last executing test programs: 2m40.761540067s ago: executing program 1 (id=2638): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x141842, 0x0) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0x0, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="b2ff", 0x2}], 0x1) keyctl$set_reqkey_keyring(0xe, 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001170000000000000000010100800c0001"], 0x114}], 0x1}, 0x0) 2m39.588889548s ago: executing program 1 (id=2640): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB="f8000000160000000000000000000000ac1414aa000000000000000000000000ff01000000000000000000000000000100"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000000000000000000000000000000000000000000001"], 0xf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) io_uring_setup(0xb88, &(0x7f0000000000)={0x0, 0x77d8, 0x2, 0x3, 0x158}) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020}, 0x2020) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 2m39.25999913s ago: executing program 1 (id=2641): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="6c000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="15440100018404003c0012800b00010067656e65766500002c00028005000a000300"], 0x6c}}, 0x0) 2m38.471553921s ago: executing program 1 (id=2645): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x841, 0x0) syz_open_dev$sndpcmp(0x0, 0x9, 0x121840) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x22020600) r4 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x40000000}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000100)=@IORING_OP_SYMLINKAT={0x26, 0x40, 0x0, 0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0\x00'}) io_uring_enter(r4, 0x3f70, 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) 2m36.185579022s ago: executing program 1 (id=2653): syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x4, 0x100, 0x1}) syz_usb_connect(0x2, 0x2d, &(0x7f0000000440)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905822f"], 0x0) syz_genetlink_get_family_id$nbd(&(0x7f00000028c0), 0xffffffffffffffff) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m33.619626015s ago: executing program 1 (id=2665): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB="f8000000160000000000000000000000ac1414aa000000000000000000000000ff01000000000000000000000000000100"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000000000000000000000000000000000000000000001"], 0xf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) io_uring_setup(0xb88, &(0x7f0000000000)={0x0, 0x77d8, 0x2, 0x3, 0x158}) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 2m17.604635628s ago: executing program 32 (id=2665): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000380)=ANY=[@ANYBLOB="f8000000160000000000000000000000ac1414aa000000000000000000000000ff01000000000000000000000000000100"/63, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000000000000000000000000000000000000000000000001"], 0xf8}, 0x1, 0x0, 0x0, 0x20000840}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) io_uring_setup(0xb88, &(0x7f0000000000)={0x0, 0x77d8, 0x2, 0x3, 0x158}) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_loose}]}}) r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r4, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) 18.971239897s ago: executing program 3 (id=3009): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x8a, 0x0, 0xfffffff7}) 18.571887578s ago: executing program 3 (id=3014): syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x2a4, &(0x7f0000000000)=ANY=[], 0x0) r3 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8) r4 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r3) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', 0x0, 0x2}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) mount$bind(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000400), 0x101084, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000200)={r5, r5, r5}, 0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={'sha384-avx\x00'}}) 17.001040201s ago: executing program 3 (id=3016): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff64, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r0}, 0xc) 15.597390547s ago: executing program 3 (id=3018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(0x0, 0x0) ppoll(&(0x7f0000000180), 0x0, &(0x7f0000000440)={0x77359400}, &(0x7f0000000480)={[0x6]}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000500)=ANY=[@ANYRES16=r1], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000580)='module_free\x00', r3}, 0x18) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r8, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r8, 0x7a0, &(0x7f0000000280)={@local}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r8, 0x7ab, &(0x7f0000000300)={&(0x7f0000000bc0)={{@local, 0xec}, {@local, 0x4}, 0x400, "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"}, 0x418, 0x5}) prlimit64(r0, 0xe, &(0x7f0000000100)={0x4c, 0xabb}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) recvmsg$unix(r7, &(0x7f00000004c0)={0x0, 0xfffffffffffffc90, 0x0, 0xfffffffffffffdbd, 0x0, 0x24}, 0x2041) syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[@ANYRES64=r3], 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0xa08800, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 11.647912888s ago: executing program 5 (id=3026): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="00ffffff8d00"}) syz_io_uring_setup(0x2a1c, 0x0, 0x0, 0x0) creat(0x0, 0x80) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000000)={0x1, 0x3, 0x9, 0xffffffca, 0x5, 0xffffff2b, 0x6}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020002000003be8c5ee17688a8006c00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0d00000001000000040000000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000fc62c2436456278d5f17a45f704874fabbcbae3cd9abac457a58d8a4792010cbb85d864bf74edf6e28bd40720b16537f026fe52a3636f4413ebb05adb1faffffffffffffff1aadaa4277e7055f1b2f5616c83d71d4bb6f96f12a6c645a07c20c0d8bba3fd7b12efeac7cfb1af0805a8aa7e3db31868324538ce4b11f84377ee3b774408e27dcba9fefcd825bdc52f24f156d6f623d0cdab200"/188, @ANYRES32=0x0, @ANYRES32], 0x50) fremovexattr(r1, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) socket$inet(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000ffffffff23bf000000020000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000020000000007000000f6ff00"/28], 0x50) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) 11.516024639s ago: executing program 0 (id=3027): socket$nl_route(0x10, 0x3, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_open_dev$evdev(&(0x7f0000002780), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$phonet_pipe(0x23, 0x5, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r2, &(0x7f0000000100), 0x0}, 0x20) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x7, 0xaf, 0x8, 0x8}, {0x7, 0x8, 0x86, 0x71edcb02}, {0x7, 0x81, 0x47, 0x4639}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000380)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r4}}) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000280)={0x2a, 0x4, 0x0, {0x1, 0x7fffffff, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 10.955624193s ago: executing program 3 (id=3028): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r3 = syz_io_uring_setup(0x110d, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000280)) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYRESOCT=r3], 0x125) openat$binder_debug(0xffffff9c, &(0x7f0000000340)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r4 = io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) r5 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r5, &(0x7f000047b000)={0xa, 0x4e20, 0x4, @loopback}, 0x1c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f0000000280)="1a00000002", 0x5) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) r7 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) accept4(r5, 0x0, 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) 9.389433236s ago: executing program 5 (id=3029): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000200)=@ethtool_regs={0x1d}}) 9.388489805s ago: executing program 3 (id=3030): ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x11, 0x1, 0x3, "0d9a5c6dd40df16bd76cd990d17562b5877dad2c2c3947c15c3200", 0x4c47504a}) 7.819437853s ago: executing program 5 (id=3032): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp], 0x4) setresuid(0xee01, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_delete(0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="8002030042800000140012800b0001006c6f7770616e000004000280"], 0x3c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002480)=@newsa={0x13c, 0x10, 0x1, 0xffffffff, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast2, 0x0, 0x2b}, @in6=@mcast1, {}, {0x0, 0x200000, 0x7, 0x3}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1-avx2\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0) clock_gettime(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x4, 0x8, 0xe, 0x6, 0x11, @dev={0xfe, 0x80, '\x00', 0x2c}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x0, 0x9, 0x80000000}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32, @ANYBLOB="8da16f416fbb13bee64f7ea7d6da69fe6b2e643f3dd6459a000000000176bcefc85d36ae225b72e221fc6b721ea62a9de30dc2750000000054a2b6f6b207acd14f44ae0ce018ee2e4fd2a33b9c57a4b59b064b12e3d6f698b0996edf1b11ca263716ba64464e07fadce21e7db069b948d57d9e676d4d8f270695c382b1f89ac4114c94e5860915e31904db52972406cee196e50cb0ca1f17981ac5fd895f35525a9c0700"/182], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 7.818695561s ago: executing program 2 (id=3033): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_delete(r2) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000000)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f0000000440)={0x48, 0x1, r4, 0x0, 0x97, 0x8000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000140)={0x28, 0x4, r4, 0x0, &(0x7f0000ff6000/0xa000)=nil, 0xa000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r4, 0x0, &(0x7f0000fed000/0x13000)=nil, 0x13000}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r4}) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.51301876s ago: executing program 2 (id=3034): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/80, 0x50}], 0x7) 6.992357923s ago: executing program 0 (id=3035): socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000180), 0x1400000000000, 0x0) read$msr(r0, &(0x7f0000000b00)=""/102368, 0x18fe0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="19000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bind$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) waitid(0x3, 0x0, 0x0, 0x8, 0x0) 6.877917211s ago: executing program 2 (id=3036): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) creat(&(0x7f00000000c0)='./file0\x00', 0x80) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000000)={0x1, 0x3, 0x9, 0xffffffca, 0x5, 0xffffff2b, 0x6}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0x8000000}}, 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 6.625330875s ago: executing program 4 (id=3038): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r3], &(0x7f0000000580)}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 4.864070046s ago: executing program 5 (id=3039): syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000480)=ANY=[@ANYBLOB="80000000080211000001080211"], 0x36) 4.791453676s ago: executing program 0 (id=3040): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="00ffffff8d00"}) syz_io_uring_setup(0x2a1c, 0x0, 0x0, 0x0) creat(0x0, 0x80) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000000)={0x1, 0x3, 0x9, 0xffffffca, 0x5, 0xffffff2b, 0x6}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020002000003be8c5ee17688a8006c00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0d00000001000000040000000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000fc62c2436456278d5f17a45f704874fabbcbae3cd9abac457a58d8a4792010cbb85d864bf74edf6e28bd40720b16537f026fe52a3636f4413ebb05adb1faffffffffffffff1aadaa4277e7055f1b2f5616c83d71d4bb6f96f12a6c645a07c20c0d8bba3fd7b12efeac7cfb1af0805a8aa7e3db31868324538ce4b11f84377ee3b774408e27dcba9fefcd825bdc52f24f156d6f623d0cdab200"/188, @ANYRES32=0x0, @ANYRES32], 0x50) fremovexattr(r1, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) socket$inet(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000ffffffff23bf000000020000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000020000000007000000f6ff00"/28], 0x50) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) 4.759317929s ago: executing program 4 (id=3041): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xe, 0x0, 0xfffff00c}, {0x6}]}, 0x8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x74, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @generic="8c30b359eac7ae9fd7498c8134fe2e867411869a9b6c90c6f44175aea05417a60dd1ff08f1be10ecb7b5cf201ceeb9a104b7f98078c9958f3e4c262912a6ae073e3420eb29a3fafeb2bb8ad53be36549b39b17", @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000001}, 0x240048d4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xb7}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44acc14474f16fbe) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 4.667802872s ago: executing program 2 (id=3042): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{}, 0x0, 0x0}, 0x20) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x30048881) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$inet6(0xa, 0x6, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'syztnl2\x00', 0x0, 0x29, 0x0, 0x4d, 0x8, 0x60, @remote, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x700, 0x4, 0x102}}) syz_emit_ethernet(0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3286dd65d15cdc00442ffffc02000000"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}}) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_DELETE(r4, &(0x7f0000000400)={0x36, 0x6, 0x0, {0x0, 0x0, 0xd, 0x0, 'dont_appraise'}}, 0x36) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x29, 0x0, 0x4081000, 0xfffd, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x7}}, 0x50) 3.128694464s ago: executing program 4 (id=3043): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) unshare(0x22000400) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x20, 0x20}, [@RTA_DST={0x8, 0x1, @local}]}, 0x24}}, 0x0) 2.711355769s ago: executing program 0 (id=3044): openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) epoll_create1(0x80000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) creat(0x0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r2, &(0x7f0000000800)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2004], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x3b6, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5, 0x54, 0x5, 0x0, 0x2, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x6]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) 2.576082348s ago: executing program 2 (id=3045): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={0x0, r1}, 0x18) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00008d7000/0x1000)=nil, 0x1000, 0x4) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/80, 0x50}], 0x7) 2.523190731s ago: executing program 5 (id=3046): bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@bloom_filter={0x1e, 0x0, 0x3, 0x0, 0x800, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x0, 0x5, @void, @value, @void, @value}, 0x50) 1.658563847s ago: executing program 4 (id=3047): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r0, 0x0, 0x0) close(r0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) 1.054935272s ago: executing program 2 (id=3048): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp], 0x4) setresuid(0xee01, 0x0, 0x0) timer_create(0x3, 0x0, &(0x7f00000003c0)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) timer_delete(0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="8002030042800000140012800b0001006c6f7770616e000004000280"], 0x3c}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000002480)=@newsa={0x13c, 0x10, 0x1, 0xffffffff, 0x0, {{@in6=@dev={0xfe, 0x80, '\x00', 0x17}, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in6=@mcast2, 0x0, 0x2b}, @in6=@mcast1, {}, {0x0, 0x200000, 0x7, 0x3}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@algo_auth_trunc={0x4c, 0x14, {{'sha1-avx2\x00'}, 0x0, 0xa0}}]}, 0x13c}}, 0x0) clock_gettime(0x6, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x4, 0x8, 0xe, 0x6, 0x11, @dev={0xfe, 0x80, '\x00', 0x2c}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x0, 0x9, 0x80000000}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008000500", @ANYRES32, @ANYBLOB="8da16f416fbb13bee64f7ea7d6da69fe6b2e643f3dd6459a000000000176bcefc85d36ae225b72e221fc6b721ea62a9de30dc2750000000054a2b6f6b207acd14f44ae0ce018ee2e4fd2a33b9c57a4b59b064b12e3d6f698b0996edf1b11ca263716ba64464e07fadce21e7db069b948d57d9e676d4d8f270695c382b1f89ac4114c94e5860915e31904db52972406cee196e50cb0ca1f17981ac5fd895f35525a9c0700"/182], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 1.000457618s ago: executing program 5 (id=3049): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) ptrace(0x8, r2) bpf$BPF_BTF_LOAD(0x12, 0x0, 0xffffffffffffffab) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x3, &(0x7f0000000100)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000606057c6c25f66af8f6577553552f8b1676d8c8e423b9a49a6d707c6e03fcb6504a21ad82b8005c7540b6d5f62b5380623796b3be6937732a9a5f1a8352cc5add90b4130328907a4bc80161d311459f7492f90cebfc83cab7966c9e40788ede2809c6178bffe1116799bdb8d4cf179aa1f904549cbc090faac2ac48c94e1b3f9876d60fad57a384f311911c2e38603083482a9d107d5bcc30f62550074dc2875140d272b5a89d059bccb8ce50ff34088a586de15ecf7439a0e122cc23bdfc484900307b8e42acbde3a40925c35c2eb19cf7ad3896d29"], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = syz_open_dev$usbfs(&(0x7f0000001040), 