={{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0x0, @val={0x8c, 0x18, {0x0, "24e5ea3c21c3", @long="5601f5f04ef706287517224b9d6d386c"}}}}]}, 0x54}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r0, 0x2, 0x0, 0x4}, 0x48) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001740)={0x1c, r6, 0x701, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8}]}, 0x1c}}, 0x0) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r9 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x4, 0xc1, 0xf4, 0x0, 0x0, @mcast1, @dev={0xfe, 0x80, '\x00', 0x2c}, 0x20, 0x700, 0x1, 0x4}}) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={0x0, @in={0x2, 0x4e22, @multicast1}, @can={0x1d, r10}, @can={0x1d, r11}, 0x8, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x40}) ioctl$HIDIOCSREPORT(r9, 0xc018480d, &(0x7f0000000080)={0x2, 0x0, 0x8}) r12 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x92080, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r12, 0xc01064bd, &(0x7f00000000c0)={&(0x7f00000001c0)="b92d661cbaa0e1e341322a5334a129fbfdd448d2f8c4c7e34c265b497e80e8dbb990d4cb61c58cf8917a2f43375f21ceb932559c407c041e7253e9857ebfe886c53e08bde0b74a7eccc3621f98398080883744653a37fd13252ee45266bbef6b8602653d8114e4c2a9f89d3522a44a679fb35a747ab81c39c7f2533c8a32f2201f2472e0920ee6c5dbec59feed5594a2f24f0eae4edfeea397b48aabe60e242b20a437c4c5496dba3736782a6fc04828aa380bbfcda04b87e933801fba699276690eb5599a9c4775864795d8d56f53a3", 0xd0}) ioctl$USBDEVFS_CLEAR_HALT(r8, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) 1.799662783s ago: executing program 2 (id=12357): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) dup3(0xffffffffffffffff, r0, 0x80000) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = epoll_create1(0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000040)={0x60000014}) read$char_usb(0xffffffffffffffff, &(0x7f0000000100)=""/169, 0xa9) epoll_pwait(r4, &(0x7f0000000200)=[{}], 0x1, 0x0, 0x0, 0x0) 460.647949ms ago: executing program 0 (id=12358): syz_emit_vhci(0x0, 0x22) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB], 0xd) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB], 0xd) syz_emit_vhci(0x0, 0x0) ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f00000003c0)=""/122, 0xffffffffffffff61}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x16}, @l2cap_cid_le_signaling={{0x12}, @l2cap_ecred_reconf_req={{0x19, 0x4, 0xe}, {0x8, 0x2, [0x3, 0x4, 0xdffd, 0xf570, 0x401]}}}}, 0x1b) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x3c, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x1, @local, 0x4}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x4c80) r1 = syz_open_dev$vbi(&(0x7f00000001c0), 0x2, 0x2) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000400)={0x66, 0x8}) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) socket$packet(0x11, 0x2, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000240)) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/4095, &(0x7f0000000580)=""/245}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000440)="b6ae74a9cddcb30346f9ca6e05dcb049b85b2ba489fe94f60eec8fd99e943d347d5c4e9031e39dd57bdad8e582e4650c53fc1f953c3d7145838f46f0dd5b40c1b669b61706d41b1601048a06143568a8f74a64329e8f00da56fa1f6ef3b42dbc6baabafd43646a1f05c23aa5e416c8aeb353ae1a5ef0657ccc830a364b8c00e881165f36d4fb903ed6f4816e0f05", 0x8e}, {&(0x7f0000001700)="789cbeacce628c6e29242c80fdbc857d95cc97515fe52d297accd10f89e09a36ad2a3817343e8a29523caf97fcce2d5bfb64ea2d50ac84aa5eb8dc6d846a390bc65d0aedcb6c2916b0d6842cb743a82d2c5e5cac4b6de52c42260c1046b63998e911bbaf054c330531491a63b009ba933a02e5662170259f5d9ea373d5b1b095e337e7e7b490cfbb4ff4a52cbfd425af82d5ca0d1253be6c7431f906610d5c358b2e57a53d776be16824030f2833b1f19cbee0e955dda4a6cc137d2c460f57d353bb75458d1561", 0xc7}, {&(0x7f0000001800)="d56b47453808de898f96b69746b4fb2179201698c22ac9a9013944063418f96828da7d464012abcc78ba05c649e28b12d1b521e7bbf8309ce15d46cf8ec4ba5f967810f0610a9b796ca874b35ef8498351c076142b2c242ff5568182b3fea700b0880fd583e3aefb92e9578986b3fe93c9a941f731f5c473d6cf3e7c4839d59c2d5a5192b3019d4c20ae07d2d6d8f94df207e1b7d7dba9c2dc5a94ed6efef7bf8531dc0c6904228d6f677865f6b77d416668c8c9cd9f26e0e2131dcc62d25d08365fb21bc740ea3e", 0xc8}, {&(0x7f0000001900)="5cba64899fcbb1df3009ed65050d89981036021f55d2497e8c7e44219c58f5475bd3e85ec39565cdb157736bf8b51ed26806c72d4ae46f59d4c50547fd8951f8915c5acd9cceb21b91fe943382138e2baca63344d4c00e5e4a161e7859dae5d71a810ff0dfea0c408a993d324109b62b4b49d8287cef2cf5e29d24ae47a2b5785dd1924fc073cce1b8e7ab6ece18fca84f095917b87605ed337fd5e722725ac0a18876394de4c650bd89d691c9", 0xad}, {&(0x7f0000000500)="d4550abd34df55aa2a794755fb48d15f7c523cba44ac33a713592c9e5bf8ef11944000fd25cef0c367346ca840133c3fc116e8cac8ce0e127743162e5aa5a3a6038f49f32dd86236f525c904110d", 0x4e}, {&(0x7f00000019c0)="76c18b3a75bbc9ec268e9ef42b6b63d7736b3a0dcb83f4875d354cc2b258f77d3d79292c6518ffb7256755dc4c5d427b6004327826466f87449175515fd68ef7076365d0bdba200a69a93d2ee43ee2c84cab4f73c98d874141816afd9025e2ea191b643ddb211bbb7fa14cd0fe185c43fce934f4ee133ff17c35fb122a5e93d0f216eca6a8353c4db6f1e0248d30cbd960ff5a252cbb1119c1c535fe64ce94ef0305", 0xa2}, {&(0x7f0000001a80)="8c9eaf5d487fe85bb760f5b981de6127620c91d035a20a83604998b6e11c8fea013d6522a9e437588ea1ee410c9b51bcbc23081df4a50a036da26f8c8a834ee64404ef94599c9d9795bff2c0bde97b50dee4955bf212c144fc2c2db68dddbcd71a5a68ebe93ddbe04bae08db4c5db894c74d7dedc3dbbfa3333d3ab06cb82d15ad3acc6306f8291c4645667c3438ae5d422569bb48f5c444c5c23832de4698e1ef103d266b7257647da2f1ca646b9b306fd5e84a53e7dd26929b9c2cd64a1b24a9bd902fa7867787283618ec3870378759ae99ffa13ea4c545", 0xd9}], 0x7, 0x5, 0xa, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000380)={0x2, &(0x7f0000000280)=[{0x851, 0x9, 0x81, 0x1}, {0x9, 0x40, 0xfb, 0x166}]}) ioctl$KVM_CREATE_PIT2(r4, 0x4040ae77, &(0x7f0000000040)) 460.265263ms ago: executing program 2 (id=12359): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000200)={0x1, 0x8000}, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r2, &(0x7f0000005d40)={0x0, 0x0, &(0x7f0000005d00)={&(0x7f0000006240)={0x14, r3, 0x1, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r6, @ANYBLOB="0000000200000000280012000c000100766574"], 0x48}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r10, @ANYBLOB="1f003300d0000000080211000001080211000000505050505050000015"], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00'}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r4, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x58, 0x0, 0x0, 0x0, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x49}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x40801}, 0x80) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x5c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}, {0x0, 0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x61b6}]}, 0x5c}}, 0x0) 135.188844ms ago: executing program 1 (id=12360): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) quotactl_fd$Q_QUOTAON(r4, 0xffffffff80000202, 0x0, &(0x7f0000000300)='./file0\x00') 134.84941ms ago: executing program 3 (id=12361): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = io_uring_setup(0x6a0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000180)=0x1, 0x87c5) write$binfmt_script(r3, &(0x7f0000000000)={'#! ', './file0'}, 0xb) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) shutdown(r3, 0x1) recvfrom$inet6(r3, 0x0, 0x0, 0x0, 0x0, 0x0) recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="03c900b5c77678022bba8cc442604f85e96aaec2eea8c9969695a60e6cd97c69f041232e59a33fe3d48a89a35fa7e8aa31b0851a462cfa4594e467b45d3559ca98e12955e16bcad68b04bb3eec8e924931c213ed2203dc4fb2aa3a97d5ac4e8e7ffbb449b87fac41af0e7c1ad48d1b2cf0d36b8fd02ec55bca0d87acf98675c632a6096127975f00b1752b62fa9497e94a1af05857a6937b51b27a68a8", @ANYRESHEX], 0xb9) 36.281433ms ago: executing program 2 (id=12362): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_vhci(0x0, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x2b, &(0x7f0000000040)=0x200000000005) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi_and_pscan_mode={{0x22, 0x10}, {0x1, [{@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xf5, 0x3, 0x5, "a938a9", 0x80, 0xb1}]}}}, 0x13) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x1c9100, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x5) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x1a9a81) ioctl$USBDEVFS_FREE_STREAMS(r3, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002303100007006000000002000020d3"]) syz_emit_vhci(&(0x7f0000000280)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x4d}, @l2cap_cid_signaling={{0x49}, [@l2cap_create_chan_req={{0xc, 0xfb, 0x5}, {0x6, 0x0, 0x8}}, @l2cap_create_chan_rsp={{0xd, 0x7f, 0x8}, {0x2, 0x8, 0x0, 0x100}}, @l2cap_create_chan_rsp={{0xd, 0xf8, 0x8}, {0x9, 0xf, 0xa, 0x8}}, @l2cap_move_chan_rsp={{0xf, 0x1, 0x4}, {0x5, 0x7b}}, @l2cap_move_chan_cfm_rsp={{0x11, 0xc, 0x2}, {0x5}}, @l2cap_conn_req={{0x2, 0xf1, 0x4}, {0x2, 0x1}}, @l2cap_conn_rsp={{0x3, 0x83, 0x8}, {0x2, 0xc, 0x6a13, 0x7}}, @l2cap_cmd_rej_unk={{0x1, 0x5b, 0x2}, {0x5}}]}}, 0x52) ioctl$USBDEVFS_CONTROL(r3, 0x4008550d, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x1) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{}, 'syz0\x00'}) ioctl$UI_DEV_CREATE(r2, 0x5501) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYRES16=r4, @ANYBLOB="010000000000000000000b00000008000300b855954aff2c2dc08a911d3413d169466806a8c4085bb6cce64dd63a5c4f25f4290f60069147657551acd9fee7e0571a943e147bd5419fa1fe54bab5676a84f159e6639728bdf1b5b08ea46c5395deb5bbbb66cb5fab3b188c2e414f4d25ee0286071b6bcba79d1092a2c195229790d96b8f037cd45b937f4c2bbb6b4c9922995c4c207c47c1aac65ec363afd32e43eefd8fd4", @ANYRESHEX=r1], 0x44}}, 0x0) userfaultfd(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) bind$rds(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 4 (id=12363): socket$kcm(0x10, 0x2, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) kernel console output (not intermixed with test programs): has an invalid bInterval 0, changing to 7 [ 2828.884465][ T7986] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2828.918447][ T7986] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2828.958699][ T7986] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2829.031247][ T7986] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2829.069271][ T7986] usb 2-1: config 0 descriptor?? [ 2829.139177][ T7990] usb 4-1: USB disconnect, device number 47 [ 2829.159321][ T1252] usb 4-1: Failed to submit usb control message: -71 [ 2829.194035][ T1252] usb 4-1: unable to send the bmi data to the device: -71 [ 2829.227869][ T1252] usb 4-1: unable to get target info from device [ 2829.238390][ T1252] usb 4-1: could not get target info (-71) [ 2829.304330][ T1252] usb 4-1: could not probe fw (-71) [ 2829.589686][ T7986] plantronics 0003:047F:FFFF.0020: unknown main item tag 0x0 [ 2829.598626][ T7986] plantronics 0003:047F:FFFF.0020: No inputs registered, leaving [ 2829.630887][ T7986] plantronics 0003:047F:FFFF.0020: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 2829.799515][ T7986] usb 2-1: USB disconnect, device number 45 [ 2830.248411][ T7990] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 2830.620385][ T7990] usb 3-1: no configurations [ 2830.631883][ T7990] usb 3-1: can't read configurations, error -22 [ 2830.699317][T14199] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11934'. [ 2830.719691][T14198] netlink: 60 bytes leftover after parsing attributes in process `syz.3.11933'. [ 2830.798351][ T7990] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 2831.006285][ T7990] usb 3-1: no configurations [ 2831.193514][ T7990] usb 3-1: can't read configurations, error -22 [ 2831.251379][ T7990] usb usb3-port1: attempt power cycle [ 2831.382445][T14214] serio: Serial port ttynull [ 2831.520633][T14216] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2831.523320][T14207] ptrace attach of "./syz-executor exec"[14211] was attempted by " [ 2831.687862][ T7990] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 2831.911458][T14222] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 2831.918008][T14222] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2831.928769][T14222] vhci_hcd vhci_hcd.0: Device attached [ 2832.059397][ T7990] usb 3-1: no configurations [ 2832.064054][ T7990] usb 3-1: can't read configurations, error -22 [ 2832.127821][ T9] vhci_hcd: vhci_device speed not set [ 2832.205776][ T9] usb 11-2: new full-speed USB device number 27 using vhci_hcd [ 2832.237952][ T7990] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 2832.364827][ T7990] usb 3-1: device descriptor read/8, error -71 [ 2832.618001][ T7990] usb usb3-port1: unable to enumerate USB device [ 2832.655968][T14237] batadv_slave_0: mtu less than device minimum [ 2833.496026][T14223] vhci_hcd: connection reset by peer [ 2833.521030][T29028] vhci_hcd: stop threads [ 2833.556931][T29028] vhci_hcd: release socket [ 2833.598488][T29028] vhci_hcd: disconnect device [ 2833.977833][ T7990] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2834.187943][ T7990] usb 3-1: Using ep0 maxpacket: 32 [ 2834.230507][ T7990] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 2834.276462][ T7990] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2834.318526][ T7990] usb 3-1: config 0 descriptor?? [ 2834.368077][ T1497] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 2834.420338][ T7990] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2834.602390][ T1497] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2834.646784][ T1497] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2834.715387][ T1497] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2834.771576][ T1497] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2834.807863][ T1497] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2834.848942][ T1497] usb 5-1: config 0 descriptor?? [ 2834.860706][ T4140] usb 3-1: Failed to submit usb control message: -71 [ 2834.872529][ T7986] usb 3-1: USB disconnect, device number 47 [ 2834.880353][ T4140] usb 3-1: unable to send the bmi data to the device: -71 [ 2834.887521][ T4140] usb 3-1: unable to get target info from device [ 2834.921940][T14268] serio: Serial port ttynull [ 2834.932150][ T4140] usb 3-1: could not get target info (-71) [ 2834.964502][ T4140] usb 3-1: could not probe fw (-71) [ 2835.319780][ T1497] usbhid 5-1:0.0: can't add hid device: -71 [ 2835.341688][ T1497] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 2835.398272][ T1497] usb 5-1: USB disconnect, device number 2 [ 2836.617151][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 2837.307755][T28290] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2837.368022][ T9] vhci_hcd: vhci_device speed not set [ 2837.505917][T14286] batadv_slave_0: mtu less than device minimum [ 2837.550883][T28290] usb 3-1: no configurations [ 2837.557974][T28290] usb 3-1: can't read configurations, error -22 [ 2837.652328][T14297] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2837.658899][T14297] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2837.676223][T14297] hsr_slave_0: left promiscuous mode [ 2837.704886][T14297] hsr_slave_1: left promiscuous mode [ 2837.758070][T28290] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2837.978662][T28290] usb 3-1: no configurations [ 2838.000194][T28290] usb 3-1: can't read configurations, error -22 [ 2838.028598][T28290] usb usb3-port1: attempt power cycle [ 2838.498654][T28290] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2838.508197][T14312] serio: Serial port ttynull [ 2838.569293][T28290] usb 3-1: no configurations [ 2838.588291][T28290] usb 3-1: can't read configurations, error -22 [ 2839.278074][T28290] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2839.318486][T28290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2839.330474][T28290] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2839.358997][T28290] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2839.400961][T28290] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2839.457799][T28290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2839.481741][T28290] usb 3-1: config 0 descriptor?? [ 2839.899950][T14332] batadv_slave_0: mtu less than device minimum [ 2839.931774][T28290] usbhid 3-1:0.0: can't add hid device: -71 [ 2839.957904][ T7986] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 2839.985507][T28290] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2840.014910][T28290] usb 3-1: USB disconnect, device number 51 [ 2840.149753][ T7986] usb 1-1: Using ep0 maxpacket: 32 [ 2840.165964][ T7986] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 