last executing test programs: 2m26.52002158s ago: executing program 3 (id=3272): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000005000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r0}, 0xc) 2m25.244894839s ago: executing program 3 (id=3274): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_INPUT(r1, 0x80045626, &(0x7f0000000100)) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000000)={0xf0f000, 0x4, @name="d45e3c8a1353875b1a8335bddb954fad04c784e9aae6aaae7102ffffffff3437"}) syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1042, 0x6, 0x354}, &(0x7f00000001c0), &(0x7f0000000300), &(0x7f0000000000)) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100007856bb40da0b53813de20102030109021200010000000009040000000206"], 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x189040, 0x2) finit_module(r3, 0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_CREATE(r3, 0xc02054a5, &(0x7f0000000200)={0x91, r1, 'id1\x00'}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905b8"], 0x0) r4 = syz_open_dev$ndb(0x0, 0x0, 0x20000) ioctl$NBD_CLEAR_QUE(r4, 0xab05) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000280)=ANY=[@ANYBLOB="00150400000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) close(r0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000015000103000000000000e7ff0b000000", @ANYRES64], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) 2m23.518851906s ago: executing program 3 (id=3285): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) fallocate(r0, 0x1, 0xffffffffffff, 0x1) 2m23.358633533s ago: executing program 3 (id=3287): r0 = dup(0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) socket$rds(0x15, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000002b80)={r2}, 0xc) 2m23.149438662s ago: executing program 3 (id=3290): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="071101000000f3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) pread64(0xffffffffffffffff, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000ce5038ff0000000000000000bbfe8000000000000000000500000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x8, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0) socket$phonet(0x23, 0x2, 0x1) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 2m18.751932383s ago: executing program 3 (id=3300): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x76f, 0x0, 0x6, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000400)='\v', 0x1) creat(&(0x7f0000000100)='./file0\x00', 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40142, 0x20a) close_range(r3, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480), 0x1004094, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESOCT=r2, @ANYBLOB="2c000557e68130bcbdddeeb442f10c6145e2e52c00de2ae696346e0d7007f2949008c240ff0b307e1efdd121a23b2e15bb9baaff98e526f4a30a32679b74efa641a63e2a9ae8ad94989d20a1478f79ec9d6efb0533d4c4abb8e47ea193fd6bd576072f321bb7023013449d3e40ce500095f2d986f2066913e4c4e701689c313908ccfa4ea6ca50a54a2ab4611ed9fbba8148e394822100000000000000359c000000000000"]) 2m3.524758356s ago: executing program 32 (id=3300): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() mkdir(&(0x7f0000000080)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000000000000, 0x4, 0x76f, 0x0, 0x6, 0x6, 0x6, 0xfffffffffffffffc, 0x100fff}) write$qrtrtun(0xffffffffffffffff, &(0x7f0000000400)='\v', 0x1) creat(&(0x7f0000000100)='./file0\x00', 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40142, 0x20a) close_range(r3, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000480), 0x1004094, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESOCT=r2, @ANYBLOB="2c000557e68130bcbdddeeb442f10c6145e2e52c00de2ae696346e0d7007f2949008c240ff0b307e1efdd121a23b2e15bb9baaff98e526f4a30a32679b74efa641a63e2a9ae8ad94989d20a1478f79ec9d6efb0533d4c4abb8e47ea193fd6bd576072f321bb7023013449d3e40ce500095f2d986f2066913e4c4e701689c313908ccfa4ea6ca50a54a2ab4611ed9fbba8148e394822100000000000000359c000000000000"]) 15.128479188s ago: executing program 1 (id=3620): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x3, [], "63d038"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], "de"}]}}, 0x0, 0x36}, 0x28) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="02000000040000000800000001"], 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)={@remote, @loopback, 0x0}, &(0x7f0000000380)=0xc) r4 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x10, 0x25dfdbff, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0xf}]}}}]}, 0x3c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'erspan0\x00', &(0x7f00000003c0)={'syztnl1\x00', 0x0, 0x700, 0x10, 0xc00, 0x0, {{0xa, 0x4, 0x3, 0x3a, 0x28, 0x68, 0x0, 0x1, 0x2f, 0x0, @multicast1, @multicast2, {[@timestamp_addr={0x44, 0x14, 0xb2, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa}, {@multicast1, 0x7}]}]}}}}}) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r8, &(0x7f00000002c0)="05031600d3fc142e00124788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000940)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000900)={&(0x7f00000007c0)={0x110, r2, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000006b8a00fe00000000c7080000010000007b8af0ff00000000bda100000000000007000000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fa18230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x6040600) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000020000000000000000000000850000007b000000180100002020782500000000fe1f20207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001000000850000007b00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x64, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) read(r11, &(0x7f00000000c0)=""/26, 