0x1, 0x40200) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) pread64(r8, 0x0, 0x0, 0x2) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000001080)={0x7fffffff, 0x400}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r6}, 0x10) r9 = syz_open_dev$tty1(0xc, 0x4, 0x1) r10 = dup(r9) write$UHID_INPUT(r10, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'wlan1\x00', @random="0100c3201000"}) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000100)={0x18, r0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) 864.011254ms ago: executing program 0 (id=3050): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x401, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r3], &(0x7f0000000580)}) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) 818.755575ms ago: executing program 4 (id=3051): syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) r3 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}]}, 0x2c}}, 0x0) 563.285354ms ago: executing program 0 (id=3052): sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340), 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_open_dev$media(&(0x7f0000000080), 0x0, 0x1) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0xe, 0x0, 0xfffff00c}, {0x6}]}, 0x8) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shutdown(r3, 0x1) socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)={0x74, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @generic="8c30b359eac7ae9fd7498c8134fe2e867411869a9b6c90c6f44175aea05417a60dd1ff08f1be10ecb7b5cf201ceeb9a104b7f98078c9958f3e4c262912a6ae073e3420eb29a3fafeb2bb8ad53be36549b39b17", @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000001}, 0x240048d4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x34, 0x0, 0x7, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0xb7}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x44acc14474f16fbe) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r6}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() 0s ago: executing program 4 (id=3053): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r2) ioctl$SIOCSIFHWADDR(r2, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="00ffffff8d00"}) syz_io_uring_setup(0x2a1c, 0x0, 0x0, 0x0) creat(0x0, 0x80) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000000)={0x1, 0x3, 0x9, 0xffffffca, 0x5, 0xffffff2b, 0x6}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r3, 0x0, 0x8008000000010, &(0x7f0000000180)="17000000020002000003be8c5ee17688a8006c00030100ecff3f0000000300000a0001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb6a880000d6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c900000200df0180000000000100000000000080c457681f009cee4a5acb3da400001fb7315033bf79ac2df5bc080236e2b68c8eec25a02aff06011500394100000000000affff02dfccebf6ba00085d024f0298e9e90554062a80e605007f71174aa9", 0xb8) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0d00000001000000040000000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000fc62c2436456278d5f17a45f704874fabbcbae3cd9abac457a58d8a4792010cbb85d864bf74edf6e28bd40720b16537f026fe52a3636f4413ebb05adb1faffffffffffffff1aadaa4277e7055f1b2f5616c83d71d4bb6f96f12a6c645a07c20c0d8bba3fd7b12efeac7cfb1af0805a8aa7e3db31868324538ce4b11f84377ee3b774408e27dcba9fefcd825bdc52f24f156d6f623d0cdab200"/188, @ANYRES32=0x0, @ANYRES32], 0x50) fremovexattr(r1, 0x0) ioctl$TIOCL_BLANKSCREEN(0xffffffffffffffff, 0x541c, &(0x7f0000000000)) socket$inet(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0e00000004000000ffffffff23bf000000020000", @ANYRES32, @ANYBLOB="0600"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000020000000007000000f6ff00"/28], 0x50) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) kernel console output (not intermixed with test programs): [ 651.765160][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 651.855292][ T838] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 651.865118][ T838] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 651.951777][ T838] usb 5-1: USB disconnect, device number 71 [ 652.347446][ T8] usb 1-1: new full-speed USB device number 85 using dummy_hcd [ 653.287203][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 653.306588][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 233, setting to 64 [ 653.562487][ T8] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 653.658461][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 653.710067][ T8] usb 1-1: Product: syz [ 653.715460][ T8] usb 1-1: Manufacturer: syz [ 653.726894][ T8] usb 1-1: SerialNumber: syz [ 653.737493][ T8] usb 1-1: config 0 descriptor?? [ 653.745739][T12627] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 653.866642][ T8] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 653.977588][ T838] usb 1-1: USB disconnect, device number 85 [ 653.984887][ T11] usb 1-1: Failed to submit usb control message: -71 [ 653.993208][ T11] usb 1-1: unable to send the bmi data to the device: -71 [ 654.002790][ T11] usb 1-1: unable to get target info from device [ 654.010143][ T11] usb 1-1: could not get target info (-71) [ 654.016239][ T11] usb 1-1: could not probe fw (-71) [ 654.097690][ T46] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 654.196866][ T8] usb 2-1: new high-speed USB device number 90 using dummy_hcd [ 654.276863][ T46] usb 5-1: Using ep0 maxpacket: 16 [ 654.284868][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.306921][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 654.327104][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 654.347579][ T46] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 654.358857][ T46] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 654.361995][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 654.374685][ T46] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 654.399951][ T8] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 654.403833][ T46] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 654.409359][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.423764][ T46] usb 5-1: Manufacturer: syz [ 654.435356][ T8] usb 2-1: config 0 descriptor?? [ 654.435655][ T46] usb 5-1: config 0 descriptor?? [ 654.439387][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 654.638005][ T5894] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 654.717581][ T46] rc_core: IR keymap rc-hauppauge not found [ 654.723674][ T46] Registered IR keymap rc-empty [ 654.730578][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 654.758306][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 654.778493][ T46] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 654.794378][ T46] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input43 [ 654.807203][ T5894] usb 4-1: Using ep0 maxpacket: 8 [ 654.814382][ T5894] usb 4-1: config index 0 descriptor too short (expected 6427, got 27) [ 654.822979][ T5894] usb 4-1: config 0 has an invalid interface number: 21 but max is 0 [ 654.831188][T11458] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 654.838288][ T5894] usb 4-1: config 0 has no interface number 0 [ 654.844570][ T5894] usb 4-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 654.866310][ T5894] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 654.870437][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 654.975709][ T5894] usb 4-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 654.988548][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 655.026918][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 655.034400][ T5894] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 655.043838][ T5894] usb 4-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 655.052442][ T5894] usb 4-1: Product: syz [ 655.056654][ T5894] usb 4-1: Manufacturer: syz [ 655.065494][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 655.075071][ T5894] usb 4-1: config 0 descriptor?? [ 655.082623][T12651] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 655.096980][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 655.097860][ T8] pwc: recv_control_msg error -71 req 02 val 2c00 [ 655.118046][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 655.120590][ T8] pwc: recv_control_msg error -71 req 04 val 1000 [ 655.133721][ T8] pwc: recv_control_msg error -71 req 04 val 1300 [ 655.141125][ T8] pwc: recv_control_msg error -71 req 04 val 1400 [ 655.147649][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 655.159105][ T8] pwc: recv_control_msg error -71 req 02 val 2000 [ 655.166989][ T8] pwc: recv_control_msg error -71 req 02 val 2100 [ 655.173855][ T8] pwc: recv_control_msg error -71 req 04 val 1500 [ 655.180425][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 655.189026][ T8] pwc: recv_control_msg error -71 req 02 val 2500 [ 655.195998][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 655.203669][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 655.212313][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 655.216950][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 655.249679][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 655.257707][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 655.261205][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 655.272641][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 655.287089][ T46] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 655.299884][ T8] pwc: Registered as video103. [ 655.321070][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input45 [ 655.328785][ T46] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 655.420625][ T46] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 655.450780][ T8] usb 2-1: USB disconnect, device number 90 [ 655.663116][ T46] usb 5-1: USB disconnect, device number 72 [ 656.021177][ T5894] usb 4-1: USB disconnect, device number 77 [ 657.439107][T12689] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2261'. [ 658.577243][T12701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 658.785553][T12701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 660.562448][T12699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 661.137911][T12720] netlink: 'syz.2.2270': attribute type 8 has an invalid length. [ 661.145813][T12720] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2270'. [ 662.576992][ T5843] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 662.616994][ T46] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 662.736943][ T5843] usb 3-1: Using ep0 maxpacket: 8 [ 662.762163][ T5843] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 662.772532][ T5843] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 662.783296][ T5843] usb 3-1: config 0 has no interface number 0 [ 662.787111][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 662.803074][ T5843] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 662.807612][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.830205][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.835341][ T5843] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 662.870374][ T5843] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 662.881763][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 662.921632][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.942175][ T5843] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 662.954521][ T5843] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 662.964683][ T5843] usb 3-1: Product: syz [ 662.973618][ T5843] usb 3-1: Manufacturer: syz [ 663.003242][ T5843] usb 3-1: config 0 descriptor?? [ 663.043491][T12728] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 663.043563][ T46] usb 4-1: config 0 descriptor?? [ 663.073793][ T46] hub 4-1:0.0: USB hub found [ 663.417070][ T46] hub 4-1:0.0: 1 port detected [ 663.767712][ T5843] usb 3-1: USB disconnect, device number 78 [ 664.088042][ T46] hub 4-1:0.0: activate --> -90 [ 664.440697][ T5843] usb 4-1: USB disconnect, device number 78 [ 664.440789][ T46] usb 4-1: Failed to suspend device, error -19 [ 664.446911][ T8] usb 2-1: new high-speed USB device number 91 using dummy_hcd [ 665.054135][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 665.096935][ T8] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18 [ 665.161631][ T8] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 665.208769][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 665.362081][ T8] usb 2-1: SerialNumber: syz [ 665.401056][ T8] usb 2-1: bad CDC descriptors [ 665.409521][ T8] usbtest 2-1:1.0: couldn't get endpoints, -22 [ 665.415925][ T8] usbtest 2-1:1.0: probe with driver usbtest failed with error -22 [ 665.621520][ T8] usb 2-1: USB disconnect, device number 91 [ 666.710437][T12760] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 666.721147][T12760] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 666.754351][T12760] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 666.760825][T12760] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 666.768620][T12760] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 666.774644][T12760] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 666.783980][T12760] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 666.790064][T12760] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 666.806846][T12760] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 666.812871][T12760] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 666.823279][T12760] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 668.812937][T11458] Bluetooth: hci1: command 0x0406 tx timeout [ 668.835914][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 668.836344][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 668.842170][T11458] Bluetooth: hci0: command 0x0406 tx timeout [ 668.848955][ T5856] Bluetooth: hci3: command 0x0406 tx timeout [ 669.657024][T12488] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 669.759625][T12770] loop3: detected capacity change from 0 to 40427 [ 669.837220][T12488] usb 3-1: Using ep0 maxpacket: 8 [ 669.905738][T12794] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2294'. [ 669.950401][T12770] F2FS-fs (loop3): invalid crc value [ 669.971943][T12488] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 670.080390][T12488] usb 3-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 670.204952][T12488] usb 3-1: config 0 interface 0 has no altsetting 0 [ 670.314566][T12488] usb 3-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 670.385887][T12770] F2FS-fs (loop3): Found nat_bits in checkpoint [ 670.460356][T12488] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 670.519236][T12488] usb 3-1: config 0 descriptor?? [ 670.826902][T12785] Bluetooth: hci1: command 0x0406 tx timeout [ 670.846933][T12488] usbhid 3-1:0.0: can't add hid device: -71 [ 670.853612][T12488] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 670.874028][T12488] usb 3-1: USB disconnect, device number 79 [ 670.907242][T12785] Bluetooth: hci3: command 0x0406 tx timeout [ 670.913391][T12785] Bluetooth: hci0: command 0x0406 tx timeout [ 670.923578][T12784] Bluetooth: hci2: command 0x0406 tx timeout [ 670.929784][ T5856] Bluetooth: hci4: command 0x0406 tx timeout [ 671.067164][ T5894] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 671.237466][ T5894] usb 1-1: Using ep0 maxpacket: 32 [ 671.260410][ T5894] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 671.353148][ T5894] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 671.409575][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.458312][ T5894] usb 1-1: Product: syz [ 671.462876][ T5894] usb 1-1: Manufacturer: syz [ 671.569023][ T5894] usb 1-1: SerialNumber: syz [ 671.653353][ T5894] usb 1-1: config 0 descriptor?? [ 671.662848][ T5894] usb 1-1: bad CDC descriptors [ 671.694061][ T5894] usb 1-1: unsupported MDLM descriptors [ 671.904867][ T5843] usb 1-1: USB disconnect, device number 86 [ 672.799965][T12831] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2305'. [ 673.081064][T12785] Bluetooth: hci0: command 0x0406 tx timeout [ 674.193337][T12846] No source specified [ 675.192315][T12855] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2314'. [ 675.207096][ T5894] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 675.214992][ T46] usb 2-1: new high-speed USB device number 92 using dummy_hcd [ 675.386965][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 675.392792][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 675.421405][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.437226][ T46] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.499857][ T46] usb 2-1: config 0 interface 0 altsetting 253 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.559498][ T5894] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.634749][ T46] usb 2-1: config 0 interface 0 has no altsetting 0 [ 675.653131][ T5894] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 675.708865][ T46] usb 2-1: New USB device found, idVendor=056a, idProduct=00bb, bcdDevice= 0.00 [ 675.747103][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.791925][ T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.864163][ T5894] usb 3-1: config 0 descriptor?? [ 675.903192][ T46] usb 2-1: config 0 descriptor?? [ 675.940795][ T5894] hub 3-1:0.0: USB hub found [ 676.152856][ T5894] hub 3-1:0.0: 1 port detected [ 676.225416][ T46] usbhid 2-1:0.0: can't add hid device: -71 [ 676.252076][ T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 676.273926][ T46] usb 2-1: USB disconnect, device number 92 [ 676.356858][T12785] Bluetooth: hci4: command 0x0406 tx timeout [ 676.436909][ T5843] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 676.507730][T12863] xt_TPROXY: Can be used only with -p tcp or -p udp [ 676.598539][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.609777][ T5843] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.621125][ T5843] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 676.630738][ T5843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.648025][ T5843] usb 4-1: config 0 descriptor?? [ 676.786912][ T5894] hub 3-1:0.0: activate --> -90 [ 677.117296][T12858] loop6: detected capacity change from 524288000 to 524287952 [ 677.173528][ T5843] usbhid 4-1:0.0: can't add hid device: -71 [ 677.203223][ T5843] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 677.215130][ T3073] usb 3-1: USB disconnect, device number 80 [ 677.224949][ T5894] usb 3-1: Failed to suspend device, error -71 [ 677.237434][ T5843] usb 4-1: USB disconnect, device number 79 [ 677.731077][T12870] rtc_cmos 00:00: Alarms can be up to one day in the future [ 682.006905][ T5843] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 682.537907][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 682.553021][ T5843] usb 3-1: config 11 has an invalid interface number: 17 but max is 0 [ 682.579492][ T5843] usb 3-1: config 11 has no interface number 0 [ 682.585753][ T5843] usb 3-1: config 11 interface 17 has no altsetting 0 [ 682.611373][ T5843] usb 3-1: New USB device found, idVendor=19d2, idProduct=ff90, bcdDevice=5c.79 [ 682.636266][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.669615][ T5843] usb 3-1: Product: syz [ 682.673852][ T5843] usb 3-1: Manufacturer: syz [ 683.068718][ T5843] usb 3-1: SerialNumber: syz [ 683.435589][ T5843] option 3-1:11.17: GSM modem (1-port) converter detected [ 683.523530][ T5843] usb 3-1: USB disconnect, device number 81 [ 684.358828][ T5843] option 3-1:11.17: device disconnected [ 686.120242][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.227101][ T3073] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 686.393977][ T3073] usb 2-1: Using ep0 maxpacket: 16 [ 686.405464][ T3073] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 686.405651][ T3073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 686.405782][ T3073] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 686.405873][ T3073] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 686.405962][ T3073] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 686.412568][ T3073] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 686.412696][ T3073] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 686.412810][ T3073] usb 2-1: Manufacturer: syz [ 686.621718][ T3073] usb 2-1: config 0 descriptor?? [ 687.537073][ T3073] rc_core: IR keymap rc-hauppauge not found [ 687.537099][ T3073] Registered IR keymap rc-empty [ 687.537196][ T3073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.556955][ T3073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.577564][ T3073] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 687.578413][ T3073] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input48 [ 687.582364][ T3073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.597017][ T3073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.627040][ T3073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.657006][ T3073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.676940][ T3073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.707094][ T3073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.757005][ T838] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 687.952934][ T3073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 687.970642][ T3073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 688.017013][ T3073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 688.041222][ T838] usb 5-1: Using ep0 maxpacket: 32 [ 688.046893][ T3073] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 688.048610][ T838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 688.070867][ T838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 688.070915][ T838] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 688.070935][ T838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 688.094376][ T838] usb 5-1: config 0 descriptor?? [ 688.097518][ T3073] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 688.097551][ T3073] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 688.097832][ T838] hub 5-1:0.0: USB hub found [ 688.109907][ T3073] usb 2-1: USB disconnect, device number 93 [ 688.302052][ T838] hub 5-1:0.0: 1 port detected [ 688.941141][ T5843] hub 5-1:0.0: activate --> -90 [ 689.351924][ T8] usb 5-1: USB disconnect, device number 73 [ 689.359795][ T5843] usb 5-1: Failed to suspend device, error -19 [ 689.499336][T12990] xt_TPROXY: Can be used only with -p tcp or -p udp [ 689.538373][ T838] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 690.121122][T12996] No source specified [ 690.881609][ T838] usb 4-1: Using ep0 maxpacket: 16 [ 690.975519][ T838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.987853][ T838] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 691.019311][ T838] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 691.041387][T13002] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 691.072721][ T838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.094436][ T838] usb 4-1: config 0 descriptor?? [ 692.186915][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 693.231894][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 693.397070][T12785] Bluetooth: hci1: command 0x0406 tx timeout [ 693.431275][T12986] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2359'. [ 694.201832][ T838] usbhid 4-1:0.0: can't add hid device: -71 [ 694.208475][ T838] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 694.247446][ T838] usb 4-1: USB disconnect, device number 80 [ 694.307226][ T3073] usb 5-1: new full-speed USB device number 74 using dummy_hcd [ 694.447049][ T3073] usb 5-1: device descriptor read/64, error -71 [ 694.727278][ T3073] usb 5-1: new full-speed USB device number 75 using dummy_hcd [ 694.987986][ T3073] usb 5-1: device descriptor read/64, error -71 [ 695.098671][ T3073] usb usb5-port1: attempt power cycle [ 696.109860][ T3073] usb 5-1: new full-speed USB device number 76 using dummy_hcd [ 696.137386][ T3073] usb 5-1: device descriptor read/8, error -71 [ 696.968811][ T5894] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 697.046853][ T3073] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 697.067480][ T3073] usb 5-1: device descriptor read/8, error -71 [ 697.138921][ T5894] usb 3-1: Using ep0 maxpacket: 32 [ 697.146218][ T5894] usb 3-1: config 0 interface 0 has no altsetting 0 [ 697.157940][ T5894] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 697.167986][ T5894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.177539][ T3073] usb usb5-port1: unable to enumerate USB device [ 697.184252][ T5894] usb 3-1: Product: syz [ 697.189049][ T5894] usb 3-1: Manufacturer: syz [ 697.195643][ T5894] usb 3-1: SerialNumber: syz [ 697.208566][ T838] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 697.224855][ T5894] usb 3-1: config 0 descriptor?? [ 697.367264][ T838] usb 1-1: Using ep0 maxpacket: 8 [ 697.380306][ T838] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 697.405531][ T838] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 697.424270][ T838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 697.435763][ T838] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 697.461676][ T838] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 697.490172][ T838] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 697.503769][ T838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 697.520257][ T838] usb 1-1: Product: syz [ 697.524972][ T838] usb 1-1: Manufacturer: syz [ 697.532226][ T838] usb 1-1: SerialNumber: syz [ 697.543376][ T838] usb 1-1: config 0 descriptor?? [ 697.762533][ T838] radio-si470x 1-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 697.769003][ T5894] gs_usb 3-1:0.0: Configuring for 1 interfaces [ 697.773100][ T838] radio-si470x 1-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 697.997138][ T5894] gs_usb 3-1:0.0: Couldn't get bit timing const for channel 0 (-EPROTO) [ 698.031222][ T5894] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71 [ 698.194772][ T5894] usb 3-1: USB disconnect, device number 82 [ 698.753618][ T838] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -32 [ 698.762410][ T838] radio-si470x 1-1:0.0: si470x_get_scratch: si470x_get_report returned -32 [ 698.771511][ T838] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 698.901746][T13059] kvm: kvm [13058]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010015) = 0x98b5 [ 700.304248][ T5952] usb 1-1: USB disconnect, device number 87 [ 700.934082][T13079] xt_TPROXY: Can be used only with -p tcp or -p udp [ 701.909874][ T3073] usb 2-1: new full-speed USB device number 94 using dummy_hcd [ 706.196817][ T3073] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 706.357234][ T3073] usb 4-1: Using ep0 maxpacket: 16 [ 706.466679][ T3073] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 707.180531][ T3073] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.729427][ T3073] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 708.975966][ T3073] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 708.985155][ T3073] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.048629][ T3073] usb 4-1: can't set config #1, error -71 [ 709.098636][ T3073] usb 4-1: USB disconnect, device number 81 [ 709.317180][ T5952] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 709.472085][ T5952] usb 1-1: device descriptor read/64, error -71 [ 709.866963][ T5952] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 709.945744][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2409'. [ 709.947423][T13147] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2409'. [ 710.050965][ T5952] usb 1-1: device descriptor read/64, error -71 [ 710.476911][ T5952] usb usb1-port1: attempt power cycle [ 711.077202][ T5952] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 711.154923][ T5952] usb 1-1: device descriptor read/8, error -71 [ 711.386974][ T5952] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 711.728140][ T5952] usb 1-1: device descriptor read/8, error -71 [ 711.838532][ T5952] usb usb1-port1: unable to enumerate USB device [ 712.500129][T13172] lo speed is unknown, defaulting to 1000 [ 713.493393][T13190] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2421'. [ 714.680425][T13172] geneve0: entered promiscuous mode [ 714.685940][T13172] geneve0: entered allmulticast mode [ 715.447724][T13203] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2425'. [ 716.537945][T13223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 718.957877][T13248] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 719.957385][ T5894] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 721.098507][ T5894] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 721.125035][ T5894] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 721.158445][ T5894] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 721.228200][ T5894] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 721.303781][ T5894] usb 1-1: string descriptor 0 read error: -71 [ 721.397545][ T5894] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.40 [ 721.407718][ T5894] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 721.421186][ T5894] usb 1-1: can't set config #1, error -71 [ 721.433439][ T5894] usb 1-1: USB disconnect, device number 92 [ 721.481582][T13266] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 724.577031][ T5952] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 725.154840][ T5952] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 725.163704][ T5952] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 725.174022][ T5952] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 725.189424][ T5952] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 725.220035][ T5952] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x87 has invalid maxpacket 14129, setting to 64 [ 725.244499][ T5952] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 725.260971][ T5952] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 725.270580][ T5952] usb 3-1: Product: syz [ 725.275642][ T5952] usb 3-1: Manufacturer: syz [ 725.321981][ T5952] cdc_wdm 3-1:1.0: skipping garbage [ 725.328760][ T5952] cdc_wdm 3-1:1.0: skipping garbage [ 725.334095][ T5952] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 725.530018][ T5952] usb 3-1: USB disconnect, device number 83 [ 726.847028][T12488] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 728.046764][T13315] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 728.701065][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 728.717985][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 728.730304][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 728.753745][T12488] usb 3-1: device descriptor read/all, error -32 [ 731.466916][ T5894] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 731.876874][ T5894] usb 4-1: Using ep0 maxpacket: 16 [ 731.898400][ T5894] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.910942][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 731.945645][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 731.995146][ T5894] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 732.008549][ T5894] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 732.105085][ T5894] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 732.115789][ T5894] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 732.157840][ T5894] usb 4-1: Manufacturer: syz [ 732.207034][T12488] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 732.232544][ T5894] usb 4-1: config 0 descriptor?? [ 732.402361][T12488] usb 5-1: Using ep0 maxpacket: 32 [ 732.658779][T12488] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 732.671336][T12488] usb 5-1: config 0 has no interface number 0 [ 732.677612][T12488] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 732.688693][T12488] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 732.699682][T12488] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 732.710001][T12488] usb 5-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 732.744471][ T5894] usb 4-1: can't set config #0, error -71 [ 732.806277][ T5894] usb 4-1: USB disconnect, device number 82 [ 732.851502][T12488] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 732.861464][T12488] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 732.869906][T12488] usb 5-1: Product: syz [ 732.874177][T12488] usb 5-1: Manufacturer: syz [ 732.878970][T12488] usb 5-1: SerialNumber: syz [ 732.888233][T12488] usb 5-1: config 0 descriptor?? [ 732.894455][T13346] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 733.211506][ T5894] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 733.221563][T12488] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 733.362230][T13361] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2478'. [ 734.088508][ T5894] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 735.053522][ T5894] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 735.078942][ T5894] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 735.094515][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 735.105734][ T5894] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 735.168245][ T5894] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 735.177568][ T5894] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 735.189140][ T5894] usb 4-1: Product: syz [ 735.194402][ T5894] usb 4-1: Manufacturer: syz [ 735.210884][ T5894] cdc_wdm 4-1:1.0: skipping garbage [ 735.216317][ T5894] cdc_wdm 4-1:1.0: skipping garbage [ 735.229364][ T5894] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 735.235476][ T5894] cdc_wdm 4-1:1.0: Unknown control protocol [ 735.424131][ T838] usb 4-1: USB disconnect, device number 83 [ 735.634000][T13370] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2481'. [ 736.221105][ T5894] usb 5-1: USB disconnect, device number 78 [ 737.585554][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2487'. [ 737.643960][T13385] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 737.662918][T13385] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 737.672994][T13385] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 737.684985][T13385] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 738.526922][ T838] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 739.169822][ T838] usb 4-1: Using ep0 maxpacket: 16 [ 739.219749][ T838] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.375585][T13389] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2487'. [ 739.727841][ T838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 739.836755][ T838] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 739.864019][ T838] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 739.875522][ T838] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 740.970572][ T838] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 741.043544][ T838] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 741.051750][ T838] usb 4-1: Manufacturer: syz [ 741.229890][ T838] usb 4-1: config 0 descriptor?? [ 741.553562][ T838] usb 4-1: can't set config #0, error -71 [ 741.567581][ T838] usb 4-1: USB disconnect, device number 84 [ 741.787232][ T8] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 742.253828][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 742.442065][ T8] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 742.451679][ T8] usb 2-1: config 0 has no interface number 0 [ 742.480183][ T8] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 742.497254][ T8] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 742.510289][ T8] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 742.520728][ T8] usb 2-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 742.536006][ T8] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 742.559078][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.570144][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 742.570162][ T29] audit: type=1800 