last executing test programs: 7.13625061s ago: executing program 3 (id=280): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) r2 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000cc0)={0x0, 0x0, {0xfffff982, 0x8, 0x300f, 0x3, 0x7, 0x0, 0x2, 0x4}}) modify_ldt$read(0x0, &(0x7f00000002c0)=""/185, 0xb9) socketpair(0x1, 0x1, 0x0, 0x0) socket(0x18, 0x6, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x2c020400) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106}}, 0x20) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x8000000) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x20060d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000040)={0x0}) 5.590334551s ago: executing program 3 (id=288): getpid() r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x7fffffff, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)=""/244, 0xf4}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000500)=""/249, 0xf9}, {&(0x7f0000000600)=""/79, 0x4f}], &(0x7f0000000200)=[0x3], 0x5}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0xec0, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0xfff1}, {0x0, 0xffff}, {0xffe0, 0xf}}}, 0x24}}, 0x0) 5.500881242s ago: executing program 2 (id=289): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0) r1 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000002140)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x0, 0x0, 0x5}}, 0x50) read$FUSE(r0, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r3}, 0x10) syz_fuse_handle_req(r0, &(0x7f00000070c0)="a37b33352102270e8080da9acea18541f7a5c5c0ccac6b823171247e6e3675eaeae3fc94bd43baf4a099da2138a0fe4c613d6f13f998b175ae52341675e866014f466758a4fbd32928f56991cfdb381074d418d9690e966a9e10945f0a16abc6e27418ba809e9e22294a5f0c2ddb090d6849df842893a2f38c00c4c3689ec3875d021a3e221aa99d35e4660aa1796c2d4ea85bb91752c0c21dd01debd31e5d1eb7ddc9c64388008fa08a9871b9d158d0adbff0f57a19252b75100a980d86e9633cd793c8e2e33c00035a5ad72ef11437dc82e6e04d1a48d1f771d58f2f7dd978e9a4f3d462f03c0ca11026a9a15d1bd5c732b90d56a18ed5e16e4fc18739bd31eb7695369af1178a495890fc9e796d43f2f461e6d45634fb8e191c06c7c875fbad054f0ab21fecd7d3883a5d568426335c8902a1ef2e5856cf8888b91050dd50dd9e419b9a77dd6a135dbe314d769929a2ab34679406dc4314763867f7ad19945c550cce8d9243b1f602a47a7ca863895e5ddaff09fb773b1862a3757b2895054754c2a23a4b7975391972a9ad4f25245265bd77b634b9d834a88e9a16cc1a5b1dae4a46de62b939fe89403110778f126786aadd81950077de037b83550b1b897ebe50a3f660eb368cd771abb9fe1cf6fdd51e987757e3e7a6d9d1eebdacb8ecc00de9413f19b2a4063ad78b8eff9b5c420a06e21364d8c9fab06ee878e1344c767fe6e8d21dfe2f4dece09e2fbf405bc1008b2d0adf86fc70421952207b2265bacf5179efe10ba4c42e1f4d8f7c5b19352b866afd280c66b50d87c08a7e316270189f01397b70fe7b50e7426a5a760bafae1cd0c28469ccce09dd37afffce3ca4d5e05569bc145dc4ee1107097cee103a2215d87af81474231a8113b1f2924e6d5bf29742c3ef17d4f284db167a74f742b768bc3becc027c76d30e7921350746ababd6172895de2cd9e3a5e764edc8e2f3588b45574cc574993e84a47bb3d71867f412a7b20b82ac23e10a85f5f1984d25e42793798547837509bd94a7c8579f9181341b221f418cc0de373672ada07951cc7009300dbd0742426aba9eb1d533a0cd14a6b13f37854922228b9d0b1e20b67746102f84973405884ee2519227d3254c96e1146e08956cb1a474434b2ffe7a0b09e9437b303159abe4eca69f444be28ffe95a3935ad77dcb7291da653f9942926f6a3c750526dca116e7c278c628244e4b6c2da0eb2255e067bb11c42c03105bcb4ab9eb7a276e1f5d8cf7e779c158a2cc7f867d0e7fc5d77d797d725efd76ffde2c69b1abfa05dac952cf3ca5295845202341956d484859f7d5e2b3df31f9e2152674ecd71590605310c8fe238e33c0415469826c35aed0d65f3aa459ccf607e4b25f25cd08d65b48bd0f56461d995007dc5b00d8d91a9fa48286fa1d8dfb68fc9756cf928c05ba7f93f8285f7b6df63a5634c39da5ab555362339fd85dae4e952e06b8ad17bcf157733d55a30a05c0b6ac2ed2fd54ab1033dec41101f5251ed40c6f42e876328bad8f4fd21730cd1e2efb847dcb93ded254c4e66c6374ec40b124d32032f5ee5c52f0a51f2ca797b12f814a1f79e3e4d69412dbc834d620e72ee9648d67ff53eb126f7d382fd8f827fab96b7427cd0962e84542a98acc79cf429f004ce86f5841d0256c83a96087671365e3799951087a017f0a3ff7900b25515869ee524de62bd4e7c2c68e1c900f38b0f7bac92606a0d0eadfa9f1d5af8157f0d5a0d49dedb00bf5785f8b2f8c2f8c10f150a30c31141ca0545eda71841523c6986d7d5fbc1918d5c79e40b929c180153d34fc7c7faba1d471c10b52d3e93b8192fa4826d43ff9df160ab83041b0f647398964c108b7875d74d592d8ee2d5420316656626e58b4dba72bb09376592a062ba0cfa94469b2102ce05b68fd3d275f0941851dd6399cf386cb900441f0f762540ab58c1800e7e00bb34fe32eddc14f05d1537f6c23c8f5b5039b6a22b7d843476d22d4a1086f65aaad2699d402113e349ba58168fe5f9ed496f56d5c7864f6225b24562acad3aa8aac2cfc02e6d14fdaf89066022f61c3f7c0581bee46817ef95500a83e4dd6e6bbfec9ae785b59f29c61e23735543dc8d2596b5a787c00de7dd4209a656b398967d74d022f5a4be5c2ad5aa8e6fa76ebed097822c6b438655c05a5b5b9a3fefb8996c03aab4ef804f2145a9cecd2cc6ad2a54f4f13153da513ff3ff707ba8f34836fd7be482663557cf6923b2c417486a3bae32c28f5f9af211a4f60f202eb4bc5b4a9ac0c72f080c5ce3cd563b40dba488c6bb96f27935c2296e72063399bc0835f194e52d72efe2b0122728d6f841545bebd45b3d589e011f3360e9f90029d06b708b078f6c437862fd355604e87bf37c1ddf3a802fda5bbf03f8453cdb335fb381be1be1d9d3816654102b27dcb78c9b743b4ad22681b6f44dc854c96324d8c2ca678f31d3fe60c5144649340ad541edbc7c1d66314b566b43eeb9a1d9970726d25e529bb0b011b563378ec4580961d1137d47942b02f6f6c0e5322e879711bd4a98348180ca243ae538bd18e9bc1c217b36049e3ffefcfcb3a514dbdbdac14c47afec06b161355e89d1db713a007841e9f53ddc44764b61002c35f48f1c8d57e3c67415cbc920c9e69fb8a0ad8b2da067dd37d9c883dc5c24aac8105987f7b43df3fa2aab926566abdbb506d08b1db4b9f6aff592e68878fd22b2a04ccf8fad887ab7307f5bb5678659467547bb9b8c75a8f19a2fcffd855d917cf126ea4af832adb30df51f6e7311e15bdf0b14a019b4c5dd2a58ff142dbe159039a6dc73c099a72927e717dfcb2c438b9058bf7411786d930db5077533f35f56d02a647f14575abc3f7a149411c4597e9e9bc7e1767da725d8ea13d5c3fbc6e33cfe00b323a0d3abb4a928b180fd2007284ac614163e087c9d996f5f7545691c9b86557b09bb62bbb93d68c51a1f27fb57b869ff5702ee36ad13983f77682f278e09d17ded110beae19ba0a0200c8f9cdc624ded25da0f31b79b21897b25413af89066259aa41291275918a42105f277f5d606b24ca82f254d04fcd258651c565ef918c21a2f9e78162aeab6f19cb0e7c9e8b60b3de04b0916cb726d595e957a74290417e626366f20a33c2be052b3cdbcccca7210b4c9a02c42b749dce61714f59b144a92ad9af3501a3ab02654e6ec897bfa385f95f4e481c6e937122b163d8cb9292ae59c80fd00502e6a726949633e4b1ee09df492daec19d6d498090a9659d2fb7b63349988ffac6c792ad427eec0f48b9b285feba6d2365f1dff4852ea6b4d2289df7ece3a509cfa3574bc8f9e2670c8433885d8c9ec0494d40808d9c9d4efbf90d1b6558ae75e254ea3aff6f37f976aa2916b58a015e4919760063ebd2373730a37bd0f91b281c05b6fb3e35924b4ac88a0d0a8b0d125551458c719cd53cf9753fafc9535d6af395a5b29408d915e7259ab0f6c7abd8c754bb71ed1a476e6760eee035460d4dfec3c53f91636280056a57fc45e0f37a47f994f8b1bc42644c37fb004aef34bbfa71ef5b89b1ee581b8c803885d8f8637a2b3ae49078738580aa8c0d94c2564dd7b50bd6b718b854755b6a08d8dc704e53b8a299617134aa79fd00c8749e57965e9a16d73142f2812c3e1ffc09938406561949c674c35cf88128de9152b4a43d4e2432ac234014c12dbf057112d28d3125fc98bf0dd9a934217440199a698628778649cd1360d79db2d74fa34e94a6a9333f2804b8e4264160c493e951294810e6708ea888a48403aac2b21e136a1d8d07fe07930b543028b62ee39eb6f3480c27186bdcfef55e93343496eefb0c38b50cf9762dc606ab7fa4d155d2d965746baad06c3d39ce8fe350cfbf569676195330ec78f25f04a915685684f49a19f4102109a2cf60f28df29fcf74892ff84110ffa18fd43d3f8a10173b970ed934f5e30d170ef6348890be263f0d64ad5ae53e6e6b4895f3cdcd6fdaebd69fa2f067bd2a207559ca6cbdcebd4e18855642ffd8d5b85b6b805c2ca1c63de1cafe7ee1f2ceedd8fd5c6e22ab40ad8772027576080609c6d55a7d08149122c1fc28497723751abe76c8dd12c6e2f311ad531b0a2f8e04a5f17346ba602dadae0745ebd715853277e1b73ed2d0be842a95c955be66c7ab52a736709177a8a48255655f23076f6f0a8bd683b1ccc7866830ef3780d499760464da1a5aa731aa16fbd925fba7fd06702046dcbc3571031a7f58e9d9604de217acd0b59f790e78ebc51d91a45ef57c37417c5c1f34127aabe64a269b90f56e03280f10bbd1500ab30a3ee29c59fa0598a57eee3641cbe002fbca5b12102a7b8e7fd514bde6bb742dd139ecec58a0ee60b2fde003be535523d024aba223ff8e6cbd44cab79cf379389a64b1ccb1c72dc3e7fbb8d1f59a39a80cf5d30f5a66546e838959f2e4f19e854c7de93c8ec06a8f223f5355e9c76e17ad28a887dadc17a41fe80d878cb3e3bb863bbaa168c9a4ebd74475d7e6ae3d99a7aad9e23d3edf08ecb5143764099d258d4a6d82fc9afa5775f75b41bf36be25a537f2905903f82e08657fb7e341079ff29a656ff85ae34317c5b1a81d8e814d55807fcf2ed7250b29046d2e1d0a14ec7ba8910abfe0cc9aa04164b94a4bb0970f3f3b1eac5cfd1f32a5ac84d552f60962e98222b2a9513af22d5da3f005f6f9ae166797a94360235eac2a6ddb2321c2ec514eb6ccf086a8c83e65081ea67acac44753302d4519d0cfc796f56c04e849cdea18cbd32da25dddbfc2cd575c67f26882b5c2bc534701f11775d8e93131488141fbb61c61755aa30c1a1829140f0332a76317aafa08f072f00cb330c5adfdca9d9055b1fb51616e8ca5dc34dadc6911d93b93871115107c2371279e248ff898268cccb12b07cc555ad7bf7811910f37f2b07598f661dfa1f2ff6fe2d1f8aa4deebf260573b27ef6e578469ad652a4f31da494fe0d00e4c66e8011d5bb2c889331679544514f16c257e74ddca134aaa5d15707c26b3373c110e2ec61fede15fc6e52428e1b5788f5c667794c5bbb26e8aa7a66cc38bdb6150c7804d59a2ce2c2d4120f94afb3807a2b685fdede4da11bc63abf04bf0823897dddee0697924fe855fba225a97c5b5d1bd6cb17d6b0ce93e475a9b14130ca5cee7ba41d521f72214b2f0fbcc1fbec70ef4dc7a4c9442d02ec641bd087ffe52fc7c9f0c39d41d03d1f93cbb8896abbee62f3bb1685f97e22664fb45530681eb6393442cfae1366ddc395fd5aa4d4fd0c250566b1c7cc8cfe6b25e73315998b45af5dbca10696ed8d113f4f35f385840f0558e93740e9a5d2e6768a022d17d266f47d050a8e91e8e0bdbf0d5e92f8d8294c3666c00344d4336d23a4c4235a3bcbd69f4b4769d6b1f513544392ccb2b96b1c6292131014835dfefebb4686496fee657e4aca53fbbdc15e0a72b1af7bd58bc6b4959356e7726342a330e6b9badc94e7498569f3cac949acc0ea9fc149a874fe271829c72e917f1374a80f22c8bf0109a0ac1e1de013a826173853127c22f7ba826bba044bcd8898e2c8432ce54a98ab4d18eac68c208e51a3210c6730b81384cfd8a74e681627805fb100c26a2a8385686fbffedfc7583b2222e1f79e45de79069b9f37a07bf99386525091b6d614820deea7e3105dcefa214258a8603c876fb776d0b019c984e028da494ef3f8841bc889bed54ea443634c2885639e865f0cd0a1dfd6f7a3b22c51461e73b3650b9a63c48b400bdcfac039e4cfdbefbf869386075ce8790eb4a588fd49f49c54ac5a8c45641bba62620d15042f08f5305566bc19111d08fedb65e2f87fb28442340be88a40cfef7ab3dad7e79225c07d347c2526269e9e709a90a49345d3351ac967da890707ed2affd155f2b356bbbe756872ecf7d944d8be128cd36100c8913f7fcf67f5d6f71ea19aa8877806bd6f65f10b2bf72867a7f6b900a7e0049aba25e162d670399e407c1332855a8d2db7465a40704660cd63bbcde4e36412c1fb244a1d23edbeb9d1c7189343144c8e27c55249a2b7fc00134a230601ca488d9ff441508b14129046e918abe163a40ae26b77c6df0fb843610a93279168fd7244cf934f905fe33dd5675819bbeaf370bf9a1101159c57dcfa4820a76cfa5957355ee450371df3c5f61fe3f4cef0df889b69f543b3965dc19d48d897272146db5c34c26bb6a7b305e9bc9a63419b789abd8e6a72a89d95a422d7e77f9c0afc619c43c3b77c8ffd408383fee4475ff88c90372bf9fda91b8b3b19ee9cac890cc6aa13f3a33d40f3970626b8854e72ecd65467e40552ceed496a5144db8f4122d34246bf76651fb1f1a154c7a3906939bd1fb85cf99cad9ecb0d63e0bb31b8133c2eb0e6f66e8e36746589c30637f5e045b9a5b6b5c728398c326aa9e0e670098726d3127b2479442c8e64ed5402790af0a114c42a07d97c38b7c738c9bcb3ddde8e67c3e786dddf7f9bac3cb61998f73340cdc62eeed7f05f2768fdaa6a5d91d98531a80fb8f8acb5abe47972f0155a85ee95166b20f727bd4ae648ce3e0de4d80ca7227ef298d4f204f094f12c8acfdd2a6905743b8daf56b8160dd081c54eeda647e23efdf89972aee301cc4f67faabe82fd9db1455090c05391cfc3e4bec5d38fab3716e19638dfd483ee2bba57e4d1c00d01cc45a49e2727c19b104f1072f1a50407e4622be580d35393c7db5119017be6bd5acf3be228c42096af9739e44867782e600a48ab9baeec9e37e9863d1b19733c3fe47c30f328816966748ce717529752ebb9e2f582ddd132158ed2d68fd17de3e725cd0fc13477585341703b51682879a9a3167cca4cb09ce2449d18514d8b8343de79b332b6981101a3c6ae2679aeaea1cad81d216400c40cea6ebc99ee77b5ab7a508cfffcefa7b4d48a2ea8a3ff5917f43876ea653822a21e208d733847e017eaadc460c9828365a1a0d149ccda8a5c42ecb74ce102fc9cb75360e87b758f7cb55c593bacf8a7eb698cf300adc7000f9082aff2be93ddbed0dc487c72e3e7707bbdaf0d6c5df66140270ca71de6c86b4776033af0cef6b5c8d9bb4bd74d2f90bdbc6d13fe4b4d5477a16add3eb75e865aa4441b68b3640bae1f03e7bb261808f2c3fb5d3997b666c7b5f0df5a53a7114f1eed925eb1d5519542f12e9692ed7ed98e789b962a892727bc06fafbc9e335e245e8240eaeb15ee7dd4136d738c243838fc752095763b7647760045fbdf26c2646c00ccee6fc905fa7224981e40a2124629c43cc020e2c0c83e02aca162afc40bc19734dd22fce44839440f4e69fd7aeb7c3f35ef2d4eddffc0874ef77bf4df5e1a77e2495e31cf514d4dd252ec978dc47df2edcbba9a175d4ecb402fb701f0781b618824328a94112ebdd51137910810c565d564a76be9d1e5d13ee9ad311fdcbdefe16bc6fbe0e3dfab238742a80463de1849bcdd6120ab7b420c9fb3c0e1955e65b431b0f43d32260ecdbdb69a4d6ea6498ac377648c974f29393f23cf99e2aa2cfe128c371beab86b0ec5b20edb5ee451554fac22562083396329d774fa9be0f4bee29f2657840bd82e1b824b371c56dac44a45d4898cb25a9af0598cc8b2f2b753fa88e4c3da1927a789cfcd6e95639e88d384d701d47bf74e0d4cfc4031ae57915ff179dfee312b2a7aefd50ca4f7e4deaa526703f80d5fd696e9043ed2b8110a3fad5188bf84d55ff73ba9ec6a8145e17369686e2a43b4e8bd4d09351f969432ea0c7940f326eda2cb8a7eb709480b3072af8fd3370ba8edcab2a6e48f8f6bc9679ed95de2a91955acfb2bdbec12ca8809922115edf86c68dc3d16c6dfd89c386976a8e666a9f2f965978f26a73919354eb0779d0c6220db4dceaf92686dc222b8af5472512f065767b63b8b64d370e2dd78a0398cb53a497b4c76863b82836e34aaf8bfe1e530be4622d350c16d20d973b7d6907e21efb393f3f7e57b6e0d660a8af0c689bb3e0d0c70d8a90878d650cf60f56012e80edcd1fad4bf5d7e9989a628ae3b20e755507ce52a9537bb57ba49f263f5905dd0e7c8be3e095b3738cfb9b040d4d81b7ac352bb213d2b47e8b6807b13990ecfcad12f2e0e1e486b5e34513c7f52d04edbd3296f5f5f5ed3d36463dccd417f05c38f156b4e8a78a07ce8536f83c80c8b1af747c83d9250cec54af6a67cc91e69f810d191da79f6640503d63b6172533bcacf5563caeb44c2b657e3039e063531ea22b07797f73218b14d77d94488bbba374202eec6c067ce3336da24893658225dfff4a8c6083954c4dcb9d969941937e8c19c2350da5453dc304ba5db942b33e1d062070478af3721528a77f518b67cff9d7a2e31669bb4e8d0dd6f179805b2e47d30cc1abb532576e8ed067cd0188df6c49ee0c63393bec3d925d88ecebe6a5a8f37f1dfc6762c7a3a596049e7f1787bec7a03e55a50360b83158e49cd9732a66b1cef83e43fd2abd33f753efdb236675490fc9c9381e6f421c9384e43ded79ce91025af90fda6752355ddacbb72aa204e7efa77f3825d7f274aca737bc56c61a1d05bf7004a71c904e8483f3c4df3c9ff5c7b7e350b4c55786d3ea99bb61814881c6e98da71e8f5a0646c44912d12e4a5ad3f2ea14f4d4933ecf7ac8b9464a80204b9c3465fc397aac5a3827bef7187fafb2074b22af3dcde7edaef478c75a0b50ea2ea20b2e08c35b6e48c424e2e3d5767e13dbbb1b87c6012f204f18ae7483d5c29c0a9c46de7917031e168c71c0a5c336c578f9ec41844618d40098542c772110566f1c6271d08842e8870a3ff1890a21b42a1339705edf23ff0b819e13c1fe061f950b86dac060e1654c388c53fa2ebf5988c5d06237b3424d551e5b103494f75bbea021b70aa5a67636f2b243819ce4abae74c4560bf15c9c33d095381e8fcbcf3d32abb2d38e78b9f5b97303fb46d01892258232849700be13dfc18c4f91d5a99c6a05970a6b4dc9179ea91eb4de76bbdf7be554d597d21adb396f0a1fa10fbc99741cc25aca370bfb916bf5bffda325c2405151e8e51426c90e5d782599cc59a7b263ff7a319d04d42835744f628c98e3ee379486f4954eab1742840edcf0fe87fd472f5e439678ac0bbc2295b2c12ea28680794c1c60978498b151c0ef5097480d453a0c22ddb2159316e04539561efbb55926758ae6fb2a3a495cf8aa7b693f1d854f99065e748b735097ea63e21d89515913e797515be6a767d42707ef6a0ebb1d3ff0071a0f4eddfdc85922a15a95f98d5f4a672d93621c975a3601bae013103c68fca1f6fb1c4b5853ffbece2075419263e32c72159268e3dab4ca3f0e5b904f40667bebf099374636d55f5a9ee1bbda48b39def3106041878afb63970cabae3388a33719ed206db73f10e498ff4bf4c0e3606726fc851578613c4bc1429695de29f6d6807eba84afc6ded50b0aa5b77ba864e1b36c035a97df5154b1a40017d919acdb8de617d458ddfe2ceda137bd1da6e2ebd5e32f2553c43e14ef6939ec0fb26a65487557cb1300072f79cbaf74a1221fad0d12added22303067f8292abd1d81e3d2aa200d1d1ed377bd57245ba44b51c927ae8d39e7d46dac00ecbacf30d32aebb568e757680c975dcc6864fafca28609db1ba8a30a74e96a791176f76a5de88c50b49ea20e206557b6e4f44d819b471fa1017cba5e195206de632bfb1b52c4c491bf4d1fbcde097324c7d42cf386f3a8c8410ef5477acbcdba183f0272e5ed5a142523b94899159361e7e48e10ee29e7d0a56e673ef903bcde86c19f71209daec067283c5453cce3dd4f39ac9ce17aa02c7ce6ac359a8d4396ed1aaff38225d41733d469535d5c6cd12b96265653296de79418d088652fef9e684f2f3e2ba4a63ab9ef9de81539e6061037e4efa9e03bcd1e95b2f5d6cacccc9f4e1df7c543befea4fa60513d84bdc84ae761be441116327ec263912cfbc47545546b8b038fe741d3ba495c7d862edba2733b497cef8b823a0198a928fce7f51575a93409c463bbf0aebe8450ad408974c6cf1de0e8ce887beee7fe06cae1c0f502799c1aa1a5942c74cd52497c342367b5850e03e9161f7766b4f3e3e5f9de3282f16be48e0eb8171f0cbda19d6c274f12cd62bc4c1bed7642bb147e9bcf7474f820f60d9020e2edf0c6bb3eb8d1dd53c85303544c0fc353cf0b16091d0bf238df89ed025d6591c5b32de30bf9e8e277a8f5f7a61f15051e38ece2021395dd9be6795ee0879a0bba9af3447973797e92279b3e74321615020a4624fbd9f6fa307a94c68f164942b9c7e0af63c41a7c76fac6d77e135ff5bfdaa3dd4753d0d8094c65f25811c9f593fc07f0710eca9e88c02645f9314d4674c50f869f5ed5246e41333670234412d8b6b2c9a99bf483af0cc0bc56039535e6cd9be1b5801538b39f83ec9fc4bb78a8880c06d27d8838e551a7c5eee3c85421665ca2bff57c21dd37e55939ee9f7e06cfcfc18a41b261422d7f94f1ee692960ba2a81a70c167d9e477d2b4a489dd08b1851dc79d651b468c179bc3e2c32215fa74ee00d449735094ee3a6c819decf11728cea207d41d3c665d210e1ab26a79fbbfba8aed8b401227a1adae500333a29d88086f796757dc12af76888c857407a21d9ed483651003f3298bbdb23f27e3e3e5f99f0dfb64534dd1676403042c62966fc7a3da65a089726ed48fd522b92ca292d0139b424fb6e2fa2b81cc5f95d0d64846d2060ad32edb8fe52eaa06b063512ae25c08664e65c5331dd17abf062a78bab8993766893d1cc04850015013a2f461fd96572496020145dc8fdb6f7393b0b1a380296f3cd8d50dcaa54d5259b0e6bc2da29edd01f9419806149c471d97f9f78f8be7236c7d6ec62885854a95ad81f3f7a2fe7968b446e655e1318d118bf731758a75a9747b6e15e945de3c05f962df9975d4268feea8e5de68fdf385636c66670cf195b7455b8d0b69eef633dc7ac799c451b000413efdcd62701eeaa7de5ecfe21c60aea75e22104f9a8ab443141dc18a61914a5c89336ec08ebe7454e4a5568b7fcd1ef25bdca18d3a6c10879564907742588d2b08d1e946712584acab70b3015cf91bfe1e88e8340b6d1b3f801a9fee09ade3f5989f6738401b56e117c36a9feb7809561f01ac1f360edaa29873a0e4daef2df8e97a483995f0ac114d324672c354a52ad8507b6d9c7ab8a3643fc8b46cc357c8eb396d6dba21b99611ef16139fe123f60c84ff1848dd74a8f32682293b2f5e5d496a8b88bee8990287400f4fa4420492bc85a0422ce9179a0cb7aead52f937c985da74c772538e2c5f3cfb88dda634635d0e797d52f5e3f250587f1b1817a9ea2d44cc2a40819c4f8f12d20a95c999e4b911a261fc4d179c3cec165d4737b72acef9e5f302cc90aec7f21e95c3d4f1df4ab39ff06e6baf9b8da3475e6f9cf9754f7ceabc3fa4e61c374fef8df2826aa4cca6703959b4d82224a3e02c68b4c53e9d850164c98f74bd4d2eff235329a1e72f144d1977780f3ad70162788b5fcb57277665bf136261710260277b4a8b68a067bdfa1d5c5f1d5ea42d45e1b5031b9824f3e2300", 0x2000, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_RESVSP(r1, 0x80086601, 0x0) 4.59254055s ago: executing program 0 (id=293): setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="02000000010000"], 0x24, 0x3) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000300)) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000055395c20009050000000000000007058433c4"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x10, 0x0, &(0x7f00000002c0)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 4.442215813s ago: executing program 3 (id=294): ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) socket$kcm(0x10, 0x2, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8140, 0x0) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) r2 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000cc0)={0x0, 0x0, {0xfffff982, 0x8, 0x300f, 0x3, 0x7, 0x0, 0x2, 0x4}}) modify_ldt$read(0x0, &(0x7f00000002c0)=""/185, 0xb9) socketpair(0x1, 0x1, 0x0, 0x0) socket(0x18, 0x6, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x2c020400) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106}}, 0x20) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x8000000) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x20060d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000040)={0x0}) 3.344316935s ago: executing program 3 (id=299): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c000}, 0x80) 3.202316017s ago: executing program 1 (id=300): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000900)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) preadv2(r0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/72, 0x48}], 0x1, 0x10003, 0x1bf, 0x1) 3.108827369s ago: executing program 3 (id=301): socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$uhid(0xffffff9c, &(0x7f0000000000), 0x802, 0x0) syz_open_dev$sg(&(0x7f0000000040), 0x6, 0x10300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newtaction={0xf0, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xdc, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_sample={0x8c, 0x9, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0xaf}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x5}]}, {0x4f, 0x6, "ba23c3b54bc9cd042e8d27bda68aff5fbe15a4cda4d0f394faf6ce27a3dabbf1b42c5d85d952052c0206f3aeeb13042e52b044e9d99941e8ca77af9395e412aa8e94477ff9885d73a80b2d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000000), 0x8) listen(r2, 0x0) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x0, 0x800, 0x0, 0x9, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x7625, 0x0, 0xffffffffffffffff, 0x0, 0x10}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r3) openat$urandom(0xffffffffffffff9c, 0x0, 0x40142, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000059d84050000000000000000000000000002080002000509000000000000ff01000000000000000000ffffffff01000000800000"], 0x44}}, 0x0) pipe(&(0x7f0000000080)) pipe(&(0x7f0000000100)) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x7) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000040)) 3.000870011s ago: executing program 1 (id=302): getpid() r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x7fffffff, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)=""/244, 0xf4}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000500)=""/249, 0xf9}, {&(0x7f0000000600)=""/79, 0x4f}], &(0x7f0000000200)=[0x3], 0x5}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0xec0, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0xfff1}, {0x0, 0xffff}, {0xffe0, 0xf}}}, 0x24}}, 0x0) 2.924960453s ago: executing program 0 (id=303): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x50483}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private0}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x400000000000041, 0x4880) sendmmsg(r0, &(0x7f0000001980)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x9, r3, 0x1a}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001800)=[{0x10, 0x84, 0x8}, {0x18, 0x6, 0xf413, "5eb7af7f8b58c5ad"}], 0x28}}], 0x2, 0x2000000) 2.756970776s ago: executing program 0 (id=304): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x708, 0x41e3, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x20000023896) execveat(r0, 0x0, &(0x7f0000000100), 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f913", 0x11}], 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x4008092) 2.713643277s ago: executing program 0 (id=305): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) 1.671092657s ago: executing program 1 (id=306): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, 0x0, 0x0, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x501, 0x10008095, 0x0, 0x0) 1.413372852s ago: executing program 2 (id=307): ioctl$TIOCMSET(0xffffffffffffffff, 0x5418, 0x0) socket$kcm(0x10, 0x2, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x1e}, 0x94) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0), 0x8140, 0x0) r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0}) sendto$packet(r0, &(0x7f0000000000)="09000000e70014000000d97bfbf7", 0xe, 0x200000c4, &(0x7f0000000080)={0x11, 0x88a8, r1, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) 150.908247ms ago: executing program 3 (id=312): setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x5, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_access\x00', &(0x7f0000001440)=ANY=[@ANYBLOB="02000000010000"], 0x24, 0x3) ioctl$sock_bt_hci(r0, 0x800448f0, &(0x7f0000000300)) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) sendmsg(r0, &(0x7f0000000980)={0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(r1, &(0x7f0000000b00)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd70102030109024d00010000000009040000055395c20009050000000000000007058433c4"], 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x10, 0x0, &(0x7f00000002c0)) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 60.513279ms ago: executing program 1 (id=313): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x45ffffa, 0x281) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000001100)={r0, 0x0, {0x0, 0x0, 0x0, 0x400000001000000, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "244333791f045158d97405000000000000040000000100", [0xfffffffffeff7ffc]}}) ioctl$BTRFS_IOC_SPACE_INFO(r1, 0x4c09, 