last executing test programs: 16.256412s ago: executing program 2 (id=224): r0 = socket$kcm(0x29, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x400200, 0x5c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x480400, 0x0) getgroups(0x2, &(0x7f0000000240)=[0x0, 0xee00]) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x80020, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r7}}, {@afid={'afid', 0x3d, 0x6}}, {@fscache}, {@access_any}, {@cache_mmap}], [{@fsname={'fsname', 0x3d, '),.'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x18, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x700}, 0x8004) 14.424219061s ago: executing program 2 (id=228): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) 13.463282412s ago: executing program 1 (id=231): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0)={0x0, 0xfc}, 0x2) 13.211376408s ago: executing program 1 (id=232): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000040) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000001540), 0x2000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x304, 0x39}, "f3ffff0d00ffffff", "37a0f9ffff4b00000200007d00", "40c28f00", "de3f106b925ded4d"}, 0x28) ioctl$FBIOPUT_CON2FBMAP(r2, 0xc0684608, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x2}}, 0x10, 0x0}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r4, 0x8923, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x1}) fchdir(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b0f, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x2041, 0x0) write$binfmt_aout(r5, &(0x7f0000000300)=ANY=[@ANYBLOB="adb509"], 0xff2e) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba5d8200"}) r6 = syz_open_pts(r5, 0x20800) dup3(r6, r5, 0x0) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000100)=0x44) 10.943250152s ago: executing program 2 (id=238): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000080)={0x1c, r0, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x818}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x28, r4, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x14, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x4}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r3, 0xfffffffffffffffc, 0x20000000) syz_io_uring_setup(0x27b, &(0x7f0000000540)={0x0, 0x3bce, 0x10100, 0x3, 0x313}, 0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0, 0x40000103}) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) 10.727326564s ago: executing program 2 (id=239): r0 = socket$kcm(0x29, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x400200, 0x5c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) accept$inet6(0xffffffffffffffff, 0x0, 0x0) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x480400, 0x0) getgroups(0x2, &(0x7f0000000240)=[0x0, 0xee00]) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x80020, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r7}}, {@afid={'afid', 0x3d, 0x6}}, {@fscache}, {@access_any}, {@cache_mmap}], [{@fsname={'fsname', 0x3d, '),.'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x18, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x700}, 0x8004) 9.765716603s ago: executing program 1 (id=240): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) writev(r0, &(0x7f0000001740)=[{&(0x7f0000000040)="db", 0x1}], 0x1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000100)) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r1, 0xc2604111, &(0x7f0000002700)={0xffff, [[0x9, 0x1, 0x5, 0x5, 0x7, 0x10, 0x3, 0x400], [0x5, 0x401, 0x1a, 0x4, 0x8, 0x6, 0x3, 0x3], [0x4, 0x1, 0xd1af, 0xffffb3c0, 0x3, 0x9, 0x4d90, 0x7]], '\x00', [{0x5, 0x8, 0x0, 0x1, 0x0, 0x1}, {0x401, 0xc, 0x0, 0x1}, {0x7, 0x9, 0x0, 0x0, 0x0, 0x1}, {0x6, 0x0, 0x1, 0x1, 0x1}, {0x40, 0x7, 0x1, 0x0, 0x1}, {0xea, 0x101, 0x0, 0x0, 0x0, 0x1}, {0x2, 0x100, 0x0, 0x1, 0x1}, {0x0, 0xff, 0x0, 0x0, 0x1, 0x1}, {0x4, 0x9, 0x1, 0x1}, {0x752, 0x5, 0x0, 0x1, 0x1}, {0x8, 0x8, 0x1, 0x1}, {0xa7, 0x1, 0x0, 0x1}], '\x00', 0x7}) close_range(r2, 0xffffffffffffffff, 0x0) 9.681799472s ago: executing program 2 (id=241): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r0, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x3, &(0x7f0000000100), 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000240)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) select(0x40, &(0x7f00000002c0)={0x1, 0x8001, 0xffffffff, 0x27, 0x4, 0x8000000005, 0x4, 0x1000}, 0x0, 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000200)={0xff, 0x100000001000089}, 0x0) sched_setaffinity(0x0, 0x14, &(0x7f0000000040)=0x6) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bind$rds(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0xb}}}, 0x24}}, 0x800) 8.68193318s ago: executing program 1 (id=243): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x800, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$TUNSETDEBUG(r2, 0x400454c9, &(0x7f0000000140)=0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r2, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) signalfd4(r2, &(0x7f0000000180)={[0x7]}, 0x8, 0x80000) close_range(r0, 0xffffffffffffffff, 0x0) 8.658485847s ago: executing program 4 (id=244): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0xeeef0000, 0x9, 0x900000, 0x9, 0x0, [{0x5, 0x9, 0x30, '\x00', 0x78}, {0x2, 0x67, 0x5, '\x00', 0x81}, {0x7f, 0xfd, 0x13, '\x00', 0x80}, {0x5, 0x4, 0xa, '\x00', 0x7}, {0x5, 0x51, 0xa, '\x00', 0x1}, {0x81, 0x7, 0x9b, '\x00', 0x18}, {0x9, 0x5, 0x10, '\x00', 0x6d}, {0xf9, 0x9, 0x1b, '\x00', 0x2}, {0xff, 0x0, 0x9, '\x00', 0x8}, {0x7, 0xe0, 0x6, '\x00', 0x4}, {0x3, 0x2, 0x0, '\x00', 0x5}, {0x40, 0x3e, 0x5, '\x00', 0x3}, {0x7f, 0x0, 0xe1, '\x00', 0x6}, {0xff, 0xde, 0x3, '\x00', 0x4}, {0x7f, 0xfc, 0xa, '\x00', 0xff}, {0x3, 0x5, 0xf3, '\x00', 0x4}, {0x5, 0x1, 0x80, '\x00', 0xfb}, {0x8, 0x3, 0x8, '\x00', 0x5}, {0xff, 0x89, 0x8, '\x00', 0x4}, {0x70, 0x2, 0x7, '\x00', 0x9}, {0xaf, 0x7, 0xf1, '\x00', 0x9}, {0xb, 0x5, 0x0, '\x00', 0xf}, {0x1c, 0x8, 0x8, '\x00', 0x8}, {0x7, 0x6, 0x0, '\x00', 0x4}]}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) 8.355232053s ago: executing program 4 (id=245): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000037c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000038c0)={0x0, 0x0, &(0x7f0000003880)={&(0x7f0000000340)={0x4c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x4c}, 0x1, 0x0, 0x0, 0x44800}, 0x4000010) 7.99163392s ago: executing program 0 (id=246): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x6, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)}], 0x1}}], 0x1, 0x48000) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 7.819078411s ago: executing program 4 (id=247): syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x6c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200001, 0x0) socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x10, 0x803, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x100) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000480)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0xfffffffffffffffa, 0x2, 0x0, 0x1, 0x1e, 0x1, "352e64a0d970a9caa59fc378c8af7863dcac5cf3f36e0b696051774a2cec2268ab42c2a9f5e638f890c9ed57b31d2c2152950acfa679152a402cffe5d176d311", "6a57ad0b14de6615ffe31e5fd2453f9cc78979da71ecccc5f86cea09cf94fa4efad93a0233cd9e3097fd39dda6b6534e38f0ce6b93efc22c087a27f05f703216", "3282c21c1617e745aa4904a8fdc149855a15a13c89d77921b45bf46edc39196e", [0x9, 0x9]}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r2 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$unix(0x1, 0x5, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=@newtfilter={0x34, 0x2c, 0xd27, 0x870b528, 0x8000, {0x0, 0x0, 0x0, r5, {0x8, 0xc}, {}, {0xa, 0x8}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2204402c}, 0x0) 6.910725314s ago: executing program 3 (id=248): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$usbfs(0x0, 0xb, 0x101301) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x5, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.121635885s ago: executing program 3 (id=249): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r0 = socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setrlimit(0x3, &(0x7f0000000040)={0xe8, 0x7fffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_tcp(0x2, 0x1, 0x0) close(r1) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000001f00)) recvfrom$inet(r2, 