audit(1734726901.847:24): pid=13419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2496" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 742.601954][ T8] usb 2-1: Product: syz [ 742.606195][ T8] usb 2-1: Manufacturer: syz [ 742.610916][ T8] usb 2-1: SerialNumber: syz [ 742.658485][ T8] usb 2-1: config 0 descriptor?? [ 742.666995][T13412] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 742.856883][T12488] usb 5-1: new full-speed USB device number 79 using dummy_hcd [ 743.262622][ T8] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 743.399328][T12488] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 743.445038][T12488] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 743.456168][T12488] usb 5-1: config 0 has no interface number 0 [ 743.462847][T12488] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 743.474865][T12488] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 743.616821][T12488] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 743.637987][T12488] usb 5-1: config 0 interface 52 has no altsetting 0 [ 746.397294][ T46] usb 2-1: USB disconnect, device number 95 [ 746.418436][T12488] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 746.465367][T12488] usb 5-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 746.484467][T12488] usb 5-1: Product: syz [ 746.501426][T12488] usb 5-1: Manufacturer: syz [ 747.527869][T12488] usb 5-1: config 0 descriptor?? [ 747.809650][T13453] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2504'. [ 747.831008][T12488] usb 5-1: can't set config #0, error -71 [ 747.846494][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.854220][T12488] usb 5-1: USB disconnect, device number 79 [ 751.216960][ T8] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 751.636863][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 751.710602][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 751.722247][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 751.747090][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 751.768859][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 751.782492][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 751.820919][ T8] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 751.833937][ T8] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 751.843202][ T8] usb 2-1: Manufacturer: syz [ 751.992640][ T8] usb 2-1: config 0 descriptor?? [ 753.876974][ T8] rc_core: IR keymap rc-hauppauge not found [ 753.883416][ T8] Registered IR keymap rc-empty [ 754.151302][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.343849][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.419914][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 754.454230][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input51 [ 754.511497][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.550680][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.579424][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.607014][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.637088][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.668702][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.717498][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.766954][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.846484][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 754.916979][ T8] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 755.155862][ T8] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 755.165445][ T8] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 755.604768][ T8] usb 2-1: USB disconnect, device number 96 [ 755.992700][T13514] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2521'. [ 756.426313][T13522] netlink: 'syz.1.2523': attribute type 10 has an invalid length. [ 756.505688][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2523'. [ 756.907060][T12488] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 757.341483][T12488] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.353196][T12488] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 757.363261][T12488] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.364981][T12488] usb 1-1: config 0 descriptor?? [ 758.979742][T13537] netlink: 'syz.3.2527': attribute type 1 has an invalid length. [ 758.987816][T13537] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2527'. [ 758.997132][T13537] NCSI netlink: No device for ifindex 0 [ 759.429780][T12488] usbhid 1-1:0.0: can't add hid device: -71 [ 759.436041][T12488] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 759.452456][T12488] usb 1-1: USB disconnect, device number 93 [ 759.580238][T13544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2529'. [ 760.058492][T13548] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2531'. [ 760.996805][ T8] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 761.386779][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 761.410792][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 762.289614][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 762.301384][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 762.313001][ T8] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 762.332205][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 762.411379][T13571] lo speed is unknown, defaulting to 1000 [ 762.423609][T13571] lo speed is unknown, defaulting to 1000 [ 762.430203][T13571] lo speed is unknown, defaulting to 1000 [ 762.563904][T13571] infiniband sz1: set active [ 762.569161][T13571] infiniband sz1: added lo [ 762.850054][ T46] lo speed is unknown, defaulting to 1000 [ 762.853827][ T8] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 763.099643][ T8] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 763.107823][ T8] usb 4-1: Manufacturer: syz [ 763.532165][T13577] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2537'. [ 763.918451][ T8] usb 4-1: config 0 descriptor?? [ 763.934517][T13571] RDS/IB: sz1: added [ 763.941500][T13571] smc: adding ib device sz1 with port count 1 [ 763.948377][T13571] smc: ib device sz1 port 1 has pnetid [ 763.957678][T13571] lo speed is unknown, defaulting to 1000 [ 764.003480][ T46] lo speed is unknown, defaulting to 1000 [ 764.295423][T13571] lo speed is unknown, defaulting to 1000 [ 764.453660][T13571] lo speed is unknown, defaulting to 1000 [ 764.506876][ T8] rc_core: IR keymap rc-hauppauge not found [ 764.513074][ T8] Registered IR keymap rc-empty [ 764.526414][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 764.569686][T13589] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2541'. [ 764.580042][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 764.593315][T13571] lo speed is unknown, defaulting to 1000 [ 764.611227][ T8] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 764.649923][ T8] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input52 [ 764.709033][T13571] lo speed is unknown, defaulting to 1000 [ 764.711838][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 764.783710][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 764.827168][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 765.092107][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 765.856842][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 765.876885][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 765.896841][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 765.916832][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 766.682291][T13601] netlink: 'syz.0.2543': attribute type 1 has an invalid length. [ 766.690208][T13601] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2543'. [ 766.699543][T13601] NCSI netlink: No device for ifindex 0 [ 766.828706][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 766.846866][ T8] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 766.869068][ T8] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 766.877197][ T8] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 767.041868][ T8] usb 4-1: USB disconnect, device number 85 [ 769.869203][ T8] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 771.192526][T13634] misc userio: No port type given on /dev/userio [ 771.205545][T13634] misc userio: The device must be registered before sending interrupts [ 771.236948][T12488] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 771.397065][T12488] usb 2-1: Using ep0 maxpacket: 16 [ 771.405742][T12488] usb 2-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 1024 [ 771.510782][T12488] usb 2-1: config 1 interface 0 has no altsetting 0 [ 771.542203][T12488] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 771.576789][T12488] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 771.584965][T12488] usb 2-1: Product: syz [ 771.603177][T12488] usb 2-1: Manufacturer: syz [ 771.621810][T12488] usb 2-1: SerialNumber: syz [ 771.636866][ T838] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 771.648765][T13628] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 771.798299][ T838] usb 5-1: Using ep0 maxpacket: 16 [ 771.807067][ T838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.843156][ T838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 771.873626][ T838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 771.893993][ T838] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 771.916189][ T838] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 772.151870][T13646] rdma_rxe: rxe_newlink: failed to add lo [ 772.462614][ T838] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 772.471973][ T838] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 772.480181][ T838] usb 5-1: Manufacturer: syz [ 772.502312][ T838] usb 5-1: config 0 descriptor?? [ 773.264835][T12488] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 773.449730][T12488] usb 2-1: USB disconnect, device number 97 [ 773.937560][ T838] rc_core: IR keymap rc-hauppauge not found [ 773.959284][ T838] Registered IR keymap rc-empty [ 773.971123][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 774.134131][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 774.168485][ T838] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 774.421241][T13657] netlink: 'syz.2.2558': attribute type 1 has an invalid length. [ 774.429240][T13657] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2558'. [ 774.438829][T13657] NCSI netlink: No device for ifindex 0 [ 775.124797][ T838] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input53 [ 775.180759][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 775.217066][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 775.261154][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 775.327052][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 775.370598][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 775.416907][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 775.517176][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 775.553903][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 775.621826][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 775.656882][ T838] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 775.726956][ T8] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 776.799204][ T838] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 776.808317][ T838] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 776.871011][ T838] usb 5-1: USB disconnect, device number 80 [ 776.922669][ T5952] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 777.635929][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 778.015520][ T8] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 778.015548][ T8] usb 1-1: config 0 has no interface number 0 [ 778.015571][ T8] usb 1-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 778.015589][ T8] usb 1-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 778.015607][ T8] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 778.015628][ T8] usb 1-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 778.018859][ T8] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 778.018900][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.018917][ T8] usb 1-1: Product: syz [ 778.018930][ T8] usb 1-1: Manufacturer: syz [ 778.018943][ T8] usb 1-1: SerialNumber: syz [ 778.020533][ T8] usb 1-1: config 0 descriptor?? [ 778.021238][T13664] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 778.169446][ T5952] usb 2-1: Using ep0 maxpacket: 32 [ 778.171460][ T5952] usb 2-1: config 11 has an invalid interface number: 17 but max is 0 [ 778.171496][ T5952] usb 2-1: config 11 has no interface number 0 [ 778.171556][ T5952] usb 2-1: config 11 interface 17 has no altsetting 0 [ 778.174147][ T5952] usb 2-1: New USB device found, idVendor=19d2, idProduct=ff90, bcdDevice=5c.79 [ 778.174185][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.174243][ T5952] usb 2-1: Product: syz [ 778.174264][ T5952] usb 2-1: Manufacturer: syz [ 778.174284][ T5952] usb 2-1: SerialNumber: syz [ 778.241788][ T8] etas_es58x 1-1:0.219: Starting syz syz (Serial Number syz) [ 778.390522][ T5952] option 2-1:11.17: GSM modem (1-port) converter detected [ 778.395569][ T5952] usb 2-1: USB disconnect, device number 98 [ 778.396559][ T5952] option 2-1:11.17: device disconnected [ 779.951012][T13700] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2569'. [ 780.177204][T13703] rdma_rxe: rxe_newlink: failed to add lo [ 780.670966][T12488] usb 1-1: USB disconnect, device number 94 [ 782.697007][T12488] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 782.932148][T13727] netlink: 'syz.1.2574': attribute type 1 has an invalid length. [ 782.932238][T13727] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2574'. [ 782.932312][T13727] NCSI netlink: No device for ifindex 0 [ 784.613421][T13724] tty tty25: ldisc open failed (-12), clearing slot 24 [ 785.198086][T13736] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2578'. [ 785.850895][T12488] usb 4-1: unable to read config index 0 descriptor/all [ 785.851178][T12488] usb 4-1: can't read configurations, error -71 [ 786.044070][T13743] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2581'. [ 787.936920][ T5952] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 788.086842][ T5952] usb 2-1: Using ep0 maxpacket: 32 [ 788.096456][ T5952] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 788.117597][ T5952] usb 2-1: config 0 has no interface number 0 [ 788.138085][ T838] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 788.152064][ T5952] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 788.178803][ T5952] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 788.291609][ T5952] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 788.324602][ T838] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 788.364919][ T838] usb 5-1: config 0 has no interfaces? [ 788.377581][ T5952] usb 2-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 788.396837][ T838] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 788.406911][ T838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 788.443304][ T838] usb 5-1: config 0 descriptor?? [ 788.593531][ T5952] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 788.606578][ T5952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 788.616267][ T5952] usb 2-1: Product: syz [ 788.626900][ T5952] usb 2-1: Manufacturer: syz [ 788.635628][ T5952] usb 2-1: SerialNumber: syz [ 788.773541][ T5952] usb 2-1: config 0 descriptor?? [ 788.958833][T13746] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 789.488781][ T5952] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz) [ 789.500602][ T5952] usb 2-1: USB disconnect, device number 99 [ 790.089681][T13782] netlink: 'syz.1.2588': attribute type 1 has an invalid length. [ 790.097685][T13782] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2588'. [ 790.107087][T13782] NCSI netlink: No device for ifindex 0 [ 790.656038][T13784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2591'. [ 790.695905][T13784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.724986][T13784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.790690][T13784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.834550][T13784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.919882][ T8] usb 5-1: USB disconnect, device number 81 [ 791.681550][T13794] netlink: 'syz.1.2592': attribute type 2 has an invalid length. [ 792.955041][T13801] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2596'. [ 794.836843][ T3073] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 794.856918][T13763] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 794.897012][ T46] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 795.196801][ T3073] usb 3-1: Using ep0 maxpacket: 32 [ 795.204327][ T3073] usb 3-1: config 0 has an invalid interface number: 219 but max is 0 [ 795.213437][ T3073] usb 3-1: config 0 has no interface number 0 [ 795.220603][ T3073] usb 3-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 795.234728][T13763] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 795.246545][ T3073] usb 3-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 795.257581][T13763] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 795.267913][ T3073] usb 3-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 795.278235][T13763] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 795.287331][ T3073] usb 3-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 795.300650][T13763] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 795.311874][T13763] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 795.325743][T13763] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 795.335139][T13763] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 795.343292][T13763] usb 4-1: Product: syz [ 795.347589][T13763] usb 4-1: Manufacturer: syz [ 795.356919][ T46] usb 2-1: Using ep0 maxpacket: 16 [ 795.366997][ T3073] usb 3-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 795.376143][ T3073] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.384311][ T3073] usb 3-1: Product: syz [ 795.388792][ T3073] usb 3-1: Manufacturer: syz [ 795.393436][ T3073] usb 3-1: SerialNumber: syz [ 795.401398][T13763] cdc_wdm 4-1:1.0: skipping garbage [ 795.406744][T13763] cdc_wdm 4-1:1.0: skipping garbage [ 795.414856][ T3073] usb 3-1: config 0 descriptor?? [ 795.420221][T13763] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 795.426182][T13763] cdc_wdm 4-1:1.0: Unknown control protocol [ 795.434640][T13808] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 795.434976][ T46] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 795.454329][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 795.469422][ T46] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 795.478691][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.487153][ T46] usb 2-1: Product: syz [ 795.491406][ T46] usb 2-1: Manufacturer: syz [ 795.496092][ T46] usb 2-1: SerialNumber: syz [ 795.505109][ T46] usb 2-1: config 0 descriptor?? [ 795.515550][ T46] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 795.525262][ T46] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 795.611691][T13763] usb 4-1: USB disconnect, device number 89 [ 795.659347][ T3073] etas_es58x 3-1:0.219: Starting syz syz (Serial Number syz) [ 796.963025][ T46] em28xx 2-1:0.0: unknown em28xx chip ID (214) [ 797.233423][T13807] No such timeout policy "syz0" [ 797.325889][ T46] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 797.385304][T13827] netlink: 'syz.0.2602': attribute type 1 has an invalid length. [ 797.400633][T13827] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2602'. [ 797.409887][T13827] NCSI netlink: No device for ifindex 0 [ 797.497954][ T46] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 797.631372][ T46] em28xx 2-1:0.0: No AC97 audio processor [ 797.642057][ T46] usb 2-1: USB disconnect, device number 100 [ 797.649239][ T46] em28xx 2-1:0.0: Disconnecting em28xx [ 797.656373][ T46] em28xx 2-1:0.0: Freeing device [ 797.698235][ T3073] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 797.893694][T12488] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 798.046879][T12488] usb 5-1: Using ep0 maxpacket: 16 [ 798.055511][T12488] usb 5-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 1024 [ 798.078990][ T3073] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 798.093657][T12488] usb 5-1: config 1 interface 0 has no altsetting 0 [ 798.100541][ T3073] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 798.114556][ T3073] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 798.127164][T12488] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 798.136265][T12488] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 798.147286][ T3073] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 798.161432][T12488] usb 5-1: Product: syz [ 798.165761][T12488] usb 5-1: Manufacturer: syz [ 798.170600][T12488] usb 5-1: SerialNumber: syz [ 798.175696][ T3073] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 798.190453][T13824] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22 [ 798.203758][ T3073] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 798.213048][ T3073] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 798.221303][ T3073] usb 4-1: Product: syz [ 798.228934][ T3073] usb 4-1: Manufacturer: syz [ 798.347244][ T838] usb 3-1: USB disconnect, device number 86 [ 798.412033][ T3073] usb 4-1: can't set config #1, error -71 [ 798.653323][ T3073] usb 4-1: USB disconnect, device number 90 [ 799.191935][T12488] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 799.576093][T12488] usb 5-1: USB disconnect, device number 82 [ 799.866985][ T5937] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 800.086550][ T5937] usb 2-1: Using ep0 maxpacket: 8 [ 800.368211][ T5937] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 800.376494][ T5937] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 800.426131][ T5937] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 800.459581][ T5937] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 544 [ 800.476126][ T5937] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 800.508681][ T5937] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 800.528157][T13849] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2610'. [ 800.598023][ T5937] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.102722][ T5937] usb 2-1: usb_control_msg returned -32 [ 801.108548][ T5937] usbtmc 2-1:16.0: can't read capabilities [ 801.848426][T13860] usbtmc 2-1:16.0: stb usb_control_msg returned -32 [ 801.880060][ T838] usb 2-1: USB disconnect, device number 101 [ 802.522551][T13870] netlink: 'syz.0.2614': attribute type 1 has an invalid length. [ 802.530934][T13870] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2614'. [ 802.540240][T13870] NCSI netlink: No device for ifindex 0 [ 803.686754][ T838] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 803.868495][ T838] usb 1-1: Using ep0 maxpacket: 32 [ 804.100319][ T838] usb 1-1: config 0 has an invalid interface number: 219 but max is 0 [ 804.125309][ T838] usb 1-1: config 0 has no interface number 0 [ 804.177544][ T838] usb 1-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 804.216812][ T838] usb 1-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 804.236733][ T838] usb 1-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 804.256747][ T838] usb 1-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 805.611123][T13889] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2619'. [ 805.620441][T13889] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2619'. [ 806.427270][ T838] usb 1-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 806.436421][ T838] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.444574][ T838] usb 1-1: Product: syz [ 806.448870][ T838] usb 1-1: Manufacturer: syz [ 806.453516][ T838] usb 1-1: SerialNumber: syz [ 806.493650][ T838] usb 1-1: config 0 descriptor?? [ 806.649257][ T838] usb 1-1: can't set config #0, error -71 [ 806.706859][ T838] usb 1-1: USB disconnect, device number 95 [ 806.904597][T13900] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2623'. [ 807.126941][ T8] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 807.427074][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 807.437062][ T8] usb 4-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 1024 [ 807.447724][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 807.469328][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 807.493073][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 807.525657][ T8] usb 4-1: Product: syz [ 807.533852][ T8] usb 4-1: Manufacturer: syz [ 807.549576][ T8] usb 4-1: SerialNumber: syz [ 807.567611][T13898] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 808.659062][ T8] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 808.680584][ T8] usb 4-1: USB disconnect, device number 91 [ 808.963500][T13916] netlink: 'syz.4.2626': attribute type 1 has an invalid length. [ 808.971596][T13916] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2626'. [ 808.980792][T13916] NCSI netlink: No device for ifindex 0 [ 809.551616][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.107359][T13922] 9pnet_fd: Insufficient options for proto=fd [ 812.348594][T13936] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 812.355108][T13936] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 812.483127][T13936] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 812.521380][T13936] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 813.032897][T13936] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 813.039063][T13936] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 813.057759][T13936] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 813.065379][T13936] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 813.075577][T13936] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 813.081810][T13936] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 813.083492][T13949] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2635'. [ 813.640946][T13952] batadv_slave_1: entered promiscuous mode [ 813.653750][T13952] sp0: Synchronizing with TNC [ 813.851620][T13954] batadv_slave_1: left promiscuous mode [ 815.512369][T13964] netlink: 'syz.1.2638': attribute type 1 has an invalid length. [ 815.520316][T13964] netlink: 244 bytes leftover after parsing attributes in process `syz.1.2638'. [ 815.529667][T13964] NCSI netlink: No device for ifindex 0 [ 816.616290][T13975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2641'. [ 816.631208][T13975] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2641'. [ 817.419283][T13987] Cannot find set identified by id 0 to match [ 818.690963][T14001] netlink: 'syz.3.2650': attribute type 1 has an invalid length. [ 818.698941][T14001] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2650'. [ 818.708442][T14001] NCSI netlink: No device for ifindex 0 [ 819.807097][ T838] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 820.517847][ T838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 820.529065][ T838] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 820.541266][ T838] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 820.550671][ T838] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 820.566874][ T838] usb 2-1: Product: syz [ 820.571224][ T838] usb 2-1: Manufacturer: syz [ 820.626848][ T838] usb 2-1: SerialNumber: syz [ 820.643110][ T838] usb 2-1: config 0 descriptor?? [ 821.229109][ T838] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 821.247918][ T838] usb 2-1: USB disconnect, device number 102 [ 822.540653][T14059] netlink: 'syz.4.2664': attribute type 1 has an invalid length. [ 822.548590][T14059] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2664'. [ 822.557868][T14059] NCSI netlink: No device for ifindex 0 [ 824.485569][T14076] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 827.265638][T14100] netlink: 'syz.0.2677': attribute type 1 has an invalid length. [ 827.273623][T14100] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2677'. [ 827.282856][T14100] NCSI netlink: No device for ifindex 0 [ 833.718942][T12488] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 833.887677][T12488] usb 3-1: Using ep0 maxpacket: 16 [ 833.904026][T12488] usb 3-1: config 0 has an invalid interface number: 39 but max is 0 [ 833.916765][T12488] usb 3-1: config 0 has no interface number 0 [ 833.941985][T12488] usb 3-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=70.6d [ 833.995445][T12488] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.068947][T12488] usb 3-1: Product: syz [ 834.073583][T12488] usb 3-1: Manufacturer: syz [ 834.120429][T12488] usb 3-1: SerialNumber: syz [ 834.256195][T12488] usb 3-1: config 0 descriptor?? [ 834.343354][T12488] i2c-tiny-usb 3-1:0.39: version 70.6d found at bus 003 address 087 [ 834.394785][T14164] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2698'. [ 834.523788][T14171] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2699'. [ 835.889374][T12488] (null): failure reading functionality [ 836.153479][T12488] i2c i2c-1: connected i2c-tiny-usb device [ 836.225915][T12488] usb 3-1: USB disconnect, device number 87 [ 838.973469][ T5856] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 838.985701][ T5856] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 839.034766][ T5856] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 839.136752][ T5856] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 839.152775][ T5856] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 839.161957][ T5856] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 840.147990][T12785] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 840.193273][T14224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 840.221692][T12785] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 840.229645][T12785] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 840.253817][T12785] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 840.264037][T12785] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 840.336235][T12785] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 840.402230][T14212] lo speed is unknown, defaulting to 1000 [ 840.410982][T14212] lo speed is unknown, defaulting to 1000 [ 841.796807][ T838] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 842.108186][ T838] usb 3-1: Using ep0 maxpacket: 8 [ 842.121952][T14212] chnl_net:caif_netlink_parms(): no params data found [ 842.506885][ T5856] Bluetooth: hci5: command tx timeout [ 842.527807][ T838] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 842.544214][ T838] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 842.571372][ T838] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.592451][ T838] usb 3-1: config 0 descriptor?? [ 843.213387][ T838] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 843.477072][T14212] bridge0: port 1(bridge_slave_0) entered blocking state [ 843.484771][T14212] bridge0: port 1(bridge_slave_0) entered disabled state [ 843.503805][T14212] bridge_slave_0: entered allmulticast mode [ 843.512723][T14212] bridge_slave_0: entered promiscuous mode [ 843.529117][T14212] bridge0: port 2(bridge_slave_1) entered blocking state [ 843.539635][T14212] bridge0: port 2(bridge_slave_1) entered disabled state [ 843.549108][T14212] bridge_slave_1: entered allmulticast mode [ 843.560822][T14212] bridge_slave_1: entered promiscuous mode [ 843.570244][ T46] usb 3-1: USB disconnect, device number 88 [ 843.679589][T14212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 843.699844][T14212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 843.920788][T14212] team0: Port device team_slave_0 added [ 844.423213][T14212] team0: Port device team_slave_1 added [ 844.668743][ T5856] Bluetooth: hci5: command tx timeout [ 844.790477][T14212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 845.263568][T14212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.296888][T14212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 845.608079][T14212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 845.616904][T14212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 845.657009][T14212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 845.864266][T14212] hsr_slave_0: entered promiscuous mode [ 846.070262][T14212] hsr_slave_1: entered promiscuous mode [ 846.160982][T14212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 846.176839][T14212] Cannot create hsr debugfs directory [ 846.788611][ T5856] Bluetooth: hci5: command tx timeout [ 847.187511][ T8] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 847.371904][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 847.455546][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 233, setting to 64 [ 847.547953][ T8] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 847.570272][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.608173][ T8] usb 1-1: Product: syz [ 847.632771][ T8] usb 1-1: Manufacturer: syz [ 847.656028][ T8] usb 1-1: SerialNumber: syz [ 847.685278][ T8] usb 1-1: config 0 descriptor?? [ 847.892068][T14299] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 848.447724][ T8] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 848.460068][ T8] usb 1-1: USB disconnect, device number 96 [ 848.481306][ T3466] usb 1-1: Failed to submit usb control message: -71 [ 848.490261][ T3466] usb 1-1: unable to send the bmi data to the device: -71 [ 848.499030][ T3466] usb 1-1: unable to get target info from device [ 848.811452][T14212] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 849.110015][ T3466] usb 1-1: could not get target info (-71) [ 849.116087][ T3466] usb 1-1: could not probe fw (-71) [ 849.171783][ T5856] Bluetooth: hci5: command tx timeout [ 849.215161][T14212] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 849.260494][T14212] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 849.540459][T14212] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 850.057567][T14212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 850.122510][T14212] 8021q: adding VLAN 0 to HW filter on device team0 [ 850.249589][T14338] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 850.257491][T14338] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 850.266192][T14338] F2FS-fs (loop5): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 850.274117][T14338] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 850.492781][ T2993] bridge0: port 1(bridge_slave_0) entered blocking state [ 850.500001][ T2993] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.007141][ T2993] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.014359][ T2993] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.720928][T14212] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 851.733243][T14212] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 856.140432][T14212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 858.718644][T14212] veth0_vlan: entered promiscuous mode [ 859.120750][T14212] veth1_vlan: entered promiscuous mode [ 860.054267][T14212] veth0_macvtap: entered promiscuous mode [ 860.173154][T14212] veth1_macvtap: entered promiscuous mode [ 860.225827][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 860.254819][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.259634][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 861.270453][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.284043][T14212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 861.298512][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 861.476015][T14431] rdma_rxe: rxe_newlink: failed to add lo [ 861.489612][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.500078][T14212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 861.632476][T14212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 