2840.187837][ T7986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2840.217047][ T7986] usb 1-1: config 0 descriptor?? [ 2840.261236][ T7986] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2840.961327][ T1497] usb 1-1: USB disconnect, device number 55 [ 2840.974358][ T35] usb 1-1: Failed to submit usb control message: -71 [ 2841.049242][ T35] usb 1-1: unable to send the bmi data to the device: -71 [ 2841.088224][ T35] usb 1-1: unable to get target info from device [ 2841.127304][ T35] usb 1-1: could not get target info (-71) [ 2841.156853][ T35] usb 1-1: could not probe fw (-71) [ 2841.686349][ T29] audit: type=1326 audit(1721190262.885:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14351 comm="syz.0.11975" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6b4975a19 code=0x0 [ 2843.037223][T14385] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2843.251523][T14385] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(7) [ 2843.258083][T14385] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2843.307979][ T7986] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2843.357628][T14385] vhci_hcd vhci_hcd.0: Device attached [ 2843.582539][ T7990] vhci_hcd: vhci_device speed not set [ 2843.620900][ T7986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2843.642691][ T7986] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2843.657867][ T7990] usb 17-2: new full-speed USB device number 13 using vhci_hcd [ 2843.675038][ T7986] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 2843.727468][ T7986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2843.829916][ T7986] usb 4-1: config 0 descriptor?? [ 2843.845343][T14390] vhci_hcd: connection reset by peer [ 2843.873594][ T35] vhci_hcd: stop threads [ 2843.879898][ T35] vhci_hcd: release socket [ 2843.884741][ T35] vhci_hcd: disconnect device [ 2844.507117][ T7986] usbhid 4-1:0.0: can't add hid device: -71 [ 2844.531655][ T7986] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2844.567449][ T7986] usb 4-1: USB disconnect, device number 48 [ 2845.227832][ T1497] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 2845.518001][ T1497] usb 2-1: Using ep0 maxpacket: 8 [ 2845.525927][ T1497] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2845.574728][ T1497] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2845.666613][ T1497] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2845.708198][ T1497] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2845.749946][ T1497] usb 2-1: config 0 descriptor?? [ 2846.031019][ T1497] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2846.404896][T14447] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12001'. [ 2846.621324][ T7986] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2846.808090][ T7986] usb 3-1: Using ep0 maxpacket: 8 [ 2846.846155][ T7986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2846.918602][ T7986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2847.056513][ T7986] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2847.111551][ T7986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2847.125490][T14455] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2847.164110][ T7986] usb 3-1: config 0 descriptor?? [ 2847.398628][ T7986] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 2847.431297][T14462] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(8) [ 2847.437851][T14462] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2847.484656][T14420] iowarrior 2-1:0.0: Error -90 while submitting URB [ 2847.498554][T14462] vhci_hcd vhci_hcd.0: Device attached [ 2847.512024][ T29] audit: type=1326 audit(1721190268.695:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14465 comm="syz.0.12008" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd6b4975a19 code=0x0 [ 2847.700821][ T1497] usb 2-1: USB disconnect, device number 46 [ 2847.716704][ T1497] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 2848.414097][T14463] vhci_hcd: connection closed [ 2848.414487][ T35] vhci_hcd: stop threads [ 2848.434206][ T35] vhci_hcd: release socket [ 2848.455269][ T35] vhci_hcd: disconnect device [ 2848.593556][ T5150] usb 3-1: USB disconnect, device number 52 [ 2848.617438][ T5150] iowarrior 3-1:0.0: I/O-Warror #1 now disconnected [ 2848.758019][ T7990] vhci_hcd: vhci_device speed not set [ 2849.890745][T14507] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2849.907844][ T7986] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 2849.928135][T14507] input: syz0 as /devices/virtual/input/input124 [ 2850.020049][T14508] batadv_slave_0: mtu less than device minimum [ 2850.137959][ T7986] usb 1-1: Using ep0 maxpacket: 32 [ 2850.154977][ T7986] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 2850.210607][ T7986] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2850.273364][ T7986] usb 1-1: config 0 descriptor?? [ 2850.368376][ T7986] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2851.109118][T28290] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 2851.179292][ T35] usb 1-1: Failed to submit usb control message: -71 [ 2851.189193][ T7986] usb 1-1: USB disconnect, device number 56 [ 2851.202919][ T35] usb 1-1: unable to send the bmi data to the device: -71 [ 2851.221098][ T35] usb 1-1: unable to get target info from device [ 2851.231077][ T35] usb 1-1: could not get target info (-71) [ 2851.262955][ T35] usb 1-1: could not probe fw (-71) [ 2851.347825][T28290] usb 2-1: Using ep0 maxpacket: 32 [ 2851.365769][T28290] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 2851.405587][T28290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2851.446839][T28290] usb 2-1: config 0 descriptor?? [ 2851.469321][T28290] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2851.788111][ T1497] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2852.008175][ T1497] usb 4-1: Using ep0 maxpacket: 8 [ 2852.033690][ T35] usb 2-1: Failed to submit usb control message: -71 [ 2852.038773][ T1497] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2852.043264][ T7986] usb 2-1: USB disconnect, device number 47 [ 2852.081016][ T35] usb 2-1: unable to send the bmi data to the device: -71 [ 2852.095353][ T35] usb 2-1: unable to get target info from device [ 2852.098332][ T1497] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2852.103870][ T35] usb 2-1: could not get target info (-71) [ 2852.127815][ T35] usb 2-1: could not probe fw (-71) [ 2852.178001][ T1497] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2852.219814][ T1497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2852.274181][ T1497] usb 4-1: config 0 descriptor?? [ 2852.398166][T28290] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2852.494814][ T1497] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2852.513225][T14544] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2852.596005][T14544] input: syz0 as /devices/virtual/input/input125 [ 2852.633111][T28290] usb 5-1: Using ep0 maxpacket: 32 [ 2852.662218][T28290] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2852.717719][T28290] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2852.758924][T28290] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2852.791436][T28290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2852.846797][T28290] hub 5-1:4.0: USB hub found [ 2853.046896][T28290] hub 5-1:4.0: 2 ports detected [ 2853.105970][T28290] usb 5-1: selecting invalid altsetting 1 [ 2853.122525][T28290] hub 5-1:4.0: Using single TT (err -22) [ 2853.249962][T28290] hub 5-1:4.0: hub_hub_status failed (err = -71) [ 2853.275338][T28290] hub 5-1:4.0: config failed, can't get hub status (err -71) [ 2853.340248][T28290] usb 5-1: USB disconnect, device number 3 [ 2853.839860][T14564] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2853.849075][T14532] iowarrior 4-1:0.0: Error -90 while submitting URB [ 2853.883769][T14564] input: syz0 as /devices/virtual/input/input126 [ 2853.900213][ T7986] usb 4-1: USB disconnect, device number 49 [ 2853.992511][ T7986] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 2854.007847][ T5150] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 2854.209839][ T5150] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2854.287618][ T5150] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2855.057814][ T5150] usb 1-1: config 1 has no interface number 0 [ 2855.063974][ T5150] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2855.141599][ T5150] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2855.197897][ T5150] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2855.220837][ T5150] usb 1-1: Product: syz [ 2855.225014][ T5150] usb 1-1: Manufacturer: syz [ 2855.250497][ T5150] usb 1-1: SerialNumber: syz [ 2855.336030][ T5150] usb 1-1: selecting invalid altsetting 1 [ 2855.844536][T28290] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2856.005431][ T5150] cdc_ncm 1-1:1.1: bind() failure [ 2856.031565][ T5150] usb 1-1: USB disconnect, device number 57 [ 2856.177870][T28290] usb 5-1: Using ep0 maxpacket: 32 [ 2856.257151][T28290] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 2856.282638][T28290] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2856.975781][T28290] usb 5-1: config 0 descriptor?? [ 2857.139654][T28290] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2857.186852][T14597] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12043'. [ 2857.793401][T14610] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 2857.799991][T14610] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2857.818568][T14611] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2857.842625][T14616] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2857.867261][T14610] vhci_hcd vhci_hcd.0: Device attached [ 2857.890767][T14611] input: syz0 as /devices/virtual/input/input127 [ 2857.901178][T14610] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2858.008505][T14619] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 2858.016004][T14619] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1' [ 2858.198777][T29028] usb 5-1: Failed to submit usb control message: -110 [ 2860.562977][T28290] vhci_hcd: vhci_device speed not set [ 2860.572113][T14609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2860.588176][T29028] usb 5-1: unable to send the bmi data to the device: -110 [ 2860.629084][T29028] usb 5-1: unable to get target info from device [ 2860.677779][T29028] usb 5-1: could not get target info (-110) [ 2860.683958][T28290] usb 15-1: new full-speed USB device number 16 using vhci_hcd [ 2860.696353][T29028] usb 5-1: could not probe fw (-110) [ 2860.894409][ T7990] usb 5-1: USB disconnect, device number 4 [ 2861.188004][ T5150] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2861.389345][ T5150] usb 3-1: Using ep0 maxpacket: 8 [ 2861.413190][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2861.458585][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2861.510184][T14613] vhci_hcd: connection reset by peer [ 2861.519836][ T5150] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2861.533347][ T35] vhci_hcd: stop threads [ 2861.551062][ T35] vhci_hcd: release socket [ 2861.563435][ T35] vhci_hcd: disconnect device [ 2861.632053][ T5150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2861.733119][ T5150] usb 3-1: config 0 descriptor?? [ 2861.985983][ T5150] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2862.488731][T14642] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12056'. [ 2863.181740][T14652] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 2863.189436][T14652] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1' [ 2863.859818][T14644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2864.715380][ T5099] usb 3-1: USB disconnect, device number 53 [ 2864.778689][ T5099] iowarrior 3-1:0.0: I/O-Warror #0 now disconnected [ 2864.808160][ T1497] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2865.017871][ T1497] usb 4-1: Using ep0 maxpacket: 32 [ 2865.024493][ T1497] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2865.065786][ T1497] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2865.165039][ T1497] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2865.214125][ T1497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2865.241592][ T1497] hub 4-1:4.0: USB hub found [ 2865.449212][ T1497] hub 4-1:4.0: 2 ports detected [ 2865.454528][ T1497] usb 4-1: selecting invalid altsetting 1 [ 2865.494399][ T1497] hub 4-1:4.0: Using single TT (err -22) [ 2865.703236][ T1497] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 2865.746646][ T1497] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 2865.840619][ T1497] usb 4-1: USB disconnect, device number 50 [ 2865.878071][T28290] vhci_hcd: vhci_device speed not set [ 2866.240981][T14677] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2866.247512][T14677] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2866.317893][T14677] vhci_hcd vhci_hcd.0: Device attached [ 2866.318666][T14681] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2866.380047][T14677] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2866.518012][ T1497] vhci_hcd: vhci_device speed not set [ 2866.617969][ T1497] usb 13-1: new full-speed USB device number 14 using vhci_hcd [ 2866.637795][ T5099] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2866.862884][ T5099] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2866.894015][ T5099] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 2866.927188][ T5099] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2866.967229][ T5099] usb 5-1: config 0 descriptor?? [ 2867.088464][T14691] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 2867.096120][T14691] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1' [ 2867.794105][T14687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2868.666840][T14696] serio: Serial port ttynull [ 2868.781641][T14679] vhci_hcd: connection reset by peer [ 2868.804047][ T2450] vhci_hcd: stop threads [ 2868.836707][ T2450] vhci_hcd: release socket [ 2868.847219][ T2450] vhci_hcd: disconnect device [ 2869.088188][T14704] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12073'. [ 2869.102354][T14704] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12073'. [ 2869.158451][ T5150] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 2869.367759][ T5150] usb 1-1: Using ep0 maxpacket: 8 [ 2869.387155][ T5150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2869.437729][ T5150] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2869.507462][ T5150] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2869.558744][ T5150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2869.584023][ T5150] usb 1-1: config 0 descriptor?? [ 2869.813447][ T5150] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2870.298443][ T5150] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2870.521127][ T5150] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2870.539725][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2870.562868][ T5150] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2870.588576][ T5150] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2870.643056][ T5150] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2870.696227][ T5150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2870.753154][ T5150] usb 3-1: config 0 descriptor?? [ 2870.796281][T14719] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 2870.963946][ T5099] usb 5-1: USB disconnect, device number 5 [ 2871.018333][T14719] usb usb8: usbfs: process 14719 (syz.2.12077) did not claim interface 0 before use [ 2871.273716][T14731] iowarrior 1-1:0.0: Error -90 while submitting URB [ 2871.297420][T28290] usb 1-1: USB disconnect, device number 58 [ 2871.345057][T28290] iowarrior 1-1:0.0: I/O-Warror #0 now disconnected [ 2871.971017][ T1497] vhci_hcd: vhci_device speed not set [ 2872.996558][ T5150] usbhid 3-1:0.0: can't add hid device: -71 [ 2873.003812][ T5150] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2873.055558][ T5150] usb 3-1: USB disconnect, device number 54 [ 2873.105609][T14750] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 2873.112183][T14750] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2873.126590][T14752] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12086'. [ 2873.158823][T14750] vhci_hcd vhci_hcd.0: Device attached [ 2873.158924][T14757] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2873.281583][T14761] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 2873.289390][T14761] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1' [ 