0x0) 16.77175ms ago: executing program 2 (id=314): getpid() r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socket$inet6_icmp(0xa, 0x2, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22) sendmmsg(0xffffffffffffffff, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x24, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0x0, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000040}, 0x44080) close(0xffffffffffffffff) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(0xffffffffffffffff, 0x10, &(0x7f0000000280)={0x7fffffff, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)=""/244, 0xf4}, {&(0x7f0000000180)=""/92, 0x5c}, {&(0x7f0000000400)=""/231, 0xe7}, {&(0x7f0000000500)=""/249, 0xf9}, {&(0x7f0000000600)=""/79, 0x4f}], &(0x7f0000000200)=[0x3], 0x5}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newtfilter={0x24, 0x2a, 0xd27, 0xec0, 0x0, {0x0, 0x0, 0x0, r2, {0xffe0, 0xfff1}, {0x0, 0xffff}, {0xffe0, 0xf}}}, 0x24}}, 0x0) 0s ago: executing program 0 (id=315): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000380)={{0x3, 0x81}, 'port0\x00', 0x41, 0x20010, 0x2, 0x1ff, 0x8000, 0xfffffffe, 0x8, 0x0, 0x4, 0xf4}) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) r2 = syz_open_dev$video4linux(&(0x7f0000000c80), 0x7, 0xc82) ioctl$VIDIOC_SUBDEV_G_FMT(r2, 0xc0585604, &(0x7f0000000cc0)={0x0, 0x0, {0xfffff982, 0x8, 0x300f, 0x3, 0x7, 0x0, 0x2, 0x4}}) modify_ldt$read(0x0, &(0x7f00000002c0)=""/185, 0xb9) socketpair(0x1, 0x1, 0x0, 0x0) socket(0x18, 0x6, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) unshare(0x2c020400) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x106}}, 0x20) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x8000000) r3 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x20060d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000040)={0x0}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.2' (ED25519) to the list of known hosts. [ 81.044415][ T5776] cgroup: Unknown subsys name 'net' [ 81.211545][ T5776] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.968634][ T5776] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.660045][ T5788] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.668957][ T5788] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.679898][ T5788] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.688806][ T5788] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.698265][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.706940][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.720739][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.783828][ T5793] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.795395][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.796778][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.804778][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.811373][ T5797] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.818719][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.827012][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.835545][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.840202][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.847581][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.855203][ T5798] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.861033][ T5793] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.874987][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.885360][ T5102] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.893345][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.901310][ T5798] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.909069][ T5798] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.331378][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 85.445425][ T5785] chnl_net:caif_netlink_parms(): no params data found [ 85.529821][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.537336][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.545920][ T5796] bridge_slave_0: entered allmulticast mode [ 85.553800][ T5796] bridge_slave_0: entered promiscuous mode [ 85.566468][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.574940][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.582567][ T5796] bridge_slave_1: entered allmulticast mode [ 85.589910][ T5796] bridge_slave_1: entered promiscuous mode [ 85.708487][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.722800][ T5790] chnl_net:caif_netlink_parms(): no params data found [ 85.765617][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.828586][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.836022][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.844391][ T5785] bridge_slave_0: entered allmulticast mode [ 85.851515][ T5785] bridge_slave_0: entered promiscuous mode [ 85.875602][ T5789] chnl_net:caif_netlink_parms(): no params data found [ 85.886513][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.894422][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.901643][ T5785] bridge_slave_1: entered allmulticast mode [ 85.909111][ T5785] bridge_slave_1: entered promiscuous mode [ 85.920312][ T5796] team0: Port device team_slave_0 added [ 85.930127][ T5796] team0: Port device team_slave_1 added [ 86.062056][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.075341][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.082502][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.108955][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.121206][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.128683][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.136241][ T5790] bridge_slave_0: entered allmulticast mode [ 86.144581][ T5790] bridge_slave_0: entered promiscuous mode [ 86.158585][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.181124][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.188344][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.214682][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.226721][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.234508][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.241756][ T5790] bridge_slave_1: entered allmulticast mode [ 86.249035][ T5790] bridge_slave_1: entered promiscuous mode [ 86.332666][ T5785] team0: Port device team_slave_0 added [ 86.339783][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.347392][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.354793][ T5789] bridge_slave_0: entered allmulticast mode [ 86.361857][ T5789] bridge_slave_0: entered promiscuous mode [ 86.375967][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.386915][ T5785] team0: Port device team_slave_1 added [ 86.406613][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.413935][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.421158][ T5789] bridge_slave_1: entered allmulticast mode [ 86.428577][ T5789] bridge_slave_1: entered promiscuous mode [ 86.451450][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.474200][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.481323][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.507710][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.570590][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.578012][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.604760][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.625399][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.639201][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.653402][ T5796] hsr_slave_0: entered promiscuous mode [ 86.660832][ T5796] hsr_slave_1: entered promiscuous mode [ 86.685561][ T5790] team0: Port device team_slave_0 added [ 86.708604][ T5790] team0: Port device team_slave_1 added [ 86.757153][ T5789] team0: Port device team_slave_0 added [ 86.792821][ T5798] Bluetooth: hci0: command tx timeout [ 86.793856][ T5789] team0: Port device team_slave_1 added [ 86.817090][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.824189][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.850961][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.869663][ T5785] hsr_slave_0: entered promiscuous mode [ 86.876915][ T5785] hsr_slave_1: entered promiscuous mode [ 86.884318][ T5785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.892526][ T5785] Cannot create hsr debugfs directory [ 86.943520][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.950713][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.978905][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.989611][ T5798] Bluetooth: hci1: command tx timeout [ 86.995773][ T5791] Bluetooth: hci2: command tx timeout [ 87.001833][ T5791] Bluetooth: hci3: command tx timeout [ 87.014415][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.021487][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.048030][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.061614][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.068815][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.095230][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.181456][ T5790] hsr_slave_0: entered promiscuous mode [ 87.188178][ T5790] hsr_slave_1: entered promiscuous mode [ 87.195935][ T5790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.204644][ T5790] Cannot create hsr debugfs directory [ 87.267011][ T5789] hsr_slave_0: entered promiscuous mode [ 87.279265][ T5789] hsr_slave_1: entered promiscuous mode [ 87.288194][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.301315][ T5789] Cannot create hsr debugfs directory [ 87.772916][ T5796] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.796839][ T5796] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.819362][ T5796] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.855919][ T5796] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.929141][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.952454][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.997698][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.017329][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.034436][ T5789] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.056197][ T5789] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.067142][ T5789] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.100970][ T5789] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.198726][ T5790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.223244][ T5790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.241467][ T5790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.255134][ T5790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.341274][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.415298][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.438510][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.455987][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.463490][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.493726][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.521176][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.528412][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.561557][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.602886][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.610245][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.651063][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.658449][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.674241][ T5789] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.715711][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.746282][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.754637][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.796153][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.803527][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.825983][ T5790] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.872674][ T5791] Bluetooth: hci0: command tx timeout [ 88.914572][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.921944][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.935782][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.943499][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.032748][ T5791] Bluetooth: hci3: command tx timeout [ 89.038418][ T5791] Bluetooth: hci1: command tx timeout [ 89.044554][ T5798] Bluetooth: hci2: command tx timeout [ 89.139570][ T5790] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.220869][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.380246][ T5796] veth0_vlan: entered promiscuous mode [ 89.400619][ T5796] veth1_vlan: entered promiscuous mode [ 89.499219][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.559086][ T5796] veth0_macvtap: entered promiscuous mode [ 89.585375][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.601550][ T5796] veth1_macvtap: entered promiscuous mode [ 89.671230][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.691056][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.701429][ T5785] veth0_vlan: entered promiscuous mode [ 89.719472][ T5785] veth1_vlan: entered promiscuous mode [ 89.774716][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.788327][ T5796] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.798119][ T5796] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.808866][ T5796] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.817925][ T5796] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.879468][ T5789] veth0_vlan: entered promiscuous mode [ 89.909986][ T5789] veth1_vlan: entered promiscuous mode [ 89.976886][ T5785] veth0_macvtap: entered promiscuous mode [ 90.041864][ T5785] veth1_macvtap: entered promiscuous mode [ 90.068444][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.078671][ T5790] veth0_vlan: entered promiscuous mode [ 90.093741][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.109187][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.124235][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.136229][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.177946][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.179881][ T5785] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.186897][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.205825][ T5785] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.218340][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.228523][ T5790] veth1_vlan: entered promiscuous mode [ 90.264901][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.275341][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.284662][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.294755][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.316603][ T5789] veth0_macvtap: entered promiscuous mode [ 90.346995][ T5789] veth1_macvtap: entered promiscuous mode [ 90.439851][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.475921][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.502443][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.528512][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.559238][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.615552][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.627490][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.647455][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.659029][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.671243][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.706055][ T5789] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.717323][ T5789] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.728719][ T5789] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.737965][ T5789] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.750365][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.762290][ T5790] veth0_macvtap: entered promiscuous mode [ 90.774456][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.791487][ T5790] veth1_macvtap: entered promiscuous mode [ 90.876218][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.884835][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.903874][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.914903][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.926133][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.938161][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.948641][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.952833][ T5791] Bluetooth: hci0: command tx timeout [ 90.959830][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.979565][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.016729][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.028381][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.041613][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.053138][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.063849][ T5790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.075191][ T5790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.089408][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.113438][ T50] Bluetooth: hci2: command tx timeout [ 91.118942][ T50] Bluetooth: hci3: command tx timeout [ 91.124688][ T5791] Bluetooth: hci1: command tx timeout [ 91.155895][ T5790] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.169578][ T5790] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.179836][ T5790] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.189102][ T5790] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.295678][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.333186][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.453638][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.463912][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.471870][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.483115][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.490993][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.584271][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.592540][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.592989][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 91.611846][ T5890] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.635434][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.979569][ T5895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7'. [ 92.119273][ T5892] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 92.426877][ T8] cfg80211: failed to load regulatory.db [ 92.760669][ T5917] netlink: 3 bytes leftover after parsing attributes in process `syz.3.15'. [ 92.776858][ T5917] 0ªX¹¦À: renamed from caif0 [ 92.791857][ T5917] 0ªX¹¦À: entered allmulticast mode [ 92.792732][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.806811][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.815691][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.819979][ T5917] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 92.824658][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.849157][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.858179][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.867052][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 92.904766][ T5919] dccp_invalid_packet: P.Data Offset(10) too large [ 92.987740][ T5919] syz.2.14[5919]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 93.052180][ T5791] Bluetooth: hci0: command tx timeout [ 93.199805][ T5921] hub 9-0:1.0: USB hub found [ 93.205253][ T5791] Bluetooth: hci1: command tx timeout [ 93.210873][ T50] Bluetooth: hci3: command tx timeout [ 93.216699][ T5798] Bluetooth: hci2: command tx timeout [ 93.232199][ T5921] hub 9-0:1.0: 1 port detected [ 93.803611][ T5928] tipc: Enabling of bearer rejected, failed to enable media [ 93.825470][ T5928] syzkaller0: entered promiscuous mode [ 93.866030][ T5928] syzkaller0: entered allmulticast mode [ 94.072892][ T54] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.272701][ T54] usb 2-1: Using ep0 maxpacket: 8 [ 94.302703][ T54] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 94.332418][ T54] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 94.345752][ T54] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 94.362435][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.370606][ T54] usb 2-1: Product: syz [ 94.375311][ T54] usb 2-1: Manufacturer: syz [ 94.380032][ T54] usb 2-1: SerialNumber: syz [ 94.410341][ T54] usb 2-1: config 0 descriptor?? [ 94.771639][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.2.23'. [ 94.814197][ T5936] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 94.846042][ T5936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.23'. [ 95.198425][ T5947] netlink: 4 bytes leftover after parsing attributes in process `syz.3.26'. [ 95.260425][ T5951] netlink: 104 bytes leftover after parsing attributes in process `syz.2.28'. [ 95.685241][ T5958] tipc: Enabling of bearer rejected, failed to enable media [ 95.701691][ T5958] syzkaller0: entered promiscuous mode [ 95.721334][ T5958] syzkaller0: entered allmulticast mode [ 96.904005][ T5827] usb 2-1: USB disconnect, device number 2 [ 97.183980][ T5853] kernel read not supported for file /snd/controlC0 (pid: 5853 comm: kworker/0:4) [ 97.334208][ T5986] netlink: 48 bytes leftover after parsing attributes in process `syz.2.39'. [ 99.225619][ T6007] netlink: 52 bytes leftover after parsing attributes in process `syz.3.48'. [ 99.236161][ T6007] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 99.352499][ T5854] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 99.390630][ T6009] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'. [ 99.467736][ T6012] netlink: 48 bytes leftover after parsing attributes in process `syz.0.49'. [ 99.656722][ T5854] usb 2-1: Using ep0 maxpacket: 8 [ 99.957223][ T5854] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.968316][ T5854] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 99.983006][ T5854] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 99.994232][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.009531][ T5854] usb 2-1: Product: syz [ 100.016909][ T5854] usb 2-1: Manufacturer: syz [ 100.060066][ T5854] usb 2-1: SerialNumber: syz [ 100.070148][ T5854] usb 2-1: config 0 descriptor?? [ 102.325936][ T23] usb 2-1: USB disconnect, device number 3 [ 105.348661][ T6082] netlink: 48 bytes leftover after parsing attributes in process `syz.0.71'. [ 106.002913][ T5791] Bluetooth: hci2: command tx timeout [ 106.282482][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.482383][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 106.508370][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.549260][ T8] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 106.577280][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.603949][ T8] usb 4-1: config 0 descriptor?? [ 107.058014][ T8] mcp2221 0003:04D8:00DD.0001: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 107.739015][ T8] usb 4-1: USB disconnect, device number 2 [ 108.485949][ T5791] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 108.827004][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 109.042354][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 109.114538][ T8] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 109.144366][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.188769][ T8] usb 1-1: config 0 descriptor?? [ 109.419091][ T8] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 109.532418][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 109.621405][ T8] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 109.644274][ T8] usb 1-1: media controller created [ 109.740905][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.240223][ T6137] fuse: Bad value for 'fd' [ 110.289935][ T6137] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 110.492456][ T54] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.693063][ T54] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.728675][ T54] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 110.775050][ T54] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 110.828748][ T54] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 110.861062][ T54] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 110.881124][ T54] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.902358][ T54] usb 3-1: Product: syz [ 110.911479][ T54] usb 3-1: Manufacturer: syz [ 110.923532][ T54] usb 3-1: SerialNumber: syz [ 110.941863][ T54] usb 3-1: config 0 descriptor?? [ 111.016812][ T54] garmin_gps 3-1:0.0: Garmin GPS usb/tty converter detected [ 111.073570][ T54] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 111.183144][ T54] garmin_gps: probe of ttyUSB0 failed with error -8 [ 111.227566][ T6135] fuse: Unknown parameter 'fd0x0000000000000009' [ 111.282660][ T54] usb 3-1: USB disconnect, device number 2 [ 111.302401][ T5854] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.321737][ T54] garmin_gps 3-1:0.0: device disconnected [ 111.511053][ T5854] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 111.515604][ T5854] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 111.515636][ T5854] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 111.515656][ T5854] usb 4-1: Product: syz [ 111.515671][ T5854] usb 4-1: Manufacturer: syz [ 111.515681][ T5854] usb 4-1: SerialNumber: syz [ 111.862365][ T8] az6027: usb out operation failed. (-110) [ 111.903133][ T8] az6027: usb out operation failed. (-32) [ 111.912513][ T8] stb0899_attach: Driver disabled by Kconfig [ 111.940445][ T8] az6027: no front-end attached [ 111.940445][ T8] [ 111.970384][ T8] az6027: usb out operation failed. (-71) [ 111.979090][ T8] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 112.003109][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 112.023487][ T8] dvb-usb: schedule remote query interval to 400 msecs. [ 112.030638][ T8] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 112.042070][ T8] usb 1-1: USB disconnect, device number 2 [ 112.194122][ T8] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 112.232657][ T50] Bluetooth: hci0: command tx timeout [ 112.253120][ T5854] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 112.462343][ T5854] usb 3-1: Using ep0 maxpacket: 8 [ 112.472730][ T5854] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 112.485607][ T5854] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 112.496551][ T5854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.524771][ T5854] usb 3-1: Product: syz [ 112.534290][ T5854] usb 3-1: Manufacturer: syz [ 112.541105][ T5854] usb 3-1: SerialNumber: syz [ 112.559961][ T5854] usb 3-1: config 0 descriptor?? [ 112.712776][ T8] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 112.912481][ T8] usb 1-1: Using ep0 maxpacket: 16 [ 112.924262][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.947132][ T8] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 112.965512][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.973264][ T8] usb 1-1: config 0 descriptor?? [ 113.397699][ T8] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 113.808852][ T5854] usb 1-1: USB disconnect, device number 3 [ 114.002670][ T5883] usb 4-1: USB disconnect, device number 3 [ 114.511219][ T50] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 115.180035][ T23] usb 3-1: USB disconnect, device number 3 [ 115.222447][ T5883] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 115.472738][ T5883] usb 1-1: Using ep0 maxpacket: 32 [ 115.551582][ T5883] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 115.571819][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.602903][ T5883] usb 1-1: config 0 descriptor?? [ 115.843906][ T5883] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 115.905470][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 116.000304][ T5883] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 116.046169][ T5883] usb 1-1: media controller created [ 116.159553][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 116.366799][ T6208] ptrace attach of "./syz-executor exec"[5789] was attempted by "./syz-executor exec"[6208] [ 116.745081][ T6211] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 117.122578][ T8] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 117.362589][ T8] usb 3-1: Using ep0 maxpacket: 8 [ 117.420810][ T8] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 117.458955][ T8] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 117.486027][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.507425][ T8] usb 3-1: Product: syz [ 117.526900][ T8] usb 3-1: Manufacturer: syz [ 117.544165][ T8] usb 3-1: SerialNumber: syz [ 117.574856][ T8] usb 3-1: config 0 descriptor?? [ 117.796166][ T6217] syzkaller0: entered promiscuous mode [ 117.813328][ T6217] syzkaller0: entered allmulticast mode [ 118.279344][ T5883] az6027: usb out operation failed. (-71) [ 118.298936][ T5883] az6027: usb out operation failed. (-71) [ 118.333746][ T5883] stb0899_attach: Driver disabled by Kconfig [ 118.360089][ T5883] az6027: no front-end attached [ 118.360089][ T5883] [ 118.390068][ T5883] az6027: usb out operation failed. (-71) [ 118.409095][ T5883] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 118.437719][ T5883] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input6 [ 118.494556][ T5883] dvb-usb: schedule remote query interval to 400 msecs. [ 118.542617][ T5883] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 118.599899][ T5883] usb 1-1: USB disconnect, device number 4 [ 118.783959][ T5883] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 119.898801][ T8] usb 3-1: USB disconnect, device number 4 [ 120.722953][ T6253] syzkaller0: entered promiscuous mode [ 120.776449][ T6253] syzkaller0: entered allmulticast mode [ 120.854392][ T5883] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 121.052678][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 121.135531][ T5883] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 121.162807][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.188017][ T5883] usb 3-1: config 0 descriptor?? [ 121.193585][ T50] Bluetooth: hci1: command tx timeout [ 121.501386][ T5883] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 121.525697][ T5883] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 121.549228][ T5883] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 121.589890][ T5883] usb 3-1: media controller created [ 121.634104][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.704585][ T6272] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 121.739727][ T6272] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 121.852497][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.042329][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 122.057820][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 122.094980][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 122.122185][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.145446][ T9] usb 4-1: Product: syz [ 122.158697][ T9] usb 4-1: Manufacturer: syz [ 122.177630][ T9] usb 4-1: SerialNumber: syz [ 122.205087][ T9] usb 4-1: config 0 descriptor?? [ 123.753099][ T5883] az6027: usb out operation failed. (-110) [ 123.760321][ T5883] az6027: usb out operation failed. (-32) [ 123.771263][ T5883] stb0899_attach: Driver disabled by Kconfig [ 123.806381][ T5883] az6027: no front-end attached [ 123.806381][ T5883] [ 123.832581][ T5883] az6027: usb out operation failed. (-32) [ 123.838395][ T5883] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 124.289616][ T5883] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7 [ 124.304224][ T5883] dvb-usb: schedule remote query interval to 400 msecs. [ 124.311890][ T5883] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 124.472124][ T6293] netlink: 68 bytes leftover after parsing attributes in process `syz.0.137'. [ 124.618985][ T9] usb 3-1: USB disconnect, device number 5 [ 124.718927][ T5827] usb 4-1: USB disconnect, device number 4 [ 124.816107][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 124.889272][ T6297] syzkaller0: entered promiscuous mode [ 124.910349][ T6297] syzkaller0: entered allmulticast mode [ 125.322363][ T5827] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 125.524229][ T5827] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.541591][ T5827] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 125.574285][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 125.588379][ T5827] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 125.618680][ T5827] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 125.634207][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.647756][ T5827] usb 4-1: Product: syz [ 125.653834][ T5827] usb 4-1: Manufacturer: syz [ 125.658687][ T5827] usb 4-1: SerialNumber: syz [ 125.669973][ T5827] usb 4-1: config 0 descriptor?? [ 125.689400][ T5827] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 125.700125][ T5827] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 125.722357][ T5827] garmin_gps: probe of ttyUSB0 failed with error -8 [ 125.891854][ T6299] fuse: Unknown parameter 'fd0x0000000000000009' [ 125.915419][ T8] usb 4-1: USB disconnect, device number 5 [ 125.956911][ T8] garmin_gps 4-1:0.0: device disconnected [ 126.135849][ T6317] netlink: 68 bytes leftover after parsing attributes in process `syz.0.146'. [ 126.782697][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 126.962555][ T50] Bluetooth: hci0: command tx timeout [ 127.092476][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 127.106027][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.1.151'. [ 127.117752][ T6330] netlink: 24 bytes leftover after parsing attributes in process `syz.1.151'. [ 127.143065][ T8] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 127.163119][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.222360][ T5827] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 127.276080][ T6331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.151'. [ 128.834994][ T8] usb 1-1: config 0 descriptor?? [ 129.555041][ T6334] syzkaller0: entered promiscuous mode [ 129.560706][ T6334] syzkaller0: entered allmulticast mode [ 129.614811][ T5827] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 129.625273][ T5827] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 129.702465][ T5827] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 129.758327][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 129.802386][ T5827] usb 4-1: Product: syz [ 129.806972][ T5827] usb 4-1: Manufacturer: syz [ 129.819274][ T5827] usb 4-1: SerialNumber: syz [ 130.003005][ T5853] usb 4-1: USB disconnect, device number 6 [ 130.220610][ T5827] IPVS: starting estimator thread 0... [ 130.342568][ T6341] IPVS: using max 25 ests per chain, 60000 per kthread [ 130.545021][ T8] usb 1-1: can't set config #0, error -71 [ 130.561661][ T8] usb 1-1: USB disconnect, device number 5 [ 131.200629][ T6365] process 'syz.1.160' launched './file2' with NULL argv: empty string added [ 131.238611][ T6364] syzkaller0: entered promiscuous mode [ 131.259026][ T6364] syzkaller0: entered allmulticast mode [ 131.372352][ T8] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 131.594959][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.612542][ T8] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 131.644913][ T8] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 131.654596][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 131.665016][ T8] usb 3-1: Product: syz [ 131.669852][ T8] usb 3-1: Manufacturer: syz [ 131.676531][ T8] usb 3-1: SerialNumber: syz [ 132.362439][ T54] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 132.562362][ T54] usb 4-1: Using ep0 maxpacket: 32 [ 132.628563][ T54] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 132.668783][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.713242][ T54] usb 4-1: config 0 descriptor?? [ 132.951187][ T54] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 132.976030][ T54] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 133.014992][ T54] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 133.028861][ T54] usb 4-1: media controller created [ 133.074096][ T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.196585][ T5883] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 133.357430][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.366506][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.416791][ T5883] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.447340][ T5883] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 133.469606][ T5883] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 133.494855][ T5883] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.528634][ T5883] usb 2-1: config 0 descriptor?? [ 133.561751][ T5883] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 133.571758][ T5883] dvb-usb: bulk message failed: -22 (3/0) [ 133.605530][ T5883] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 133.645911][ T5883] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 133.668889][ T5883] usb 2-1: media controller created [ 133.685702][ T5883] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 133.777832][ T6382] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 133.779283][ T5883] dvb-usb: bulk message failed: -22 (6/0) [ 133.856645][ T5883] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 133.946036][ T5883] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 133.969480][ T5883] dvb-usb: schedule remote query interval to 150 msecs. [ 134.006590][ T5883] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 134.026335][ T8] usb 3-1: USB disconnect, device number 6 [ 134.128509][ T5883] usb 2-1: USB disconnect, device number 4 [ 134.301037][ T5883] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 134.539816][ T5827] IPVS: starting estimator thread 0... [ 134.672448][ T6386] IPVS: using max 26 ests per chain, 62400 per kthread [ 135.202261][ T6391] netlink: 48 bytes leftover after parsing attributes in process `syz.1.170'. [ 135.467058][ T54] az6027: usb out operation failed. (-110) [ 135.563765][ T54] az6027: usb out operation failed. (-32) [ 135.640952][ T54] stb0899_attach: Driver disabled by Kconfig [ 135.672899][ T54] az6027: no front-end attached [ 135.672899][ T54] [ 135.721056][ T54] az6027: usb out operation failed. (-32) [ 135.737846][ T54] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 135.778614][ T54] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input9 [ 135.806241][ T54] dvb-usb: schedule remote query interval to 400 msecs. [ 135.817825][ T54] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 135.895113][ T28] audit: type=1400 audit(1756922804.941:2): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=6393 comm="syz.2.172" [ 135.939993][ T6400] usb usb8: usbfs: process 6400 (syz.2.172) did not claim interface 0 before use [ 136.070329][ T5827] usb 4-1: USB disconnect, device number 7 [ 136.178565][ T5827] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 136.654337][ T6410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.176'. [ 137.313173][ T5883] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 137.442350][ T54] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 137.524702][ T5883] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 137.555144][ T5883] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 137.598422][ T5883] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 137.607984][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 137.616351][ T5883] usb 1-1: Product: syz [ 137.620916][ T5883] usb 1-1: Manufacturer: syz [ 137.627212][ T5883] usb 1-1: SerialNumber: syz [ 137.713368][ T54] usb 2-1: Using ep0 maxpacket: 8 [ 137.732697][ T54] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 137.741165][ T54] usb 2-1: config 0 has no interface number 0 [ 137.748365][ T54] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 137.759892][ T54] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 137.771703][ T54] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 137.791665][ T54] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 137.801505][ T54] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.814020][ T54] usb 2-1: config 0 descriptor?? [ 137.827930][ T54] ldusb 2-1:0.55: Interrupt in endpoint not found [ 137.985749][ T6421] netlink: 48 bytes leftover after parsing attributes in process `syz.3.181'. [ 138.060908][ T5883] usb 2-1: USB disconnect, device number 5 [ 138.622454][ T54] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 138.852388][ T54] usb 4-1: Using ep0 maxpacket: 32 [ 138.865002][ T54] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 138.874670][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.900213][ T54] usb 4-1: config 0 descriptor?? [ 139.136420][ T54] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 139.164329][ T54] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 139.179824][ T6437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.186'. [ 139.192071][ T54] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 139.235849][ T54] usb 4-1: media controller created [ 139.308142][ T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 139.939273][ T5883] usb 1-1: USB disconnect, device number 6 [ 140.267611][ T6450] netlink: 48 bytes leftover after parsing attributes in process `syz.1.190'. [ 140.837456][ T5883] IPVS: starting estimator thread 0... [ 140.992653][ T6457] IPVS: using max 17 ests per chain, 40800 per kthread [ 141.442500][ T54] az6027: usb out operation failed. (-110) [ 141.462637][ T54] az6027: usb out operation failed. (-32) [ 141.487117][ T54] stb0899_attach: Driver disabled by Kconfig [ 141.542362][ T54] az6027: no front-end attached [ 141.542362][ T54] [ 141.574762][ T54] az6027: usb out operation failed. (-32) [ 141.580558][ T54] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 141.620400][ T54] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input10 [ 141.655110][ T54] dvb-usb: schedule remote query interval to 400 msecs. [ 141.771883][ T54] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 141.774851][ T6466] fuse: Bad value for 'fd' [ 141.880873][ T5854] usb 4-1: USB disconnect, device number 8 [ 142.106517][ T5854] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 142.202111][ T6473] syzkaller0: entered promiscuous mode [ 142.215943][ T6468] 9pnet: Could not find request transport: fd00000000000000000010 [ 142.225994][ T6473] syzkaller0: entered allmulticast mode [ 142.736182][ T6480] wireguard0: entered promiscuous mode [ 142.743991][ T6480] wireguard0: entered allmulticast mode [ 142.835113][ T6486] netlink: 4 bytes leftover after parsing attributes in process `syz.0.200'. [ 143.952345][ T5854] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 144.204131][ T5854] usb 3-1: Using ep0 maxpacket: 32 [ 144.312981][ T5854] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 144.338583][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.405299][ T5854] usb 3-1: config 0 descriptor?? [ 144.636009][ T5854] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 144.678215][ T5854] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 144.716867][ T5854] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 144.737487][ T5854] usb 3-1: media controller created [ 144.743775][ T5827] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 144.810106][ T5854] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 144.973081][ T5827] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.042371][ T5827] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 145.142571][ T5827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 145.164654][ T5827] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 145.194408][ T5827] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 145.205463][ T5827] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.218383][ T5827] usb 1-1: Product: syz [ 145.226184][ T5827] usb 1-1: Manufacturer: syz [ 145.232112][ T5827] usb 1-1: SerialNumber: syz [ 145.243711][ T5827] usb 1-1: config 0 descriptor?? [ 145.255675][ T5827] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected [ 145.292122][ T5827] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 145.327106][ T5827] garmin_gps: probe of ttyUSB0 failed with error -8 [ 145.470575][ T6511] fuse: Unknown parameter 'fd0x0000000000000009' [ 145.474962][ T6517] syzkaller0: entered promiscuous mode [ 145.483058][ T6517] syzkaller0: entered allmulticast mode [ 145.494878][ T5827] usb 1-1: USB disconnect, device number 7 [ 145.510555][ T5827] garmin_gps 1-1:0.0: device disconnected [ 146.060418][ T6521] fuse: Unknown parameter 'user_id00000000000000000000' [ 146.083905][ T6519] netlink: 228 bytes leftover after parsing attributes in process `syz.3.212'. [ 146.099939][ T6521] binder: 6520:6521 ioctl c00c620f 2000000001c0 returned -22 [ 146.472421][ T5791] Bluetooth: hci0: command tx timeout [ 146.952841][ T5854] az6027: usb out operation failed. (-110) [ 146.965908][ T5854] az6027: usb out operation failed. (-32) [ 147.036004][ T5854] stb0899_attach: Driver disabled by Kconfig [ 147.059991][ T5854] az6027: no front-end attached [ 147.059991][ T5854] [ 147.091500][ T5854] az6027: usb out operation failed. (-32) [ 147.114420][ T5854] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 147.156610][ T5854] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11 [ 147.222643][ T5854] dvb-usb: schedule remote query interval to 400 msecs. [ 147.236429][ T6539] netlink: 4 bytes leftover after parsing attributes in process `syz.3.217'. [ 147.258045][ T5854] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 147.559739][ T54] usb 3-1: USB disconnect, device number 7 [ 147.673934][ T54] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 148.020692][ T6549] syzkaller0: entered promiscuous mode [ 148.026890][ T6549] syzkaller0: entered allmulticast mode [ 148.478605][ T6555] netlink: 48 bytes leftover after parsing attributes in process `syz.1.222'. [ 149.103379][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz.0.224'. [ 149.280073][ T6551] syz.2.220: vmalloc error: size 33583104, failed to allocated page array size 65592, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 149.307363][ T54] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 149.315231][ T6551] CPU: 0 PID: 6551 Comm: syz.2.220 Not tainted syzkaller #0 [ 149.322758][ T6551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 149.333492][ T6551] Call Trace: [ 149.336909][ T6551] [ 149.339988][ T6551] dump_stack_lvl+0x16c/0x230 [ 149.344933][ T6551] ? show_regs_print_info+0x20/0x20 [ 149.350287][ T6551] ? load_image+0x3b0/0x3b0 [ 149.354860][ T6551] ? __rcu_read_unlock+0x7c/0xd0 [ 149.360214][ T6551] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 149.366776][ T6551] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 149.373353][ T6551] warn_alloc+0x210/0x300 [ 149.377777][ T6551] ? zone_watermark_ok_safe+0x230/0x230 [ 149.383488][ T6551] ? _raw_spin_unlock+0x28/0x40 [ 149.388392][ T6551] ? __kmem_cache_free+0xba/0x1f0 [ 149.393453][ T6551] __vmalloc_node_range+0x662/0x1320 [ 149.398798][ T6551] ? free_vm_area+0x50/0x50 [ 149.403625][ T6551] ? kvmalloc_node+0x70/0x180 [ 149.408530][ T6551] ? kvmalloc_node+0x70/0x180 [ 149.413445][ T6551] ? trace_kmalloc+0x1f/0xa0 [ 149.418081][ T6551] kvmalloc_node+0x13f/0x180 [ 149.422716][ T6551] ? drm_property_create_blob+0x65/0x300 [ 149.428566][ T6551] ? handle_userfault+0x33b/0x12a0 [ 149.433887][ T6551] drm_property_create_blob+0x65/0x300 [ 149.439488][ T6551] drm_mode_createblob_ioctl+0xc1/0x3c0 [ 149.445346][ T6551] ? drm_mode_getblob_ioctl+0x2e0/0x2e0 [ 149.451019][ T6551] drm_ioctl_kernel+0x35f/0x4c0 [ 149.455913][ T6551] ? drm_mode_getblob_ioctl+0x2e0/0x2e0 [ 149.461499][ T6551] ? drm_copy_field+0x170/0x170 [ 149.466476][ T6551] ? __might_fault+0xaa/0x120 [ 149.471183][ T6551] ? __might_fault+0xc6/0x120 [ 149.476075][ T6551] ? __might_fault+0xaa/0x120 [ 149.480785][ T6551] drm_ioctl+0x661/0xac0 [ 149.485089][ T6551] ? drm_mode_getblob_ioctl+0x2e0/0x2e0 [ 149.490767][ T6551] ? drm_ioctl_kernel+0x4c0/0x4c0 [ 149.496035][ T6551] ? bpf_lsm_file_ioctl+0x9/0x10 [ 149.501731][ T6551] ? security_file_ioctl+0x80/0xa0 [ 149.506949][ T6551] ? drm_ioctl_kernel+0x4c0/0x4c0 [ 149.512193][ T6551] __se_sys_ioctl+0xfd/0x170 [ 149.516906][ T6551] do_syscall_64+0x55/0xb0 [ 149.521695][ T6551] ? clear_bhb_loop+0x40/0x90 [ 149.526762][ T6551] ? clear_bhb_loop+0x40/0x90 [ 149.531651][ T6551] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 149.537858][ T6551] RIP: 