861.666306][T14212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.020120][T14212] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.036932][T14212] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.045709][T14212] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.131692][T14212] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 863.759370][ T3466] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 863.768941][ T29] audit: type=1326 audit(1734727022.966:25): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=14448 comm="syz.4.2777" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcec8585d29 code=0x0 [ 863.807971][ T3466] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.325434][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2777'. [ 864.391087][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.400403][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.807832][T14460] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 866.026431][ T5937] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 866.187701][ T5937] usb 3-1: Using ep0 maxpacket: 8 [ 866.205927][ T5937] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 866.254080][ T5937] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 866.432519][ T5937] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 866.602301][ T5937] usb 3-1: config 0 has no interface number 0 [ 866.640535][ T5937] usb 3-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 866.722642][ T5937] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 866.747279][ T5937] usb 3-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 866.816803][ T5937] usb 3-1: Product: syz [ 866.821041][ T5937] usb 3-1: Manufacturer: syz [ 866.850806][ T5937] usb 3-1: config 0 descriptor?? [ 867.098925][ T5937] usb 3-1: USB disconnect, device number 89 [ 868.416170][T14499] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 870.779431][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 874.065659][ T838] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 876.108401][ T838] usb 1-1: Using ep0 maxpacket: 8 [ 876.116879][ T838] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 876.127261][ T838] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 876.135509][ T838] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 876.153429][ T838] usb 1-1: config 0 has no interface number 0 [ 876.160770][ T838] usb 1-1: config 0 interface 21 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 876.176269][ T838] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 876.188526][ T838] usb 1-1: New USB device strings: Mfr=31, Product=1, SerialNumber=0 [ 876.198784][ T838] usb 1-1: Product: syz [ 876.216760][ T838] usb 1-1: Manufacturer: syz [ 876.232192][T14569] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2812'. [ 876.260249][ T838] usb 1-1: config 0 descriptor?? [ 876.287116][T14569] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 876.310181][T14569] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 876.342628][T14569] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 876.352029][T14569] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 876.521481][ T838] usb 1-1: USB disconnect, device number 97 [ 877.119136][T14583] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2814'. [ 879.388292][T14599] lo speed is unknown, defaulting to 1000 [ 879.401738][T14599] lo speed is unknown, defaulting to 1000 [ 883.441497][T12785] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 883.461328][T12785] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 883.631902][T12785] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 883.649470][T12785] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 883.662762][T12785] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 883.703198][T12785] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 884.353464][T14629] lo speed is unknown, defaulting to 1000 [ 884.366368][T14637] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2829'. [ 884.565798][T14629] lo speed is unknown, defaulting to 1000 [ 884.857136][ T8] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 885.296858][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 885.305661][ T8] usb 4-1: config 11 has an invalid interface number: 17 but max is 0 [ 885.367791][ T8] usb 4-1: config 11 has no interface number 0 [ 885.391302][ T8] usb 4-1: config 11 interface 17 has no altsetting 0 [ 886.309470][ T8] usb 4-1: New USB device found, idVendor=19d2, idProduct=ff90, bcdDevice=5c.79 [ 886.318941][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.401647][ T8] usb 4-1: Product: syz [ 886.427271][T12785] Bluetooth: hci6: command tx timeout [ 886.446837][ T8] usb 4-1: Manufacturer: syz [ 886.451517][ T8] usb 4-1: SerialNumber: syz [ 887.582098][T14664] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2832'. [ 888.043343][ T8] option 4-1:11.17: GSM modem (1-port) converter detected [ 888.172927][ T8] usb 4-1: USB disconnect, device number 92 [ 888.180137][ T8] option 4-1:11.17: device disconnected [ 888.630131][T12785] Bluetooth: hci6: command tx timeout [ 890.956245][T12785] Bluetooth: hci6: command tx timeout [ 891.262583][T14689] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2842'. [ 891.484215][T14629] chnl_net:caif_netlink_parms(): no params data found [ 892.462471][T14629] bridge0: port 1(bridge_slave_0) entered blocking state [ 892.470024][T14629] bridge0: port 1(bridge_slave_0) entered disabled state [ 892.480790][T14629] bridge_slave_0: entered allmulticast mode [ 892.489041][T14629] bridge_slave_0: entered promiscuous mode [ 892.497910][T14629] bridge0: port 2(bridge_slave_1) entered blocking state [ 892.505100][T14629] bridge0: port 2(bridge_slave_1) entered disabled state [ 892.512570][T14629] bridge_slave_1: entered allmulticast mode [ 892.519953][T14629] bridge_slave_1: entered promiscuous mode [ 892.594978][T14629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 892.606463][ T5952] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 892.650539][T14629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 892.720374][T14629] team0: Port device team_slave_0 added [ 892.740563][T14629] team0: Port device team_slave_1 added [ 892.766785][ T5952] usb 1-1: Using ep0 maxpacket: 32 [ 892.788220][ T5952] usb 1-1: config 11 has an invalid interface number: 17 but max is 0 [ 892.797083][ T5952] usb 1-1: config 11 has no interface number 0 [ 892.817642][ T5952] usb 1-1: config 11 interface 17 has no altsetting 0 [ 892.853017][T14629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 892.871562][ T5952] usb 1-1: New USB device found, idVendor=19d2, idProduct=ff90, bcdDevice=5c.79 [ 892.891119][T14629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 892.921722][ T5952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.939031][ T5952] usb 1-1: Product: syz [ 892.943280][ T5952] usb 1-1: Manufacturer: syz [ 892.950674][ T5952] usb 1-1: SerialNumber: syz [ 892.958073][T14629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 893.035890][T14728] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2848'. [ 893.088338][ T5856] Bluetooth: hci6: command tx timeout [ 893.210677][ T5952] option 1-1:11.17: GSM modem (1-port) converter detected [ 893.227674][T14629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 893.265679][ T5952] usb 1-1: USB disconnect, device number 98 [ 893.276950][T14629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 893.324827][ T5952] option 1-1:11.17: device disconnected [ 893.351230][T14629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 893.613909][T14629] hsr_slave_0: entered promiscuous mode [ 893.620938][T14629] hsr_slave_1: entered promiscuous mode [ 893.627937][T14629] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 893.637302][T14629] Cannot create hsr debugfs directory [ 894.460647][T14739] netlink: 'syz.3.2852': attribute type 4 has an invalid length. [ 896.441852][T14629] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 897.270758][T14629] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 899.128367][T14629] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 899.144493][T14629] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 899.681766][T14767] rdma_rxe: rxe_newlink: failed to add lo [ 899.953962][T14770] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2861'. [ 899.963213][T14770] openvswitch: netlink: Flow key attr not present in new flow. [ 900.054174][T14629] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.119315][T14629] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 900.905679][T14629] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 900.936809][T14629] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 901.116884][ T8] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 901.286879][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 901.305954][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 901.409396][ T8] usb 4-1: config 1 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 901.556146][ T8] usb 4-1: config 1 interface 0 has no altsetting 0 [ 901.672476][ T8] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.40 [ 901.797886][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 901.856307][T14629] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 901.886773][ T8] usb 4-1: Product: syz [ 901.906188][ T8] usb 4-1: Manufacturer: syz [ 901.916112][ T8] usb 4-1: SerialNumber: syz [ 901.936189][T14629] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 901.964218][T14629] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 901.976084][T14629] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 901.990571][ T46] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 902.105681][T14787] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2862'. [ 902.161738][ T8] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input54 [ 902.276503][ T8] usb 4-1: USB disconnect, device number 93 [ 902.354577][T14629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 902.398980][T14629] 8021q: adding VLAN 0 to HW filter on device team0 [ 902.420841][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.428122][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 902.456118][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.463424][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 902.707529][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 902.800928][ T46] usb 1-1: config 11 has an invalid interface number: 17 but max is 0 [ 902.809429][ T46] usb 1-1: config 11 has no interface number 0 [ 902.816127][ T46] usb 1-1: config 11 interface 17 has no altsetting 0 [ 902.863928][ T46] usb 1-1: New USB device found, idVendor=19d2, idProduct=ff90, bcdDevice=5c.79 [ 902.873529][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.881769][ T46] usb 1-1: Product: syz [ 902.885989][ T46] usb 1-1: Manufacturer: syz [ 902.890763][ T46] usb 1-1: SerialNumber: syz [ 902.938148][ T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 903.042603][T14629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 903.127589][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 903.150892][ T8] usb 6-1: config 0 has an invalid interface number: 219 but max is 0 [ 903.153043][ T46] option 1-1:11.17: GSM modem (1-port) converter detected [ 903.197066][ T8] usb 6-1: config 0 has no interface number 0 [ 903.202874][ T46] usb 1-1: USB disconnect, device number 99 [ 903.258810][ T46] option 1-1:11.17: device disconnected [ 903.265826][ T8] usb 6-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 903.351718][ T8] usb 6-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 903.437879][ T8] usb 6-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 903.523288][ T8] usb 6-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 903.614349][ T8] usb 6-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 903.637030][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.665568][ T8] usb 6-1: Product: syz [ 903.675704][ T8] usb 6-1: Manufacturer: syz [ 903.685858][ T8] usb 6-1: SerialNumber: syz [ 903.708000][ T8] usb 6-1: config 0 descriptor?? [ 903.713994][T14790] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 903.900445][ T838] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 903.905200][T14629] veth0_vlan: entered promiscuous mode [ 903.963524][ T8] etas_es58x 6-1:0.219: Starting syz syz (Serial Number syz) [ 903.964722][T14629] veth1_vlan: entered promiscuous mode [ 904.108444][T14629] veth0_macvtap: entered promiscuous mode [ 904.176844][ T838] usb 4-1: Using ep0 maxpacket: 32 [ 904.210619][ T838] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 904.226833][ T838] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 904.497197][ T838] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 904.539241][ T838] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 904.575473][ T838] usb 4-1: config 0 interface 0 has no altsetting 0 [ 904.814908][T14814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2872'. [ 904.824136][ T838] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 904.833734][ T838] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 904.843230][ T838] usb 4-1: Product: syz [ 904.850224][ T838] usb 4-1: Manufacturer: syz [ 904.858046][ T838] usb 4-1: SerialNumber: syz [ 904.870827][ T838] usb 4-1: config 0 descriptor?? [ 904.882491][T14629] veth1_macvtap: entered promiscuous mode [ 904.889691][ T838] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 904.903232][ T838] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 904.928868][T14629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 904.939546][T14629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.949624][T14629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 904.960229][T14629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 904.972046][T14629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.983100][T14629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 904.994655][T14629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.006755][T14629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 905.017479][T14629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.029712][T14629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 905.073162][T14629] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.209336][T14629] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.577479][T14629] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.591370][T14629] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.609698][ T5937] usb 4-1: USB disconnect, device number 94 [ 905.723759][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 905.756470][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 905.765345][ T5937] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 906.071041][T12488] usb 6-1: USB disconnect, device number 2 [ 906.073705][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.241089][T14822] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2873'. [ 906.250210][T14822] openvswitch: netlink: Flow key attr not present in new flow. [ 906.298660][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 908.311908][T14841] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2877'. [ 910.675357][ T8] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 910.956809][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 910.975908][ T8] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 911.049239][T14873] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 911.080840][ T8] usb 5-1: config 0 has no interface number 0 [ 911.091071][ T8] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 911.258470][ T8] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 911.269798][ T8] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 911.314424][ T8] usb 5-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 911.640687][ T8] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 911.650000][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 911.658228][ T8] usb 5-1: Product: syz [ 911.662446][ T8] usb 5-1: Manufacturer: syz [ 911.667439][ T8] usb 5-1: SerialNumber: syz [ 911.681070][ T8] usb 5-1: config 0 descriptor?? [ 911.691889][T14853] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 911.948558][ T8] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 913.296148][ T8] usb 5-1: USB disconnect, device number 83 [ 913.497703][T14895] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 914.603980][T14914] tipc: Started in network mode [ 914.609517][T14914] tipc: Node identity 067c88940552, cluster identity 4711 [ 914.620446][T14914] tipc: Enabled bearer , priority 0 [ 914.635203][T14913] tipc: Disabling bearer [ 914.994992][T14919] binder: BINDER_SET_CONTEXT_MGR already set [ 915.004892][T14919] binder: 14918:14919 ioctl 4018620d 20000040 returned -16 [ 916.206833][ T5952] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 916.890235][ T5952] usb 5-1: Using ep0 maxpacket: 32 [ 916.911710][ T5952] usb 5-1: config 0 has an invalid interface number: 219 but max is 0 [ 916.925875][ T5952] usb 5-1: config 0 has no interface number 0 [ 916.934949][ T5952] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 916.956487][ T5952] usb 5-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 916.971461][ T5952] usb 5-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 916.992829][ T5952] usb 5-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 917.025483][ T5952] usb 5-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 917.056701][ T5952] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 917.064810][ T5952] usb 5-1: Product: syz [ 917.123318][ T5952] usb 5-1: Manufacturer: syz [ 917.138271][ T5952] usb 5-1: SerialNumber: syz [ 917.156284][ T5952] usb 5-1: config 0 descriptor?? [ 917.175187][T14921] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 917.556717][T14955] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 917.861490][ T5952] etas_es58x 5-1:0.219: Starting syz syz (Serial Number syz) [ 918.271202][T14962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2919'. [ 919.027056][ T5952] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 919.096428][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 919.411977][ T5952] usb 3-1: device descriptor read/64, error -32 [ 919.418881][ T838] usb 5-1: USB disconnect, device number 84 [ 919.657211][ T5952] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 919.891186][ T5952] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 919.907205][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.012535][ T5952] usb 3-1: config 0 descriptor?? [ 920.094504][ T5952] cp210x 3-1:0.0: cp210x converter detected [ 920.142076][T12785] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 920.159206][T12785] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 920.168837][T12785] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 920.202592][T12785] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 920.213776][T12785] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 920.225261][T12785] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 920.338194][T14986] lo speed is unknown, defaulting to 1000 [ 920.345167][T14986] lo speed is unknown, defaulting to 1000 [ 920.503335][ T5952] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 920.511830][ T5952] cp210x 3-1:0.0: querying part number failed [ 920.525976][ T5952] usb 3-1: cp210x converter now attached to ttyUSB0 [ 921.454718][T15002] lo speed is unknown, defaulting to 1000 [ 921.467224][T15002] lo speed is unknown, defaulting to 1000 [ 922.054098][T14991] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 922.066880][T14991] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 922.107037][T14991] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 922.138326][T14991] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 922.146933][T14991] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 922.158822][T14991] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 922.175481][T14991] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 922.183776][T14991] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 922.192769][T14991] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 922.297643][ T838] usb 3-1: USB disconnect, device number 91 [ 922.306455][ T838] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 922.338012][ T838] cp210x 3-1:0.0: device disconnected [ 923.084234][ T5856] Bluetooth: hci5: command 0x0c1a tx timeout [ 924.034803][T14986] chnl_net:caif_netlink_parms(): no params data found [ 924.217539][ T5856] Bluetooth: hci4: command 0x041b tx timeout [ 924.221268][T12785] Bluetooth: hci6: command 0x0405 tx timeout [ 924.720579][T15029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 925.149465][T12785] Bluetooth: hci5: command 0x0c1a tx timeout [ 925.165819][T14986] bridge0: port 1(bridge_slave_0) entered blocking state [ 925.179359][T14986] bridge0: port 1(bridge_slave_0) entered disabled state [ 925.186829][T14986] bridge_slave_0: entered allmulticast mode [ 925.195782][T14986] bridge_slave_0: entered promiscuous mode [ 925.249600][T14986] bridge0: port 2(bridge_slave_1) entered blocking state [ 925.257895][T14986] bridge0: port 2(bridge_slave_1) entered disabled state [ 925.267158][T14986] bridge_slave_1: entered allmulticast mode [ 925.278224][T14986] bridge_slave_1: entered promiscuous mode [ 925.342522][T14986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 925.355210][T14986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 925.539943][T14986] team0: Port device team_slave_0 added [ 925.595070][T14986] team0: Port device team_slave_1 added [ 925.701323][T15047] 9pnet_fd: Insufficient options for proto=fd [ 926.267165][ T5856] Bluetooth: hci6: command 0x0405 tx timeout [ 926.267549][T14986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 926.273393][T12785] Bluetooth: hci4: command 0x041b tx timeout [ 926.314490][T14986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.437078][T14986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 926.473726][T14986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 926.482262][T14986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 926.551396][T14986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 926.575035][T15054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2942'. [ 926.748505][T14986] hsr_slave_0: entered promiscuous mode [ 926.795556][T14986] hsr_slave_1: entered promiscuous mode [ 926.826556][T14986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 926.843944][T14986] Cannot create hsr debugfs directory [ 927.986472][T12785] Bluetooth: hci5: command 0x0c1a tx timeout [ 928.456940][T12785] Bluetooth: hci4: command 0x041b tx timeout [ 928.463464][T12785] Bluetooth: hci6: command 0x0405 tx timeout [ 929.245385][T14986] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.273149][T14986] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 929.458390][T14986] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.511993][T14986] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 929.699848][T14986] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 929.788528][T14986] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 929.828744][T15088] vivid-000: disconnect [ 930.262743][T14986] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 930.279929][T15083] vivid-000: reconnect [ 930.285403][T14986] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 930.515701][ T5856] Bluetooth: hci4: command 0x041b tx timeout [ 930.562653][T14986] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 930.606166][T14986] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 930.615824][T15099] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2953'. [ 930.649210][T14986] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 930.673918][T15099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 930.715613][T15099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 930.751856][T15099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 930.771341][T15099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 930.814607][T14986] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 931.873897][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.073329][T14986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 932.147158][ T5937] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 932.240720][T14986] 8021q: adding VLAN 0 to HW filter on device team0 [ 932.317408][ T5937] usb 3-1: Using ep0 maxpacket: 16 [ 932.333026][ T5937] usb 3-1: config 0 has no interfaces? [ 932.432197][ T3466] bridge0: port 1(bridge_slave_0) entered blocking state [ 932.439790][ T3466] bridge0: port 1(bridge_slave_0) entered forwarding state [ 932.533819][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 932.541377][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 932.587215][ T5856] Bluetooth: hci4: command 0x041b tx timeout [ 932.617154][ T5937] usb 3-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 932.626279][ T5937] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 932.686429][ T5937] usb 3-1: Product: syz [ 932.711596][ T5937] usb 3-1: Manufacturer: syz [ 932.798174][ T5937] usb 3-1: SerialNumber: syz [ 932.800960][T14986] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 932.835301][ T5937] usb 3-1: config 0 descriptor?? [ 933.365379][ T5891] usb 3-1: USB disconnect, device number 92 [ 933.617565][T15128] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 933.646966][T15128] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 933.661579][T15128] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 933.693486][T14986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 933.918995][T15138] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 934.237675][T14986] veth0_vlan: entered promiscuous mode [ 934.605275][T14986] veth1_vlan: entered promiscuous mode [ 934.632359][T14986] veth0_macvtap: entered promiscuous mode [ 934.642144][T14986] veth1_macvtap: entered promiscuous mode [ 935.266361][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.283142][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.295834][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 935.308549][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.320984][T14986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 935.331833][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.342390][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.352411][T14986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 935.363177][T14986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 935.374475][T14986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 935.385698][T14986] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.394725][T14986] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.403599][T14986] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.412440][T14986] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 935.629914][ T5856] Bluetooth: hci5: command 0x0c1a tx timeout [ 935.707860][T12785] Bluetooth: hci6: command 0x0405 tx timeout [ 935.714285][ T5856] Bluetooth: hci4: command 0x041b tx timeout [ 935.804361][T14461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.807546][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 935.813086][T14461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 935.896247][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 936.035603][T15160] tipc: Enabled bearer , priority 0 [ 936.139250][T15159] tipc: Disabling bearer [ 937.173759][T15176] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 938.407551][T15187] fuse: Bad value for 'fd' [ 939.079225][T12785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 939.280723][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2980'. [ 939.831062][T12785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 940.778717][T12785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 940.824746][T12785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 940.858052][T12784] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 940.865735][T12784] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 941.134002][T15181] lo speed is unknown, defaulting to 1000 [ 941.220146][T15181] lo speed is unknown, defaulting to 1000 [ 941.226773][T15198] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 942.652991][T15200] vivid-000: disconnect [ 942.682067][T15200] vivid-000: reconnect [ 943.076779][T12784] Bluetooth: hci2: command tx timeout [ 943.126404][T15181] chnl_net:caif_netlink_parms(): no params data found [ 943.284890][T15181] bridge0: port 1(bridge_slave_0) entered blocking state [ 943.297216][T15181] bridge0: port 1(bridge_slave_0) entered disabled state [ 943.305953][T15181] bridge_slave_0: entered allmulticast mode [ 943.315068][T15181] bridge_slave_0: entered promiscuous mode [ 943.325247][T15181] bridge0: port 2(bridge_slave_1) entered blocking state [ 943.333332][T15181] bridge0: port 2(bridge_slave_1) entered disabled state [ 943.380339][T15181] bridge_slave_1: entered allmulticast mode [ 943.411901][T15181] bridge_slave_1: entered promiscuous mode [ 943.573419][T15238] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2992'. [ 943.619157][T15181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 943.661626][T15181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.018395][T15236] rdma_rxe: rxe_newlink: failed to add lo [ 944.494911][T15181] team0: Port device team_slave_0 added [ 944.514043][T15181] team0: Port device team_slave_1 added [ 944.599840][T15181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 944.616972][T15181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.709847][T15181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 944.746815][T15181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 944.764131][T15181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 944.825983][T15181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 945.065027][T15181] hsr_slave_0: entered promiscuous mode [ 945.142960][T15181] hsr_slave_1: entered promiscuous mode [ 945.146968][T12784] Bluetooth: hci2: command tx timeout [ 945.173377][T15181] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 945.181949][T15181] Cannot create hsr debugfs directory [ 945.584117][T15250] fuse: Bad value for 'fd' [ 947.797791][T12784] Bluetooth: hci2: command tx timeout [ 948.543249][T15181] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.570106][T15181] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 948.644733][T15259] tipc: Started in network mode [ 948.650548][T15259] tipc: Node identity 4a6bda830e71, cluster identity 4711 [ 948.661867][T15259] tipc: Enabled bearer , priority 0 [ 948.708986][T15181] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.722682][T15181] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 948.746280][T15258] tipc: Disabling bearer [ 948.888121][T15181] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.930132][T15181] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 949.048378][T15181] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.203157][T15181] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 950.360174][T12784] Bluetooth: hci2: command tx timeout [ 950.591262][T15273] lo speed is unknown, defaulting to 1000 [ 950.598297][T15273] lo speed is unknown, defaulting to 1000 [ 950.974982][T15181] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 950.999508][T15181] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 951.019319][T15181] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 951.042817][T15181] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 951.159300][T15280] rdma_rxe: rxe_newlink: failed to add lo [ 951.501901][T15181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 951.534972][T15181] 8021q: adding VLAN 0 to HW filter on device team0 [ 951.554970][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 951.562280][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 951.665803][T15181] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 951.676790][T15181] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 951.772962][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 951.780654][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 951.823485][ T5843] usb 4-1: new high-speed USB device number 95 using dummy_hcd [ 952.027363][T15295] fuse: Bad value for 'fd' [ 953.047286][ T5843] usb 4-1: Using ep0 maxpacket: 32 [ 953.054185][ T5843] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 953.063302][ T5843] usb 4-1: config 0 has no interface number 0 [ 953.070063][ T5843] usb 4-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 953.102807][ T5843] usb 4-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 953.152680][ T5843] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 953.205326][ T5843] usb 4-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 953.275521][ T5843] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 953.286749][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 953.294806][ T5843] usb 4-1: Product: syz [ 953.333982][T15181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 953.364849][ T5843] usb 4-1: Manufacturer: syz [ 953.381431][ T5843] usb 4-1: SerialNumber: syz [ 953.410246][ T5843] usb 4-1: config 0 descriptor?? [ 953.442558][T15287] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 953.827472][ T5843] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) [ 955.375077][T15181] veth0_vlan: entered promiscuous mode [ 955.513699][T15181] veth1_vlan: entered promiscuous mode [ 955.696049][T15181] veth0_macvtap: entered promiscuous mode [ 955.720809][T15181] veth1_macvtap: entered promiscuous mode [ 956.203174][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.353477][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.551167][ T5937] usb 4-1: USB disconnect, device number 95 [ 956.656859][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.736874][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.846867][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 956.859197][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.877630][T15181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 956.889347][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.900006][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.910117][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.920751][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.930946][T15181] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 956.941529][T15181] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 956.952655][T15181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 957.034871][ T29] audit: type=1326 audit(1734727116.326:26): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=15320 comm="syz.0.3012" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc85e185d29 code=0x0 [ 957.038599][T15181] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.066019][T15181] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.075342][T15181] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.084477][T15181] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 957.409210][T15324] rdma_rxe: rxe_newlink: failed to add lo [ 958.165595][T15331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3012'. [ 958.962129][ T3550] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 958.971306][ T3550] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 958.979651][ T3550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.092066][ T3550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 966.153628][T15386] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3024'. [ 967.573116][T15379] 9pnet_fd: Insufficient options for proto=fd [ 967.952679][T15396] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 968.025182][ T29] audit: type=1326 