0x0, 0x0, 0x3e8, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a70000000060a0b04000000000000000002000000440004802c0001800b0001006e756d67656e00001c000280080002400000000208000340000000000800014000000015140001800b00010072656a6563740000040002800908010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}}, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x7, 0x0, 0xfffffffe, 0x3fffe, 0xfffffffd, 0xfefffffc}) r5 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') preadv(r5, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}], 0x1c) 5.386297794s ago: executing program 3 (id=250): sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1ce0", 0xffeb, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) r0 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x1f, 0x101, 0x100}}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x141, 0x0, 0x4}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) openat$sequencer2(0xffffff9c, &(0x7f0000000080), 0x143240, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) gettid() setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x40}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=""/267, 0x10b}], 0x1}, 0x8}], 0x1, 0x40000002, 0x0) 3.92513448s ago: executing program 1 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) connect$l2tp6(r1, &(0x7f0000000f40)={0xa, 0x0, 0x0, @empty}, 0x20) sendmmsg$inet6(r1, &(0x7f0000000ac0)=[{{&(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, 0x1b, 0x0}}], 0x17fd147c801ae9af, 0xff00) 3.856202598s ago: executing program 0 (id=252): r0 = socket$kcm(0x29, 0x5, 0x0) socket$inet6(0xa, 0x2, 0x0) openat(0xffffffffffffffff, 0x0, 0x400200, 0x5c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) pread64(0xffffffffffffffff, 0x0, 0x0, 0xb6) r6 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100), 0x480400, 0x0) getgroups(0x2, &(0x7f0000000240)=[0x0, 0xee00]) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0), 0x80020, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r7}}, {@afid={'afid', 0x3d, 0x6}}, {@fscache}, {@access_any}, {@cache_mmap}], [{@fsname={'fsname', 0x3d, '),.'}}, {@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}, {@defcontext={'defcontext', 0x3d, 'user_u'}}]}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x18, 0x2d, 0x1, 0x70bd2d, 0x25dfdbfc, {0x4}, [@nested={0x4, 0x12}]}, 0x18}, 0x1, 0x700}, 0x8004) 3.799145498s ago: executing program 4 (id=253): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}}, 0x18) r3 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r3, 0x0) ftruncate(r3, 0x3) sendmsg$can_j1939(r2, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) 3.626304056s ago: executing program 1 (id=254): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x936, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0x403, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 2.691401986s ago: executing program 3 (id=255): ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000100)={0x2, 0x0, @ioapic={0xeeef0000, 0x9, 0x900000, 0x9, 0x0, [{0x5, 0x9, 0x30, '\x00', 0x78}, {0x2, 0x67, 0x5, '\x00', 0x81}, {0x7f, 0xfd, 0x13, '\x00', 0x80}, {0x5, 0x4, 0xa, '\x00', 0x7}, {0x5, 0x51, 0xa, '\x00', 0x1}, {0x81, 0x7, 0x9b, '\x00', 0x18}, {0x9, 0x5, 0x10, '\x00', 0x6d}, {0xf9, 0x9, 0x1b, '\x00', 0x2}, {0xff, 0x0, 0x9, '\x00', 0x8}, {0x7, 0xe0, 0x6, '\x00', 0x4}, {0x3, 0x2, 0x0, '\x00', 0x5}, {0x40, 0x3e, 0x5, '\x00', 0x3}, {0x7f, 0x0, 0xe1, '\x00', 0x6}, {0xff, 0xde, 0x3, '\x00', 0x4}, {0x7f, 0xfc, 0xa, '\x00', 0xff}, {0x3, 0x5, 0xf3, '\x00', 0x4}, {0x5, 0x1, 0x80, '\x00', 0xfb}, {0x8, 0x3, 0x8, '\x00', 0x5}, {0xff, 0x89, 0x8, '\x00', 0x4}, {0x70, 0x2, 0x7, '\x00', 0x9}, {0xaf, 0x7, 0xf1, '\x00', 0x9}, {0xb, 0x5, 0x0, '\x00', 0xf}, {0x1c, 0x8, 0x8, '\x00', 0x8}, {0x7, 0x6, 0x0, '\x00', 0x4}]}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000000000071000040"]) 2.398369284s ago: executing program 0 (id=256): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0xd, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44084) 2.279785055s ago: executing program 2 (id=257): ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) syz_usb_connect(0x2, 0x6b, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x3001}}, {0x0, 0x0}, {0x44, &(0x7f0000000280)=@string={0x44, 0x3, "a14d64f9b810eba1e10c2fb25f1d24121722059119c2ca45a15c18d3aef059a6e1f8f23ba3a538abf1ea092d69bb754086563c7d46ec971062be3915135398ed2c21"}}]}) 2.278974424s ago: executing program 4 (id=258): io_uring_setup(0x4a86, &(0x7f0000000240)={0x0, 0x417a, 0x40, 0x8001002, 0x3d5}) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05640, &(0x7f0000000340)={0x1, @pix={0x0, 0x43, 0x32344d59, 0x0, 0xfffffffd, 0x0, 0x9, 0xfeedcafe, 0x3, 0x8, 0x0, 0x1}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r10, @ANYBLOB="050027bd700000a668bc25ef288195c062ae860000000600000008000300", @ANYRES32=r9, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x90}, 0x4) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff038}, {0x20, 0x0, 0x0, 0xffffefff}, {0x6}]}, 0x10) sendmmsg(r4, &(0x7f0000000180), 0x4000190, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r11 = socket(0x1e, 0x4, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r13, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r11, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) 2.230672769s ago: executing program 3 (id=259): r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r2) socket$vsock_stream(0x28, 0x1, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/clear_refs\x00', 0x1, 0x0) write$sysctl(r3, 0x0, 0x0) 2.195043816s ago: executing program 0 (id=260): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000c6000100250000008510000001000000950000000000000018400008ffffffff000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0xfffffffffffffffe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setrlimit(0x3, &(0x7f0000000040)={0xe8, 0x7fffffff}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(r0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00)) recvfrom$inet(r1, 0x0, 0x0, 0x3e8, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a70000000060a0b04000000000000000002000000440004802c0001800b0001006e756d67656e00001c000280080002400000000208000340000000000800014000000015140001800b00010072656a6563740000040002800908010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000a"], 0x98}}, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x7, 0x0, 0xfffffffe, 0x3fffe, 0xfffffffd, 0xfefffffc}) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/softnet_stat\x00') preadv(r4, &(0x7f0000000340)=[{&(0x7f00000008c0)=""/201, 0xc9}], 0x1, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}], 0x1c) 1.231240908s ago: executing program 4 (id=261): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x20, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x4, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) fsopen(0x0, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 320.044188ms ago: executing program 0 (id=262): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x88, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0xfb, 0x6, 0x2, 0x9}, 0x3}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa5a}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x84}, 0x8000) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000200)}], 0x1}}], 0x1, 0x48000) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) 266.120383ms ago: executing program 3 (id=263): io_uring_setup(0x6726, &(0x7f0000000180)={0x0, 0x1fffff, 0x20, 0x7ffffd, 0x2a9}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c0006000100000000003f000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0) 0s ago: executing program 0 (id=264): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r0, 0x0, &(0x7f0000001700)=""/53}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd, 0x0, 0xffffffffffffffff, 0x28}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0x22, 0x0, &(0x7f0000000040)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r4, 0x0, 0x1, 0x37b, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380), &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000580)={0x7, 0x0}, 0x8) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r8, &(0x7f0000000040)={0x23, 0x0, 0x0, 