0x1a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x977, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000580)={r10, 0x20, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000004c0)=""/106, 0x6a}}, 0x10) r12 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r12, 0x89a2, &(0x7f0000000000)='bridge0\x00') 13.092885288s ago: executing program 1 (id=3623): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="071101000000f3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/igmp\x00') pread64(r5, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x8, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 12.31700483s ago: executing program 5 (id=3625): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x6851, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) syz_usb_connect(0x3, 0xf5, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRES8=r0], 0x0) 11.965714903s ago: executing program 0 (id=3628): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) 11.016804705s ago: executing program 1 (id=3630): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x17) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0xfffffffffffffffd, 0x0, 0x3, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x21) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x7f) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001f80)={&(0x7f0000001d00)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, 0x0}, 0x0) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$cec(&(0x7f00000001c0), 0x0, 0x200082) pipe(&(0x7f0000000500)={0xffffffffffffffff}) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES16=r3], 0x28}}, 0x802) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x541a, &(0x7f0000000380)=0x1) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000005c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="402197fdc4bc693d7c852a3f8b40ca97bb831536546dc3ee21d29b5517c05b589b91c29b7496247792f9709dfcda7ce5a3def5560f8be9578c"], &(0x7f00000000c0)={0x0, 0x3, 0xe3, @string={0xe3, 0x3, "43e42cec384990335f0f8dd0924493450d42a05f1e64a1c814f46b886fa8ec071d7606a1dd99ec89a0705fb32db7f732c2a26e91a94df9c6dedcdcbc97d6cb0b7577838e9e0d0281ab007a7ab6dbc9eba2ddc1d7b83bca04d319b9ba73cc53bb74877c5bacd921707101c6a751c0f0444b1efcc457130d776b7ba4bf43d08ad9deffc54aa82d2bf09dd0b58b397144cd11142811772740ecbd370b8b9baced150f67961b4c0b5bcf51886a66a6a09f66e72a813ac441bdf459478f2d2d935a782889680479abc72080bd74cfe1b805f0b6a27060322ebda47aeb5a8f13704a9ad7"}}, &(0x7f00000003c0)=ANY=[@ANYBLOB="9952aa4f0022070000000080ab0b30691f46cbc0d81ee6f3709dce5a4ecac7c2f173"], &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0xd, 0x4, 0x1, {0x22, 0x658}}}}, &(0x7f0000000540)={0x2c, &(0x7f0000000280)={0x40, 0x0, 0x79, "c45c988e79a598c5161a309fc9b12186ffb790d2590ea55f35d9a90bd2b253f1108c87c7091539b925b6d160511b4bcd76f513127196c66910f89d1b3b361e6f88b137e51fcc0a65e0346b48abe83afd4f41b0f3e19c277d276673b7b78849864199cf5519779bcfae97ca6a6e1aff114715b2b24d42c3fcc5"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000500)={0x20, 0x3, 0x1, 0xb}}) socket$nl_route(0x10, 0x3, 0x0) 10.94570242s ago: executing program 0 (id=3631): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r2 = landlock_create_ruleset(&(0x7f0000000000)={0x6851, 0x2}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b40)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8093, 0x8268}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x4c}}, 0x40000010) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000084) syz_usb_connect(0x3, 0xf5, &(0x7f0000000140)=ANY=[@ANYRESDEC=r5, @ANYRES8=r0], 0x0) 10.380179084s ago: executing program 1 (id=3635): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="071101000000f3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/igmp\x00') pread64(r7, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000ce5038ff0000000000000000bbfe8000000000000000000500000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x8, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0) socket$phonet(0x23, 0x2, 0x1) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x6, &(0x7f00000000c0)={0x18, "d6c1f7b51020c4b7194bf28facb1ed3ee2df5452b3b94bce47509d000000000008"}}) 9.502281176s ago: executing program 4 (id=3637): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xa, {"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", 0x1000}}, 0x1006) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) 9.400643646s ago: executing program 4 (id=3638): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a00000005000100070000000500040000000000090002"], 0x64}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b493016411"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r5 = syz_usb_connect(0x0, 0x147, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a8cbc408e804896868"], 0x0) syz_usb_disconnect(r5) 8.175663401s ago: executing program 5 (id=3639): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x108, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xcc, 