audit(1734727127.316:27): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=15395 comm="syz.5.3032" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2948585d29 code=0x0 [ 968.401008][T12784] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 968.431445][T12784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 968.441042][T12784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 968.449681][T12784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 968.460028][T12784] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 968.473336][T12784] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 968.505690][T15399] lo speed is unknown, defaulting to 1000 [ 968.512773][T15399] lo speed is unknown, defaulting to 1000 [ 968.774620][T15405] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3032'. [ 970.640742][T15399] chnl_net:caif_netlink_parms(): no params data found [ 970.759520][T12784] Bluetooth: hci1: command tx timeout [ 970.865635][T15424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 971.259578][T15399] bridge0: port 1(bridge_slave_0) entered blocking state [ 971.266864][T15399] bridge0: port 1(bridge_slave_0) entered disabled state [ 971.274487][T15399] bridge_slave_0: entered allmulticast mode [ 971.292804][T15399] bridge_slave_0: entered promiscuous mode [ 971.372257][T15435] netlink: 92 bytes leftover after parsing attributes in process `syz.4.3041'. [ 971.381554][T15435] openvswitch: netlink: Flow key attr not present in new flow. [ 972.258061][T15399] bridge0: port 2(bridge_slave_1) entered blocking state [ 972.265446][T15399] bridge0: port 2(bridge_slave_1) entered disabled state [ 972.272989][T15399] bridge_slave_1: entered allmulticast mode [ 972.280603][T15399] bridge_slave_1: entered promiscuous mode [ 972.837994][T12784] Bluetooth: hci1: command tx timeout [ 972.910706][T15399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 973.046302][T15399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.067280][T15452] input: syz1 as /devices/virtual/input/input55 [ 974.697271][T15399] team0: Port device team_slave_0 added [ 974.745145][T15399] team0: Port device team_slave_1 added [ 974.769607][ T29] audit: type=1326 audit(1734727134.056:28): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=15455 comm="syz.2.3048" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9138785d29 code=0x0 [ 974.814584][T15399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.828805][T15399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.863058][T15399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.920101][T12784] Bluetooth: hci1: command tx timeout [ 975.163773][T15399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 975.163874][T15399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 975.163950][T15399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.511966][ C0] vkms_vblank_simulate: vblank timer overrun [ 975.514361][T15468] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3048'. [ 975.562217][T15399] hsr_slave_0: entered promiscuous mode [ 975.574965][T15399] hsr_slave_1: entered promiscuous mode [ 975.575968][T15399] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 975.576171][T15399] Cannot create hsr debugfs directory [ 976.694449][ T30] INFO: task syz.1.2665:14052 blocked for more than 145 seconds. [ 976.694482][ T30] Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 976.694499][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 976.694512][ T30] task:syz.1.2665 state:D stack:22040 pid:14052 tgid:14051 ppid:5839 flags:0x00024006 [ 976.694577][ T30] Call Trace: [ 976.694588][ T30] [ 976.694606][ T30] __schedule+0x189f/0x4c80 [ 976.694673][ T30] ? __pfx___schedule+0x10/0x10 [ 976.694712][ T30] ? __pfx_lock_release+0x10/0x10 [ 976.694754][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 976.694796][ T30] ? schedule+0x90/0x320 [ 976.694829][ T30] schedule+0x14b/0x320 [ 976.694867][ T30] bit_wait+0x12/0xd0 [ 976.694904][ T30] __wait_on_bit+0xb0/0x2f0 [ 976.694952][ T30] ? __pfx_bit_wait+0x10/0x10 [ 976.694991][ T30] out_of_line_wait_on_bit+0x1d5/0x260 [ 976.695031][ T30] ? __pfx_bit_wait+0x10/0x10 [ 976.695068][ T30] ? __pfx_out_of_line_wait_on_bit+0x10/0x10 [ 976.695108][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 976.695142][ T30] ? iov_iter_iovec_advance+0x1fc/0x2c0 [ 976.695187][ T30] netfs_unbuffered_read_iter_locked+0xd83/0x1540 [ 976.695242][ T30] netfs_unbuffered_read_iter+0xbf/0xe0 [ 976.695275][ T30] __kernel_read+0x52e/0xa00 [ 976.695305][ T30] ? do_sys_openat2+0x13e/0x1d0 [ 976.695341][ T30] ? __pfx___kernel_read+0x10/0x10 [ 976.695400][ T30] integrity_kernel_read+0xb0/0x100 [ 976.695430][ T30] ? __pfx_integrity_kernel_read+0x10/0x10 [ 976.695461][ T30] ? __kmalloc_cache_noprof+0x243/0x390 [ 976.695487][ T30] ? ima_calc_file_hash+0xaae/0x1b30 [ 976.695522][ T30] ima_calc_file_hash+0xae6/0x1b30 [ 976.695570][ T30] ? is_bpf_text_address+0x26/0x2a0 [ 976.695604][ T30] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 976.695679][ T30] ? mark_lock+0x9a/0x360 [ 976.695719][ T30] ? __lock_acquire+0x1397/0x2100 [ 976.695755][ T30] ? make_vfsgid+0x51/0xa0 [ 976.695786][ T30] ? generic_fillattr+0x58f/0x830 [ 976.695820][ T30] ? v9fs_vfs_getattr+0x106/0x370 [ 976.695864][ T30] ima_collect_measurement+0x520/0xb10 [ 976.695909][ T30] ? __pfx_ima_collect_measurement+0x10/0x10 [ 976.695957][ T30] ? rcu_is_watching+0x15/0xb0 [ 976.695984][ T30] ? trace_contention_end+0x3c/0x120 [ 976.696017][ T30] ? __asan_memset+0x23/0x50 [ 976.696065][ T30] ? ima_get_hash_algo+0x156/0x4d0 [ 976.696091][ T30] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 976.696129][ T30] process_measurement+0x1351/0x1fb0 [ 976.696180][ T30] ? __pfx_process_measurement+0x10/0x10 [ 976.696216][ T30] ? __pfx_lock_release+0x10/0x10 [ 976.696249][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 976.696318][ T30] ? mnt_get_write_access+0x68/0x2b0 [ 976.696352][ T30] ? file_set_fsnotify_mode+0x12a/0x510 [ 976.696388][ T30] ? inode_to_bdi+0x69/0xf0 [ 976.696418][ T30] ? apparmor_current_getlsmprop_subj+0xde/0x160 [ 976.696451][ T30] ima_file_check+0xd9/0x120 [ 976.696484][ T30] ? __pfx_ima_file_check+0x10/0x10 [ 976.696524][ T30] security_file_post_open+0xb9/0x280 [ 976.696553][ T30] path_openat+0x2cbd/0x3580 [ 976.696831][ T30] ? __pfx_path_openat+0x10/0x10 [ 976.696887][ T30] do_filp_open+0x27f/0x4e0 [ 976.696923][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 976.696960][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 976.697029][ T30] do_sys_openat2+0x13e/0x1d0 [ 976.697059][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 976.697088][ T30] ? __se_sys_mount+0x379/0x3c0 [ 976.697126][ T30] __x64_sys_openat+0x247/0x2a0 [ 976.697156][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 976.697189][ T30] ? do_syscall_64+0x100/0x230 [ 976.697219][ T30] ? do_syscall_64+0xb6/0x230 [ 976.697247][ T30] do_syscall_64+0xf3/0x230 [ 976.697272][ T30] ? clear_bhb_loop+0x35/0x90 [ 976.697311][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.697346][ T30] RIP: 0033:0x7f6af5185d29 [ 976.697369][ T30] RSP: 002b:00007f6af5efd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 976.697400][ T30] RAX: ffffffffffffffda RBX: 00007f6af5375fa0 RCX: 00007f6af5185d29 [ 976.697421][ T30] RDX: 0000000000020842 RSI: 000000002000c380 RDI: ffffffffffffff9c [ 976.697440][ T30] RBP: 00007f6af5201aa8 R08: 0000000000000000 R09: 0000000000000000 [ 976.697459][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 976.697476][ T30] R13: 0000000000000000 R14: 00007f6af5375fa0 R15: 00007ffe83359dd8 [ 976.697513][ T30] [ 976.697545][ T30] [ 976.697545][ T30] Showing all locks held in the system: [ 976.697560][ T30] 6 locks held by kworker/u8:0/11: [ 976.697577][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 976.697653][ T30] #1: ffffc90000107c60 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 976.697726][ T30] #2: ffff88801aca10b8 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x38/0x860 [ 976.697795][ T30] #3: ffff88806fe210a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 976.697873][ T30] #4: ffff88806fe212e8 (&tty->termios_rwsem){++++}-{4:4}, at: n_tty_receive_buf_common+0x87/0x12e0 [ 976.697956][ T30] #5: ffffc90005b96380 (&ldata->output_lock){+.+.}-{4:4}, at: n_tty_receive_char+0x5d0/0xb70 [ 976.698035][ T30] 1 lock held by khungtaskd/30: [ 976.698051][ T30] #0: ffffffff8e937da0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 976.698133][ T30] 2 locks held by kworker/u8:4/61: [ 976.698153][ T30] 3 locks held by kworker/u8:5/769: [ 976.698169][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 976.698241][ T30] #1: ffffc90003ac7c60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 976.698312][ T30] #2: ffffffff8fcbab48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 976.698416][ T30] 2 locks held by kworker/u8:9/3550: [ 976.698435][ T30] 2 locks held by getty/5595: [ 976.698452][ T30] #0: ffff88803570a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 976.698529][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 976.698610][ T30] 2 locks held by kworker/u8:11/13578: [ 976.698626][ T30] #0: ffff88801e3c2948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 976.698691][ T30] #1: ffffc900105afc60 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 976.698750][ T30] 2 locks held by syz.1.2665/14052: [ 976.698765][ T30] #0: ffff888034d859f8 (&ima_iint_mutex_key[depth]){+.+.}-{4:4}, at: process_measurement+0x7a6/0x1fb0 [ 976.698836][ T30] #1: ffff888058530e28 (&sb->s_type->i_mutex_key#27){++++}-{4:4}, at: netfs_start_io_direct+0x1d4/0x210 [ 976.698920][ T30] 3 locks held by syz-executor/14629: [ 976.698947][ T30] 3 locks held by syz-executor/15399: [ 976.698965][ T30] 2 locks held by syz.2.3048/15455: [ 976.698981][ T30] #0: ffff88805c810208 (&sb->s_type->i_mutex_key#10){+.+.}-{4:4}, at: sock_close+0x90/0x240 [ 976.699062][ T30] #1: ffffffff8e93d278 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 976.699133][ T30] 1 lock held by syz.2.3048/15472: [ 976.699149][ T30] #0: ffffffff8fcbab48 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 976.699221][ T30] 1 lock held by syz.2.3048/15473: [ 976.699236][ T30] #0: ffffffff8fcbab48 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 976.699308][ T30] 1 lock held by syz.5.3049/15457: [ 976.699324][ T30] #0: ffffffff8fcbab48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3b/0x1b0 [ 976.699394][ T30] 6 locks held by syz.5.3049/15465: [ 976.699411][ T30] 3 locks held by syz.0.3052/15470: [ 976.699428][ T30] [ 976.699436][ T30] ============================================= [ 976.699436][ T30] [ 976.699461][ T30] NMI backtrace for cpu 0 [ 976.699474][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 976.699505][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 976.699519][ T30] Call Trace: [ 976.699527][ T30] [ 976.699537][ T30] dump_stack_lvl+0x241/0x360 [ 976.699565][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 976.699590][ T30] ? __pfx__printk+0x10/0x10 [ 976.699638][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 976.699674][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 976.699702][ T30] ? _printk+0xd5/0x120 [ 976.699735][ T30] ? __pfx__printk+0x10/0x10 [ 976.699768][ T30] ? __wake_up_klogd+0xcc/0x110 [ 976.699796][ T30] ? __pfx__printk+0x10/0x10 [ 976.699833][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 976.699861][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 976.699894][ T30] watchdog+0xff6/0x1040 [ 976.699925][ T30] ? watchdog+0x1ea/0x1040 [ 976.699970][ T30] ? __pfx_watchdog+0x10/0x10 [ 976.700000][ T30] kthread+0x7a9/0x920 [ 976.700028][ T30] ? __pfx_kthread+0x10/0x10 [ 976.700062][ T30] ? __pfx_watchdog+0x10/0x10 [ 976.700091][ T30] ? __pfx_kthread+0x10/0x10 [ 976.700121][ T30] ? __pfx_kthread+0x10/0x10 [ 976.700156][ T30] ? __pfx_kthread+0x10/0x10 [ 976.700185][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 976.700214][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 976.700247][ T30] ? __pfx_kthread+0x10/0x10 [ 976.700279][ T30] ret_from_fork+0x4b/0x80 [ 976.700307][ T30] ? __pfx_kthread+0x10/0x10 [ 976.700339][ T30] ret_from_fork_asm+0x1a/0x30 [ 976.700380][ T30] [ 976.700390][ T30] Sending NMI from CPU 0 to CPUs 1: [ 976.700431][ C1] NMI backtrace for cpu 1 [ 976.700444][ C1] CPU: 1 UID: 0 PID: 3550 Comm: kworker/u8:9 Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 976.700466][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 976.700479][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 976.700510][ C1] RIP: 0010:lock_release+0xe0/0xa30 [ 976.700536][ C1] Code: 7f 0e 73 16 e8 e1 39 0a 00 84 c0 75 0d 80 3d a7 1d 6a 0e 00 0f 84 fc 05 00 00 48 c7 c0 90 e4 1a 90 48 c1 e8 03 42 0f b6 04 38 <84> c0 4c 8b 74 24 18 0f 85 1a 06 00 00 83 3d 8c 31 80 0e 00 0f 84 [ 976.700552][ C1] RSP: 0018:ffffc9000d39f7e0 EFLAGS: 00000a02 [ 976.700568][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff819ab2c0 [ 976.700582][ C1] RDX: 0000000000000000 RSI: ffffffff8c5fece0 RDI: ffffffff8c5feca0 [ 976.700595][ C1] RBP: ffffc9000d39f910 R08: ffffffff901ab1f7 R09: 1ffffffff203563e [ 976.700610][ C1] R10: dffffc0000000000 R11: fffffbfff203563f R12: 1ffff92001a73f08 [ 976.700625][ C1] R13: ffffffff8bb820fe R14: dffffc0000000000 R15: dffffc0000000000 [ 976.700640][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 976.700656][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 976.700670][ C1] CR2: 000000110c3e7fa8 CR3: 000000000e736000 CR4: 00000000003526f0 [ 976.700686][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 976.700698][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 976.700710][ C1] Call Trace: [ 976.700717][ C1] [ 976.700725][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 976.700748][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 976.700773][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 976.700796][ C1] ? nmi_handle+0x2a/0x5a0 [ 976.700830][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 976.700852][ C1] ? nmi_handle+0x14f/0x5a0 [ 976.700877][ C1] ? nmi_handle+0x2a/0x5a0 [ 976.700904][ C1] ? lock_release+0xe0/0xa30 [ 976.700927][ C1] ? default_do_nmi+0x63/0x160 [ 976.700951][ C1] ? exc_nmi+0x123/0x1f0 [ 976.700972][ C1] ? end_repeat_nmi+0xf/0x53 [ 976.700998][ C1] ? batadv_iv_ogm_schedule+0x41e/0x10a0 [ 976.701026][ C1] ? lock_release+0xb0/0xa30 [ 976.701050][ C1] ? lock_release+0xe0/0xa30 [ 976.701074][ C1] ? lock_release+0xe0/0xa30 [ 976.701105][ C1] ? lock_release+0xe0/0xa30 [ 976.701129][ C1] [ 976.701135][ C1] [ 976.701144][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 976.701168][ C1] ? batadv_iv_ogm_schedule+0x41e/0x10a0 [ 976.701197][ C1] ? batadv_primary_if_get_selected+0x7a/0x510 [ 976.701222][ C1] ? __pfx_lock_release+0x10/0x10 [ 976.701245][ C1] ? batadv_primary_if_get_selected+0x3f4/0x510 [ 976.701279][ C1] batadv_iv_ogm_schedule+0x6f3/0x10a0 [ 976.701307][ C1] ? batadv_iv_ogm_schedule+0x41e/0x10a0 [ 976.701335][ C1] ? __pfx_batadv_iv_ogm_schedule+0x10/0x10 [ 976.701363][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 976.701388][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x6fe/0x810 [ 976.701422][ C1] ? process_scheduled_works+0x976/0x1840 [ 976.701443][ C1] process_scheduled_works+0xa66/0x1840 [ 976.701478][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 976.701503][ C1] ? assign_work+0x364/0x3d0 [ 976.701526][ C1] worker_thread+0x870/0xd30 [ 976.701554][ C1] ? __kthread_parkme+0x169/0x1d0 [ 976.701578][ C1] ? __pfx_worker_thread+0x10/0x10 [ 976.701600][ C1] kthread+0x7a9/0x920 [ 976.701623][ C1] ? __pfx_kthread+0x10/0x10 [ 976.701649][ C1] ? __pfx_worker_thread+0x10/0x10 [ 976.701670][ C1] ? __pfx_kthread+0x10/0x10 [ 976.701694][ C1] ? __pfx_kthread+0x10/0x10 [ 976.701719][ C1] ? __pfx_kthread+0x10/0x10 [ 976.701743][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 976.701767][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 976.701792][ C1] ? __pfx_kthread+0x10/0x10 [ 976.701817][ C1] ret_from_fork+0x4b/0x80 [ 976.701839][ C1] ? __pfx_kthread+0x10/0x10 [ 976.701864][ C1] ret_from_fork_asm+0x1a/0x30 [ 976.701893][ C1] [ 976.702433][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 976.702449][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-next-20241220-syzkaller #0 [ 976.702476][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 976.702490][ T30] Call Trace: [ 976.702499][ T30] [ 976.702510][ T30] dump_stack_lvl+0x241/0x360 [ 976.702539][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 976.702565][ T30] ? __pfx__printk+0x10/0x10 [ 976.702598][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 976.702637][ T30] ? vscnprintf+0x5d/0x90 [ 976.702669][ T30] panic+0x349/0x880 [ 976.702706][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 976.702739][ T30] ? __pfx_panic+0x10/0x10 [ 976.702780][ T30] ? irq_work_queue+0xd1/0x150 [ 976.702809][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 976.702839][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 976.702868][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 976.702896][ T30] ? nmi_trigger_cpumask_backtrace+0x251/0x320 [ 976.702937][ T30] watchdog+0x1035/0x1040 [ 976.702970][ T30] ? watchdog+0x1ea/0x1040 [ 976.703005][ T30] ? __pfx_watchdog+0x10/0x10 [ 976.703036][ T30] kthread+0x7a9/0x920 [ 976.703067][ T30] ? __pfx_kthread+0x10/0x10 [ 976.703101][ T30] ? __pfx_watchdog+0x10/0x10 [ 976.703132][ T30] ? __pfx_kthread+0x10/0x10 [ 976.703163][ T30] ? __pfx_kthread+0x10/0x10 [ 976.703199][ T30] ? __pfx_kthread+0x10/0x10 [ 976.703230][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 976.703262][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 976.703295][ T30] ? __pfx_kthread+0x10/0x10 [ 976.703329][ T30] ret_from_fork+0x4b/0x80 [ 976.703358][ T30] ? __pfx_kthread+0x10/0x10 [ 976.703391][ T30] ret_from_fork_asm+0x1a/0x30 [ 976.703433][ T30] [ 976.703721][ T30] Kernel Offset: disabled