2873.950578][T14745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2874.178086][ T1497] vhci_hcd: vhci_device speed not set [ 2874.536224][T14757] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2874.657872][ T1497] usb 13-1: device descriptor read/64, error -110 [ 2875.598662][ T1497] vhci_hcd: vhci_device speed not set [ 2875.675140][ T1497] usb 13-1: new full-speed USB device number 15 using vhci_hcd [ 2876.008033][ T5099] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2876.051412][T14780] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 2876.059183][T14780] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1' [ 2876.357851][T28290] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 2876.803575][T14775] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2878.068054][T14753] vhci_hcd: connection reset by peer [ 2878.417816][ T5099] usb 4-1: Using ep0 maxpacket: 32 [ 2878.579201][T20548] vhci_hcd: stop threads [ 2878.583508][T20548] vhci_hcd: release socket [ 2878.589364][ T5099] usb 4-1: device descriptor read/all, error -71 [ 2878.622642][T20548] vhci_hcd: disconnect device [ 2878.636456][T28290] usb 2-1: device descriptor read/all, error -71 [ 2878.923070][T14798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12095'. [ 2879.028348][T28290] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 2879.271105][T14804] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12100'. [ 2879.929388][ T5099] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2879.967773][T28290] usb 2-1: Using ep0 maxpacket: 8 [ 2880.021533][ T8544] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 2880.041702][T28290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2880.085729][T28290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2880.128284][T28290] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2880.151241][ T5099] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2880.168611][T28290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2880.179451][ T5099] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 2880.198544][ T5099] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2880.210588][T28290] usb 2-1: config 0 descriptor?? [ 2880.223288][ T5099] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 2880.237916][ T8544] usb 3-1: Using ep0 maxpacket: 32 [ 2880.253010][ T8544] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 2880.265810][ T5099] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2880.285450][ T8544] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2880.296163][ T5099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2880.314579][ T8544] usb 3-1: config 0 descriptor?? [ 2880.338338][ T5099] usb 4-1: config 0 descriptor?? [ 2880.370299][T14794] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 2880.380963][ T8544] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2880.446926][T28290] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2880.626841][T14794] usb usb8: usbfs: process 14794 (syz.3.12097) did not claim interface 0 before use [ 2880.651627][T14793] iowarrior 2-1:0.0: Error -90 while submitting URB [ 2880.720476][ T5150] usb 2-1: USB disconnect, device number 49 [ 2880.766161][ T5150] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 2880.841894][ T1497] vhci_hcd: vhci_device speed not set [ 2881.018878][ T7986] usb 3-1: USB disconnect, device number 55 [ 2881.018909][ T4140] usb 3-1: Failed to submit usb control message: -71 [ 2881.084997][ T4140] usb 3-1: unable to send the bmi data to the device: -71 [ 2881.117787][ T4140] usb 3-1: unable to get target info from device [ 2881.145384][ T4140] usb 3-1: could not get target info (-71) [ 2881.359282][ T4140] usb 3-1: could not probe fw (-71) [ 2882.112751][ T5099] usbhid 4-1:0.0: can't add hid device: -71 [ 2882.209048][ T5099] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2882.285363][ T5099] usb 4-1: USB disconnect, device number 52 [ 2882.304328][T14837] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 2882.310891][T14837] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2882.332621][T14837] vhci_hcd vhci_hcd.0: Device attached [ 2882.350994][T14841] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2882.373125][T14837] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2882.507871][T28290] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 2882.528449][ T1497] vhci_hcd: vhci_device speed not set [ 2882.617828][ T1497] usb 9-1: new full-speed USB device number 27 using vhci_hcd [ 2882.698568][T28290] usb 2-1: Using ep0 maxpacket: 32 [ 2882.742605][T28290] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2882.784230][T28290] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2882.806567][T28290] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2882.839572][T28290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2882.892248][T28290] hub 2-1:4.0: USB hub found [ 2883.085366][ T29] audit: type=1326 audit(1721190304.285:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=14846 comm="syz.4.12110" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb1db375a19 code=0x0 [ 2883.137887][T28290] hub 2-1:4.0: 2 ports detected [ 2883.151398][T28290] usb 2-1: selecting invalid altsetting 1 [ 2883.177992][T28290] hub 2-1:4.0: Using single TT (err -22) [ 2883.191109][T14838] vhci_hcd: connection reset by peer [ 2883.220138][ T2450] vhci_hcd: stop threads [ 2883.249344][ T2450] vhci_hcd: release socket [ 2883.264468][ T2450] vhci_hcd: disconnect device [ 2883.322862][T28290] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 2883.345371][T28290] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 2883.428734][T28290] usb 2-1: USB disconnect, device number 50 [ 2884.189838][T14862] batadv_slave_0: mtu less than device minimum [ 2885.747930][T28290] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2885.755647][ T5099] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 2885.807257][T14884] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 2885.815003][T14884] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1' [ 2886.800891][T14878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2887.608045][ T5099] usb 2-1: Using ep0 maxpacket: 8 [ 2887.623617][ T5099] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2887.666023][ T5099] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2887.702500][ T5099] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2887.847786][T28290] usb 5-1: device not accepting address 6, error -71 [ 2887.855174][ T1497] vhci_hcd: vhci_device speed not set [ 2887.864868][ T5099] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2888.565808][ T5099] usb 2-1: config 0 descriptor?? [ 2888.656307][ T5150] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2888.735365][ T5099] usb 2-1: can't set config #0, error -71 [ 2888.764292][ T5099] usb 2-1: USB disconnect, device number 51 [ 2888.826594][T14901] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 2888.833134][T14901] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2888.870121][ T5150] usb 1-1: Using ep0 maxpacket: 32 [ 2888.885033][T14904] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2888.886153][T14901] vhci_hcd vhci_hcd.0: Device attached [ 2889.087134][ T5150] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 2889.107235][T14905] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2889.138353][ T5150] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2889.258541][ T5150] usb 1-1: config 0 descriptor?? [ 2889.751891][T14901] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2889.789638][ T5150] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2889.846305][ T7986] vhci_hcd: vhci_device speed not set [ 2889.968204][ T7986] usb 11-1: new full-speed USB device number 28 using vhci_hcd [ 2890.271615][T14912] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(8) [ 2890.278197][T14912] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 2890.286470][T14912] vhci_hcd vhci_hcd.0: Device attached [ 2890.492480][ T5150] vhci_hcd: vhci_device speed not set [ 2890.608464][ T5150] usb 13-2: new full-speed USB device number 16 using vhci_hcd [ 2890.675806][T20548] usb 1-1: Failed to submit usb control message: -71 [ 2890.683178][ T5099] usb 1-1: USB disconnect, device number 59 [ 2890.756247][T20548] usb 1-1: unable to send the bmi data to the device: -71 [ 2890.788547][T20548] usb 1-1: unable to get target info from device [ 2890.815140][T20548] usb 1-1: could not get target info (-71) [ 2890.832083][T20548] usb 1-1: could not probe fw (-71) [ 2891.809946][T14902] vhci_hcd: connection reset by peer [ 2892.668269][T20548] vhci_hcd: stop threads [ 2892.672591][T20548] vhci_hcd: release socket [ 2892.705917][T20548] vhci_hcd: disconnect device [ 2893.172424][ T5099] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2893.684115][ T5099] usb 4-1: Using ep0 maxpacket: 32 [ 2895.195531][ T7986] vhci_hcd: vhci_device speed not set [ 2897.859719][ T5099] usb 4-1: device descriptor read/all, error -71 [ 2897.976431][T14922] vhci_hcd: connection reset by peer [ 2897.987987][ T4140] vhci_hcd: stop threads [ 2897.992568][ T4140] vhci_hcd: release socket [ 2898.078323][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 2898.088961][ T4140] vhci_hcd: disconnect device [ 2898.177860][ T5150] vhci_hcd: vhci_device speed not set [ 2898.402602][T27400] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2898.414490][T27400] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2898.423626][T27400] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2898.431940][T27400] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2898.444675][T27400] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 2898.457246][T27400] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2898.578094][ T5099] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2899.155897][T14952] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 2899.163736][T14952] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1' [ 2899.180866][T14952] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2900.003721][ T5099] usb 4-1: Using ep0 maxpacket: 8 [ 2900.016560][ T5099] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2900.031162][ T5099] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2900.044360][ T5099] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2900.072476][ T5099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2900.105698][ T5099] usb 4-1: config 0 descriptor?? [ 2900.277963][ T8544] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 2900.330789][ T5099] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2900.364487][ T5099] usb 4-1: USB disconnect, device number 54 [ 2900.402092][ T5099] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 2900.469352][ T8544] usb 1-1: Using ep0 maxpacket: 32 [ 2900.494294][ T8544] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 2900.517895][ T4482] Bluetooth: hci6: command tx timeout [ 2900.526054][ T8544] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2900.580310][ T8544] usb 1-1: config 0 descriptor?? [ 2900.615308][ T8544] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2900.651431][ T4140] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2901.168363][ T8544] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 2901.638471][T20548] usb 1-1: Failed to submit usb control message: -110 [ 2901.645831][T20548] usb 1-1: unable to send the bmi data to the device: -110 [ 2901.672262][ T4140] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2901.678307][T20548] usb 1-1: unable to get target info from device [ 2901.708598][T20548] usb 1-1: could not get target info (-110) [ 2901.732032][T20548] usb 1-1: could not probe fw (-110) [ 2901.732054][ T8544] usb 2-1: Using ep0 maxpacket: 32 [ 2901.757887][T14955] chnl_net:caif_netlink_parms(): no params data found [ 2901.772370][ T8544] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 2901.797995][ T8544] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2901.821131][ T8544] usb 2-1: config 0 descriptor?? [ 2901.875385][ T4140] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2901.916270][ T8544] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2902.093551][ T7990] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2902.141040][ T4140] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2902.231986][ T8544] usb 1-1: USB disconnect, device number 60 [ 2902.307786][ T7990] usb 4-1: Using ep0 maxpacket: 32 [ 2902.315216][ T7990] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 2902.338549][ T7990] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2902.355305][ T7990] usb 4-1: config 0 descriptor?? [ 2902.434854][ T7990] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2902.465178][ T7990] usb 2-1: USB disconnect, device number 52 [ 2902.471626][T20548] usb 2-1: Failed to submit usb control message: -71 [ 2902.552926][T20548] usb 2-1: unable to send the bmi data to the device: -71 [ 2902.597891][ T4482] Bluetooth: hci6: command tx timeout [ 2902.607587][T20548] usb 2-1: unable to get target info from device [ 2902.614975][T20548] usb 2-1: could not get target info (-71) [ 2902.630129][T14955] bridge0: port 1(bridge_slave_0) entered blocking state [ 2902.635255][T20548] usb 2-1: could not probe fw (-71) [ 2902.672292][T14955] bridge0: port 1(bridge_slave_0) entered disabled state [ 2902.690626][T14955] bridge_slave_0: entered allmulticast mode [ 2902.724599][ T1252] usb 4-1: Failed to submit usb control message: -71 [ 2902.735260][T14955] bridge_slave_0: entered promiscuous mode [ 2902.747443][ T8544] usb 4-1: USB disconnect, device number 55 [ 2902.762866][ T1252] usb 4-1: could not get target info (-71) [ 2902.773259][T14955] bridge0: port 2(bridge_slave_1) entered blocking state [ 2902.788896][T14955] bridge0: port 2(bridge_slave_1) entered disabled state [ 2902.791887][ T1252] usb 4-1: could not probe fw (-71) [ 2902.807121][T14955] bridge_slave_1: entered allmulticast mode [ 2902.848916][T14955] bridge_slave_1: entered promiscuous mode [ 2903.132164][T14955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2903.161520][T14955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2903.416625][T14955] team0: Port device team_slave_0 added [ 2903.453789][T14955] team0: Port device team_slave_1 added [ 2904.464486][T15004] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 2904.472082][T15004] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1' [ 2904.485103][T15004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2905.001942][ T4482] Bluetooth: hci6: command tx timeout [ 2905.144987][ T4140] bridge_slave_1: left allmulticast mode [ 2905.169101][ T4140] bridge_slave_1: left promiscuous mode [ 2905.213207][ T4140] bridge0: port 2(bridge_slave_1) entered disabled state [ 2905.232363][ T4140] bridge_slave_0: left allmulticast mode [ 2905.257778][ T4140] bridge_slave_0: left promiscuous mode [ 2905.277012][ T4140] bridge0: port 1(bridge_slave_0) entered disabled state [ 2905.516890][T27400] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2905.565406][T27400] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2905.575866][T27400] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2905.594784][T27400] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2905.603064][T27400] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2905.610936][T27400] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2911.353634][T27400] Bluetooth: hci6: command tx timeout [ 2911.377959][T15026] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 2911.385499][T15026] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1' [ 2911.411556][T27400] Bluetooth: hci2: command tx timeout [ 2912.407864][T28290] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2912.578171][ T7950] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2912.618654][ T7950] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2912.629723][ T7950] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2912.647863][T28290] usb 4-1: Using ep0 maxpacket: 8 [ 2912.659265][T28290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2912.672497][T28290] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2912.682478][ T7950] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2912.689767][T28290] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2912.699337][T28290] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2912.707419][ T7950] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 2912.714922][ T7950] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2912.739932][T28290] usb 4-1: config 0 