0x1}, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r5, &(0x7f0000000840)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000800)={&(0x7f00000009c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="205b7f5500042bbd7000fedbdf2504000000050500020000000800041968aaaa00"], 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000000) ioctl$SIOCPNENABLEPIPE(r8, 0x89ed, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='$\x00\x00\x00 \x00\x00\x00\x00\x00\x00', @ANYRES32=r7, @ANYBLOB="c09716b317d96604da90255971efd2492394f2df7e29a1920544f3c52aebf9a7c0105c455d29e2", @ANYRES64=r6], 0x20) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000023000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000009b000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x8, 0x15, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000980)=""/21, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts. [ 70.745203][ T5829] cgroup: Unknown subsys name 'net' [ 70.900531][ T5829] cgroup: Unknown subsys name 'cpuset' [ 70.909942][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.350996][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.357569][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.332910][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.422480][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.431793][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.440909][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.458908][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.466503][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.487843][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.497785][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.500341][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.506171][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.513175][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.528751][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.536588][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.538438][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.544614][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.558927][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.566223][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.568723][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.594625][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.603117][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.610492][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.620139][ T5159] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.628917][ T5159] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.634711][ T5855] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.636353][ T5159] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.653637][ T5159] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.200201][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 77.385615][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 77.421437][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 77.629686][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.637035][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.644440][ T5842] bridge_slave_0: entered allmulticast mode [ 77.653864][ T5842] bridge_slave_0: entered promiscuous mode [ 77.676272][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 77.713348][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.720688][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.728016][ T5842] bridge_slave_1: entered allmulticast mode [ 77.735053][ T5842] bridge_slave_1: entered promiscuous mode [ 77.762793][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 77.781163][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.789565][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.796700][ T5848] bridge_slave_0: entered allmulticast mode [ 77.804100][ T5848] bridge_slave_0: entered promiscuous mode [ 77.843646][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.850957][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.858799][ T5839] bridge_slave_0: entered allmulticast mode [ 77.865788][ T5839] bridge_slave_0: entered promiscuous mode [ 77.892215][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.899572][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.906725][ T5848] bridge_slave_1: entered allmulticast mode [ 77.914095][ T5848] bridge_slave_1: entered promiscuous mode [ 77.941936][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.963215][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.973157][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.981099][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.988758][ T5839] bridge_slave_1: entered allmulticast mode [ 77.995766][ T5839] bridge_slave_1: entered promiscuous mode [ 78.102768][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.115922][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.145052][ T5842] team0: Port device team_slave_0 added [ 78.155401][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.192185][ T5842] team0: Port device team_slave_1 added [ 78.201037][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.300022][ T5848] team0: Port device team_slave_0 added [ 78.325443][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.332908][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.358863][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.374338][ T5839] team0: Port device team_slave_0 added [ 78.383865][ T5839] team0: Port device team_slave_1 added [ 78.390248][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.403184][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.410780][ T5849] bridge_slave_0: entered allmulticast mode [ 78.419207][ T5849] bridge_slave_0: entered promiscuous mode [ 78.428213][ T5848] team0: Port device team_slave_1 added [ 78.434276][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.442326][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.449858][ T5849] bridge_slave_1: entered allmulticast mode [ 78.457045][ T5849] bridge_slave_1: entered promiscuous mode [ 78.475033][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.482443][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.508825][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.592868][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.600100][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.607874][ T5856] bridge_slave_0: entered allmulticast mode [ 78.614935][ T5856] bridge_slave_0: entered promiscuous mode [ 78.624362][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.632136][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.658186][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.671294][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.678349][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.705080][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.716622][ T5159] Bluetooth: hci1: command tx timeout [ 78.716628][ T5846] Bluetooth: hci2: command tx timeout [ 78.717207][ T5846] Bluetooth: hci3: command tx timeout [ 78.722473][ T5851] Bluetooth: hci0: command tx timeout [ 78.727974][ T51] Bluetooth: hci4: command tx timeout [ 78.755731][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.765159][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.772561][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.780308][ T5856] bridge_slave_1: entered allmulticast mode [ 78.787552][ T5856] bridge_slave_1: entered promiscuous mode [ 78.817631][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.824598][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.850619][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.864180][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.902288][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.912301][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.919897][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.946053][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.994939][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.011166][ T5842] hsr_slave_0: entered promiscuous mode [ 79.018101][ T5842] hsr_slave_1: entered promiscuous mode [ 79.111228][ T5849] team0: Port device team_slave_0 added [ 79.124872][ T5839] hsr_slave_0: entered promiscuous mode [ 79.131489][ T5839] hsr_slave_1: entered promiscuous mode [ 