last executing test programs: 1m47.148432934s ago: executing program 0 (id=28): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), r1) sendmsg$TIPC_NL_BEARER_GET(r1, 0x0, 0x800) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000240)=ANY=[], 0x310) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, 0x0, 0x0) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000380)='/proc/asound/card1/oss_mixer\x00', 0x1, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0xdc3, 0x2000) syz_usb_disconnect(r4) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000007fc0), 0x800001d, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 1m43.192236878s ago: executing program 0 (id=34): r0 = socket(0x10, 0x80003, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ppoll(&(0x7f0000000080)=[{r6}], 0x1, 0x0, 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r7 = syz_open_pts(r6, 0x121500) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000280)=0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) setreuid(0x0, 0x0) setresuid(0xffffffffffffffff, 0x0, 0xee01) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000003800010324bd7002fa0000ca07"], 0x14}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000380)='afs_cm_no_server_u\x00', r9, 0x0, 0x7}, 0xffffffffffffff79) socketpair$unix(0x2d, 0x2, 0x0, &(0x7f0000000200)) close_range(r0, 0xffffffffffffffff, 0x0) 1m42.085697222s ago: executing program 0 (id=37): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80000001}}, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$sndctrl(0x0, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc4c85513, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r3, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) syz_usb_disconnect(r2) 1m36.924557101s ago: executing program 0 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf4166382", @ANYRES32], 0x58) mount$9p_fd(0x0, &(0x7f00000025c0)='./file0\x00', &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file1\x00', 0x800, 0x1) 1m35.634958345s ago: executing program 0 (id=46): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) readv(r0, &(0x7f0000000300)=[{&(0x7f0000000340)=""/113, 0x71}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 1m33.310533981s ago: executing program 0 (id=48): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000001c0)='name', 0x0, r3) connect(0xffffffffffffffff, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x46, 0xb, "30baaf652685f9a25cdf20e68a81fb0d8c073a4cf9d07ebc2b5cc2e689b17668bc65fedd36417d7cb483ec614c4645b290e4739fe43eaeb37bfc11d4ca0998", 0x37}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1) syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m14.565211848s ago: executing program 32 (id=48): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) fcntl$setstatus(r0, 0x4, 0x42000) userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r3, 0x5, &(0x7f00000001c0)='name', 0x0, r3) connect(0xffffffffffffffff, &(0x7f0000000180)=@nfc_llcp={0x27, 0x0, 0x1, 0x7, 0x46, 0xb, "30baaf652685f9a25cdf20e68a81fb0d8c073a4cf9d07ebc2b5cc2e689b17668bc65fedd36417d7cb483ec614c4645b290e4739fe43eaeb37bfc11d4ca0998", 0x37}, 0x80) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000200)=[{0x0}], 0x1) syz_usb_connect(0x0, 0x36, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 1m11.68306969s ago: executing program 1 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff001000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed2788c5532994414b47034801d524faf416638217", @ANYRES32], 0x58) mount$9p_fd(0x0, 0x0, &(0x7f0000002340), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) chdir(&(0x7f0000000100)='./file0\x00') mknod$loop(&(0x7f0000000000)='./file1\x00', 0x800, 0x1) 1m10.962812544s ago: executing program 1 (id=72): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fc6055565563d0f6", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r0 = add_key$user(&(0x7f0000000340), &(0x7f0000000540)={'syz', 0x0}, &(0x7f0000000380)="c2baf1afe81b5e0d16fbe9cf2f4fd4807349780c056f0db61b89afcd548c6423b72e9d27c3284bc15bc8989e7fcb2dae282e8730294c680d09f265ba59b36f4852e5b9", 0x43, 0xfffffffffffffffd) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=r0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m9.536371133s ago: executing program 1 (id=76): r0 = syz_usb_connect$printer(0x2, 0x77, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x5, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000300)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000180)={0x2c, 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB="0003840000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f00000004c0)=0x10000) write$char_usb(r1, 0x0, 0x0) 1m2.564701961s ago: executing program 1 (id=82): r0 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001a40)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000200)="37df163529da2d3cc1edfe1fcc09c9499f16", 0x12}], 0x1}}], 0x1, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 59.935395342s ago: executing program 1 (id=90): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) bpf$MAP_CREATE(0x0, 0x0, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) syz_open_dev$video(&(0x7f0000000000), 0xc000, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdir(0x0, 0x334) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r5, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8f, 0x0, 0x100000}, 0x20) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$I2C(0x0, 0x80, 0x14000) pipe(0x0) r6 = syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) syz_usb_control_io(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000000640)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) 54.407905518s ago: executing program 1 (id=92): socket(0x10, 0x803, 0x8) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x100400, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 38.95631995s ago: executing program 33 (id=92): socket(0x10, 0x803, 0x8) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x100400, 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000010000000100000009"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 22.537726284s ago: executing program 4 (id=136): syz_open_dev$video(&(0x7f0000000180), 0x0, 0x22ed00) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x1) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000480)={{0x0, 0x3, 0x0, 0x3}, 'syz0\x00', 0x10}) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x10000) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000000c0)={{0xe}, 0x1000000, 0x4, 0x7fffffff, {0x71, 0xe}, 0x3, 0x200}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) lsetxattr$security_ima(&(0x7f0000000340)='./file0\x00', &(0x7f0000000100), &(0x7f00000003c0)=ANY=[@ANYRESOCT=r2], 0xb, 0x1) sendmsg$IPSET_CMD_DEL(r3, 0x0, 0x80044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r5, &(0x7f0000003840)=[{{&(0x7f00000006c0)={0xa, 0x4e24, 0x0, @remote, 0xa}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000300)="800100000077520e1b6beae500040000000000000000", 0x16}], 0x1, &(0x7f0000003500)=ANY=[@ANYBLOB="180000000000000029000000360000000400000000000000"], 0x18}}], 0x1, 0x240080c4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x185) write$cgroup_int(r7, &(0x7f00000000c0)=0x1c3, 0x12) sendmsg$key(0xffffffffffffffff, 0x0, 0x8000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="08001b"], 0x34}}, 0x4004010) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0xee) ioctl$UI_DEV_CREATE(r1, 0x5501) close_range(r0, 0xffffffffffffffff, 0x0) 18.767256925s ago: executing program 2 (id=140): r0 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$getflags(r2, 0x401) 15.823214809s ago: executing program 4 (id=141): syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0x4b) 15.724298327s ago: executing program 2 (id=142): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x800, 0x3, 0x3, 0x200, 0x4, 0x2, 0xff}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140), 0xc) socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) process_vm_readv(r5, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, 0x0, 0x24008000) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, 0x0, 0x800) socket$alg(0x26, 0x5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x129240, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, &(0x7f0000000440)={r6, 0x0, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78d09843d601010000000000080d0ec0c1b4e9b1c4369d03740250ceaac594b1b3c741dd17c18e8438ef2a565e04603323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_CHANGE_FD(r7, 0x4c06, r6) 13.414899778s ago: executing program 3 (id=143): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x3, 0x500) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000340)={r6, 0x1, {0x0, 0x0, 0x0, 0x40008000007, 0x7, 0x0, 0x12, 0x3, 0x10, "47597a86a8bb776e577944cf0e2adef826cf9f6d03493154263534eef4476d40e74058c3586a4612b16b3559b099cfbc7b13017c3c99ef524ef30bfa1d9d2fc8", "f83eeadd7986a94f584f1bdcb0898e9c96bcf76c30d6ef25af784963855ecc8789e16ce0700c50de5f495301cbe2d22f0707997439b4b8cc841a72b3b7f19a73", "a7cf31a9f1c79c7098b6b6b4ffd2a940fc9980ede6cd92dca2a5be7617fa7e33", [0xd78, 0x800]}}) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 13.353380447s ago: executing program 4 (id=144): r0 = socket$igmp6(0xa, 0x3, 0x2) syz_clone(0x8b28600, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = dup(r0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000bc0)={0xffffffffffffffff, r1}) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_stats_latency\x00', r3, 