descriptor?? [ 2912.989734][T28290] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2913.002775][T28290] usb 4-1: USB disconnect, device number 56 [ 2913.042800][T28290] iowarrior 4-1:0.0: I/O-Warror #0 now disconnected [ 2913.043442][ T4140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2913.091648][ T4140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2913.131633][ T4140] bond0 (unregistering): Released all slaves [ 2913.252861][T14955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2913.271212][T14955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2913.333857][T14955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2913.349893][T14955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2913.377316][T14955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2913.421374][T14955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2913.482568][ T7950] Bluetooth: hci2: command tx timeout [ 2913.580093][T15026] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2914.017820][T28290] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 2914.120783][T14955] hsr_slave_0: entered promiscuous mode [ 2914.168272][T14955] hsr_slave_1: entered promiscuous mode [ 2914.197843][T28290] usb 2-1: device descriptor read/64, error -71 [ 2914.235136][T15027] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2914.252201][T15027] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2914.273879][T15027] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2914.282976][T15027] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2914.295890][T15027] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 2914.308818][T15027] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2914.468058][T28290] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 2914.632977][T28290] usb 2-1: device descriptor read/64, error -71 [ 2914.758086][T15027] Bluetooth: hci4: command tx timeout [ 2914.778106][T28290] usb usb2-port1: attempt power cycle [ 2914.900223][ T4140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2914.927937][ T4140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2914.959248][ T4140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2914.978159][ T4140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2915.021346][ T4140] veth1_macvtap: left promiscuous mode [ 2915.028244][ T4140] veth0_macvtap: left promiscuous mode [ 2915.033769][ T4140] veth1_vlan: left promiscuous mode [ 2915.039637][ T4140] veth0_vlan: left promiscuous mode [ 2915.197805][T28290] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 2915.238369][T28290] usb 2-1: device descriptor read/8, error -71 [ 2915.557954][T15027] Bluetooth: hci2: command tx timeout [ 2915.563550][T28290] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 2915.599273][T28290] usb 2-1: device descriptor read/8, error -71 [ 2915.718622][T28290] usb usb2-port1: unable to enumerate USB device [ 2916.368077][T15027] Bluetooth: hci5: command tx timeout [ 2916.666740][ T4140] team0 (unregistering): Port device team_slave_1 removed [ 2916.770376][ T4140] team0 (unregistering): Port device team_slave_0 removed [ 2916.848100][T15027] Bluetooth: hci4: command tx timeout [ 2917.547964][ T7990] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 2917.638354][T15027] Bluetooth: hci2: command tx timeout [ 2917.730015][ T7990] usb 2-1: Using ep0 maxpacket: 8 [ 2917.746274][ T7990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2917.777964][ T7990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2917.801978][ T7990] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2917.815187][ T7990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2917.839310][ T7990] usb 2-1: config 0 descriptor?? [ 2918.069716][ T7990] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2918.437774][T15027] Bluetooth: hci5: command tx timeout [ 2918.486058][T15031] chnl_net:caif_netlink_parms(): no params data found [ 2918.890531][ T7990] usb 2-1: USB disconnect, device number 57 [ 2918.909602][ T7990] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 2918.918241][T15027] Bluetooth: hci4: command tx timeout [ 2919.024482][T15016] chnl_net:caif_netlink_parms(): no params data found [ 2919.446330][T15036] chnl_net:caif_netlink_parms(): no params data found [ 2919.524130][T15031] bridge0: port 1(bridge_slave_0) entered blocking state [ 2919.551858][T15031] bridge0: port 1(bridge_slave_0) entered disabled state [ 2919.583678][T15031] bridge_slave_0: entered allmulticast mode [ 2919.599333][T15031] bridge_slave_0: entered promiscuous mode [ 2919.619230][T15031] bridge0: port 2(bridge_slave_1) entered blocking state [ 2919.626381][T15031] bridge0: port 2(bridge_slave_1) entered disabled state [ 2919.677960][T15031] bridge_slave_1: entered allmulticast mode [ 2919.685370][T15031] bridge_slave_1: entered promiscuous mode [ 2919.998230][ T4140] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2920.196886][T15031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2920.275174][T15031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2920.395246][ T4140] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2920.499625][T15016] bridge0: port 1(bridge_slave_0) entered blocking state [ 2920.517847][T15027] Bluetooth: hci5: command tx timeout [ 2920.529066][T15016] bridge0: port 1(bridge_slave_0) entered disabled state [ 2920.536469][T15016] bridge_slave_0: entered allmulticast mode [ 2920.543873][T15016] bridge_slave_0: entered promiscuous mode [ 2920.783470][ T4140] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2920.904132][T15016] bridge0: port 2(bridge_slave_1) entered blocking state [ 2920.934853][T15016] bridge0: port 2(bridge_slave_1) entered disabled state [ 2920.956877][T15016] bridge_slave_1: entered allmulticast mode [ 2920.976844][T15016] bridge_slave_1: entered promiscuous mode [ 2920.999016][T15027] Bluetooth: hci4: command tx timeout [ 2921.040351][T15036] bridge0: port 1(bridge_slave_0) entered blocking state [ 2921.062624][T15036] bridge0: port 1(bridge_slave_0) entered disabled state [ 2921.079187][T15036] bridge_slave_0: entered allmulticast mode [ 2921.108063][T15036] bridge_slave_0: entered promiscuous mode [ 2921.179323][ T4140] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2921.287303][T15031] team0: Port device team_slave_0 added [ 2921.341408][T15031] team0: Port device team_slave_1 added [ 2921.351411][T15036] bridge0: port 2(bridge_slave_1) entered blocking state [ 2921.371451][T15036] bridge0: port 2(bridge_slave_1) entered disabled state [ 2921.393449][T15036] bridge_slave_1: entered allmulticast mode [ 2921.419092][T15036] bridge_slave_1: entered promiscuous mode [ 2921.460554][T14955] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2921.502100][T14955] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2921.540725][T14955] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2922.539358][T15016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2922.578940][T14955] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2922.598290][T15027] Bluetooth: hci5: command tx timeout [ 2922.651740][T15031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2922.725381][T15081] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2922.732827][T15031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2922.767973][T15081] input: syz0 as /devices/virtual/input/input128 [ 2922.857152][T15031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2922.903207][T15031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2922.926962][T15031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2922.973743][T15031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2922.995754][T15036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2923.043213][T15036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2923.095032][T15016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2923.318076][ T5150] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 2923.329981][T15036] team0: Port device team_slave_0 added [ 2923.378410][T15036] team0: Port device team_slave_1 added [ 2923.410118][T15016] team0: Port device team_slave_0 added [ 2923.430877][T15031] hsr_slave_0: entered promiscuous mode [ 2923.451975][T15031] hsr_slave_1: entered promiscuous mode [ 2923.468112][ T5150] usb 2-1: device descriptor read/64, error -71 [ 2923.474603][T15031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2923.497969][T15031] Cannot create hsr debugfs directory [ 2923.604114][T15016] team0: Port device team_slave_1 added [ 2923.679699][T15036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2923.688729][T15036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2923.715661][T15036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2923.748770][ T5150] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 2923.882730][ T4140] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2923.937991][ T5150] usb 2-1: device descriptor read/64, error -71 [ 2923.967614][T15016] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2923.983394][T15016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2924.067987][T15016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2924.079252][ T5150] usb usb2-port1: attempt power cycle [ 2924.093235][T15036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2924.106030][T15036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2924.158361][T15036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2924.216783][ T4140] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2924.315389][T15016] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2924.382913][T15016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2924.424322][T15016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2924.490032][ T4140] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2924.558180][ T5150] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 2924.638498][ T5150] usb 2-1: device descriptor read/8, error -71 [ 2924.687619][ T4140] team0: Port device netdevsim0 removed [ 2924.694801][ T4140] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2924.864800][T15036] hsr_slave_0: entered promiscuous mode [ 2924.881472][T15036] hsr_slave_1: entered promiscuous mode [ 2924.898076][T15036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2924.922979][T15036] Cannot create hsr debugfs directory [ 2924.947055][T15016] hsr_slave_0: entered promiscuous mode [ 2924.958135][ T5150] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 2924.974998][T15016] hsr_slave_1: entered promiscuous mode [ 2924.989692][T15016] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2924.989794][ T5150] usb 2-1: device descriptor read/8, error -71 [ 2925.009850][T15016] Cannot create hsr debugfs directory [ 2925.168395][ T5150] usb usb2-port1: unable to enumerate USB device [ 2925.722105][ T4140] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2926.029547][ T4140] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2926.352937][ T4140] netdevsim netdevsim0 netdevsim1 (unregistering): left allmulticast mode [ 2926.408572][ T4140] netdevsim netdevsim0 netdevsim1 (unregistering): left promiscuous mode [ 2926.419468][ T4140] bridge0: port 3(netdevsim1) entered disabled state [ 2926.459323][ T4140] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2926.573287][T14955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2926.662753][ T4140] team0: Port device netdevsim0 removed [ 2926.690053][ T4140] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2926.833745][T14955] 8021q: adding VLAN 0 to HW filter on device team0 [ 2926.914611][ T7990] bridge0: port 1(bridge_slave_0) entered blocking state [ 2926.921815][ T7990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2927.032603][T28290] bridge0: port 2(bridge_slave_1) entered blocking state [ 2927.039803][T28290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2927.587933][T15031] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 2927.660866][T15031] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 2927.856504][ T4140] bridge_slave_1: left allmulticast mode [ 2927.950459][ T4140] bridge_slave_1: left promiscuous mode [ 2927.956278][ T4140] bridge0: port 2(bridge_slave_1) entered disabled state [ 2928.009596][ T4140] bridge_slave_0: left allmulticast mode [ 2928.015306][ T4140] bridge_slave_0: left promiscuous mode [ 2928.038612][ T4140] bridge0: port 1(bridge_slave_0) entered disabled state [ 2928.075218][ T4140] bridge_slave_1: left allmulticast mode [ 2928.089915][ T4140] bridge_slave_1: left promiscuous mode [ 2928.098617][ T4140] bridge0: port 2(bridge_slave_1) entered disabled state [ 2928.123192][ T4140] bridge_slave_0: left allmulticast mode [ 2928.139239][ T4140] bridge_slave_0: left promiscuous mode [ 2928.145006][ T4140] bridge0: port 1(bridge_slave_0) entered disabled state [ 2928.209804][ T4140] bridge_slave_1: left allmulticast mode [ 2928.215468][ T4140] bridge_slave_1: left promiscuous mode [ 2928.242590][ T4140] bridge0: port 2(bridge_slave_1) entered disabled state [ 2928.287497][ T4140] bridge_slave_0: left allmulticast mode [ 2928.294814][ T4140] bridge_slave_0: left promiscuous mode [ 2928.315031][ T4140] bridge0: port 1(bridge_slave_0) entered disabled state [ 2930.467862][T15090] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 2930.647784][T15090] usb 2-1: Using ep0 maxpacket: 32 [ 2930.663583][T15090] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 2930.687740][T15090] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2930.726994][T15090] usb 2-1: config 0 descriptor?? [ 2930.778500][T15090] ath10k_warn: 2 callbacks suppressed [ 2930.778527][T15090] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2931.014415][T15090] usb 2-1: USB disconnect, device number 62 [ 2931.020517][T20548] usb 2-1: Failed to submit usb control message: -71 [ 2931.037784][T20548] usb 2-1: unable to send the bmi data to the device: -71 [ 2931.067988][T20548] usb 2-1: unable to get target info from device [ 2931.074377][T20548] usb 2-1: could not get target info (-71) [ 2931.097870][T20548] usb 2-1: could not probe fw (-71) [ 2931.607489][ T4140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2931.638383][ T4140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2931.718770][ T4140] bond0 (unregistering): Released all slaves [ 2931.850190][ T29] audit: type=1326 audit(1721190353.065:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15108 comm="syz.1.12169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6def975a19 code=0x0 [ 2932.129070][ T4140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2932.178173][ T4140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2932.264635][ T4140] bond0 (unregistering): Released all slaves [ 2932.573200][ T4140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2932.614778][ T4140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2932.638104][ T4140] bond0 (unregistering): Released all slaves [ 2932.804270][T15031] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 2932.908210][T15031] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 2932.941054][ T4140] tipc: Left network mode [ 2933.047837][ T5150] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 2933.075807][ T4140] tipc: Left network mode [ 2933.218348][ T5150] usb 2-1: device descriptor read/64, error -71 [ 2933.232677][T14955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2933.425014][T14955] veth0_vlan: entered promiscuous mode [ 2933.518809][ T5150] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 2933.606419][T14955] veth1_vlan: entered promiscuous mode [ 2933.682219][T15036] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2933.699413][ T5150] usb 2-1: device descriptor read/64, error -71 [ 2933.789921][T15036] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2933.868490][ T5150] usb usb2-port1: attempt power cycle [ 2933.948743][T15036] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2934.050567][T15036] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2934.181576][T15031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2934.212537][T14955] veth0_macvtap: entered promiscuous mode [ 2934.287771][ T5150] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 2934.366053][T14955] veth1_macvtap: entered promiscuous mode [ 2934.392973][ T5150] usb 2-1: device descriptor read/8, error -71 [ 2934.503451][T15031] 8021q: adding VLAN 0 to HW filter on device team0 [ 2934.634624][T14955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2934.646624][T14955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2934.658212][T14955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2934.669062][T14955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2934.687776][T14955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2934.698944][ T5150] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 2934.706920][T14955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2934.717595][T14955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2934.729053][T14955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2934.739565][T14955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2934.750518][ T5150] usb 2-1: device descriptor read/8, error -71 [ 2934.757875][T14955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2934.770785][T14955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2934.805517][T15084] bridge0: port 1(bridge_slave_0) entered blocking state [ 2934.812668][T15084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2934.824265][T15084] bridge0: port 2(bridge_slave_1) entered blocking state [ 2934.831415][T15084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2934.890804][ T5150] usb usb2-port1: unable to enumerate USB device [ 2934.903909][T15031] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 2934.924714][T15031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2935.010656][T14955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2935.047767][T14955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2935.066871][T14955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2935.077426][T14955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2935.098285][T14955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2935.114214][T14955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2935.133444][T14955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2935.168715][T14955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2935.187722][T14955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2935.199333][T14955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2935.212618][T14955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2935.255409][T15016] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2935.280479][T14955] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2935.297217][T14955] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2935.307797][T14955] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2935.316955][T14955] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2935.378225][T15016] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2935.417286][T15016] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2935.501666][T15016] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2935.823369][T15036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2936.280023][T15031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2936.339695][ T4142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2936.347562][ T4142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2936.356031][T15036] 8021q: adding VLAN 0 to HW filter on device team0 [ 2936.617723][ T7990] bridge0: port 1(bridge_slave_0) entered blocking state [ 2936.624927][ T7990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2936.642265][ T7990] bridge0: port 2(bridge_slave_1) entered blocking state [ 2936.649485][ T7990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2936.700935][T20548] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2936.768544][T20548] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2936.979476][T15016] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2937.086915][T15016] 8021q: adding VLAN 0 to HW filter on device team0 [ 2937.231239][ T8206] bridge0: port 1(bridge_slave_0) entered blocking state [ 2937.238461][ T8206] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2937.249114][T15119] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 2937.257196][T15136] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12135'. [ 2937.365957][T15084] bridge0: port 2(bridge_slave_1) entered blocking state [ 2937.373154][T15084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2937.434952][T15119] usb 2-1: Using ep0 maxpacket: 8 [ 2937.473236][T15119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2937.497372][T15119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 2937.500760][T15140] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2937.522047][T15119] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2937.551055][T15119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2937.671519][T15119] usb 2-1: config 0 descriptor?? [ 2937.696576][T15031] veth0_vlan: entered promiscuous mode [ 2937.725292][T15027] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 2937.732177][T15027] Bluetooth: Wrong link type (-22) [ 2937.737404][T15027] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 2937.741493][T15138] input: syz0 as /devices/virtual/input/input129 [ 2937.757823][T15027] Bluetooth: Wrong link type (-22) [ 2937.763196][T15027] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 2937.771208][T15027] Bluetooth: Wrong link type (-22) [ 2937.776445][T15027] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 2937.783277][T15027] Bluetooth: Wrong link type (-22) [ 2937.936669][T15119] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2937.998189][T15119] usb 2-1: USB disconnect, device number 67 [ 2938.032668][T15031] veth1_vlan: entered promiscuous mode [ 2938.040577][T15119] iowarrior 2-1:0.0: I/O-Warror #0 now disconnected [ 2938.302862][T15146] batadv_slave_0: mtu less than device minimum [ 2938.340698][T15036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2938.685383][T15031] veth0_macvtap: entered promiscuous mode [ 2938.854238][T15031] veth1_macvtap: entered promiscuous mode [ 2939.124124][ T4140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2939.145688][ T4140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2939.182144][ T4140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2939.201174][ T4140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2939.224747][ T4140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2939.240030][ T4140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2939.293532][ T4140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2939.334010][ T4140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2939.386021][ T4140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2939.402817][ T4140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2939.434525][ T4140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2939.454644][ T4140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2939.677440][ T4140] veth1_macvtap: left promiscuous mode [ 2939.693073][ T4140] veth0_macvtap: left promiscuous mode [ 2939.706513][ T4140] veth1_vlan: left promiscuous mode [ 2939.717497][ T4140] veth0_vlan: left promiscuous mode [ 2939.744533][ T4140] veth1_macvtap: left promiscuous mode [ 2939.753509][ T4140] veth0_macvtap: left promiscuous mode [ 2939.784048][ T4140] veth1_vlan: left promiscuous mode [ 2939.789588][ T4140] veth0_vlan: left promiscuous mode [ 2939.854641][ T4140] veth1_macvtap: left promiscuous mode [ 2939.880764][ T4140] veth0_macvtap: left promiscuous mode [ 2939.902817][ T4140] veth1_vlan: left promiscuous mode [ 2939.948079][ T4140] veth0_vlan: left promiscuous mode [ 2940.168988][T15085] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 2940.367794][T15085] usb 3-1: device descriptor read/64, error -71 [ 2940.691192][T15085] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 2940.728331][ T5150] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 2940.847980][T15085] usb 3-1: device descriptor read/64, error -71 [ 2940.984414][ T5150] usb 2-1: Using ep0 maxpacket: 32 [ 2940.991357][T15085] usb usb3-port1: attempt power cycle [ 2941.000431][ T5150] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2941.034657][ T5150] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2941.049161][ T5150] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 2941.058591][ T5150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2941.084366][ T5150] hub 2-1:4.0: USB hub found [ 2941.291071][ T5150] hub 2-1:4.0: 2 ports detected [ 2941.297522][ T5150] usb 2-1: selecting invalid altsetting 1 [ 2941.303990][ T5150] hub 2-1:4.0: Using single TT (err -22) [ 2941.455642][T15085] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 2941.497023][ T5150] hub 2-1:4.0: hub_hub_status failed (err = -71) [ 2941.518468][T15085] usb 3-1: device descriptor read/8, error -71 [ 2941.525283][ T5150] hub 2-1:4.0: config failed, can't get hub status (err -71) [ 2941.580347][ T5150] usb 2-1: USB disconnect, device number 68 [ 2941.787814][T15085] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 2941.858479][T15085] usb 3-1: device descriptor read/8, error -71 [ 2941.998606][T15085] usb usb3-port1: unable to enumerate USB device [ 2946.170892][ T4140] team0 (unregistering): Port device team_slave_1 removed [ 2946.316901][T15171] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12180'. [ 2946.498441][ T4140] team0 (unregistering): Port device team_slave_0 removed [ 2946.761957][T15179] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2946.803374][T15027] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 2946.810317][T15027] Bluetooth: Wrong link type (-22) [ 2946.815539][T15027] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 2946.826292][T15027] Bluetooth: Wrong link type (-22) [ 2946.831552][T15027] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 2946.838196][T15027] Bluetooth: Wrong link type (-22) [ 2946.843321][T15027] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 2946.851021][T15027] Bluetooth: Wrong link type (-22) [ 2946.856190][T15027] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 2946.862864][T15027] Bluetooth: Wrong link type (-22) [ 2946.868367][T15027] Bluetooth: hci6: link tx timeout [ 2946.873764][T15027] Bluetooth: hci6: killing stalled connection 11:aa:aa:aa:aa:aa [ 2947.099196][T15178] input: syz0 as /devices/virtual/input/input130 [ 2947.277005][T14834] udevd[14834]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 2948.677945][ T5150] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 2948.915219][ T5150] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2948.920871][T15027] Bluetooth: hci6: command 0x0406 tx timeout [ 2948.925685][ T5150] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 2949.012054][ T5150] usb 3-1: config 1 has no interface number 0 [ 2949.020701][ T5150] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2949.069800][ T5150] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2949.079440][ T5150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2949.087463][ T5150] usb 3-1: Product: syz [ 2949.093879][ T5150] usb 3-1: Manufacturer: syz [ 2949.098822][ T5150] usb 3-1: SerialNumber: syz [ 2949.116543][ T5150] usb 3-1: selecting invalid altsetting 1 [ 2949.477059][ T7950] Bluetooth: hci6: unexpected event 0x2f length: 763 > 260 [ 2949.638729][ T5150] cdc_ncm 3-1:1.1: bind() failure [ 2949.710097][ T5150] usb 3-1: USB disconnect, device number 60 [ 2950.424207][ T4140] team0 (unregistering): Port device team_slave_1 removed [ 2950.597863][ T4140] team0 (unregistering): Port device team_slave_0 removed [ 2951.368044][ T8206] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 2951.521197][ T8206] usb 3-1: device descriptor read/64, error -71 [ 2951.798721][ T8206] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 2951.947843][ T8206] usb 3-1: device descriptor read/64, error -71 [ 2952.068812][ T8206] usb usb3-port1: attempt power cycle [ 2952.507831][ T8206] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 2952.540647][ T8206] usb 3-1: device descriptor read/8, error -71 [ 2952.818775][ T8206] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 2952.879982][ T8206] usb 3-1: device descriptor read/8, error -71 [ 2952.998137][ T8206] usb usb3-port1: unable to enumerate USB device [ 2953.122500][ T4140] team0 (unregistering): Port device team_slave_1 removed [ 2953.201397][ T4140] team0 (unregistering): Port device team_slave_0 removed [ 2954.008010][T15016] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2954.147175][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2954.193159][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2954.207894][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2954.242168][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2954.287736][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2954.332240][T15201] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12189'. [ 2954.335607][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2954.373880][T15031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2954.431638][T15036] veth0_vlan: entered promiscuous mode [ 2954.453556][T15205] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2954.494417][T15036] veth1_vlan: entered promiscuous mode [ 2954.507504][T15205] input: syz0 as /devices/virtual/input/input131 [ 2954.530646][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2954.560965][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2954.581572][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2954.597053][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2954.618810][T15031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2954.646914][T15031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2954.670462][T15031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2954.781056][T15031] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2954.825631][T15031] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2954.854889][T15031] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2954.887732][T15031] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2954.932203][T15016] veth0_vlan: entered promiscuous mode [ 2955.009777][T15036] veth0_macvtap: entered promiscuous mode [ 2955.115888][T15036] veth1_macvtap: entered promiscuous mode [ 2955.166391][T15016] veth1_vlan: entered promiscuous mode [ 2955.215338][T15216] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12192'. [ 2955.265871][T15036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2955.288649][T15036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2955.306781][T15036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2955.327500][T15036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2955.331492][T15219] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12192'. [ 2955.346296][T15036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2955.357533][T15036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2955.367987][T15036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2955.403370][T15036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2955.428964][T15036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2955.580776][T15036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2955.626003][T15036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2955.657471][T15036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2955.688034][T15036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2955.708003][T15036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2955.733662][T15036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2955.764966][T15036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2955.788902][T15036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2955.848821][T15036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2955.888922][T15227] batadv_slave_0: mtu less than device minimum [ 2955.932783][T15036] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2955.974710][T15036] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2955.986111][T15036] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2956.002898][T15036] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2956.157191][T15016] veth0_macvtap: entered promiscuous mode [ 2956.189592][T29028] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2956.215106][T15016] veth1_macvtap: entered promiscuous mode [ 