79.137993][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.145705][ T5839] Cannot create hsr debugfs directory [ 79.165752][ T5856] team0: Port device team_slave_0 added [ 79.189902][ T5848] hsr_slave_0: entered promiscuous mode [ 79.196169][ T5848] hsr_slave_1: entered promiscuous mode [ 79.202911][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.210965][ T5848] Cannot create hsr debugfs directory [ 79.219266][ T5849] team0: Port device team_slave_1 added [ 79.235767][ T5856] team0: Port device team_slave_1 added [ 79.346648][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.353813][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.380611][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.420751][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.433893][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.460046][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.471965][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.479419][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.505482][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.542753][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.549858][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.576196][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.769205][ T5856] hsr_slave_0: entered promiscuous mode [ 79.775751][ T5856] hsr_slave_1: entered promiscuous mode [ 79.782951][ T5856] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.790689][ T5856] Cannot create hsr debugfs directory [ 79.840087][ T5849] hsr_slave_0: entered promiscuous mode [ 79.846424][ T5849] hsr_slave_1: entered promiscuous mode [ 79.852828][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.860497][ T5849] Cannot create hsr debugfs directory [ 80.190237][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 80.218531][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 80.252292][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 80.286503][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 80.343754][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.372064][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.398644][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.410478][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.472938][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 80.502892][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.513063][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.537692][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.603870][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.616472][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.644179][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.670532][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.749480][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.771392][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 80.786310][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 80.793981][ T51] Bluetooth: hci0: command tx timeout [ 80.799714][ T5846] Bluetooth: hci1: command tx timeout [ 80.799735][ T5851] Bluetooth: hci2: command tx timeout [ 80.805103][ T5846] Bluetooth: hci4: command tx timeout [ 80.810703][ T5159] Bluetooth: hci3: command tx timeout [ 80.838479][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 80.866954][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 80.897945][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.953017][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.960333][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.989240][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.996406][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.050230][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.104115][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.155170][ T3444] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.162351][ T3444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.174281][ T3444] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.181420][ T3444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.208888][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.243438][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.266718][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.294096][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.301306][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.320982][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.362285][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.418867][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.426001][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.441985][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.449226][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.465541][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.472768][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.573641][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.723962][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.802278][ T1008] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.809634][ T1008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.852161][ T1008] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.859539][ T1008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.952093][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.202038][ T5856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.291817][ T5842] veth0_vlan: entered promiscuous mode [ 82.309844][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.326681][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.423297][ T5842] veth1_vlan: entered promiscuous mode [ 82.605738][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.668261][ T5842] veth0_macvtap: entered promiscuous mode [ 82.693512][ T5839] veth0_vlan: entered promiscuous mode [ 82.705974][ T5842] veth1_macvtap: entered promiscuous mode [ 82.772903][ T5839] veth1_vlan: entered promiscuous mode [ 82.824018][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.870047][ T5159] Bluetooth: hci3: command tx timeout [ 82.877625][ T5159] Bluetooth: hci2: command tx timeout [ 82.878870][ T5855] Bluetooth: hci4: command tx timeout [ 82.883054][ T5159] Bluetooth: hci0: command tx timeout [ 82.896701][ T5159] Bluetooth: hci1: command tx timeout [ 82.902017][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.924834][ T5849] veth0_vlan: entered promiscuous mode [ 82.953787][ T5849] veth1_vlan: entered promiscuous mode [ 82.974362][ T5842] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.983887][ T5842] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.993191][ T5842] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.002204][ T5842] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.073640][ T5839] veth0_macvtap: entered promiscuous mode [ 83.088218][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.106103][ T5839] veth1_macvtap: entered promiscuous mode [ 83.152725][ T5849] veth0_macvtap: entered promiscuous mode [ 83.164400][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.185234][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.204197][ T5849] veth1_macvtap: entered promiscuous mode [ 83.231884][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.244751][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.254004][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.262946][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.295200][ T5848] veth0_vlan: entered promiscuous mode [ 83.344885][ T5848] veth1_vlan: entered promiscuous mode [ 83.359584][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.372368][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.421100][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.476409][ T5856] veth0_vlan: entered promiscuous mode [ 83.491852][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.502971][ T5849] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.516439][ T5849] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.525874][ T5849] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.537798][ T5849] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.565351][ T3470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.579841][ T3470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.583994][ T5856] veth1_vlan: entered promiscuous mode [ 