0033:0x7f7377d8ebe9 [ 149.542415][ T6551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.562622][ T6551] RSP: 002b:00007f7378c66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 149.571157][ T6551] RAX: ffffffffffffffda RBX: 00007f7377fc6180 RCX: 00007f7377d8ebe9 [ 149.579539][ T6551] RDX: 0000200000000040 RSI: 00000000c01064bd RDI: 000000000000000a [ 149.587810][ T6551] RBP: 00007f7377e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 149.596004][ T6551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.604592][ T6551] R13: 00007f7377fc6218 R14: 00007f7377fc6180 R15: 00007ffec55273a8 [ 149.612619][ T6551] [ 149.636170][ T6551] Mem-Info: [ 149.675805][ T6551] active_anon:5259 inactive_anon:0 isolated_anon:0 [ 149.675805][ T6551] active_file:1159 inactive_file:39864 isolated_file:0 [ 149.675805][ T6551] unevictable:2816 dirty:101 writeback:0 [ 149.675805][ T6551] slab_reclaimable:9844 slab_unreclaimable:91067 [ 149.675805][ T6551] mapped:25686 shmem:1361 pagetables:607 [ 149.675805][ T6551] sec_pagetables:0 bounce:0 [ 149.675805][ T6551] kernel_misc_reclaimable:0 [ 149.675805][ T6551] free:1361869 free_pcp:10335 free_cma:0 [ 149.735180][ T6551] Node 0 active_anon:21036kB inactive_anon:0kB active_file:4636kB inactive_file:159252kB unevictable:9728kB isolated(anon):0kB isolated(file):0kB mapped:102744kB dirty:400kB writeback:0kB shmem:3908kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB writeback_tmp:0kB kernel_stack:11432kB pagetables:2428kB sec_pagetables:0kB all_unreclaimable? no [ 149.775728][ T6551] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 149.850086][ T6551] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 149.884260][ T54] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.894867][ T54] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 149.905420][ T6551] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 149.919435][ T6551] Node 0 DMA32 free:1541052kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:21088kB inactive_anon:0kB active_file:4636kB inactive_file:157936kB unevictable:9728kB writepending:400kB present:3129332kB managed:2589592kB mlocked:8192kB bounce:0kB free_pcp:22208kB local_pcp:11464kB free_cma:0kB [ 149.951227][ T6551] lowmem_reserve[]: 0 0 1 1 1 [ 149.955262][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 149.967600][ T6551] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 150.018228][ T54] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 150.038498][ T6551] lowmem_reserve[]: 0 0 0 0 0 [ 150.045485][ T6551] Node 1 Normal free:3891056kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18976kB local_pcp:9920kB free_cma:0kB [ 150.076281][ T6551] lowmem_reserve[]: 0 0 0 0 0 [ 150.081178][ T6551] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 150.096183][ T6551] Node 0 DMA32: 175*4kB (ME) 956*8kB (UME) 656*16kB (UME) 143*32kB (UME) 57*64kB (UME) 20*128kB (UME) 24*256kB (UME) 28*512kB (UME) 10*1024kB (UME) 3*2048kB (UME) 360*4096kB (UM) = 1541052kB [ 150.142561][ T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 150.168852][ T54] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 150.182404][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.221756][ T54] usb 4-1: Product: syz [ 150.231888][ T54] usb 4-1: Manufacturer: syz [ 150.262407][ T54] usb 4-1: SerialNumber: syz [ 150.279937][ T6551] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 150.293977][ T54] usb 4-1: config 0 descriptor?? [ 150.299210][ T6551] Node 1 Normal: 250*4kB (UME) 67*8kB (UME) 49*16kB (UME) 87*32kB (UME) 22*64kB (UE) 8*128kB (UME) 2*256kB (UE) 2*512kB (ME) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3891056kB [ 150.337036][ T54] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 150.353956][ T54] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 150.365008][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 150.383582][ T8] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 150.402530][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.411375][ T54] garmin_gps: probe of ttyUSB0 failed with error -8 [ 150.445450][ T8] usb 1-1: config 0 descriptor?? [ 150.494206][ T6551] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.509683][ T6551] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.523249][ T6551] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 150.540898][ T6557] fuse: Unknown parameter 'fd0x0000000000000009' [ 150.549672][ T6551] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 150.573278][ T5172] usb 4-1: USB disconnect, device number 9 [ 150.588374][ T6551] 42386 total pagecache pages [ 150.599720][ T6551] 0 pages in swap cache [ 150.603283][ T5172] garmin_gps 4-1:0.0: device disconnected [ 150.610516][ T6551] Free swap = 124996kB [ 150.661478][ T6551] Total swap = 124996kB [ 150.666307][ T8] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 150.676408][ T6551] 2097051 pages RAM [ 150.680448][ T6551] 0 pages HighMem/MovableOnly [ 150.685313][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 150.733336][ T8] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 150.740609][ T8] usb 1-1: media controller created [ 150.766634][ T6551] 416139 pages reserved [ 150.770963][ T6551] 0 pages cma reserved [ 150.833200][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 150.913154][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 151.032740][ T5791] Bluetooth: hci0: command tx timeout [ 151.415458][ T6577] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 151.458684][ T6581] syzkaller0: entered promiscuous mode [ 151.465007][ T6581] syzkaller0: entered allmulticast mode [ 152.962840][ T8] az6027: usb out operation failed. (-110) [ 152.969439][ T8] az6027: usb out operation failed. (-32) [ 152.976116][ T8] stb0899_attach: Driver disabled by Kconfig [ 152.992110][ T8] az6027: no front-end attached [ 152.992110][ T8] [ 153.000527][ T8] az6027: usb out operation failed. (-32) [ 153.008778][ T8] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 153.021654][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input12 [ 153.051828][ T8] dvb-usb: schedule remote query interval to 400 msecs. [ 153.068972][ T8] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 153.321982][ T6599] wireguard0: entered promiscuous mode [ 153.329227][ T6599] wireguard0: entered allmulticast mode [ 153.539841][ T8] usb 1-1: USB disconnect, device number 8 [ 153.584087][ T8] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 153.945708][ T6613] syz.3.240 uses obsolete (PF_INET,SOCK_PACKET) [ 154.092461][ T5827] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 154.221884][ T6611] tipc: Failed to remove unknown binding: 66,1,1/0:3265237761/3265237763 [ 154.240143][ T6611] tipc: Failed to remove unknown binding: 66,1,1/0:3265237761/3265237763 [ 154.324590][ T5827] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.342280][ T5827] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.389701][ T5827] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 154.408361][ T5827] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 154.445450][ T5827] usb 3-1: Product: syz [ 154.462506][ T5827] usb 3-1: Manufacturer: syz [ 154.473607][ T50] Bluetooth: hci0: command tx timeout [ 154.501677][ T5827] usb 3-1: SerialNumber: syz [ 156.452648][ T8] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.662407][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 156.686280][ T8] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 156.727058][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.782569][ T8] usb 2-1: config 0 descriptor?? [ 156.782840][ T5883] usb 3-1: USB disconnect, device number 8 [ 157.081217][ T8] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 157.128222][ T8] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 157.148757][ T8] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 157.175945][ T8] usb 2-1: media controller created [ 157.256099][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.712544][ T5791] Bluetooth: hci3: command tx timeout [ 159.212411][ T5883] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 159.404746][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 159.434472][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 159.462582][ T8] az6027: usb out operation failed. (-110) [ 159.465201][ T5883] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 159.512741][ T8] az6027: usb out operation failed. (-71) [ 159.518572][ T8] stb0899_attach: Driver disabled by Kconfig [ 159.549595][ T5883] usb 1-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 159.569489][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.577950][ T8] az6027: no front-end attached [ 159.577950][ T8] [ 159.589654][ T5883] usb 1-1: Product: syz [ 159.594868][ T5883] usb 1-1: Manufacturer: syz [ 159.599908][ T8] az6027: usb out operation failed. (-71) [ 159.617932][ T8] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 159.626302][ T5883] usb 1-1: SerialNumber: syz [ 159.649985][ T8] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input13 [ 159.663376][ T6652] syz.2.249: vmalloc error: size 35651584, failed to allocated page array size 69632, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 159.695948][ T5883] usb 1-1: config 0 descriptor?? [ 159.734071][ T6652] CPU: 1 PID: 6652 Comm: syz.2.249 Not tainted syzkaller #0 [ 159.741524][ T6652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 159.751626][ T6652] Call Trace: [ 159.754958][ T6652] [ 159.757924][ T6652] dump_stack_lvl+0x16c/0x230 [ 159.762658][ T6652] ? show_regs_print_info+0x20/0x20 [ 159.767992][ T6652] ? load_image+0x3b0/0x3b0 [ 159.772632][ T6652] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 159.779182][ T6652] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 159.785913][ T6652] warn_alloc+0x210/0x300 [ 159.790516][ T6652] ? zone_watermark_ok_safe+0x230/0x230 [ 159.793602][ T8] dvb-usb: schedule remote query interval to 400 msecs. [ 159.796191][ T6652] ? _raw_spin_unlock+0x28/0x40 [ 159.808186][ T6652] __vmalloc_node_range+0x662/0x1320 [ 159.813607][ T6652] ? __asan_memset+0x22/0x40 [ 159.818235][ T6652] ? free_vm_area+0x50/0x50 [ 159.822848][ T6652] ? kvmalloc_node+0x70/0x180 [ 159.827622][ T6652] ? kvmalloc_node+0x70/0x180 [ 159.832329][ T6652] ? trace_kmalloc+0x1f/0xa0 [ 159.837125][ T6652] kvmalloc_node+0x13f/0x180 [ 159.841753][ T6652] ? drm_property_create_blob+0x65/0x300 [ 159.847432][ T6652] ? handle_userfault+0x33b/0x12a0 [ 159.852687][ T6652] drm_property_create_blob+0x65/0x300 [ 159.858180][ T6652] drm_mode_createblob_ioctl+0xc1/0x3c0 [ 159.863804][ T6652] ? drm_mode_getblob_ioctl+0x2e0/0x2e0 [ 159.869542][ T6652] drm_ioctl_kernel+0x35f/0x4c0 [ 159.874605][ T6652] ? drm_mode_getblob_ioctl+0x2e0/0x2e0 [ 159.880386][ T6652] ? drm_copy_field+0x170/0x170 [ 159.885354][ T6652] ? __might_fault+0xaa/0x120 [ 159.890061][ T6652] ? __might_fault+0xc6/0x120 [ 159.894758][ T6652] ? __might_fault+0xaa/0x120 [ 159.899463][ T6652] drm_ioctl+0x661/0xac0 [ 159.903791][ T6652] ? drm_mode_getblob_ioctl+0x2e0/0x2e0 [ 159.909638][ T6652] ? drm_ioctl_kernel+0x4c0/0x4c0 [ 159.914706][ T6652] ? bpf_lsm_file_ioctl+0x9/0x10 [ 159.919664][ T6652] ? security_file_ioctl+0x80/0xa0 [ 159.924910][ T6652] ? drm_ioctl_kernel+0x4c0/0x4c0 [ 159.929971][ T6652] __se_sys_ioctl+0xfd/0x170 [ 159.934835][ T6652] do_syscall_64+0x55/0xb0 [ 159.939338][ T6652] ? clear_bhb_loop+0x40/0x90 [ 159.944060][ T6652] ? clear_bhb_loop+0x40/0x90 [ 159.949071][ T6652] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 159.955037][ T6652] RIP: 0033:0x7f7377d8ebe9 [ 159.959623][ T6652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.979641][ T6652] RSP: 002b:00007f7378c66038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 159.988183][ T6652] RAX: ffffffffffffffda RBX: 00007f7377fc6180 RCX: 00007f7377d8ebe9 [ 159.996290][ T6652] RDX: 0000200000000040 RSI: 00000000c01064bd RDI: 000000000000000a [ 160.004397][ T6652] RBP: 00007f7377e11e19 R08: 0000000000000000 R09: 0000000000000000 [ 160.012684][ T6652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.020731][ T6652] R13: 00007f7377fc6218 R14: 