0x0, 0x40000000}, 0x18) sendmsg$netlink(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$cec(0x0, 0x0, 0x101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = syz_io_uring_setup(0x497, 0x0, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r7, 0x12a8f, 0xf264, 0x40, 0x0, 0x0) r10 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) write$dsp(r10, &(0x7f0000000240)="1bde089db4e1f558c1fac0e45331c4859ed4516b05165b37b710ff7130b8b173103d", 0x22) close(r10) move_pages(0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0) r11 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r11, 0xc008561c, &(0x7f0000000040)={0xf0f017, 0x1}) r12 = socket$igmp(0x2, 0x3, 0x2) ioctl$SIOCGETVIFCNT(r12, 0x89e0, 0x0) 12.185419107s ago: executing program 3 (id=145): prlimit64(0x0, 0xe, &(0x7f0000000000)={0xff, 0x10000}, &(0x7f0000000040)) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_key_refresh_complete={{0x30, 0x3}, {0xf, 0xc9}}}, 0x6) syz_emit_vhci(&(0x7f00000000c0)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_host_features={{0x3d, 0xe}, {@any, "2a99a7d5385535c4"}}}, 0x11) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0x0, 0x2, 0x1, 0x17}, @l2cap_cid_signaling={{0x13}, [@l2cap_info_req={{0xa, 0x9, 0x2}, {0x2}}, @l2cap_move_chan_req={{0xe, 0x5, 0x3}, {0x1, 0xe4}}, @l2cap_info_req={{0xa, 0x9, 0x2}, {0x79}}]}}, 0x1c) unshare(0x180) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(0x0, 0x0) semget$private(0x0, 0x0, 0x1) syz_emit_vhci(&(0x7f0000000200)=@HCI_SCODATA_PKT={0x3, {0xc9}}, 0x4) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x80}}}, 0x4) r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x600}) fchdir(0xffffffffffffffff) ioctl$UFFDIO_WAKE(r0, 0x8010aa02, 0x0) 9.863275474s ago: executing program 3 (id=146): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 9.755395577s ago: executing program 4 (id=147): ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) write(0xffffffffffffffff, &(0x7f00000000c0), 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180)={0x4, 0xfd, 0x1, 0x6, 0x0, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x0, 0x96}, 0xe) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r1, 0x1) read(r1, &(0x7f0000000340)=""/165, 0xa5) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000001100)={0x8, 0xc, 0x0, 'queue0\x00', 0x9}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) write(r2, &(0x7f0000000040)='*\x00\x00', 0x3) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002940)={0x1c, r4, 0x8, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000041}, 0x0) 9.188289795s ago: executing program 2 (id=148): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, 0x0, &(0x7f0000000040)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$netlink(0x10, 0x3, 0x8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @empty, @remote}, &(0x7f00000001c0)=0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}, 0x1, 0x0, 0x0, 0x8080}, 0x0) 5.693173055s ago: executing program 2 (id=149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000007c0)={0x0, 0x0}) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x7, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000202070250000000000202020db1af8ff41000000bca100000000000407010000f8ff809eb73b4e0008000000b70300000000000085000000d300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$OSF_MSG_ADD(r5, 0x0, 0x80) setgroups(0xf2, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000019280)={0x1, 0x0, @ioapic={0xf000, 0x3, 0x3, 0x2, 0x0, [{0x5, 0x7e, 0x7, '\x00', 0x7}, {0x2, 0x3, 0x3, '\x00', 0x9}, {0x8, 0x7, 0x0, '\x00', 0x2}, {0x0, 0x1, 0x8, '\x00', 0xa}, {0x8, 0xc1, 0x8, '\x00', 0x9}, {0x6, 0xcc, 0xb, '\x00', 0xff}, {0xc8, 0x57, 0x9, '\x00', 0x7}, {0xa, 0x81, 0x3, '\x00', 0x5}, {0xfa, 0x7, 0x0, '\x00', 0x1}, {0xff, 0x0, 0x3, '\x00', 0xf7}, {0x5, 0xe, 0x2, '\x00', 0x9}, {0xf4, 0x66, 0x6, '\x00', 0x1}, {0x3, 0x5, 0xe, '\x00', 0x8}, {0x5b, 0x17, 0x1, '\x00', 0x8}, {0x4, 0x6, 0x1, '\x00', 0xc}, {0x2, 0x0, 0x5, '\x00', 0x3}, {0x4, 0x1, 0xad, '\x00', 0x6}, {0x7, 0x7, 0x9, '\x00', 0x6}, {0x2, 0x8, 0x0, '\x00', 0xff}, {0x4, 0xf, 0x3, '\x00', 0x5}, {0xda, 0x96, 0x0, '\x00', 0x4}, {0x5, 0x80, 0xe, '\x00', 0x1}, {0xd, 0x1, 0x4, '\x00', 0x2}, {0x0, 0xb0, 0x1, '\x00', 0xc}]}}) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240), 0x0, 0x7, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, 0x0, 0x0) 4.486252724s ago: executing program 3 (id=150): r0 = openat(0xffffffffffffff9c, 0x0, 0x88040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$setlease(r1, 0x400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x0) fcntl$getflags(r2, 0x401) 3.292770324s ago: executing program 3 (id=151): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x14, 0x42, 0x9, 0xfffffffc, 0x25dfdbfd, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000048}, 0x0) 3.040604634s ago: executing program 2 (id=152): syz_emit_vhci(&(0x7f00000003c0)=ANY=[], 0x4b) 1.267488584s ago: executing program 4 (id=153): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0xfffffffffffffffe}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r6 = syz_open_dev$loop(&(0x7f00000001c0), 0x3, 0x500) ioctl$LOOP_CONFIGURE(r5, 0x4c0a, &(0x7f0000000340)={r6, 0x1, {0x0, 0x0, 0x0, 0x40008000007, 0x7, 0x0, 0x12, 0x3, 0x10, "47597a86a8bb776e577944cf0e2adef826cf9f6d03493154263534eef4476d40e74058c3586a4612b16b3559b099cfbc7b13017c3c99ef524ef30bfa1d9d2fc8", "f83eeadd7986a94f584f1bdcb0898e9c96bcf76c30d6ef25af784963855ecc8789e16ce0700c50de5f495301cbe2d22f0707997439b4b8cc841a72b3b7f19a73", "a7cf31a9f1c79c7098b6b6b4ffd2a940fc9980ede6cd92dca2a5be7617fa7e33", [0xd78, 0x800]}}) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r7, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) 1.15824034s ago: executing program 2 (id=154): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x4b, 0x41, 0x46, 0x8, 0x1660, 0x932, 0x80ea, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x5, 0x10, 0xf}}]}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x2, 0x0, 0x0, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) read(r0, 0x0, 0xffffff0c) 935.471737ms ago: executing program 3 (id=155): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000040000000800"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) getdents(r2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = syz_io_uring_setup(0x837, &(0x7f0000000180)={0x0, 0x679a, 0x80, 0x4, 0x3ce}, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x40, 0x0, r4, 0x80, &(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfe, 0x4090000}}) io_uring_enter(r5, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 4 (id=156): write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000040)={0xa, {0x3, 0x99, 0x5}}, 0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) mkdirat(0xffffffffffffff9c, 0x0, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000004c00)=""/102392, 0x18ff8) write$vhost_msg_v2(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000300)=@newtaction={0x50, 0x31, 0x1, 0x70bd27, 0x0, {}, [{0x3c}]}, 0x50}, 0x1, 0x0, 0x0, 0x8080}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. [ 165.621912][ T5774] cgroup: Unknown subsys name 'net' [ 165.805821][ T5774] cgroup: Unknown subsys name 'cpuset' [ 165.819520][ T5774] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 209.216379][ T5774] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 212.849775][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.858801][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.867460][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.878660][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.888763][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 213.128828][ T5805] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 213.136918][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 213.158726][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 213.166836][ T5805] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 213.177061][ T5805] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 213.184903][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 213.208238][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 213.217406][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 213.230209][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 213.238394][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 213.255156][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 213.299286][ T5088] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 213.304344][ T5805] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 213.317703][ T5797] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 213.325872][ T5088] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 213.342939][ T5797] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.362176][ T5797] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 213.370237][ T5088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.386352][ T5088] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 213.396204][ T5088] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 213.859121][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 214.803096][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.810909][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.818835][ T5796] bridge_slave_0: entered allmulticast mode [ 214.827980][ T5796] bridge_slave_0: entered promiscuous mode [ 214.855328][ T5802] chnl_net:caif_netlink_parms(): no