83.636102][ T5848] veth0_macvtap: entered promiscuous mode [ 83.651099][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.679775][ T5848] veth1_macvtap: entered promiscuous mode [ 83.679980][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.737965][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 83.782312][ T5856] veth0_macvtap: entered promiscuous mode [ 83.815850][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.824807][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.829888][ T5856] veth1_macvtap: entered promiscuous mode [ 83.856967][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.924958][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.963040][ T1008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.979676][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.989855][ T1008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.994495][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.008237][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.017590][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.059403][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.100723][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.152412][ T5856] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.167574][ T5856] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.176580][ T5856] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.190289][ T5856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.241541][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.253205][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.427327][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 84.437843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.577226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.582672][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.597932][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.633189][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 84.781381][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.822676][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.947231][ T5855] Bluetooth: hci1: command tx timeout [ 84.952738][ T5846] Bluetooth: hci3: command tx timeout [ 84.958256][ T5851] Bluetooth: hci4: command tx timeout [ 84.964189][ T51] Bluetooth: hci0: command tx timeout [ 84.967092][ T5846] Bluetooth: hci2: command tx timeout [ 85.020853][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.032105][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.078716][ T5914] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 85.146364][ T1008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.160221][ T5971] syz.1.2 (5971) used greatest stack depth: 18592 bytes left [ 85.188683][ T1008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.238058][ T5852] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 85.250617][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 85.285014][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.313383][ T5914] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 85.365396][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.388003][ T5914] usb 3-1: config 0 descriptor?? [ 85.421832][ T5852] usb 4-1: Using ep0 maxpacket: 16 [ 85.585013][ T5852] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 85.610195][ T5852] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.640602][ T5852] usb 4-1: Product: syz [ 85.644870][ T5852] usb 4-1: Manufacturer: syz [ 85.807119][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.035724][ T5852] usb 4-1: SerialNumber: syz [ 86.044901][ T5914] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 86.071064][ T5852] usb 4-1: config 0 descriptor?? [ 86.087968][ T5914] cm6533_jd 0003:0D8C:0022.0001: unknown main item tag 0x0 [ 86.125370][ T5914] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.0001/input/input5 [ 86.128079][ T5852] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 86.194902][ T5852] usb 4-1: Detected FT-X [ 86.217432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 86.428736][ T5987] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 86.577786][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 86.683154][ T5852] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 86.733023][ T10] cfg80211: failed to load regulatory.db [ 86.784240][ T5914] cm6533_jd 0003:0D8C:0022.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 86.895421][ T5914] usb 3-1: USB disconnect, device number 2 [ 87.031262][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 87.149061][ T5852] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 87.164146][ T5991] fido_id[5991]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 87.397187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 87.406639][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 87.477311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 87.570467][ T6001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9'. [ 87.592951][ T6001] tipc: Started in network mode [ 87.598164][ T6001] tipc: Node identity 7f000001, cluster identity 4711 [ 87.610317][ T6001] tipc: Enabling of bearer rejected, failed to enable media [ 88.678321][ T5914] usb 4-1: USB disconnect, device number 2 [ 88.762097][ T5914] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 89.649926][ T5914] ftdi_sio 4-1:0.0: device disconnected [ 91.945396][ T6033] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 92.920098][ T6038] Bluetooth: MGMT ver 1.23 [ 93.391112][ T6043] netlink: 128 bytes leftover after parsing attributes in process `syz.1.22'. [ 93.739707][ T10] IPVS: starting estimator thread 0... [ 93.818226][ T6026] IPv6: NLM_F_CREATE should be specified when creating new route [ 93.861036][ T6044] IPVS: using max 48 ests per chain, 115200 per kthread [ 94.424797][ T6056] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 95.405588][ T6073] syz.1.32 uses obsolete (PF_INET,SOCK_PACKET) [ 95.489827][ T5852] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 95.771879][ T5852] usb 3-1: Using ep0 maxpacket: 16 [ 95.916451][ T5852] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 95.934460][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 95.982322][ T5852] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.006974][ T5852] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 96.060623][ T5852] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 96.070508][ T5852] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.087762][ T5852] usb 3-1: Product: syz [ 96.091989][ T5852] usb 3-1: Manufacturer: syz [ 96.112341][ T5852] usb 3-1: SerialNumber: syz [ 96.169565][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 96.181606][ T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 96.195658][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 96.208846][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 96.224011][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 96.241456][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 96.252664][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 96.280919][ T10] usb 5-1: Product: syz [ 96.310397][ T10] usb 5-1: Manufacturer: syz [ 96.333743][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 96.377503][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 96.429062][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 96.437083][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 96.568709][ T5852] usb 3-1: 0:2 : does not exist [ 96.723890][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 96.730829][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 96.739580][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 96.746225][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 96.752560][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 96.759182][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 96.765515][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 96.772130][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 96.778533][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 96.785155][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 96.791731][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 96.798387][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 96.804831][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 