0x2, [@TCA_BPF_ACT={0xb0, 0x1, [@m_gact={0xac, 0xb, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0x4, 0x0, 0xd, 0x6d4c}}]}, {0x65, 0x6, "3532565adeea82a6d355b04e82cf0d976e9e3d561f7832a2553c4393a1a4d9d755a3ca015b8308cae8430cb3ee720daf513b7d09d45af79089af4ca0f7ae568b98646f301384cfe6ba628a461810b458401b48d92b11c4b84c4fc318de1f6827de"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_BPF_POLICE={0x18, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_RESULT={0x8}]}]}}]}, 0x108}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 8.094624251s ago: executing program 5 (id=3640): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="071101000000f3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/igmp\x00') pread64(r5, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x8, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 7.395637663s ago: executing program 0 (id=3641): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) 7.316782544s ago: executing program 2 (id=3642): recvmsg(0xffffffffffffffff, 0x0, 0x40000020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x50) r2 = dup(0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) sendto$packet(r3, &(0x7f0000000180)="0b036c12e0ff64000200475400f6a13bb1000000080086dd4803", 0x1a, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r2, 0x0, 0x0}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdffd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000001000)={&(0x7f0000000a00)={0x144, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x38, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd6}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffff801}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4040810}, 0x40000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) io_setup(0x4fe, &(0x7f00000009c0)) 6.745019503s ago: executing program 1 (id=3643): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000a}, 0x94) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0x2d64, 0x0, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) 6.681840756s ago: executing program 1 (id=3644): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$afs(&(0x7f00000000c0)=ANY=[], &(0x7f0000000240)='./file0\x00', &(0x7f00000002c0), 0x1800002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r3, 0x407, 0x2) write$FUSE_INIT(r3, &(0x7f0000000340)={0x50, 0x0, 0x0, {0x7, 0x28, 0x0, 0x840, 0x0, 0x4, 0x4}}, 0x50) vmsplice(r3, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r3, 0x407, 0x2000000) r4 = syz_open_dev$video4linux(0x0, 0x3, 0x40) ioctl$VIDIOC_SUBDEV_S_FMT(r4, 0xc0585605, &(0x7f0000019080)={0x1, 0x0, {0x1, 0x0, 0x300a, 0x8, 0x9, 0x8}}) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') pipe(&(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCINQ(r5, 0x5760, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0xfffffe3e) 6.654374964s ago: executing program 5 (id=3645): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) io_setup(0x2278, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) r2 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e20, @empty}, {0x1, @remote}, 0x4a, {0x2, 0x4e23, @local}, 'veth1_to_batadv\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd00", 0x1a}], 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="adfb10b2", 0x4, 0x40000001, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x581400, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 5.906177315s ago: executing program 4 (id=3646): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0xa, 0x5, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0xff, @loopback, 0x9}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="e6", 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000000000008400000008000000a467461f28fa71fc948cfe8000000000000000080000000000bb"], 0x20, 0x4855}, 0x24000052) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1e) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r2, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000140)=0xb9) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r3 = accept4(r0, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) unshare(0x2c020400) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, &(0x7f0000000000)={0x2, @long={0x3, 0x1, {0xaaaaaaaaaaaa0302}}}, 0x11) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000006900080028bd700127fd19d92fc618ac8b3b37a4dbe2fddbdf250000000000000000"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x4044001) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x2000000, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 5.499955758s ago: executing program 0 (id=3647): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mlock(&(0x7f0000098000/0x3000)=nil, 0x3000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) unshare(0x2c020400) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/sockstat\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000340)=""/127, 0x7f}], 0x1, 0x6, 0x0) r4 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f00000000c0)=0x5cc) poll(&(0x7f0000000080)=[{r4, 0x194}], 0x1, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0xfffffffffffffe77}], 0x1, 