params data found [ 214.892571][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 214.937384][ T5088] Bluetooth: hci0: command tx timeout [ 214.979713][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.987510][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.995113][ T5796] bridge_slave_1: entered allmulticast mode [ 215.004259][ T5796] bridge_slave_1: entered promiscuous mode [ 215.059148][ T5801] chnl_net:caif_netlink_parms(): no params data found [ 215.135446][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.164887][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.326101][ T5088] Bluetooth: hci2: command tx timeout [ 215.371932][ T5796] team0: Port device team_slave_0 added [ 215.416824][ T5088] Bluetooth: hci1: command tx timeout [ 215.454556][ T5796] team0: Port device team_slave_1 added [ 215.468249][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 215.486148][ T5088] Bluetooth: hci3: command tx timeout [ 215.491749][ T5088] Bluetooth: hci4: command tx timeout [ 215.690780][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.699470][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.728040][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.837183][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.844343][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.870812][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.021641][ T5802] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.030064][ T5802] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.037807][ T5802] bridge_slave_0: entered allmulticast mode [ 216.046939][ T5802] bridge_slave_0: entered promiscuous mode [ 216.158194][ T5802] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.165682][ T5802] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.173611][ T5802] bridge_slave_1: entered allmulticast mode [ 216.182707][ T5802] bridge_slave_1: entered promiscuous mode [ 216.226266][ T5801] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.233740][ T5801] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.241394][ T5801] bridge_slave_0: entered allmulticast mode [ 216.250497][ T5801] bridge_slave_0: entered promiscuous mode [ 216.401910][ T5801] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.409601][ T5801] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.417212][ T5801] bridge_slave_1: entered allmulticast mode [ 216.425624][ T5801] bridge_slave_1: entered promiscuous mode [ 216.434484][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.442143][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.449750][ T5812] bridge_slave_0: entered allmulticast mode [ 216.458544][ T5812] bridge_slave_0: entered promiscuous mode [ 216.587994][ T5802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.612746][ T5796] hsr_slave_0: entered promiscuous mode [ 216.622208][ T5796] hsr_slave_1: entered promiscuous mode [ 216.633881][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.641609][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.651069][ T5812] bridge_slave_1: entered allmulticast mode [ 216.660212][ T5812] bridge_slave_1: entered promiscuous mode [ 216.678953][ T5801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.731876][ T5802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.788385][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.806886][ T5801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.824174][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.006271][ T5809] Bluetooth: hci0: command tx timeout [ 217.110831][ T5802] team0: Port device team_slave_0 added [ 217.178775][ T5801] team0: Port device team_slave_0 added [ 217.192591][ T5812] team0: Port device team_slave_0 added [ 217.208467][ T5801] team0: Port device team_slave_1 added [ 217.240479][ T5802] team0: Port device team_slave_1 added [ 217.247989][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.255459][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.263510][ T5808] bridge_slave_0: entered allmulticast mode [ 217.271884][ T5808] bridge_slave_0: entered promiscuous mode [ 217.319059][ T5812] team0: Port device team_slave_1 added [ 217.413157][ T5809] Bluetooth: hci2: command tx timeout [ 217.422111][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.431405][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.439094][ T5808] bridge_slave_1: entered allmulticast mode [ 217.448875][ T5808] bridge_slave_1: entered promiscuous mode [ 217.486160][ T5809] Bluetooth: hci1: command tx timeout [ 217.494416][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.501658][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.528129][ T5801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.566140][ T5809] Bluetooth: hci4: command tx timeout [ 217.571744][ T5809] Bluetooth: hci3: command tx timeout [ 217.645457][ T5801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.653652][ T5801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.680187][ T5801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.724784][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.732043][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.758478][ T5802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.797703][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.804839][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.831400][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.848826][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.856058][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.882335][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.910757][ T5802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.918434][ T5802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.944855][ T5802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.965669][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.084150][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.148803][ T5801] hsr_slave_0: entered promiscuous mode [ 218.158296][ T5801] hsr_slave_1: entered promiscuous mode [ 218.166582][ T5801] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.174321][ T5801] Cannot create hsr debugfs directory [ 218.359829][ T5808] team0: Port device team_slave_0 added [ 218.470642][ T5802] hsr_slave_0: entered promiscuous mode [ 218.480028][ T5802] hsr_slave_1: entered promiscuous mode [ 218.488495][ T5802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.497088][ T5802] Cannot create hsr debugfs directory [ 218.509872][ T5808] team0: Port device team_slave_1 added [ 218.557132][ T5812] hsr_slave_0: entered promiscuous mode [ 218.565421][ T5812] hsr_slave_1: entered promiscuous mode [ 218.573386][ T5812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.581257][ T5812] Cannot create hsr debugfs directory [ 218.779542][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.786762][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.813115][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.878891][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.886239][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.912599][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.095056][ T5088] Bluetooth: hci0: command tx timeout [ 219.272883][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.279766][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.364161][ T5808] hsr_slave_0: entered promiscuous mode [ 219.372407][ T5808] hsr_slave_1: entered promiscuous mode [ 219.379904][ T5808] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.387729][ T5808] Cannot create hsr debugfs directory [ 219.486183][ T5088] Bluetooth: hci2: command tx timeout [ 219.555504][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 219.567268][ T5088] Bluetooth: hci1: command tx timeout [ 219.577098][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.654681][ T5088] Bluetooth: hci3: command tx timeout [ 219.660544][ T5088] Bluetooth: hci4: command tx timeout [ 219.701966][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 219.791136][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 219.992481][ T5801] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.015293][ T5801] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.083709][ T5801] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.106782][ T5801] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.312494][ T5802] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 220.346808][ T5802] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 220.408280][ T5802] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 220.429639][ T5802] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 220.560837][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 220.636493][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 220.705127][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 220.731113][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 221.003721][ T5808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 221.054132][ T5808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 221.084975][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.122169][ T5808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 221.148863][ T5808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 221.169114][ T5809] Bluetooth: hci0: command tx timeout [ 221.346273][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.412162][ T3700] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.419741][ T3700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.541739][ T3700] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.549294][ T3700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.585735][ T5809] Bluetooth: hci2: command tx timeout [ 221.634189][ T5801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.647962][ T5809] Bluetooth: hci1: command tx timeout [ 221.737885][ T5809] Bluetooth: hci4: command tx timeout [ 221.743497][ T5809] Bluetooth: hci3: command tx timeout [ 221.894832][ T5802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.927874][ T5801] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.009105][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.016711][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.075737][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.083310][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.125501][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.302374][ T5802] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.319693][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.401748][ T3700] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.409293][ T3700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.423968][ T3700] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.431511][ T3700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.471429][ T5801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.611953][ T3700] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.619505][ T3700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.638523][ T3700] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.646072][ T3700] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.725024][ T5802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 222.736642][ T5802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 222.782706][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.093870][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.182080][ T2900] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.189674][ T2900] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.286112][ T2900] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.293600][ T2900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.811512][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.318601][ T5796] veth0_vlan: entered promiscuous mode [ 224.382625][ T5801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.454862][ T5796] veth1_vlan: entered promiscuous mode [ 224.610390][ T5802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.787884][ T5796] veth0_macvtap: entered promiscuous mode [ 224.885990][ T5796] veth1_macvtap: entered promiscuous mode [ 224.948855][ T5801] veth0_vlan: entered promiscuous mode [ 224.990365][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.090268][ T5801] veth1_vlan: entered promiscuous mode [ 225.172544][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.206558][ T5802] veth0_vlan: entered promiscuous mode [ 225.244459][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.278638][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.347522][ T5796] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.357078][ T5796] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.366216][ T5796] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.375201][ T5796] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.422856][ T5802] veth1_vlan: entered promiscuous mode [ 225.551204][ T5801] veth0_macvtap: entered promiscuous mode [ 225.645993][ T5801] veth1_macvtap: entered promiscuous mode [ 225.663003][ T5812] veth0_vlan: entered promiscuous mode [ 225.765583][ T5802] veth0_macvtap: entered promiscuous mode [ 225.781539][ T5812] veth1_vlan: entered promiscuous mode [ 225.847761][ T5802] veth1_macvtap: entered promiscuous mode [ 225.889336][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.999064][ T5801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.091418][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.115644][ T5801] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.127304][ T5801] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.137505][ T5801] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.146708][ T5801] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.208569][ T5812] veth0_macvtap: entered promiscuous mode [ 226.261757][ T5802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.292766][ T5812] veth1_macvtap: entered promiscuous mode [ 226.380566][ T5802] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.391731][ T5802] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.402021][ T5802] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.411156][ T5802] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.456901][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.502955][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.594580][ T5812] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.603682][ T5812] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.613980][ T5812] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.623114][ T5812] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.744329][ T5808] veth0_vlan: entered promiscuous mode [ 227.822531][ T5808] veth1_vlan: entered promiscuous mode [ 228.100167][ T5808] veth0_macvtap: entered promiscuous mode [ 228.151747][ T5808] veth1_macvtap: entered promiscuous mode [ 228.299185][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.393960][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.481006][ T5808] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.491488][ T5808] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.500783][ T5808] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.509943][ T5808] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.634163][ T3452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.642439][ T3452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.788733][ T3742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.797704][ T3742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.221424][ T5796] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 232.260682][ T3700] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.268849][ T3700] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.422745][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.430954][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.570446][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.579744][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.773104][ T3505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.781136][ T3505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.859915][ T3452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.869132][ T3452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.055788][ T3505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.064081][ T3505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.390248][ T5991] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 234.798182][ T5992] block nbd0: server does not support multiple connections per device. [ 234.807593][ T5992] block nbd0: shutting down sockets [ 235.467466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 238.436987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 238.477033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!! [ 238.846941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 240.077365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 240.179255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 240.276229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 240.289147][ T0] NOHZ tick-stop error: local softirq work is pending, handler #2c2!!! [ 240.486991][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 240.858423][ T3658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.871157][ T3658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 241.437122][ T3742] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 241.445180][ T3742] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.896724][ T6024] lo speed is unknown, defaulting to 1000 [ 243.902804][ T6024] lo speed is unknown, defaulting to 1000 [ 243.910066][ T6024] lo speed is unknown, defaulting to 1000 [ 243.927301][ T6024] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 243.964008][ T6024] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 244.401567][ T6024] lo speed is unknown, defaulting to 1000 [ 244.410211][ T6024] lo speed is unknown, defaulting to 1000 [ 244.418728][ T6024] lo speed is unknown, defaulting to 1000 [ 244.427293][ T6024] lo speed is unknown, defaulting to 1000 [ 244.435651][ T6024] lo speed is unknown, defaulting to 1000 [ 245.498428][ T6028] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 245.641710][ T6018] kvm: pic: non byte read [ 246.526648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 252.320529][ T5869] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 252.428669][ T30] audit: type=1326 audit(1747847465.938:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6055 comm="syz.2.19" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8a22f8e969 code=0x0 [ 252.506847][ T5869] usb 2-1: Using ep0 maxpacket: 32 [ 252.615791][ T5869] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 252.624623][ T5869] usb 2-1: config 0 has no interface number 0 [ 252.631434][ T5869] usb 2-1: config 0 interface 184 has no altsetting 0 [ 252.763151][ T5869] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 252.780963][ T5869] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.789586][ T5869] usb 2-1: Product: syz [ 252.794048][ T5869] usb 2-1: Manufacturer: syz [ 252.799193][ T5869] usb 2-1: SerialNumber: syz [ 252.892222][ T5869] usb 2-1: config 0 descriptor?? [ 252.918469][ T5869] smsc75xx v1.0.0 [ 253.351695][ T5088] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 253.662313][ T5869] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 253.673555][ T5869] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 254.750527][ T6065] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 254.757797][ T6065] overlayfs: failed to set xattr on upper [ 254.763637][ T6065] overlayfs: ...falling back to redirect_dir=nofollow. [ 254.770754][ T6065] overlayfs: ...falling back to index=off. [ 254.776783][ T6065] overlayfs: ...falling back to uuid=null. [ 254.782691][ T6065] overlayfs: maximum fs stacking depth exceeded [ 255.012879][ T5869] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 255.034084][ T5869] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 255.046634][ T5869] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 255.059363][ T5869] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -71 [ 255.425824][ T5088] Bluetooth: hci3: command 0x0406 tx timeout [ 255.448426][ T5809] Bluetooth: hci3: hardware error 0x80 [ 255.498709][ T5869] usb 2-1: USB disconnect, device number 2 [ 257.566772][ T5809] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 258.415337][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.25'. [ 258.424865][ T6084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.435470][ T6084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.498658][ T6084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.525100][ T6084] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.817767][ T6096] siw: device registration error -23 [ 260.017909][ T6097] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 260.436224][ T5869] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 261.636361][ T5869] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 261.645754][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.654208][ T5869] usb 1-1: Product: syz [ 261.659131][ T5869] usb 1-1: Manufacturer: syz [ 261.663943][ T5869] usb 1-1: SerialNumber: syz [ 262.008446][ T6100] sctp: failed to load transform for md5: -2 [ 262.029103][ T2078] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 262.304021][ T2078] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.314707][ T2078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 262.326193][ T2078] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 262.336261][ T2078] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 262.614751][ T5869] usb 1-1: config 0 descriptor?? [ 262.621386][ T5869] usb 1-1: can't set config #0, error -71 [ 262.630790][ T5869] usb 1-1: USB disconnect, device number 2 [ 262.702167][ T2078] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 262.714025][ T2078] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 262.723101][ T2078] usb 4-1: Manufacturer: syz [ 262.870506][ T2078] usb 4-1: config 0 descriptor?? [ 263.506498][ T2078] rc_core: IR keymap rc-hauppauge not found [ 263.512780][ T2078] Registered IR keymap rc-empty [ 263.519855][ T2078] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 263.533698][ T36] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 263.597697][ T2078] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 263.619160][ T2078] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 263.640235][ T2078] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input5 [ 263.764388][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 263.776129][ T36] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 263.785419][ T36] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.808317][ T2078] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 263.870115][ T2078] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 263.887626][ T36] usb 3-1: config 0 descriptor?? [ 263.899222][ T2078] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 263.926501][ T2078] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 263.989950][ T2078] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 264.068495][ T2078] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 264.123675][ T2078] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 264.155184][ T2078] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 264.179175][ T2078] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 264.217193][ T2078] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 264.262243][ T2078] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 264.272026][ T2078] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 264.350630][ T36] keytouch 0003:0926:3333.0001: fixing up Keytouch IEC report descriptor [ 264.380183][ T2078] usb 4-1: USB disconnect, device number 2 [ 264.629552][ T6118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 264.639315][ T6118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 264.693842][ T36] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0001/input/input6 [ 265.000643][ T5869] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 265.433069][ T36] keytouch 0003:0926:3333.0001: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 265.436244][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 266.369767][ T5869] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 266.378228][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 266.389943][ T5869] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 266.415586][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 266.427098][ T5869] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 266.672421][ T2229] usb 3-1: USB disconnect, device number 2 [ 268.857316][ T5869] usb 1-1: unable to read config index 1 descriptor/all [ 268.864892][ T5869] usb 1-1: can't read configurations, error -71 [ 268.917877][ T6130] fido_id[6130]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 269.107336][ T36] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 269.346804][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 269.454406][ T36] usb 5-1: unable to get BOS descriptor or descriptor too short [ 269.597078][ T36] usb 5-1: config 1 has an invalid interface number: 3 but max is 2 [ 269.605499][ T36] usb 5-1: config 1 has 4 interfaces, different from the descriptor's value: 3 [ 269.615053][ T36] usb 5-1: too many endpoints for config 1 interface 3 altsetting 79: 175, using maximum allowed: 30 [ 269.626241][ T36] usb 5-1: config 1 interface 3 altsetting 79 has 0 endpoint descriptors, different from the interface descriptor's value: 175 [ 269.639685][ T36] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 93, changing to 7 [ 269.650920][ T36] usb 5-1: config 1 interface 3 has no altsetting 0 [ 269.657748][ T36] usb 5-1: config 1 interface 1 has no altsetting 0 [ 269.867660][ T6148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.43'. [ 269.882900][ T6148] netlink: 20 bytes leftover after parsing attributes in process `syz.2.43'. [ 269.908115][ T6148] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.917201][ T6148] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.926253][ T6148] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.935103][ T6148] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.004919][ T36] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 270.015026][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 270.023445][ T36] usb 5-1: Product: syz [ 270.027978][ T36] usb 5-1: Manufacturer: syz [ 270.032787][ T36] usb 5-1: SerialNumber: syz [ 270.453896][ T36] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 271.096240][ T6164] veth0_to_team: entered promiscuous mode [ 271.105732][ T6164] veth0_to_team: entered allmulticast mode [ 272.966214][ T36] usb 5-1: USB disconnect, device number 2 [ 273.522777][ T6171] delete_channel: no stack [ 276.204031][ T6032] udevd[6032]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.879837][ T6176] netlink: 'syz.4.50': attribute type 10 has an invalid length. [ 276.887806][ T6176] netlink: 40 bytes leftover after parsing attributes in process `syz.4.50'. [ 276.907606][ T6176] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 278.506789][ T36] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 281.021770][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 281.315638][ T36] usb 2-1: device descriptor read/all, error -71 [ 281.740255][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.57'. [ 281.750508][ T6196] netlink: 20 bytes leftover after parsing attributes in process `syz.1.57'. [ 281.782043][ T6196] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.791201][ T6196] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.800310][ T6196] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 281.809398][ T6196] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 285.264733][ T6217] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.865963][ C1] sched: DL replenish lagged too much [ 292.697747][ T36] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 293.826281][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.838985][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 293.851284][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 293.861310][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 294.168764][ T36] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 294.178887][ T36] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 294.187347][ T36] usb 5-1: Manufacturer: syz [ 294.320523][ T36] usb 5-1: config 0 descriptor?? [ 294.467954][ T2078] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 294.721983][ T2078] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 294.733410][ T2078] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 294.743920][ T2078] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 294.753690][ T2078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.893265][ T5088] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 294.906961][ T5088] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 294.917663][ T5088] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 294.972557][ T5088] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 294.994903][ T5088] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 295.039814][ T6231] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 295.186581][ T2078] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 295.321973][ T6236] lo speed is unknown, defaulting to 1000 [ 295.433978][ T6241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.72'. [ 295.444246][ T6241] netlink: 20 bytes leftover after parsing attributes in process `syz.1.72'. [ 295.668000][ T36] rc_core: IR keymap rc-hauppauge not found [ 295.674332][ T36] Registered IR keymap rc-empty [ 295.683356][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 295.713549][ T6241] Zero length message leads to an empty skb [ 295.750131][ T5869] usb 3-1: USB disconnect, device number 3 [ 295.822079][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 295.888396][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 295.903389][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 296.097252][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 296.148666][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 296.223985][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 296.266714][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 296.306824][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 296.436520][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 296.526729][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 296.556449][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 296.577595][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 296.601784][ T36] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 296.618761][ T6252] /dev/sg0: Can't lookup blockdev [ 296.657345][ T36] mceusb 5-1:0.0: Registered with mce emulator interface version 1 [ 296.665684][ T36] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 297.186912][ T5088] Bluetooth: hci5: command tx timeout [ 297.291772][ T36] usb 5-1: USB disconnect, device number 3 [ 299.247742][ T5088] Bluetooth: hci5: command tx timeout [ 299.686402][ T2078] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 299.836683][ T6236] chnl_net:caif_netlink_parms(): no params data found [ 300.218224][ T2078] usb 2-1: config 1 interface 0 has no altsetting 0 [ 300.505280][ T2078] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 300.514717][ T2078] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.523068][ T2078] usb 2-1: Product: syz [ 300.528615][ T2078] usb 2-1: Manufacturer: syz [ 300.533433][ T2078] usb 2-1: SerialNumber: syz [ 301.326650][ T5088] Bluetooth: hci5: command tx timeout [ 303.323867][ T2078] usb 2-1: can't set config #1, error -71 [ 303.347590][ T2078] usb 2-1: USB disconnect, device number 5 [ 303.406517][ T5088] Bluetooth: hci5: command tx timeout [ 303.966616][ T2078] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 304.050306][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.85'. [ 304.059912][ T6279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.85'. [ 304.186981][ T2078] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.197376][ T2078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 304.208698][ T2078] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 304.218612][ T2078] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 304.341157][ T2078] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 304.351189][ T2078] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 304.359630][ T2078] usb 2-1: Manufacturer: syz [ 304.414341][ T2078] usb 2-1: config 0 descriptor?? [ 304.739996][ T6236] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.747589][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.755027][ T6236] bridge_slave_0: entered allmulticast mode [ 304.763159][ T6236] bridge_slave_0: entered promiscuous mode [ 304.829278][ T6284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.86'. [ 305.376848][ T2078] rc_core: IR keymap rc-hauppauge not found [ 305.383124][ T2078] Registered IR keymap rc-empty [ 305.389329][ T2078] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.659661][ T2078] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 305.768815][ T2078] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 305.784241][ T2078] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input8 [ 306.003961][ T2078] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.084721][ T2078] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.106367][ T2078] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.132663][ T2078] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.156605][ T2078] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.366600][ T2078] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.436678][ T2078] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 306.506385][ T2078] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 307.251389][ T2078] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 307.520673][ T2078] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 308.545489][ T2078] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 308.555171][ T2078] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 308.840259][ T2078] usb 2-1: USB disconnect, device number 6 [ 308.873105][ T6236] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.880833][ T6236] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.892279][ T6236] bridge_slave_1: entered allmulticast mode [ 308.900711][ T6236] bridge_slave_1: entered promiscuous mode [ 308.986891][ T3949] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.171654][ T6284] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 310.952865][ T6302] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 311.105361][ T3949] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.525563][ T3949] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.677718][ T6236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.778578][ T3949] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.929906][ T6236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.662460][ T6236] team0: Port device team_slave_0 added [ 312.744530][ T6236] team0: Port device team_slave_1 added [ 312.830670][ T3949] bridge_slave_1: left allmulticast mode [ 312.837156][ T3949] bridge_slave_1: left promiscuous mode [ 312.843659][ T3949] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.864969][ T3949] bridge_slave_0: left allmulticast mode [ 312.868136][ T6316] netlink: 8 bytes leftover after parsing attributes in process `syz.4.95'. [ 312.871524][ T3949] bridge_slave_0: left promiscuous mode [ 312.879712][ T6316] netlink: 20 bytes leftover after parsing attributes in process `syz.4.95'. [ 312.904544][ T3949] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.410554][ T3949] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.448849][ T3949] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.487663][ T3949] bond0 (unregistering): Released all slaves [ 313.683617][ T6316] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.693686][ T6316] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.705655][ T6316] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.715261][ T6316] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 313.934457][ T6236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.941840][ T6236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.968872][ T6236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.203188][ T6236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.210658][ T6236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.238869][ T6236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 314.355664][ T3949] hsr_slave_0: left promiscuous mode [ 314.410756][ T3949] hsr_slave_1: left promiscuous mode [ 314.419428][ T36] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 314.431600][ T3949] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.439377][ T3949] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.573163][ T2078] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 314.592881][ T36] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.603746][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 314.615159][ T36] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 314.627458][ T36] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 314.750121][ T3949] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.757975][ T3949] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.768563][ T36] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 314.778081][ T36] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 314.787003][ T36] usb 3-1: Manufacturer: syz [ 314.846181][ T2078] usb 4-1: Using ep0 maxpacket: 16 [ 314.869830][ T2078] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 314.879414][ T2078] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.887756][ T2078] usb 4-1: Product: syz [ 314.892122][ T2078] usb 4-1: Manufacturer: syz [ 314.897134][ T2078] usb 4-1: SerialNumber: syz [ 314.911469][ T36] usb 3-1: config 0 descriptor?? [ 314.925245][ T3949] veth1_macvtap: left promiscuous mode [ 314.933968][ T3949] veth0_macvtap: left promiscuous mode [ 314.940090][ T3949] veth1_vlan: left promiscuous mode [ 314.945767][ T3949] veth0_vlan: left promiscuous mode [ 315.380645][ T2078] usb 4-1: config 0 descriptor?? [ 315.573697][ T2078] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 316.446364][ T3949] team0 (unregistering): Port device team_slave_1 removed [ 316.494349][ T3949] team0 (unregistering): Port device team_slave_0 removed [ 316.742039][ T2078] ssu100 4-1:0.0: probe with driver ssu100 failed with error -110 [ 317.585786][ T6236] hsr_slave_0: entered promiscuous mode [ 317.601626][ T6236] hsr_slave_1: entered promiscuous mode [ 317.610175][ T6236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.618065][ T6236] Cannot create hsr debugfs directory [ 317.737766][ T5088] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 317.879663][ T36] rc_core: IR keymap rc-hauppauge not found [ 317.887370][ T36] Registered IR keymap rc-empty [ 317.892855][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 317.960034][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 318.027726][ T36] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 318.043105][ T36] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 318.165024][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 318.212147][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 318.220119][ T5869] usb 4-1: USB disconnect, device number 3 [ 318.291571][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 318.386434][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 318.440588][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 318.497286][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 318.527644][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 318.597236][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 318.663271][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 318.696584][ T36] mceusb 3-1:0.0: Error: mce write submit urb error = -90 [ 318.773521][ T36] mceusb 3-1:0.0: Registered with mce emulator interface version 1 [ 318.781936][ T36] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 319.197483][ T36] usb 3-1: USB disconnect, device number 4 [ 319.807125][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 319.954725][ T5088] Bluetooth: hci2: hardware error 0x80 [ 320.283679][ T6236] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 320.579297][ T6367] netlink: 'syz.2.110': attribute type 1 has an invalid length. [ 320.587754][ T6367] netlink: 224 bytes leftover after parsing attributes in process `syz.2.110'. [ 321.110909][ T6236] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 322.187441][ T5088] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 322.251035][ T6236] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 323.287204][ T6236] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 323.826378][ T36] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 325.752198][ T36] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.762657][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 325.774005][ T36] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 325.786387][ T36] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 326.944484][ T36] usb 5-1: string descriptor 0 read error: -71 [ 326.951370][ T36] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 326.960917][ T36] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 327.108809][ T36] usb 5-1: config 0 descriptor?? [ 327.148690][ T36] usb 5-1: can't set config #0, error -71 [ 327.227945][ T36] usb 5-1: USB disconnect, device number 4 [ 327.267849][ T5809] Bluetooth: hci4: ACL packet for unknown connection handle 0 [ 327.420033][ T6236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.689347][ T6236] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.842749][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.850361][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.004228][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.011934][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.402489][ T6394] evm: overlay not supported [ 328.464934][ T6396] overlay: ./bus is not a directory [ 328.540058][ T30] audit: type=1804 audit(1747847541.998:3): pid=6396 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.118" name="/newroot/28/bus/bus" dev="overlay" ino=169 res=1 errno=0 [ 328.910875][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 328.936271][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 329.002297][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.101566][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.111472][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 329.246465][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 329.262666][ T5088] Bluetooth: hci4: hardware error 0x80 [ 329.442947][ T6398] lo speed is unknown, defaulting to 1000 [ 330.453173][ T6408] syz.3.120 (6408) used greatest stack depth: 2504 bytes left [ 331.247569][ T54] Bluetooth: hci1: command tx timeout [ 331.336639][ T5088] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 331.386286][ T5869] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 332.001558][ T6398] chnl_net:caif_netlink_parms(): no params data found [ 332.080241][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.091535][ T5869] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 332.101108][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.148900][ T5869] usb 3-1: config 0 descriptor?? [ 332.626817][ T5869] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 332.755048][ T5869] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0002/input/input10 [ 332.934526][ T6236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.119069][ T5869] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0 [ 333.341600][ T5088] Bluetooth: hci1: command tx timeout [ 333.741806][ T2078] usb 3-1: USB disconnect, device number 5 [ 334.605509][ T6442] fido_id[6442]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 334.706737][ T6450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.126'. [ 335.606315][ T5088] Bluetooth: hci1: command tx timeout [ 336.135330][ T6398] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.147084][ T6398] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.159291][ T6398] bridge_slave_0: entered allmulticast mode [ 336.168855][ T6398] bridge_slave_0: entered promiscuous mode [ 336.283626][ T6398] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.291264][ T6398] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.299409][ T6398] bridge_slave_1: entered allmulticast mode [ 336.307599][ T6398] bridge_slave_1: entered promiscuous mode [ 337.085277][ T6454] sctp: failed to load transform for md5: -2 [ 337.646270][ T54] Bluetooth: hci1: command tx timeout [ 339.088322][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 339.372589][ T6398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.936704][ T6471] veth0_to_team: entered promiscuous mode [ 339.942675][ T6471] veth0_to_team: entered allmulticast mode [ 340.858088][ T6398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.791227][ T6398] team0: Port device team_slave_0 added [ 341.855186][ T6398] team0: Port device team_slave_1 added [ 342.151260][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 342.171067][ T5869] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 342.298927][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.306910][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.334265][ T6398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.449178][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 342.507424][ T6398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.514590][ T6398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.541584][ T6398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.691578][ T5869] usb 3-1: config 0 has no interfaces? [ 342.827839][ T5869] usb 3-1: New USB device found, idVendor=044f, idProduct=b304, bcdDevice= 0.40 [ 342.837559][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.845787][ T5869] usb 3-1: Product: syz [ 342.850428][ T5869] usb 3-1: Manufacturer: syz [ 342.855233][ T5869] usb 3-1: SerialNumber: syz [ 342.875630][ T5869] usb 3-1: config 0 descriptor?? [ 343.128229][ T5869] usb 3-1: USB disconnect, device number 6 [ 343.260123][ T6398] hsr_slave_0: entered promiscuous mode [ 343.269915][ T6398] hsr_slave_1: entered promiscuous mode [ 343.278423][ T6398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.286378][ T6398] Cannot create hsr debugfs directory [ 343.420707][ T4712] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.432378][ T4712] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.649889][ T4712] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.660615][ T4712] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.689810][ T6492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.137'. [ 343.811447][ T6494] block device autoloading is deprecated and will be removed. [ 343.852624][ T6495] netlink: 4 bytes leftover after parsing attributes in process `syz.3.137'. [ 343.881330][ T6496] input: syz0 as /devices/virtual/input/input11 [ 344.360049][ T6236] veth0_vlan: entered promiscuous mode [ 344.475634][ T4712] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.489657][ T4712] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.180004][ T4712] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 345.190747][ T4712] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.743556][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.2.138'. [ 347.243507][ T6236] veth1_vlan: entered promiscuous mode [ 348.157427][ T4712] bridge_slave_1: left allmulticast mode [ 348.163486][ T4712] bridge_slave_1: left promiscuous mode [ 348.171367][ T4712] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.197651][ T4712] bridge_slave_0: left allmulticast mode [ 349.204281][ T4712] bridge_slave_0: left promiscuous mode [ 349.211381][ T4712] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.994187][ T6513] loop6: detected capacity change from 0 to 524287999 [ 352.189072][ T4712] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.438592][ T4712] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.587084][ T4712] bond0 (unregistering): Released all slaves [ 353.373440][ T4712] IPVS: stopping master sync thread 6028 ... [ 354.801170][ T4712] hsr_slave_0: left promiscuous mode [ 354.812194][ T4712] hsr_slave_1: left promiscuous mode [ 354.820114][ T4712] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.827944][ T4712] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.988662][ T4712] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.996760][ T4712] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.219338][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 355.234299][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 355.236865][ T4712] veth1_macvtap: left promiscuous mode [ 355.247649][ T4712] veth0_macvtap: left promiscuous mode [ 355.253649][ T4712] veth1_vlan: left promiscuous mode [ 355.259946][ T4712] veth0_vlan: left promiscuous mode [ 355.272272][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 355.350415][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 355.375508][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 357.347108][ T4712] team0 (unregistering): Port device team_slave_1 removed [ 358.004544][ T6548] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 358.818244][ T54] Bluetooth: hci0: command tx timeout [ 358.839119][ T4712] team0 (unregistering): Port device team_slave_0 removed [ 359.246161][ T6398] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 359.728639][ T2229] lo speed is unknown, defaulting to 1000 [ 359.734662][ T2229] infiniband syz0: ib_query_port failed (-19) [ 359.759833][ T6537] warning: `syz.3.146' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 360.130534][ T6398] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 360.601263][ T6398] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 360.802054][ T6398] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 361.001272][ T54] Bluetooth: hci0: command tx timeout [ 363.089331][ T54] Bluetooth: hci0: command tx timeout [ 363.825622][ T6531] chnl_net:caif_netlink_parms(): no params data found [ 364.209093][ T6398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 364.774957][ T6398] 8021q: adding VLAN 0 to HW filter on device team0 [ 364.923949][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 364.931576][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.083919][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.091541][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.177343][ T54] Bluetooth: hci0: command tx timeout [ 365.467285][ T2078] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 365.696106][ T2078] usb 3-1: Using ep0 maxpacket: 8 [ 365.760484][ T2078] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 365.769922][ T2078] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.778485][ T2078] usb 3-1: Product: syz [ 365.782852][ T2078] usb 3-1: Manufacturer: syz [ 365.787729][ T2078] usb 3-1: SerialNumber: syz [ 366.042750][ T2078] usb 3-1: config 0 descriptor?? [ 366.131065][ T2078] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 366.140128][ T2078] usb 3-1: setting power ON [ 366.144861][ T2078] dvb-usb: bulk message failed: -22 (2/0) [ 366.328601][ T6572] dvb-usb: bulk message failed: -22 (3/0) [ 366.336767][ T6572] ===================================================== [ 366.343867][ T6572] BUG: KMSAN: uninit-value in cxusb_i2c_xfer+0x1303/0x18e0 [ 366.352151][ T6572] cxusb_i2c_xfer+0x1303/0x18e0 [ 366.357179][ T6572] __i2c_transfer+0xeca/0x30e0 [ 366.362028][ T6572] i2c_transfer+0x300/0x4b0 [ 366.366687][ T6572] i2c_transfer_buffer_flags+0x138/0x200 [ 366.372450][ T6572] i2cdev_read+0x1b2/0x3c0 [ 366.377029][ T6572] vfs_read+0x279/0xef0 [ 366.381636][ T6572] __x64_sys_read+0x1fb/0x4d0 [ 366.386525][ T6572] x64_sys_call+0x39db/0x3db0 [ 366.391332][ T6572] do_syscall_64+0xd9/0x1b0 [ 366.396137][ T6572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.402168][ T6572] [ 366.404533][ T6572] Local variable i.i838 created at: [ 366.409906][ T6572] cxusb_i2c_xfer+0x304/0x18e0 [ 366.414771][ T6572] __i2c_transfer+0xeca/0x30e0 [ 366.419753][ T6572] [ 366.422146][ T6572] CPU: 0 UID: 0 PID: 6572 Comm: syz.2.154 Not tainted 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(undef) [ 366.435225][ T6572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 366.447855][ T6572] ===================================================== [ 366.455483][ T6572] Disabling lock debugging due to kernel taint [ 366.462272][ T6572] Kernel panic - not syncing: kmsan.panic set ... [ 366.468759][ T6572] CPU: 0 UID: 0 PID: 6572 Comm: syz.2.154 Tainted: G B 6.15.0-rc7-syzkaller-00007-g4a95bc121ccd #0 PREEMPT(undef) [ 366.482420][ T6572] Tainted: [B]=BAD_PAGE [ 366.486621][ T6572] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 366.496749][ T6572] Call Trace: [ 366.500084][ T6572] [ 366.503064][ T6572] __dump_stack+0x26/0x30 [ 366.507494][ T6572] dump_stack_lvl+0x53/0x270 [ 366.512182][ T6572] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 366.518157][ T6572] dump_stack+0x1e/0x25 [ 366.522408][ T6572] panic+0x4bd/0xd50 [ 366.526438][ T6572] kmsan_report+0x29d/0x2a0 [ 366.531063][ T6572] ? vprintk_default+0x3f/0x50 [ 366.535966][ T6572] ? __msan_warning+0x96/0x120 [ 366.540848][ T6572] ? cxusb_i2c_xfer+0x1303/0x18e0 [ 366.546005][ T6572] ? __i2c_transfer+0xeca/0x30e0 [ 366.551045][ T6572] ? i2c_transfer+0x300/0x4b0 [ 366.555821][ T6572] ? i2c_transfer_buffer_flags+0x138/0x200 [ 366.561772][ T6572] ? i2cdev_read+0x1b2/0x3c0 [ 366.566452][ T6572] ? vfs_read+0x279/0xef0 [ 366.570892][ T6572] ? __x64_sys_read+0x1fb/0x4d0 [ 366.575845][ T6572] ? x64_sys_call+0x39db/0x3db0 [ 366.580863][ T6572] ? do_syscall_64+0xd9/0x1b0 [ 366.585671][ T6572] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.591839][ T6572] ? kmsan_get_metadata+0x105/0x1b0 [ 366.597168][ T6572] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 366.603613][ T6572] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 366.609794][ T6572] ? kmsan_get_metadata+0x105/0x1b0 [ 366.615114][ T6572] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 366.621587][ T6572] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 366.627774][ T6572] ? mutex_unlock+0x29/0x50 [ 366.632391][ T6572] ? kmsan_get_metadata+0x105/0x1b0 [ 366.637716][ T6572] __msan_warning+0x96/0x120 [ 366.642425][ T6572] cxusb_i2c_xfer+0x1303/0x18e0 [ 366.647399][ T6572] ? kmsan_get_metadata+0x105/0x1b0 [ 366.652717][ T6572] ? kmsan_get_metadata+0x105/0x1b0 [ 366.658033][ T6572] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 366.664480][ T6572] ? kmsan_get_metadata+0x105/0x1b0 [ 366.669801][ T6572] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 366.675112][ T6572] ? __pfx_cxusb_i2c_xfer+0x10/0x10 [ 366.680426][ T6572] __i2c_transfer+0xeca/0x30e0 [ 366.685279][ T6572] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 366.691725][ T6572] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 366.697576][ T6572] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 366.703834][ T6572] ? __pfx_i2c_adapter_lock_bus+0x10/0x10 [ 366.709667][ T6572] i2c_transfer+0x300/0x4b0 [ 366.714270][ T6572] i2c_transfer_buffer_flags+0x138/0x200 [ 366.720009][ T6572] i2cdev_read+0x1b2/0x3c0 [ 366.724516][ T6572] ? __pfx_i2cdev_read+0x10/0x10 [ 366.729542][ T6572] vfs_read+0x279/0xef0 [ 366.733796][ T6572] ? stack_depot_save_flags+0x35/0x7c0 [ 366.739386][ T6572] ? __fget_files+0x3b9/0x4a0 [ 366.744264][ T6572] ? kmsan_get_metadata+0x105/0x1b0 [ 366.749662][ T6572] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 366.756127][ T6572] __x64_sys_read+0x1fb/0x4d0 [ 366.760928][ T6572] x64_sys_call+0x39db/0x3db0 [ 366.765715][ T6572] do_syscall_64+0xd9/0x1b0 [ 366.770337][ T6572] ? clear_bhb_loop+0x40/0x90 [ 366.775108][ T6572] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.781103][ T6572] RIP: 0033:0x7f8a22f8e969 [ 366.785586][ T6572] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.805293][ T6572] RSP: 002b:00007f8a23dc7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 366.813811][ T6572] RAX: ffffffffffffffda RBX: 00007f8a231b5fa0 RCX: 00007f8a22f8e969 [ 366.821872][ T6572] RDX: 00000000ffffff0c RSI: 0000000000000000 RDI: 0000000000000004 [ 366.829914][ T6572] RBP: 00007f8a23010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 366.837955][ T6572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.846026][ T6572] R13: 0000000000000000 R14: 00007f8a231b5fa0 R15: 00007ffd9b6be398 [ 366.854140][ T6572] [ 366.857461][ T6572] Kernel Offset: disabled [ 366.861849][ T6572] Rebooting in 86400 seconds..