96.811466][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 96.819387][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 96.826286][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 96.833167][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 96.839823][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 96.846209][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 96.852831][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 96.907987][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 96.917194][ T5936] usb 5-1: USB disconnect, device number 2 [ 97.149045][ T6084] Zero length message leads to an empty skb [ 98.676672][ T5852] usb 3-1: USB disconnect, device number 3 [ 99.137928][ T6110] capability: warning: `syz.4.42' uses 32-bit capabilities (legacy support in use) [ 99.218176][ T5998] udevd[5998]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.860034][ T6114] netlink: 165 bytes leftover after parsing attributes in process `syz.4.45'. [ 102.218083][ T6147] netlink: 'syz.2.54': attribute type 10 has an invalid length. [ 102.302556][ T6147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.303465][ T6149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.54'. [ 102.314672][ T6147] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 102.417395][ T6149] netlink: 32 bytes leftover after parsing attributes in process `syz.2.54'. [ 102.513634][ T6150] input: syz0 as /devices/virtual/input/input6 [ 103.131445][ T6157] netlink: 272 bytes leftover after parsing attributes in process `syz.3.57'. [ 104.333240][ T6165] ubi31: attaching mtd0 [ 104.356511][ T6165] ubi31 error: ubi_attach_mtd_dev: bad VID header (9) or data offsets (73) [ 107.026777][ T6195] warning: `syz.3.71' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 110.222536][ T5936] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.578314][ T5936] usb 2-1: Using ep0 maxpacket: 8 [ 110.591110][ T5936] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 110.607214][ T5936] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.622868][ T5936] usb 2-1: Product: syz [ 110.653697][ T5936] usb 2-1: Manufacturer: syz [ 110.669590][ T5936] usb 2-1: SerialNumber: syz [ 110.684141][ T5936] usb 2-1: config 0 descriptor?? [ 110.913221][ T5936] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 111.661864][ T6242] trusted_key: syz.0.86 sent an empty control message without MSG_MORE. [ 112.655452][ T5936] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 113.309940][ T5936] usb 2-1: USB disconnect, device number 2 [ 115.887597][ T6286] netlink: 24 bytes leftover after parsing attributes in process `syz.4.100'. [ 116.658507][ T6285] netlink: 165 bytes leftover after parsing attributes in process `syz.1.99'. [ 116.981458][ T6293] tipc: Started in network mode [ 116.986498][ T6293] tipc: Node identity ac14140f, cluster identity 4711 [ 116.996372][ T6293] tipc: New replicast peer: 255.255.255.255 [ 117.004862][ T6293] tipc: Enabled bearer , priority 10 [ 117.976621][ T6300] block nbd4: shutting down sockets [ 118.119032][ T2152] tipc: Node number set to 2886997007 [ 118.814228][ T6315] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 118.868421][ T6310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.106'. [ 119.480841][ T6322] vxfs: WRONG superblock magic 00000000 at 1 [ 119.488815][ T6322] vxfs: WRONG superblock magic 00000000 at 8 [ 119.494875][ T6322] vxfs: can't find superblock. [ 121.280515][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 121.453188][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 121.466080][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 121.485575][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 121.515306][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 121.550829][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 121.563685][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.592107][ T10] usb 4-1: config 0 descriptor?? [ 121.647071][ T926] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.816934][ T926] usb 2-1: Using ep0 maxpacket: 8 [ 121.829383][ T926] usb 2-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 121.841401][ T926] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 121.859149][ T926] usb 2-1: Product: syz [ 121.886665][ T926] usb 2-1: Manufacturer: syz [ 121.902044][ T926] usb 2-1: SerialNumber: syz [ 121.944851][ T926] usb 2-1: config 0 descriptor?? [ 122.057607][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 122.083928][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 122.102280][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 122.190438][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 122.213822][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 122.249372][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 122.310354][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 122.328542][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 122.336983][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 122.344433][ T10] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 122.435126][ T10] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 122.939949][ T10] usb 4-1: USB disconnect, device number 3 [ 123.079244][ T6351] fido_id[6351]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 123.231167][ T926] usb 2-1: USB disconnect, device number 3 [ 123.348209][ T5911] udevd[5911]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.286385][ T30] audit: type=1326 audit(1755883959.595:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6361 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739218ebe9 code=0x7ffc0000 [ 124.478015][ T30] audit: type=1326 audit(1755883959.595:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6361 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f739218ebe9 code=0x7ffc0000 [ 124.640528][ T6377] netlink: 165 bytes leftover after parsing attributes in process `syz.2.126'. [ 125.023884][ T30] audit: type=1326 audit(1755883959.595:4): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6361 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739218ebe9 code=0x7ffc0000 [ 125.046660][ T30] audit: type=1326 audit(1755883959.595:5): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6361 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f739218ebe9 code=0x7ffc0000 [ 125.068726][ T30] audit: type=1326 audit(1755883959.675:6): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6361 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739218ebe9 code=0x7ffc0000 [ 125.094344][ T30] audit: type=1326 audit(1755883959.675:7): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6361 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739218ebe9 code=0x7ffc0000 [ 125.168027][ T30] audit: type=1326 audit(1755883959.685:8): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6372 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f73921c14a5 code=0x7ffc0000 [ 125.905772][ T30] audit: type=1326 audit(1755883959.745:9): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6361 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=121 compat=0 ip=0x7f739218ebe9 code=0x7ffc0000 [ 126.706774][ T6376] block nbd0: shutting down sockets [ 126.712231][ T30] audit: type=1326 audit(1755883959.745:10): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6361 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739218ebe9 code=0x7ffc0000 [ 126.919187][ T6365] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 126.928180][ T6365] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 127.029984][ T5159] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.095074][ T30] audit: type=1326 audit(1755883959.745:11): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=_ pid=6361 comm="syz.3.123" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739218ebe9 code=0x7ffc0000 [ 127.316682][ T6365] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 127.361468][ T6365] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 127.374576][ T6365] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 127.699364][ T6365] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 128.254929][ T6365] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.267488][ T6365] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 128.376356][ T6403] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0 [ 128.873521][ T6365] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 128.889655][ T6365] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 128.896320][ T6365] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 128.912628][ T6365] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 128.933842][ T6365] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 129.160004][ T5159] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.198191][ T6365] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 129.428355][ T5159] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.649967][ T6365] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 130.160942][ T6422] process 'syz.0.138' launched '/dev/fd/3' with NULL argv: empty string added [ 130.307951][ T5159] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.947199][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.953355][ T5159] Bluetooth: hci4: command 0x0405 tx timeout [ 131.175546][ T6428] netlink: 165 bytes leftover after parsing attributes in process `syz.2.139'. [ 131.217119][ T5159] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.517341][ T5159] Bluetooth: hci1: command 0x0c1a tx timeout [ 132.387291][ T5159] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.467821][ T6437] 9pnet_fd: Insufficient options for proto=fd [ 132.793317][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.801376][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.026949][ T5159] Bluetooth: hci4: command 0x0405 tx timeout [ 133.026990][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.346136][ T6451] tipc: Cannot configure node identity twice [ 133.587163][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 134.452715][ T6444] syz.2.144 (6444) used greatest stack depth: 17864 bytes left [ 134.467023][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.787126][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.993213][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.020183][ T6465] netlink: 165 bytes leftover after parsing attributes in process `syz.1.152'. [ 135.072633][ T24] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 135.107122][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 135.112669][ T5159] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.131987][ T24] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 135.166431][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.183922][ T24] usb 4-1: Product: syz [ 135.188584][ T24] usb 4-1: Manufacturer: syz [ 135.193356][ T24] usb 4-1: SerialNumber: syz [ 135.230299][ T24] usb 4-1: config 0 descriptor?? [ 135.374009][ T6476] netlink: 328 bytes leftover after parsing attributes in process `syz.1.157'. [ 137.842901][ T5936] usb 4-1: USB disconnect, device number 4 [ 138.092658][ T6508] netlink: 165 bytes leftover after parsing attributes in process `syz.3.165'. [ 141.389593][ T5928] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 141.596927][ T6543] netlink: 128 bytes leftover after parsing attributes in process `syz.2.175'. [ 141.672442][ T5928] usb 5-1: Using ep0 maxpacket: 8 [ 141.945802][ T5928] usb 5-1: config 179 has an invalid interface number: 97 but max is 0 [ 141.965176][ T5928] usb 5-1: config 179 has no interface number 0 [ 141.979085][ T926] IPVS: starting estimator thread 0... [ 142.012139][ T5928] usb 5-1: config 179 interface 97 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 142.045901][ T5928] usb 5-1: config 179 interface 97 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 142.087587][ T5928] usb 5-1: config 179 interface 97 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 142.128467][ T6544] IPVS: using max 28 ests per chain, 67200 per kthread [ 142.137119][ T5928] usb 5-1: config 179 interface 97 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 142.166975][ T5928] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.ce [ 142.178641][ T6546] capability: warning: `syz.1.177' uses deprecated v2 capabilities in a way that may be insecure [ 142.191739][ T5928] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.219502][ T6535] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 142.464877][ T10] usb 5-1: USB disconnect, device number 3 [ 144.227610][ T6577] netlink: 'syz.2.186': attribute type 10 has an invalid length. [ 147.827385][ T6599] netlink: 128 bytes leftover after parsing attributes in process `syz.1.191'. [ 148.162077][ T6604] ======================================================= [ 148.162077][ T6604] WARNING: The mand mount option has been deprecated and [ 148.162077][ T6604] and is ignored by this kernel. Remove the mand [ 148.162077][ T6604] option from the mount to silence this warning. [ 148.162077][ T6604] ======================================================= [ 154.071161][ T10] IPVS: starting estimator thread 0... [ 154.083486][ T6647] netlink: 128 bytes leftover after parsing attributes in process `syz.4.203'. [ 154.308441][ T6649] IPVS: using max 34 ests per chain, 81600 per kthread [ 158.247071][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 158.931698][ T6701] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 163.102376][ T6741] : renamed from bridge_slave_0 (while UP) [ 166.547136][ T5852] af_packet: tpacket_rcv: packet too big, clamped from 94 to 4294967286. macoff=82 [ 166.787061][ T6778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.241'. [ 166.887129][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 166.896265][ T6779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.242'. [ 167.597565][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 167.618199][ T6779] netlink: 20 bytes leftover after parsing attributes in process `syz.0.242'. [ 168.145498][ T6792] syzkaller0: entered promiscuous mode [ 168.172409][ T6792] syzkaller0: entered allmulticast mode [ 168.225392][ T3512] syzkaller0: tun_net_xmit 48 [ 171.367066][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 171.367086][ T30] audit: type=1326 audit(1755884006.625:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6821 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739218ebe9 code=0x7ffc0000 [ 171.403069][ T30] audit: type=1326 audit(1755884006.635:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6821 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f739218ebe9 code=0x7ffc0000 [ 171.424894][ T30] audit: type=1326 audit(1755884006.635:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6821 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739218ebe9 code=0x7ffc0000 [ 171.454643][ T30] audit: type=1326 audit(1755884006.635:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6821 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f739218ebe9 code=0x7ffc0000 [ 171.477307][ T30] audit: type=1326 audit(1755884006.635:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6821 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739218ebe9 code=0x7ffc0000 [ 171.501105][ T30] audit: type=1326 audit(1755884006.635:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6821 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f739218ebe9 code=0x7ffc0000 [ 171.534810][ T30] audit: type=1326 audit(1755884006.635:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6821 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739218ebe9 code=0x7ffc0000 [ 171.556982][ T30] audit: type=1326 audit(1755884006.635:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6821 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f739218ebe9 code=0x7ffc0000 [ 171.578858][ T30] audit: type=1326 audit(1755884006.635:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6821 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f739218ebe9 code=0x7ffc0000 [ 171.601403][ T30] audit: type=1326 audit(1755884006.635:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6821 comm="syz.3.250" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f739218ebe9 code=0x7ffc0000 [ 172.121415][ T6824] pim6reg: entered allmulticast mode [ 173.426962][ T5852] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 173.631228][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888056bd1c00: rx timeout, send abort [ 173.641047][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888056bd3800: rx timeout, send abort [ 