00007f7377fc6180 R15: 00007ffec55273a8 [ 160.028854][ T6652] [ 160.046242][ T8] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 160.073238][ T8] usb 2-1: USB disconnect, device number 6 [ 160.085138][ T6652] Mem-Info: [ 160.088419][ T6652] active_anon:8340 inactive_anon:0 isolated_anon:0 [ 160.088419][ T6652] active_file:1159 inactive_file:39868 isolated_file:0 [ 160.088419][ T6652] unevictable:2816 dirty:133 writeback:0 [ 160.088419][ T6652] slab_reclaimable:9871 slab_unreclaimable:91026 [ 160.088419][ T6652] mapped:25680 shmem:1363 pagetables:611 [ 160.088419][ T6652] sec_pagetables:0 bounce:0 [ 160.088419][ T6652] kernel_misc_reclaimable:0 [ 160.088419][ T6652] free:1364415 free_pcp:5877 free_cma:0 [ 160.127412][ T5883] adutux 1-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 160.246417][ T8] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 160.280184][ T5172] usb 1-1: USB disconnect, device number 9 [ 160.382944][ T6652] Node 0 active_anon:34460kB inactive_anon:0kB active_file:4636kB inactive_file:159268kB unevictable:9728kB isolated(anon):0kB isolated(file):0kB mapped:102820kB dirty:532kB writeback:0kB shmem:3916kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:6144kB writeback_tmp:0kB kernel_stack:11372kB pagetables:2444kB sec_pagetables:0kB all_unreclaimable? no [ 160.459744][ T6660] syzkaller0: entered promiscuous mode [ 160.468634][ T6660] syzkaller0: entered allmulticast mode [ 160.503931][ T6652] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 160.593891][ T6652] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 160.635278][ T6652] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 160.641412][ T6652] Node 0 DMA32 free:1548712kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:34664kB inactive_anon:0kB active_file:4636kB inactive_file:157952kB unevictable:9728kB writepending:532kB present:3129332kB managed:2589592kB mlocked:8192kB bounce:0kB free_pcp:8088kB local_pcp:4212kB free_cma:0kB [ 160.672859][ T6652] lowmem_reserve[]: 0 0 1 1 1 [ 160.677756][ T6652] Node 0 Normal free:8kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1316kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 160.745877][ T6652] lowmem_reserve[]: 0 0 0 0 0 [ 160.751104][ T6652] Node 1 Normal free:3891312kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:18720kB local_pcp:9664kB free_cma:0kB [ 160.862838][ T6652] lowmem_reserve[]: 0 0 0 0 0 [ 160.890415][ T6652] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 160.903958][ T6652] Node 0 DMA32: 3*4kB (UME) 1037*8kB (UE) 666*16kB (UME) 309*32kB (UME) 76*64kB (UME) 42*128kB (UME) 26*256kB (UME) 20*512kB (UME) 9*1024kB (UME) 2*2048kB (UE) 361*4096kB (UM) = 1547956kB [ 160.968583][ T6652] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 160.996695][ T6652] Node 1 Normal: 250*4kB (UME) 67*8kB (UME) 49*16kB (UME) 93*32kB (UME) 23*64kB (UE) 8*128kB (UME) 2*256kB (UE) 2*512kB (ME) 1*1024kB (U) 1*2048kB (E) 947*4096kB (M) = 3891312kB [ 161.033128][ T6652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.122499][ T6652] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.202434][ T6652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 161.215654][ T6652] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 161.236986][ T6652] 42388 total pagecache pages [ 161.241749][ T6652] 0 pages in swap cache [ 161.270863][ T6652] Free swap = 124996kB [ 161.281053][ T6652] Total swap = 124996kB [ 161.292450][ T6652] 2097051 pages RAM [ 161.296679][ T6652] 0 pages HighMem/MovableOnly [ 161.332304][ T6652] 416139 pages reserved [ 161.336638][ T6652] 0 pages cma reserved [ 161.513345][ T6670] kvm: requested 7542 ns i8254 timer period limited to 200000 ns [ 162.448632][ T5791] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 163.762622][ T5827] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 164.350451][ T5172] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 164.477287][ T5827] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 164.490908][ T5827] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 164.509607][ T5827] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 164.521079][ T5827] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 164.537553][ T5827] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 164.542790][ T5172] usb 2-1: Using ep0 maxpacket: 32 [ 164.547254][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.560872][ T5827] usb 4-1: Product: syz [ 164.562414][ T5172] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 164.565538][ T5827] usb 4-1: Manufacturer: syz [ 164.583052][ T5172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.592343][ T5827] usb 4-1: SerialNumber: syz [ 164.603003][ T5827] usb 4-1: config 0 descriptor?? [ 164.610474][ T5172] usb 2-1: config 0 descriptor?? [ 164.612955][ T5827] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 164.637592][ T5827] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 164.689065][ T5827] garmin_gps: probe of ttyUSB0 failed with error -8 [ 164.720624][ T6706] netlink: 28 bytes leftover after parsing attributes in process `syz.0.267'. [ 164.832186][ T6689] fuse: Unknown parameter 'fd0x0000000000000009' [ 164.851329][ T5172] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 164.875750][ T23] usb 4-1: USB disconnect, device number 10 [ 164.888041][ T23] garmin_gps 4-1:0.0: device disconnected [ 164.936428][ T5172] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 164.947535][ T5172] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 164.978943][ T5172] usb 2-1: media controller created [ 165.050433][ T5172] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 165.512766][ T50] Bluetooth: hci0: command tx timeout [ 166.092041][ T50] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 166.977317][ T5172] az6027: usb out operation failed. (-71) [ 167.019672][ T5172] az6027: usb out operation failed. (-71) [ 167.042512][ T5172] stb0899_attach: Driver disabled by Kconfig [ 167.072415][ T5172] az6027: no front-end attached [ 167.072415][ T5172] [ 167.099203][ T5172] az6027: usb out operation failed. (-71) [ 167.132353][ T5172] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 167.220604][ T5172] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input14 [ 167.254014][ T5172] dvb-usb: schedule remote query interval to 400 msecs. [ 167.302324][ T5172] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 167.389686][ T5172] usb 2-1: USB disconnect, device number 7 [ 167.489585][ T5172] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 168.384593][ T54] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 168.514894][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 169.133190][ T6738] loop2: detected capacity change from 0 to 7 [ 169.150293][ T6738] Dev loop2: unable to read RDB block 7 [ 169.161447][ T6738] loop2: unable to read partition table [ 169.170359][ T6738] loop2: partition table beyond EOD, truncated [ 169.185655][ T6738] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 169.294494][ T54] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.315987][ T54] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 169.340523][ T54] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 169.358937][ T54] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 169.393292][ T54] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 169.409748][ T54] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.426205][ T54] usb 1-1: Product: syz [ 169.442380][ T54] usb 1-1: Manufacturer: syz [ 169.450697][ T54] usb 1-1: SerialNumber: syz [ 169.538508][ T54] usb 1-1: config 0 descriptor?? [ 169.547823][ T54] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected [ 169.564634][ T54] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 169.615090][ T54] garmin_gps: probe of ttyUSB0 failed with error -8 [ 169.751695][ T6732] fuse: Unknown parameter 'fd0x0000000000000008' [ 169.765071][ T8] usb 1-1: USB disconnect, device number 10 [ 169.796982][ T8] garmin_gps 1-1:0.0: device disconnected [ 170.154648][ T5791] Bluetooth: hci0: command tx timeout [ 170.678453][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.286'. [ 171.042430][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 171.233036][ T5791] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 171.267982][ T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 171.380310][ T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 171.488076][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.658950][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 171.682126][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 171.708857][ T23] usb 2-1: Product: syz [ 171.745180][ T23] usb 2-1: Manufacturer: syz [ 171.763117][ T23] usb 2-1: SerialNumber: syz [ 172.015282][ T23] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 172.041298][ T23] usb 2-1: USB disconnect, device number 8 [ 172.056024][ T23] usblp0: removed [ 172.222567][ T5854] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 172.415593][ T5854] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 172.434333][ T5854] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 172.472666][ T5854] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 172.489584][ T5854] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 172.509122][ T5854] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 172.519143][ T5854] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.529329][ T5854] usb 1-1: Product: syz [ 172.536459][ T5854] usb 1-1: Manufacturer: syz [ 172.546799][ T5854] usb 1-1: SerialNumber: syz [ 172.562849][ T5854] usb 1-1: config 0 descriptor?? [ 172.571843][ T5854] garmin_gps 1-1:0.0: Garmin GPS usb/tty converter detected [ 172.581417][ T5854] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 172.601166][ T5854] garmin_gps: probe of ttyUSB0 failed with error -8 [ 172.779085][ T6778] fuse: Unknown parameter 'fd0x0000000000000008' [ 172.821242][ T5172] usb 1-1: USB disconnect, device number 11 [ 172.834068][ T5172] garmin_gps 1-1:0.0: device disconnected [ 172.932078][ T6792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.298'. [ 173.402980][ T6801] netlink: 48 bytes leftover after parsing attributes in process `syz.3.301'. [ 173.960296][ T50] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 173.992445][ T50] Bluetooth: hci0: command tx timeout [ 176.382683][ T6836] [ 176.385128][ T6836] ================================================ [ 176.391667][ T6836] WARNING: lock held when returning to user space! [ 176.398213][ T6836] syzkaller #0 Not tainted [ 176.402666][ T6836] ------------------------------------------------ [ 176.409275][ T6836] syz.1.313/6836 is leaving the kernel with locks still held! [ 176.416941][ T6836] 1 lock held by syz.1.313/6836: [ 176.422703][ T6836] #0: ffff888140f24b60 (&lo->lo_mutex){+.+.}-{3:3}, at: loop_set_block_size+0x7c/0x480 [ 176.602380][ T54] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 176.682860][ T50] Bluetooth: hci0: Ignoring HCI_Connection_Complete for existing connection [ 177.106368][ T54] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.117090][ T54] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 177.132752][ T54] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 177.144340][ T54] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 177.237424][ T54] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 177.254588][ T54] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.267010][ T54] usb 4-1: Product: syz [ 177.271275][ T54] usb 4-1: Manufacturer: syz [ 177.281399][ T54] usb 4-1: SerialNumber: syz [ 177.293209][ T54] usb 4-1: config 0 descriptor?? [ 177.301403][ T54] garmin_gps 4-1:0.0: Garmin GPS usb/tty converter detected [ 177.314345][ T54] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8 [ 177.329855][ T54] garmin_gps: probe of ttyUSB0 failed with error -8 [ 177.506200][ T6830] fuse: Unknown parameter 'fd0x0000000000000008' [ 177.514927][ T5854] usb 4-1: USB disconnect, device number 11 [ 177.522046][ T5854] garmin_gps 4-1:0.0: device disconnected [ 178.312462][ T5791] Bluetooth: hci0: command tx timeout