2956.233933][T29028] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2956.459889][T29028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2956.479966][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2956.499368][T15016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2956.520377][T29028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2956.522214][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2956.540578][T15016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2956.558221][T15016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2956.569191][T15016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2956.579905][T15016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2956.591305][T15016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2956.608706][T15016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2956.620408][T15016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2956.630972][T15016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2956.647864][T15016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2956.699652][T15016] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2956.720454][T15016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2956.738289][T15016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2956.791915][T15016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2956.808813][T15016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2956.819985][T15016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2956.830880][T15016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2956.841240][T15016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2956.852323][T15016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2956.863276][T15016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2956.874180][T15016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2956.898863][T15016] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2956.944209][T15016] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2956.958890][T15016] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2956.970649][T15016] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2956.979937][T15016] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2957.033010][ T2450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2957.072526][ T2450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2957.080061][T15085] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 2957.286925][T15085] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2957.347127][T15085] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2957.385548][T15085] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2957.429891][T15085] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2957.443945][T15240] hsr_slave_0: left promiscuous mode [ 2957.452567][T15085] usb 3-1: config 0 descriptor?? [ 2957.459612][T15240] hsr_slave_1: left promiscuous mode [ 2957.643581][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2957.665446][ T4140] IPVS: stop unused estimator thread 0... [ 2957.684752][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2957.752282][ T4140] IPVS: stop unused estimator thread 0... [ 2958.715692][T29028] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2958.772651][T29028] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2958.817786][T15085] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2958.950531][ T7950] Bluetooth: hci2: ISO packet for unknown connection handle 0 [ 2959.039861][T15085] usb 4-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 2959.053591][T15085] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2959.075501][T15085] usb 4-1: config 0 descriptor?? [ 2959.114461][T15085] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 2959.186300][ T7950] Bluetooth: hci2: hardware error 0xf0 [ 2959.481278][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 2959.487871][T15027] Bluetooth: hci4: unexpected event 0x06 length: 23 > 3 [ 2959.648410][T15085] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 2960.132201][T15085] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 2960.170026][T15027] Bluetooth: Frame is too long (len 12, expected len 4) [ 2960.234599][ T8206] usb 3-1: USB disconnect, device number 65 [ 2960.350948][T15027] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 2960.498832][T15267] netlink: 'syz.2.12203': attribute type 10 has an invalid length. [ 2960.790576][T28290] usb 4-1: USB disconnect, device number 57 [ 2960.928117][T15267] team0: Failed to send options change via netlink (err -105) [ 2960.935653][T15267] team0: Port device netdevsim0 added [ 2961.238071][ T7950] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2961.523459][ T7950] Bluetooth: hci6: ACL packet for unknown connection handle 201 [ 2961.728459][T15085] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 2962.918731][ T7950] Bluetooth: hci6: command 0x0406 tx timeout [ 2967.334957][T15311] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 2967.342629][T15311] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1' [ 2967.457971][T28290] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 2967.775877][T15299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2968.057936][ T7950] Bluetooth: hci5: unexpected event 0x06 length: 23 > 3 [ 2968.067258][ T7950] Bluetooth: Frame is too long (len 12, expected len 4) [ 2968.089676][T28290] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2968.110038][T28290] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2968.147946][T28290] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2968.174970][T28290] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2968.209399][T28290] usb 3-1: config 0 descriptor?? [ 2968.269446][T28290] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2970.017940][T15119] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2970.343418][T15334] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12219'. [ 2970.380768][T15119] usb 4-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4 [ 2970.812665][T15330] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2970.861949][T15119] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2970.986683][T15119] usb 4-1: config 0 descriptor?? [ 2971.060027][T15119] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626 [ 2971.115166][T15139] usb 3-1: USB disconnect, device number 66 [ 2971.172450][T15339] netlink: 'syz.1.12220': attribute type 10 has an invalid length. [ 2971.393055][T15341] netlink: 60 bytes leftover after parsing attributes in process `syz.4.12221'. [ 2971.818781][T15119] gspca_pac7302: reg_w() failed i: ff v: 01 error -110 [ 2971.933244][T15119] gspca_pac7302 4-1:0.0: probe with driver gspca_pac7302 failed with error -110 [ 2976.808131][T15090] usb 4-1: USB disconnect, device number 58 [ 2977.041539][T15362] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 2977.049188][T15362] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1' [ 2978.077287][T15365] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2978.121704][ T7950] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 2978.128520][ T7950] Bluetooth: Wrong link type (-22) [ 2978.134299][ T7950] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 2978.142390][ T7950] Bluetooth: Wrong link type (-22) [ 2978.147544][ T7950] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 2978.154155][ T7950] Bluetooth: Wrong link type (-22) [ 2978.160163][ T7950] Bluetooth: Unknown BR/EDR signaling command 0x0f [ 2978.168782][ T7950] Bluetooth: Wrong link type (-22) [ 2978.174090][ T7950] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 2978.180848][ T7950] Bluetooth: Wrong link type (-22) [ 2978.188248][ T7950] Bluetooth: hci5: link tx timeout [ 2978.193777][ T7950] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 2978.251547][T15371] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 2978.259339][T15371] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1' [ 2978.321942][ T7950] Bluetooth: hci6: unexpected event 0x06 length: 23 > 3 [ 2978.340259][ T7950] Bluetooth: Frame is too long (len 12, expected len 4) [ 2978.999989][T15367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2979.947300][T15364] input: syz0 as /devices/virtual/input/input132 [ 2980.310211][ T7950] Bluetooth: hci5: command 0x0406 tx timeout [ 2980.446600][T15389] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12233'. [ 2980.472434][ T7950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2980.482359][ T5150] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 2980.496458][ T7950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2980.515093][ T7950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2980.523262][ T7950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2980.532904][ T7950] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2980.540364][ T7950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2980.789100][ T5150] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2980.801686][ T5150] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2980.860824][ T5150] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2980.901425][ T5150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2980.949257][ T5150] usb 3-1: config 0 descriptor?? [ 2980.956617][ T5150] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2981.166979][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2981.422618][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2981.869870][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2982.032058][T15412] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12238'. [ 2982.447950][T15027] Bluetooth: hci6: command 0x0406 tx timeout [ 2982.470688][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2982.549575][T15387] chnl_net:caif_netlink_parms(): no params data found [ 2982.597839][T27400] Bluetooth: hci0: command tx timeout [ 2982.860396][T15420] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 2982.868278][T15420] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1' [ 2983.643834][T15417] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2984.244934][T28290] usb 3-1: USB disconnect, device number 67 [ 2984.393542][T15431] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2984.415060][T15431] input: syz0 as /devices/virtual/input/input133 [ 2984.600993][T15387] bridge0: port 1(bridge_slave_0) entered blocking state [ 2984.622862][T15387] bridge0: port 1(bridge_slave_0) entered disabled state [ 2984.643637][T15387] bridge_slave_0: entered allmulticast mode [ 2984.665684][T15387] bridge_slave_0: entered promiscuous mode [ 2984.679708][T27400] Bluetooth: hci0: command tx timeout [ 2984.709283][ T35] bridge_slave_1: left allmulticast mode [ 2984.747788][ T35] bridge_slave_1: left promiscuous mode [ 2984.754764][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 2984.858967][ T35] bridge_slave_0: left allmulticast mode [ 2984.871047][ T35] bridge_slave_0: left promiscuous mode [ 2984.889781][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 2986.369871][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2986.404305][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2986.440630][ T35] bond0 (unregistering): Released all slaves [ 2986.477267][T15387] bridge0: port 2(bridge_slave_1) entered blocking state [ 2986.510549][T15387] bridge0: port 2(bridge_slave_1) entered disabled state [ 2986.553232][T15387] bridge_slave_1: entered allmulticast mode [ 2986.596382][T15387] bridge_slave_1: entered promiscuous mode [ 2986.692359][T15443] netlink: 'syz.1.12247': attribute type 10 has an invalid length. [ 2986.728380][T15445] netlink: 'syz.1.12247': attribute type 10 has an invalid length. [ 2986.757814][T27400] Bluetooth: hci0: command tx timeout [ 2986.810642][T15445] team0: Port device netdevsim0 removed [ 2986.853496][T15450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12246'. [ 2986.949898][T15467] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 2986.967081][T15468] netlink: 64 bytes leftover after parsing attributes in process `syz.3.12251'. [ 2986.992847][T15467] input: syz0 as /devices/virtual/input/input134 [ 2987.096147][T10912] udevd[10912]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 2987.232024][T15387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2987.258141][ T7986] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 2987.437412][T15387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2987.447887][ T7986] usb 3-1: Using ep0 maxpacket: 32 [ 2987.466481][ T7986] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 2987.555528][T15479] ALSA: mixer_oss: invalid OSS volume '00000000000000000000' [ 2987.563213][T15479] ALSA: mixer_oss: invalid OSS volume 'OGAINWÁ”1' [ 2988.326139][T15474] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2988.847800][T27400] Bluetooth: hci0: command tx timeout [ 2988.898083][ T7986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2988.929196][ T7986] usb 3-1: config 0 descriptor?? [ 2988.966310][ T7986] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2988.976054][T15085] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2989.504135][T15387] team0: Port device team_slave_0 added [ 2989.533523][ T8206] usb 3-1: USB disconnect, device number 68 [ 2989.561104][ T4140] usb 3-1: Failed to submit usb control message: -71 [ 2989.569299][ T35] hsr_slave_0: left promiscuous mode [ 2989.585556][ T4140] usb 3-1: unable to send the bmi data to the device: -71 [ 2989.599216][ T35] hsr_slave_1: left promiscuous mode [ 2989.619047][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2989.626459][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2989.643920][ T4140] usb 3-1: unable to get target info from device [ 2989.667892][ T4140] usb 3-1: could not get target info (-71) [ 2989.675299][T15085] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2989.692237][ T4140] usb 3-1: could not probe fw (-71) [ 2989.707134][T15085] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2989.766156][T15085] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2989.787267][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2989.816275][T15085] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2989.851826][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2989.893263][T15085] usb 5-1: config 0 descriptor?? [ 2989.948472][T15085] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2989.983652][ T35] veth1_macvtap: left promiscuous mode [ 2990.021345][ T35] veth0_macvtap: left promiscuous mode [ 2990.133924][ T35] veth1_vlan: left promiscuous mode [ 2990.180522][ T35] veth0_vlan: left promiscuous mode [ 2990.322704][ T8206] usb 5-1: USB disconnect, device number 8 [ 2990.689796][T15506] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2990.853646][T15509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2990.911978][T15509] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12265'. [ 2991.008408][T15512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2991.107034][T15512] netlink: 160 bytes leftover after parsing attributes in process `syz.1.12265'. [ 2991.151481][T15512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2991.175922][T15514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2991.224180][T15514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2991.289158][T15514] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12266'. [ 2991.329878][T15515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2991.430325][T15515] netlink: 160 bytes leftover after parsing attributes in process `syz.3.12266'. [ 2991.456257][T15515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2991.825511][ T35] team0 (unregistering): Port device team_slave_1 removed [ 2992.085861][ T35] team0 (unregistering): Port device team_slave_0 removed [ 2993.477473][T15387] team0: Port device team_slave_1 added [ 2993.503735][T15499] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12263'. [ 2993.774805][T15387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2993.811514][T15387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2993.917287][T15387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2994.193874][T15387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2994.243753][T15387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2994.377013][T15387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2994.425062][T15531] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12271'. [ 2994.749719][ T7986] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 2994.770280][T15387] hsr_slave_0: entered promiscuous mode [ 2994.802028][T15387] hsr_slave_1: entered promiscuous mode [ 2994.846141][T15387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2994.862392][T15387] Cannot create hsr debugfs directory [ 2994.997861][ T8206] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 2995.067754][ T7986] usb 5-1: Using ep0 maxpacket: 32 [ 2995.844474][ T8206] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2995.865053][ T8206] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 2995.898407][ T8206] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 2995.911637][ T8206] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2995.989044][ T8206] usb 3-1: config 0 descriptor?? [ 2996.022074][ T8206] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2996.039949][ T7986] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=49.6b [ 2996.066084][ T7986] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2996.122541][ T7986] usb 5-1: config 0 descriptor?? [ 2996.160443][ T7986] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 2996.593712][ T8206] usb 5-1: USB disconnect, device number 9 [ 2996.599759][T29028] usb 5-1: Failed to submit usb control message: -71 [ 2996.623784][T29028] usb 5-1: unable to send the bmi data to the device: -71 [ 2996.654781][T29028] usb 5-1: unable to get target info from device [ 2996.675988][T29028] usb 5-1: could not get target info (-71) [ 2996.687833][T29028] usb 5-1: could not probe fw (-71) [ 2997.038569][T15387] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2997.099090][T15387] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2997.126660][T15387] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2997.145304][T15387] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2997.300302][T15559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12278'. [ 2997.361226][T15387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2997.416274][T15387] 8021q: adding VLAN 0 to HW filter on device team0 [ 2997.446714][ T7986] bridge0: port 1(bridge_slave_0) entered blocking state [ 2997.453896][ T7986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2997.506207][ T7990] bridge0: port 2(bridge_slave_1) entered blocking state [ 2997.513365][ T7990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2998.013616][ T7990] usb 3-1: USB disconnect, device number 69 [ 2998.168987][T15387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2998.341339][T15387] veth0_vlan: entered promiscuous mode [ 2999.100047][T15387] veth1_vlan: entered promiscuous mode [ 2999.180321][T27400] block nbd2: Receive control failed (result -107) [ 2999.202365][T15387] veth0_macvtap: entered promiscuous mode [ 2999.289507][T15387] veth1_macvtap: entered promiscuous mode [ 2999.331940][T15584] nbd2: detected capacity change from 0 to 15960 [ 2999.373189][T15536] block nbd2: Dead connection, failed to find a fallback [ 2999.401400][T15387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2999.419372][T15536] block nbd2: shutting down sockets [ 2999.424626][T15536] blk_print_req_error: 24 callbacks suppressed [ 2999.424642][T15536] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2999.434411][T15387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2999.487738][T15387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2999.507750][T15536] buffer_io_error: 23 callbacks suppressed [ 2999.507772][T15536] Buffer I/O error on dev nbd2, logical block 0, async page read [ 2999.521690][T15387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2999.540116][T15536] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2999.576838][T15536] Buffer I/O error on dev nbd2, logical block 0, async page read [ 2999.595008][T15387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2999.596346][T15536] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2999.647303][T15536] Buffer I/O error on dev nbd2, logical block 0, async page read [ 2999.659430][T15536] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2999.677918][T15387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2999.695358][T15536] Buffer I/O error on dev nbd2, logical block 0, async page read [ 2999.695383][T15387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2999.728537][T15536] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2999.741481][T15536] Buffer I/O error on dev nbd2, logical block 0, async page read [ 2999.767098][T15536] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2999.776305][T15387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2999.776324][T15387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2999.807121][T15536] Buffer I/O error on dev nbd2, logical block 0, async page read [ 2999.828736][T15536] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2999.847839][T15536] Buffer I/O error on dev nbd2, logical block 0, async page read [ 2999.873378][T15387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2999.875693][T15536] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2999.949652][T15536] Buffer I/O error on dev nbd2, logical block 0, async page read [ 2999.950465][T15387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2999.987921][T15536] ldm_validate_partition_table(): Disk read failed. [ 3000.013894][T15536] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3000.032911][T15387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.050163][T15536] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3000.076377][T15536] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 3000.103461][T15387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.103506][T15536] Buffer I/O error on dev nbd2, logical block 0, async page read [ 3000.114911][T15387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.141687][T15387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.182295][T15536] Dev nbd2: unable to read RDB block 0 [ 3000.198310][T15536] nbd2: unable to read partition table [ 3000.223748][T15536] ldm_validate_partition_table(): Disk read failed. [ 3000.246888][T15387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.252621][T15536] Dev nbd2: unable to read RDB block 0 [ 3000.288901][T15536] nbd2: unable to read partition table [ 3000.297771][T15387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.345001][T15387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.374806][T15387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.398024][T15387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 3000.445464][T15387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 3000.524872][T15387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 3000.594051][T15596] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12288'. [ 3000.597980][ T1497] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 3000.749945][T15387] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 3000.762202][T15387] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 3000.984164][ T1497] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3001.007750][ T1497] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 3001.031872][ T1497] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3001.061603][ T1497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3001.061628][T15387] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 3001.132390][ T1497] usb 3-1: config 0 descriptor?? [ 3001.151327][T15387] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 3001.328706][ T7990] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 3001.369497][ T2450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3001.399076][ T2450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3001.481082][ T1252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 3001.491643][ T1252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 3001.702187][ T1497] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0 [ 3001.702839][ T7990] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3001.721339][ T7990] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 3001.834074][ T1497] plantronics 0003:047F:FFFF.0021: No inputs registered, leaving [ 3002.310159][ T1497] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 3002.389664][ T7990] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3002.399239][ T7990] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3002.410160][ T7990] usb 2-1: config 0 descriptor?? [ 3002.418518][ T7990] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 3002.488162][ T1497] usb 3-1: USB disconnect, device number 70 [ 3003.098622][ T29] audit: type=1326 audit(1721190424.315:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15631 comm="syz.3.12298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0f6e975a19 code=0x0 [ 3003.438222][ T1497] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 3003.648773][ T1497] usb 3-1: Using ep0 maxpacket: 32 [ 3003.664452][ T1497] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3003.690450][ T1497] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3003.723889][ T1497] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 3003.747930][ T1497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3003.781314][ T1497] hub 3-1:4.0: USB hub found [ 3003.985282][ T1497] hub 3-1:4.0: 2 ports detected [ 3003.999402][ T1497] usb 3-1: selecting invalid altsetting 1 [ 3004.024708][ T1497] hub 3-1:4.0: Using single TT (err -22) [ 3004.232983][ T1497] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 3004.256192][ T1497] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 3004.437355][ T1497] usb 3-1: USB disconnect, device number 71 [ 3005.047829][T28290] usb 2-1: USB disconnect, device number 69 [ 3005.077948][T27400] Bluetooth: hci5: command 0x0406 tx timeout [ 3006.073095][T15663] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12303'. [ 3006.103335][ T5099] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 3006.316230][ T5099] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3006.345004][ T5099] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 3006.388764][ T5099] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3006.415240][ T5099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3006.442014][ T5099] usb 1-1: config 0 descriptor?? [ 3006.451246][ T5099] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 3006.863568][T15139] IPVS: starting estimator thread 0... [ 3006.964712][T15691] usb usb8: usbfs: process 15691 (syz.3.12312) did not claim interface 0 before use [ 3006.981913][T15690] IPVS: using max 19 ests per chain, 45600 per kthread [ 3007.529029][T15085] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 3007.607921][T15139] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 3007.742995][T15085] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 3007.769222][T15085] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3007.780281][T15085] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3007.809825][T15085] usb 3-1: config 0 descriptor?? [ 3007.830529][T15139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3007.845123][T15085] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 3007.862435][T15139] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3007.900712][T15139] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 3007.941429][T15139] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3007.987026][T15139] usb 5-1: config 0 descriptor?? [ 3008.503388][T15085] usb 1-1: USB disconnect, device number 61 [ 3008.515459][T15710] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 3009.538159][T15720] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12318'. [ 3009.674988][T15724] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 3009.681560][T15724] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 3009.705638][T15724] vhci_hcd vhci_hcd.0: Device attached [ 3009.908473][ T7990] vhci_hcd: vhci_device speed not set [ 3009.975710][T15732] netlink: 60 bytes leftover after parsing attributes in process `syz.0.12321'. [ 3010.007797][ T7990] usb 11-2: new full-speed USB device number 29 using vhci_hcd [ 3010.251484][T15736] netlink: 'syz.0.12322': attribute type 10 has an invalid length. [ 3010.427862][T15736] team0: Failed to send options change via netlink (err -105) [ 3010.499499][T15736] team0: Port device netdevsim0 added [ 3010.533991][ T5099] usb 3-1: USB disconnect, device number 72 [ 3010.779970][T15085] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 3010.828095][T15738] netlink: 'syz.0.12322': attribute type 10 has an invalid length. [ 3010.840127][T15726] vhci_hcd: connection reset by peer [ 3010.877074][T15139] usbhid 5-1:0.0: can't add hid device: -71 [ 3010.890453][T15139] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3010.901465][T15139] usb 5-1: USB disconnect, device number 10 [ 3010.901776][ T12] vhci_hcd: stop threads [ 3011.071498][ T12] vhci_hcd: release socket [ 3011.076289][ T12] vhci_hcd: disconnect device [ 3011.103199][T15738] team0: Port device netdevsim0 removed [ 3011.298240][T15139] IPVS: starting estimator thread 0... [ 3011.338735][T15754] usb usb8: usbfs: process 15754 (syz.0.12326) did not claim interface 0 before use [ 3011.438004][T15753] IPVS: using max 17 ests per chain, 40800 per kthread [ 3012.204376][ T5099] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 3012.276319][T15767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12329'. [ 3012.409721][ T5099] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3012.442795][ T5099] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 3012.477872][ T5099] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3012.497361][ T5099] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3012.525293][ T5099] usb 2-1: config 0 descriptor?? [ 3012.556328][T15769] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12330'. [ 3012.559393][ T5099] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 3013.878235][ T7986] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 3013.967805][ T5099] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 3014.079318][ T7986] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 3014.110205][ T7986] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3014.122302][ T7986] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3014.144189][ T7986] usb 4-1: config 0 descriptor?? [ 3014.189779][ T7986] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 3014.190133][ T5099] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3014.249832][ T5099] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3014.273871][ T5099] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 3014.302324][ T5099] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3014.324099][ T5099] usb 5-1: config 0 descriptor?? [ 3014.545560][T15027] Bluetooth: Unexpected start frame (len 0) [ 3014.753093][T15793] netlink: 'syz.0.12337': attribute type 10 has an invalid length. [ 3014.796653][T15793] team0: Port device netdevsim0 added [ 3014.832930][ T7986] usb 2-1: USB disconnect, device number 70 [ 3014.872682][T15793] netlink: 'syz.0.12337': attribute type 10 has an invalid length. [ 3014.957532][T15793] team0: Failed to send options change via netlink (err -105) [ 3015.047207][T15793] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 3015.068767][T15804] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 3015.157969][ T7990] vhci_hcd: vhci_device speed not set [ 3015.164951][T15793] team0: Port device netdevsim0 removed [ 3015.747241][T15817] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12340'. [ 3015.961204][T15804] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(8) [ 3015.967847][T15804] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 3016.018372][T15804] vhci_hcd vhci_hcd.0: Device attached [ 3016.317807][ T7990] vhci_hcd: vhci_device speed not set [ 3016.427851][ T7990] usb 11-2: new full-speed USB device number 30 using vhci_hcd [ 3016.669073][ T1497] usb 4-1: USB disconnect, device number 59 [ 3016.743264][ T5099] usbhid 5-1:0.0: can't add hid device: -71 [ 3016.771756][ T5099] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 3016.801782][T15831] usb usb8: usbfs: process 15831 (syz.0.12343) did not claim interface 0 before use [ 3016.835259][ T5099] usb 5-1: USB disconnect, device number 11 [ 3018.032297][ T1497] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 3018.174129][T15841] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12346'. [ 3018.278363][ T1497] usb 4-1: Using ep0 maxpacket: 8 [ 3018.294527][ T1497] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3018.307604][ T1497] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 3018.322056][ T1497] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3018.356589][T15818] vhci_hcd: connection reset by peer [ 3018.360297][ T1497] usb 4-1: config 0 descriptor?? [ 3018.387965][T29028] vhci_hcd: stop threads [ 3018.392347][T29028] vhci_hcd: release socket [ 3018.404705][ T1497] iowarrior 4-1:0.0: no interrupt-in endpoint found [ 3018.417371][T29028] vhci_hcd: disconnect device [ 3018.618616][ T7986] usb 4-1: USB disconnect, device number 60 [ 3018.678257][ T5099] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 3018.879653][ T5099] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 