173.649926][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888056bd1c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 173.665530][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888056bd3800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 173.699028][ T5852] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 173.733496][ T5852] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 173.776959][ T5852] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 173.814942][ T5852] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 173.861986][ T5852] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 173.945441][ T5852] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 174.109776][ T5852] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 174.118727][ T5852] usb 2-1: Product: syz [ 174.122933][ T5852] usb 2-1: Manufacturer: syz [ 174.256932][ T6862] tipc: Started in network mode [ 174.261934][ T6862] tipc: Node identity 4, cluster identity 4711 [ 174.268345][ T6862] tipc: Node number set to 4 [ 174.862617][ T24] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 175.662637][ T5852] cdc_wdm 2-1:1.0: skipping garbage [ 175.668351][ T5852] cdc_wdm 2-1:1.0: skipping garbage [ 175.683182][ T5852] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 175.692849][ T5852] cdc_wdm 2-1:1.0: Unknown control protocol [ 175.723426][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 175.732197][ T24] usb 3-1: not running at top speed; connect to a high speed hub [ 175.823740][ T24] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 175.827286][ T5852] usb 2-1: USB disconnect, device number 4 [ 175.859878][ T24] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 175.896003][ T24] usb 3-1: config 4 has no interface number 0 [ 175.924487][ T24] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 175.943882][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.978091][ T24] usb 3-1: Product: 䶡磻Ⴘꇫೡ눯ᵟሤ∗鄅숙䗊岡팘ꙙ㯲ꖣꬸⴉ뭩䁵嚆紼႗빢ᔹ匓ℬ [ 176.004796][ T24] usb 3-1: SerialNumber: syz [ 176.158729][ T13] [ 176.161103][ T13] ====================================================== [ 176.168126][ T13] WARNING: possible circular locking dependency detected [ 176.175150][ T13] 6.16.0-syzkaller #0 Not tainted [ 176.180160][ T13] ------------------------------------------------------ [ 176.187170][ T13] kworker/u8:1/13 is trying to acquire lock: [ 176.193136][ T13] ffff88802540d358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0 [ 176.202387][ T13] [ 176.202387][ T13] but task is already holding lock: [ 176.209757][ T13] ffff88802541b188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 176.219341][ T13] [ 176.219341][ T13] which lock already depends on the new lock. [ 176.219341][ T13] [ 176.229732][ T13] [ 176.229732][ T13] the existing dependency chain (in reverse order) is: [ 176.238735][ T13] [ 176.238735][ T13] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 176.247169][ T13] lock_acquire+0x120/0x360 [ 176.252184][ T13] down_write+0x96/0x1f0 [ 176.256943][ T13] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 176.263180][ T13] nbd_start_device+0x16c/0xac0 [ 176.268547][ T13] nbd_ioctl+0x636/0xeb0 [ 176.273304][ T13] blkdev_ioctl+0x5a8/0x6d0 [ 176.278319][ T13] __se_sys_ioctl+0xfc/0x170 [ 176.283439][ T13] do_syscall_64+0xfa/0x3b0 [ 176.288458][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.294864][ T13] [ 176.294864][ T13] -> #1 (&nbd->config_lock){+.+.}-{4:4}: [ 176.302687][ T13] lock_acquire+0x120/0x360 [ 176.307711][ T13] __mutex_lock+0x182/0xe80 [ 176.312726][ T13] refcount_dec_and_mutex_lock+0x30/0xa0 [ 176.318876][ T13] nbd_config_put+0x2c/0x790 [ 176.323998][ T13] nbd_release+0xfe/0x140 [ 176.328845][ T13] bdev_release+0x533/0x650 [ 176.333864][ T13] blkdev_release+0x15/0x20 [ 176.338889][ T13] __fput+0x449/0xa70 [ 176.343386][ T13] fput_close_sync+0x119/0x200 [ 176.348664][ T13] __x64_sys_close+0x7f/0x110 [ 176.353860][ T13] do_syscall_64+0xfa/0x3b0 [ 176.358878][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.365283][ T13] [ 176.365283][ T13] -> #0 (&disk->open_mutex){+.+.}-{4:4}: [ 176.373102][ T13] validate_chain+0xb9b/0x2140 [ 176.378381][ T13] __lock_acquire+0xab9/0xd20 [ 176.383570][ T13] lock_acquire+0x120/0x360 [ 176.388583][ T13] __mutex_lock+0x182/0xe80 [ 176.393602][ T13] __del_gendisk+0x129/0x9e0 [ 176.398711][ T13] del_gendisk+0xe8/0x160 [ 176.403555][ T13] nbd_dev_remove_work+0x47/0xe0 [ 176.409011][ T13] process_scheduled_works+0xade/0x17b0 [ 176.415069][ T13] worker_thread+0x8a0/0xda0 [ 176.420175][ T13] kthread+0x70e/0x8a0 [ 176.424761][ T13] ret_from_fork+0x3fc/0x770 [ 176.429866][ T13] ret_from_fork_asm+0x1a/0x30 [ 176.435146][ T13] [ 176.435146][ T13] other info that might help us debug this: [ 176.435146][ T13] [ 176.445362][ T13] Chain exists of: [ 176.445362][ T13] &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock [ 176.445362][ T13] [ 176.459527][ T13] Possible unsafe locking scenario: [ 176.459527][ T13] [ 176.466961][ T13] CPU0 CPU1 [ 176.472316][ T13] ---- ---- [ 176.477671][ T13] rlock(&set->update_nr_hwq_lock); [ 176.482959][ T13] lock(&nbd->config_lock); [ 176.490065][ T13] lock(&set->update_nr_hwq_lock); [ 176.497779][ T13] lock(&disk->open_mutex); [ 176.502364][ T13] [ 176.502364][ T13] *** DEADLOCK *** [ 176.502364][ T13] [ 176.510498][ T13] 3 locks held by kworker/u8:1/13: [ 176.515595][ T13] #0: ffff88802541a948 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 176.526651][ T13] #1: ffffc90000127bc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 176.538921][ T13] #2: ffff88802541b188 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 176.548936][ T13] [ 176.548936][ T13] stack backtrace: [ 176.554832][ T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-syzkaller #0 PREEMPT(full) [ 176.554851][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 176.554863][ T13] Workqueue: nbd-del nbd_dev_remove_work [ 176.554892][ T13] Call Trace: [ 176.554903][ T13] [ 176.554911][ T13] dump_stack_lvl+0x189/0x250 [ 176.554931][ T13] ? __pfx_dump_stack_lvl+0x10/0x10 [ 176.554948][ T13] ? __pfx__printk+0x10/0x10 [ 176.554970][ T13] ? print_lock_name+0xde/0x100 [ 176.554990][ T13] print_circular_bug+0x2ee/0x310 [ 176.555011][ T13] check_noncircular+0x134/0x160 [ 176.555031][ T13] validate_chain+0xb9b/0x2140 [ 176.555052][ T13] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 176.555073][ T13] ? arch_stack_walk+0x11c/0x150 [ 176.555096][ T13] __lock_acquire+0xab9/0xd20 [ 176.555113][ T13] ? __del_gendisk+0x129/0x9e0 [ 176.555132][ T13] lock_acquire+0x120/0x360 [ 176.555145][ T13] ? __del_gendisk+0x129/0x9e0 [ 176.555166][ T13] ? check_path+0x21/0x40 [ 176.555184][ T13] __mutex_lock+0x182/0xe80 [ 176.555202][ T13] ? __del_gendisk+0x129/0x9e0 [ 176.555226][ T13] ? __del_gendisk+0x129/0x9e0 [ 176.555246][ T13] ? __pfx___mutex_lock+0x10/0x10 [ 176.555263][ T13] ? __pfx___might_resched+0x10/0x10 [ 176.555283][ T13] ? __lock_acquire+0xab9/0xd20 [ 176.555297][ T13] ? disk_del_events+0xb5/0x210 [ 176.555315][ T13] ? __del_gendisk+0xc1/0x9e0 [ 176.555336][ T13] __del_gendisk+0x129/0x9e0 [ 176.555356][ T13] ? del_gendisk+0xe0/0x160 [ 176.555378][ T13] ? __pfx___del_gendisk+0x10/0x10 [ 176.555399][ T13] ? down_read+0x1ad/0x2e0 [ 176.555418][ T13] del_gendisk+0xe8/0x160 [ 176.555438][ T13] nbd_dev_remove_work+0x47/0xe0 [ 176.555457][ T13] ? process_scheduled_works+0x9ef/0x17b0 [ 176.555474][ T13] process_scheduled_works+0xade/0x17b0 [ 176.555502][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 176.555523][ T13] worker_thread+0x8a0/0xda0 [ 176.555549][ T13] kthread+0x70e/0x8a0 [ 176.555570][ T13] ? __pfx_worker_thread+0x10/0x10 [ 176.555586][ T13] ? __pfx_kthread+0x10/0x10 [ 176.555606][ T13] ? _raw_spin_unlock_irq+0x23/0x50 [ 176.555620][ T13] ? lockdep_hardirqs_on+0x9c/0x150 [ 176.555637][ T13] ? __pfx_kthread+0x10/0x10 [ 176.555657][ T13] ret_from_fork+0x3fc/0x770 [ 176.555673][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 176.555690][ T13] ? __switch_to_asm+0x39/0x70 [ 176.555708][ T13] ? __switch_to_asm+0x33/0x70 [ 176.555726][ T13] ? __pfx_kthread+0x10/0x10 [ 176.555746][ T13] ret_from_fork_asm+0x1a/0x30 [ 176.555778][ T13] [ 176.576634][ T24] usb 3-1: Found UVC 0.00 device 䶡磻Ⴘꇫೡ눯ᵟሤ∗鄅숙䗊岡팘ꙙ㯲ꖣꬸⴉ뭩䁵嚆紼႗빢ᔹ匓ℬ (04f2:b746) [ 177.027242][ T24] usb 3-1: No valid video chain found. [ 177.465423][ T24] usb 3-1: USB disconnect, device number 4