0x1, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x500) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r7, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r6) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x0, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', r8, 0x0, r2, 0x8, 0x0, 0x29, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.297601048s ago: executing program 2 (id=3648): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b00088500000071000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000740)=0xe) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x40000) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800"/16, @ANYRES32, @ANYBLOB="00000000ffffffff4c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x13, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x203}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="c918218ef61002ff010000800000", 0x0, 0x83ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) read(r0, 0x0, 0x0) 4.71999425s ago: executing program 4 (id=3649): set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) unshare(0x8000000) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) io_setup(0x2278, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) r2 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000000000)={{0x2, 0x4e20, @empty}, {0x1, @remote}, 0x4a, {0x2, 0x4e23, @local}, 'veth1_to_batadv\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd00", 0x1a}], 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="adfb10b2", 0x4, 0x40000001, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x581400, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r4, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) 4.704340755s ago: executing program 5 (id=3650): set_mempolicy(0x4005, 0x0, 0x8) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) io_setup(0x2278, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) syz_emit_ethernet(0x5e, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r1 = socket$inet(0x2, 0x1, 0x6) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000000)={{0x2, 0x4e20, @empty}, {0x1, @remote}, 0x4a, {0x2, 0x4e23, @local}, 'veth1_to_batadv\x00'}) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="adfb10b2", 0x4, 0x40000001, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x581400, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r2, &(0x7f0000000080)=[{&(0x7f0000000b40)=""/119, 0x77}], 0x1, 0x4000ffe, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={0x0, 0xf5a, 0xbcc, 0x7}, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c000000020301020000000000879b00000000070800010001000010080003400000007d0800044000000010"], 0x2c}, 0x1, 0x0, 0x0, 0xc252f79b2e131ca9}, 0x40810) 3.98125705s ago: executing program 4 (id=3651): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@bridge_delneigh={0x34, 0x1e, 0x1, 0x70bd25, 0x4, {0x2, 0x0, 0x0, 0x0, 0x0, 0x8}, [@NDA_DST_IPV6={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NDA_FDB_EXT_ATTRS={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4080}, 0x20000080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip_vti0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x15001}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x40}}, 0x2400c080) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_ext_features={{0x23, 0xd}, {0x1, 0xc9, 0x40, 0x1, "318cb0dd98c9b8b7"}}}, 0x10) 3.913306114s ago: executing program 2 (id=3652): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) (fail_nth: 3) r1 = landlock_create_ruleset(&(0x7f0000000100)={0x1200, 0x0, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0xe) 3.85685591s ago: executing program 5 (id=3653): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, 0x0, &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="071101000000f3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/igmp\x00') pread64(r7, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000ce5038ff0000000000000000bbfe8000000000000000000500000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x8, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0) socket$phonet(0x23, 0x2, 0x1) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000180)={0x1, 0x0, 0x6, &(0x7f00000000c0)={0x18, "d6c1f7b51020c4b7194bf28facb1ed3ee2df5452b3b94bce47509d000000000008"}}) 3.701753972s ago: executing program 2 (id=3654): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000005000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 3.669508094s ago: executing program 0 (id=3655): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000"], &(0x7f00000001c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe468}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x0, 0x4, 0x0, 0x4}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="071101000000f3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/igmp\x00') pread64(r5, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "560400", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x8, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) 3.577314891s ago: executing program 2 (id=3656): socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r3, &(0x7f0000000600)={&(0x7f0000000200)={0x2, 0x4e21, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20000040}, 0x0) syz_usb_connect$lan78xx(0x6, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000050005000a00000005000100070000000500040000000000090002"], 