3018.911682][ T5099] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 3018.974125][ T5099] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3018.989941][ T5099] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3019.036467][ T5099] usb 1-1: config 0 descriptor?? [ 3019.071179][ T5099] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 3019.347829][ T1497] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 3019.517911][T15139] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 3019.538070][T28290] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 3019.564287][ T1497] usb 3-1: Using ep0 maxpacket: 32 [ 3019.591665][ T1497] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3019.603017][ T1497] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3019.613579][ T1497] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 3019.623326][ T1497] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3019.655504][ T1497] hub 3-1:4.0: USB hub found [ 3019.742494][T15139] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 3019.759903][T28290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 3019.776386][T28290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 3019.780324][T15139] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 3019.799779][T28290] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 3019.801869][T15139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3019.825362][T28290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 3019.827427][T15139] usb 4-1: config 0 descriptor?? [ 3019.853308][T28290] usb 2-1: config 0 descriptor?? [ 3019.864133][T15139] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 3019.867807][ T1497] hub 3-1:4.0: 2 ports detected [ 3019.887817][ T1497] usb 3-1: selecting invalid altsetting 1 [ 3019.921750][ T1497] hub 3-1:4.0: Using single TT (err -22) [ 3020.070743][ T1497] hub 3-1:4.0: hub_hub_status failed (err = -71) [ 3020.092996][ T1497] hub 3-1:4.0: config failed, can't get hub status (err -71) [ 3020.113917][T15139] IPVS: starting estimator thread 0... [ 3020.160019][ T1497] usb 3-1: USB disconnect, device number 73 [ 3020.218384][T15871] IPVS: using max 19 ests per chain, 45600 per kthread [ 3020.352567][T15872] usb usb8: usbfs: process 15872 (syz.4.12356) did not claim interface 0 before use [ 3021.822657][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 3021.887012][ T7986] usb 1-1: USB disconnect, device number 62 [ 3021.907921][ T7990] vhci_hcd: vhci_device speed not set [ 3022.087339][T15883] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12359'. [ 3022.275387][T28290] usbhid 2-1:0.0: can't add hid device: -71 [ 3022.285294][ T1497] usb 4-1: USB disconnect, device number 61 [ 3022.301730][T28290] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 3022.379673][T28290] usb 2-1: USB disconnect, device number 71 [ 3022.919872][T15897] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 3022.979871][T27400] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 3022.986661][T27400] Bluetooth: Wrong link type (-22) [ 3022.992007][T27400] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 3022.999635][T27400] Bluetooth: Wrong link type (-22) [ 3023.005597][T27400] ================================================================== [ 3023.013679][T27400] BUG: KASAN: slab-use-after-free in l2cap_send_cmd+0x679/0x8d0 [ 3023.021433][T27400] Read of size 4 at addr ffff8880794d5010 by task kworker/u9:2/27400 [ 3023.029518][T27400] [ 3023.031860][T27400] CPU: 0 PID: 27400 Comm: kworker/u9:2 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 3023.041857][T27400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 3023.051930][T27400] Workqueue: hci6 hci_rx_work [ 3023.056708][T27400] Call Trace: [ 3023.060009][T27400] [ 3023.062954][T27400] dump_stack_lvl+0x241/0x360 [ 3023.067715][T27400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3023.072908][T27400] ? __pfx__printk+0x10/0x10 [ 3023.077524][T27400] ? _printk+0xd5/0x120 [ 3023.081668][T27400] ? __virt_addr_valid+0x183/0x530 [ 3023.086813][T27400] ? __virt_addr_valid+0x183/0x530 [ 3023.091919][T27400] print_report+0x169/0x550 [ 3023.096434][T27400] ? __virt_addr_valid+0x183/0x530 [ 3023.101538][T27400] ? __virt_addr_valid+0x183/0x530 [ 3023.106643][T27400] ? __virt_addr_valid+0x45f/0x530 [ 3023.111750][T27400] ? __phys_addr+0xba/0x170 [ 3023.116256][T27400] ? l2cap_send_cmd+0x679/0x8d0 [ 3023.121106][T27400] kasan_report+0x143/0x180 [ 3023.125606][T27400] ? l2cap_send_cmd+0x679/0x8d0 [ 3023.130456][T27400] l2cap_send_cmd+0x679/0x8d0 [ 3023.135131][T27400] ? skb_pull+0xc1/0x1e0 [ 3023.139441][T27400] l2cap_recv_frame+0x22ed/0x10830 [ 3023.144569][T27400] ? validate_chain+0x11e/0x5900 [ 3023.149537][T27400] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 3023.154897][T27400] ? validate_chain+0x11e/0x5900 [ 3023.159830][T27400] ? __pfx_validate_chain+0x10/0x10 [ 3023.165053][T27400] ? __pfx_validate_chain+0x10/0x10 [ 3023.170240][T27400] ? __pfx_validate_chain+0x10/0x10 [ 3023.175445][T27400] ? __pfx_validate_chain+0x10/0x10 [ 3023.180633][T27400] ? kasan_save_track+0x51/0x80 [ 3023.185492][T27400] ? mark_lock+0x9a/0x350 [ 3023.189812][T27400] ? worker_thread+0x86d/0xd40 [ 3023.194592][T27400] ? __lock_acquire+0x1346/0x1fd0 [ 3023.199614][T27400] ? mark_lock+0x9a/0x350 [ 3023.203940][T27400] ? hci_rx_work+0x4e7/0xca0 [ 3023.208522][T27400] ? __pfx_lock_release+0x10/0x10 [ 3023.213543][T27400] ? __mutex_unlock_slowpath+0x21d/0x750 [ 3023.219259][T27400] ? __pfx_lock_release+0x10/0x10 [ 3023.224276][T27400] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3023.230248][T27400] ? hci_conn_enter_active_mode+0x260/0x370 [ 3023.236182][T27400] ? l2cap_recv_acldata+0x48e/0x1550 [ 3023.241456][T27400] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 3023.247336][T27400] ? hci_conn_hash_lookup_handle+0x226/0x240 [ 3023.253305][T27400] hci_rx_work+0x50f/0xca0 [ 3023.257718][T27400] ? process_scheduled_works+0x945/0x1830 [ 3023.263435][T27400] process_scheduled_works+0xa2c/0x1830 [ 3023.268982][T27400] ? __pfx_process_scheduled_works+0x10/0x10 [ 3023.274956][T27400] ? assign_work+0x364/0x3d0 [ 3023.279533][T27400] worker_thread+0x86d/0xd40 [ 3023.284117][T27400] ? __kthread_parkme+0x169/0x1d0 [ 3023.289131][T27400] ? __pfx_worker_thread+0x10/0x10 [ 3023.294230][T27400] kthread+0x2f0/0x390 [ 3023.298286][T27400] ? __pfx_worker_thread+0x10/0x10 [ 3023.303382][T27400] ? __pfx_kthread+0x10/0x10 [ 3023.307961][T27400] ret_from_fork+0x4b/0x80 [ 3023.312369][T27400] ? __pfx_kthread+0x10/0x10 [ 3023.316954][T27400] ret_from_fork_asm+0x1a/0x30 [ 3023.321758][T27400] [ 3023.324773][T27400] [ 3023.327078][T27400] Allocated by task 4482: [ 3023.331395][T27400] kasan_save_track+0x3f/0x80 [ 3023.336067][T27400] __kasan_kmalloc+0x98/0xb0 [ 3023.340642][T27400] kmalloc_trace_noprof+0x19c/0x2c0 [ 3023.345828][T27400] l2cap_conn_add+0xa9/0x8e0 [ 3023.350408][T27400] l2cap_connect_cfm+0x136/0x1220 [ 3023.355419][T27400] hci_remote_features_evt+0x536/0xaf0 [ 3023.360864][T27400] hci_event_packet+0xac0/0x1540 [ 3023.365792][T27400] hci_rx_work+0x3e8/0xca0 [ 3023.370194][T27400] process_scheduled_works+0xa2c/0x1830 [ 3023.375722][T27400] worker_thread+0x86d/0xd40 [ 3023.380299][T27400] kthread+0x2f0/0x390 [ 3023.384354][T27400] ret_from_fork+0x4b/0x80 [ 3023.388774][T27400] ret_from_fork_asm+0x1a/0x30 [ 3023.393525][T27400] [ 3023.395831][T27400] Freed by task 15027: [ 3023.399879][T27400] kasan_save_track+0x3f/0x80 [ 3023.404546][T27400] kasan_save_free_info+0x40/0x50 [ 3023.409558][T27400] poison_slab_object+0xe0/0x150 [ 3023.414480][T27400] __kasan_slab_free+0x37/0x60 [ 3023.419230][T27400] kfree+0x149/0x360 [ 3023.423117][T27400] l2cap_connect_cfm+0x11f/0x1220 [ 3023.428138][T27400] hci_conn_failed+0x1f6/0x340 [ 3023.433162][T27400] hci_abort_conn_sync+0x583/0xde0 [ 3023.438334][T27400] hci_cmd_sync_work+0x22b/0x400 [ 3023.443266][T27400] process_scheduled_works+0xa2c/0x1830 [ 3023.448798][T27400] worker_thread+0x86d/0xd40 [ 3023.453375][T27400] kthread+0x2f0/0x390 [ 3023.457431][T27400] ret_from_fork+0x4b/0x80 [ 3023.461837][T27400] ret_from_fork_asm+0x1a/0x30 [ 3023.466595][T27400] [ 3023.468903][T27400] Last potentially related work creation: [ 3023.474600][T27400] kasan_save_stack+0x3f/0x60 [ 3023.479267][T27400] __kasan_record_aux_stack+0xac/0xc0 [ 3023.484631][T27400] insert_work+0x3e/0x330 [ 3023.488945][T27400] __queue_work+0xc8b/0xf50 [ 3023.493436][T27400] call_timer_fn+0x18e/0x650 [ 3023.498039][T27400] __run_timer_base+0x695/0x8e0 [ 3023.502871][T27400] run_timer_softirq+0xb7/0x170 [ 3023.507710][T27400] handle_softirqs+0x2c4/0x970 [ 3023.512489][T27400] __irq_exit_rcu+0xf4/0x1c0 [ 3023.517067][T27400] irq_exit_rcu+0x9/0x30 [ 3023.521294][T27400] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 3023.526978][T27400] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 3023.532994][T27400] [ 3023.535302][T27400] Second to last potentially related work creation: [ 3023.541867][T27400] kasan_save_stack+0x3f/0x60 [ 3023.546535][T27400] __kasan_record_aux_stack+0xac/0xc0 [ 3023.551893][T27400] insert_work+0x3e/0x330 [ 3023.556207][T27400] __queue_work+0xb66/0xf50 [ 3023.560703][T27400] queue_work_on+0x1c2/0x380 [ 3023.565282][T27400] l2cap_connect_cfm+0xec2/0x1220 [ 3023.570293][T27400] hci_remote_features_evt+0x536/0xaf0 [ 3023.575754][T27400] hci_event_packet+0xac0/0x1540 [ 3023.580676][T27400] hci_rx_work+0x3e8/0xca0 [ 3023.585080][T27400] process_scheduled_works+0xa2c/0x1830 [ 3023.590610][T27400] worker_thread+0x86d/0xd40 [ 3023.595186][T27400] kthread+0x2f0/0x390 [ 3023.599241][T27400] ret_from_fork+0x4b/0x80 [ 3023.603644][T27400] ret_from_fork_asm+0x1a/0x30 [ 3023.608399][T27400] [ 3023.610708][T27400] The buggy address belongs to the object at ffff8880794d5000 [ 3023.610708][T27400] which belongs to the cache kmalloc-1k of size 1024 [ 3023.624763][T27400] The buggy address is located 16 bytes inside of [ 3023.624763][T27400] freed 1024-byte region [ffff8880794d5000, ffff8880794d5400) [ 3023.638557][T27400] [ 3023.640872][T27400] The buggy address belongs to the physical page: [ 3023.647278][T27400] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x794d0 [ 3023.656023][T27400] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 3023.664507][T27400] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 3023.672481][T27400] page_type: 0xffffefff(slab) [ 3023.677145][T27400] raw: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 3023.685713][T27400] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 3023.694290][T27400] head: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 3023.702947][T27400] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 3023.711602][T27400] head: 00fff00000000003 ffffea0001e53401 ffffffffffffffff 0000000000000000 [ 3023.720257][T27400] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 3023.728917][T27400] page dumped because: kasan: bad access detected [ 3023.735323][T27400] page_owner tracks the page as allocated [ 3023.741020][T27400] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 63, tgid 63 (kworker/u8:4), ts 2294129015853, free_ts 2290425392122 [ 3023.761767][T27400] post_alloc_hook+0x1f3/0x230 [ 3023.766622][T27400] get_page_from_freelist+0x2e4c/0x2f10 [ 3023.772157][T27400] __alloc_pages_noprof+0x256/0x6c0 [ 3023.777341][T27400] alloc_slab_page+0x5f/0x120 [ 3023.782166][T27400] allocate_slab+0x5a/0x2f0 [ 3023.786675][T27400] ___slab_alloc+0xcd1/0x14b0 [ 3023.791359][T27400] __slab_alloc+0x58/0xa0 [ 3023.795683][T27400] __kmalloc_noprof+0x257/0x400 [ 3023.800537][T27400] ieee802_11_parse_elems_full+0xd5/0x2870 [ 3023.806589][T27400] ieee80211_ibss_rx_queued_mgmt+0x4c8/0x2d70 [ 3023.812667][T27400] ieee80211_iface_work+0x8a3/0xf10 [ 3023.817892][T27400] cfg80211_wiphy_work+0x221/0x260 [ 3023.823043][T27400] process_scheduled_works+0xa2c/0x1830 [ 3023.828575][T27400] worker_thread+0x86d/0xd40 [ 3023.833170][T27400] kthread+0x2f0/0x390 [ 3023.837241][T27400] ret_from_fork+0x4b/0x80 [ 3023.841653][T27400] page last free pid 5101 tgid 5101 stack trace: [ 3023.847969][T27400] free_unref_page+0xd19/0xea0 [ 3023.852727][T27400] __folio_put+0x3b9/0x620 [ 3023.857255][T27400] unpin_user_pages_dirty_lock+0x30c/0x540 [ 3023.863074][T27400] xdp_umem_release+0xda/0x220 [ 3023.867911][T27400] xp_release_deferred+0xfc/0x180 [ 3023.872929][T27400] process_scheduled_works+0xa2c/0x1830 [ 3023.878467][T27400] worker_thread+0x86d/0xd40 [ 3023.883046][T27400] kthread+0x2f0/0x390 [ 3023.887102][T27400] ret_from_fork+0x4b/0x80 [ 3023.891511][T27400] ret_from_fork_asm+0x1a/0x30 [ 3023.896269][T27400] [ 3023.898577][T27400] Memory state around the buggy address: [ 3023.904188][T27400] ffff8880794d4f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3023.912288][T27400] ffff8880794d4f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 3023.920347][T27400] >ffff8880794d5000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3023.928401][T27400] ^ [ 3023.932990][T27400] ffff8880794d5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3023.941041][T27400] ffff8880794d5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 3023.949086][T27400] ================================================================== [ 3024.000866][T27400] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 3024.008187][T27400] CPU: 0 PID: 27400 Comm: kworker/u9:2 Not tainted 6.10.0-syzkaller-01193-g408323581b72 #0 [ 3024.018170][T27400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 3024.028213][T27400] Workqueue: hci6 hci_rx_work [ 3024.032964][T27400] Call Trace: [ 3024.036231][T27400] [ 3024.039148][T27400] dump_stack_lvl+0x241/0x360 [ 3024.043813][T27400] ? __pfx_dump_stack_lvl+0x10/0x10 [ 3024.048993][T27400] ? __pfx__printk+0x10/0x10 [ 3024.053563][T27400] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 3024.059530][T27400] ? vscnprintf+0x5d/0x90 [ 3024.063921][T27400] panic+0x349/0x860 [ 3024.067811][T27400] ? check_panic_on_warn+0x21/0xb0 [ 3024.072916][T27400] ? __pfx_panic+0x10/0x10 [ 3024.077326][T27400] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 3024.083291][T27400] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 3024.089606][T27400] check_panic_on_warn+0x86/0xb0 [ 3024.094553][T27400] ? l2cap_send_cmd+0x679/0x8d0 [ 3024.099390][T27400] end_report+0x77/0x160 [ 3024.103612][T27400] kasan_report+0x154/0x180 [ 3024.108098][T27400] ? l2cap_send_cmd+0x679/0x8d0 [ 3024.112940][T27400] l2cap_send_cmd+0x679/0x8d0 [ 3024.117598][T27400] ? skb_pull+0xc1/0x1e0 [ 3024.121825][T27400] l2cap_recv_frame+0x22ed/0x10830 [ 3024.126932][T27400] ? validate_chain+0x11e/0x5900 [ 3024.131877][T27400] ? __pfx_l2cap_recv_frame+0x10/0x10 [ 3024.137243][T27400] ? validate_chain+0x11e/0x5900 [ 3024.142199][T27400] ? __pfx_validate_chain+0x10/0x10 [ 3024.147412][T27400] ? __pfx_validate_chain+0x10/0x10 [ 3024.152605][T27400] ? __pfx_validate_chain+0x10/0x10 [ 3024.157797][T27400] ? __pfx_validate_chain+0x10/0x10 [ 3024.162992][T27400] ? kasan_save_track+0x51/0x80 [ 3024.167830][T27400] ? mark_lock+0x9a/0x350 [ 3024.172137][T27400] ? worker_thread+0x86d/0xd40 [ 3024.176881][T27400] ? __lock_acquire+0x1346/0x1fd0 [ 3024.181889][T27400] ? mark_lock+0x9a/0x350 [ 3024.186202][T27400] ? hci_rx_work+0x4e7/0xca0 [ 3024.190772][T27400] ? __pfx_lock_release+0x10/0x10 [ 3024.195778][T27400] ? __mutex_unlock_slowpath+0x21d/0x750 [ 3024.201392][T27400] ? __pfx_lock_release+0x10/0x10 [ 3024.206832][T27400] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 3024.212795][T27400] ? hci_conn_enter_active_mode+0x260/0x370 [ 3024.218674][T27400] ? l2cap_recv_acldata+0x48e/0x1550 [ 3024.223935][T27400] ? hci_conn_hash_lookup_handle+0x21/0x240 [ 3024.229808][T27400] ? hci_conn_hash_lookup_handle+0x226/0x240 [ 3024.235768][T27400] hci_rx_work+0x50f/0xca0 [ 3024.240170][T27400] ? process_scheduled_works+0x945/0x1830 [ 3024.245872][T27400] process_scheduled_works+0xa2c/0x1830 [ 3024.251405][T27400] ? __pfx_process_scheduled_works+0x10/0x10 [ 3024.257364][T27400] ? assign_work+0x364/0x3d0 [ 3024.261934][T27400] worker_thread+0x86d/0xd40 [ 3024.266531][T27400] ? __kthread_parkme+0x169/0x1d0 [ 3024.271537][T27400] ? __pfx_worker_thread+0x10/0x10 [ 3024.276626][T27400] kthread+0x2f0/0x390 [ 3024.280677][T27400] ? __pfx_worker_thread+0x10/0x10 [ 3024.285767][T27400] ? __pfx_kthread+0x10/0x10 [ 3024.290340][T27400] ret_from_fork+0x4b/0x80 [ 3024.294740][T27400] ? __pfx_kthread+0x10/0x10 [ 3024.299310][T27400] ret_from_fork_asm+0x1a/0x30 [ 3024.304061][T27400] [ 3024.307308][T27400] Kernel Offset: disabled [ 3024.311621][T27400] Rebooting in 86400 seconds..