0x64}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b493016411"], 0xfdef) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2}}]}}, 0x0, 0x4e}, 0x28) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) r5 = syz_usb_connect(0x0, 0x147, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002a8cbc408e804896868"], 0x0) syz_usb_disconnect(r5) 2.230002026s ago: executing program 4 (id=3657): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x7c}, 0x1, 0x2000000, 0x0, 0xa25bb844b084a7a1}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="071101000000f3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x38, &(0x7f0000000280)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f00000006c0)='net/igmp\x00') pread64(r4, &(0x7f0000000280)=""/86, 0x56, 0x4000000000000f3) syz_emit_ethernet(0x4a, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140600fe8000ce5038ff0000000000000000bbfe8000000000000000000500000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) writev(r1, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) 812.919941ms ago: executing program 0 (id=3658): recvmsg(0xffffffffffffffff, 0x0, 0x40000020) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$udambuf(0xffffffffffffff9c, 0x0, 0x2) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) openat$sysfs(0xffffffffffffff9c, 0x0, 0x1, 0x50) r2 = dup(0xffffffffffffffff) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x4000004, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00'}) sendto$packet(r3, &(0x7f0000000180)="0b036c12e0ff64000200475400f6a13bb1000000080086dd4803", 0x1a, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r2, 0x0, 0x0}, 0x10) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x40, 0x2c, 0xf3f, 0x30bd2b, 0x25dfdffd, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {0x0, 0xfff3}, {0xd, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000001040)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000001000)={&(0x7f0000000a00)={0x144, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x38, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd6}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xfffff801}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4040810}, 0x40000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) io_setup(0x4fe, &(0x7f00000009c0)) 0s ago: executing program 2 (id=3659): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b00088500000071000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r2 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000100)={@multicast1, @local}, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101002, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000740)=0xe) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) r5 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000080)=0x40000) ioctl$SNDCTL_DSP_SYNC(r6, 0x5001, 0x0) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="180800"/16, @ANYRES32, @ANYBLOB="00000000ffffffff4c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x13, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x203}, [@printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xb}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="c918218ef61002ff010000800000", 0x0, 0x83ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000440)={0x2, 0xfb}, 0x2) kernel console output (not intermixed with test programs): start: -61 [ 1166.221588][T12999] usb 5-1: can't read configurations, error -61 [ 1166.228888][T12999] usb usb5-port1: unable to enumerate USB device [ 1166.665774][T24732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1166.695893][T25794] kAFS: No cell specified [ 1166.756222][T24732] 8021q: adding VLAN 0 to HW filter on device team0 [ 1166.772170][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1166.780319][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1166.815466][ T3548] bridge0: port 2(bridge_slave_1) entered blocking state [ 1166.815681][ T3548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1168.438453][T25876] afs: Bad value for 'source' [ 1168.689177][T24732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1169.241303][T24732] veth0_vlan: entered promiscuous mode [ 1169.273356][T24732] veth1_vlan: entered promiscuous mode [ 1169.349453][T24732] veth0_macvtap: entered promiscuous mode [ 1169.405584][T24732] veth1_macvtap: entered promiscuous mode [ 1169.501767][T25899] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3207'. [ 1170.214746][ T9] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1170.247005][T24732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1170.274434][T24732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1170.332642][ T1307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.333246][ T1307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.333784][ T1307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.334249][ T1307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1170.378872][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 1170.380826][ T9] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1170.380856][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.414489][ T9] usb 5-1: config 0 descriptor?? [ 1170.562780][T25909] kAFS: No cell specified [ 1170.638514][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1170.661792][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1170.682171][ T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1170.682235][ T9] usb 5-1: media controller created [ 1170.751076][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1172.242621][ T5858] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1172.338376][ T9] az6027: usb out operation failed. (-71) [ 1172.338797][ T9] az6027: usb out operation failed. (-71) [ 1172.338813][ T9] stb0899_attach: Driver disabled by Kconfig [ 1172.338824][ T9] az6027: no front-end attached [ 1172.338824][ T9] [ 1172.339213][ T9] az6027: usb out operation failed. (-71) [ 1172.339228][ T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1172.373472][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input101 [ 1172.395987][ T9] dvb-usb: schedule remote query interval to 400 msecs. [ 1172.396011][ T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1172.423734][ T5858] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1172.423767][ T5858] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1172.423788][ T5858] usb 3-1: config 0 has no interface number 0 [ 1172.423855][ T5858] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1172.423899][ T5858] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1172.423926][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1172.448347][ T9] usb 5-1: USB disconnect, device number 88 [ 1172.523855][ T5858] usb 3-1: config 0 descriptor?? [ 1172.541679][ T5858] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 1172.585632][T13580] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.585656][T13580] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.755963][T13580] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1172.755986][T13580] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1172.819865][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1173.975670][T25975] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1173.976986][T25975] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1173.977186][T25975] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1173.977388][T25975] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1173.977470][T25975] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1174.096993][T25975] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1175.511153][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1175.547089][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1175.548688][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1175.551044][ T5817] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1175.551895][ T5817] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1175.833012][T26008] kAFS: No cell specified [ 1176.004459][ T5805] Bluetooth: hci2: command 0x0c1a tx timeout [ 1176.004504][ T5805] Bluetooth: hci5: command 0x0419 tx timeout [ 1176.004535][ T5805] Bluetooth: hci3: command 0x0406 tx timeout [ 1176.004606][ T5817] Bluetooth: hci4: command 0x0c1a tx timeout [ 1176.071310][T26022] FAULT_INJECTION: forcing a failure. [ 1176.071310][T26022] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1176.071340][T26022] CPU: 0 UID: 0 PID: 26022 Comm: syz.0.3222 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1176.071363][T26022] Tainted: [L]=SOFTLOCKUP [ 1176.071369][T26022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1176.071379][T26022] Call Trace: [ 1176.071386][T26022] [ 1176.071393][T26022] dump_stack_lvl+0xe8/0x150 [ 1176.071421][T26022] should_fail_ex+0x46b/0x600 [ 1176.071449][T26022] _copy_from_user+0x2d/0xb0 [ 1176.071466][T26022] lo_ioctl+0x773/0x1fc0 [ 1176.071498][T26022] ? __pfx_lo_ioctl+0x10/0x10 [ 1176.071519][T26022] ? do_raw_spin_lock+0x12b/0x2f0 [ 1176.071559][T26022] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1176.071579][T26022] ? lockdep_hardirqs_on+0x7a/0x110 [ 1176.071606][T26022] ? __lock_acquire+0x6b5/0x2cf0 [ 1176.071624][T26022] ? __lock_acquire+0x6b5/0x2cf0 [ 1176.071645][T26022] ? __lock_acquire+0x6b5/0x2cf0 [ 1176.071663][T26022] ? __lock_acquire+0x6b5/0x2cf0 [ 1176.071683][T26022] ? __lock_acquire+0x6b5/0x2cf0 [ 1176.071700][T26022] ? __lock_acquire+0x6b5/0x2cf0 [ 1176.071724][T26022] ? unwind_next_frame+0xa5/0x23c0 [ 1176.071756][T26022] ? is_bpf_text_address+0x26/0x2b0 [ 1176.071786][T26022] ? is_bpf_text_address+0x292/0x2b0 [ 1176.071808][T26022] ? is_bpf_text_address+0x26/0x2b0 [ 1176.071834][T26022] ? kernel_text_address+0xa5/0xe0 [ 1176.071855][T26022] ? __kernel_text_address+0xd/0x30 [ 1176.071873][T26022] ? unwind_get_return_address+0x4d/0x90 [ 1176.071889][T26022] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1176.071913][T26022] ? arch_stack_walk+0xfb/0x150 [ 1176.071939][T26022] ? stack_trace_save+0xa9/0x100 [ 1176.071961][T26022] ? __pfx_stack_trace_save+0x10/0x10 [ 1176.071982][T26022] ? kasan_save_free_info+0x46/0x50 [ 1176.072006][T26022] ? stack_depot_save_flags+0x33/0x810 [ 1176.072029][T26022] ? vsnprintf+0xee0/0xee0 [ 1176.072055][T26022] ? kasan_save_track+0x4f/0x80 [ 1176.072078][T26022] ? kasan_save_track+0x3e/0x80 [ 1176.072100][T26022] ? kasan_save_free_info+0x46/0x50 [ 1176.072119][T26022] ? __kasan_slab_free+0x5c/0x80 [ 1176.072142][T26022] ? kfree+0x1c1/0x6c0 [ 1176.072164][T26022] ? tomoyo_path_number_perm+0x501/0x630 [ 1176.072180][T26022] ? security_file_ioctl+0xc3/0x2a0 [ 1176.072197][T26022] ? __se_sys_ioctl+0x47/0x170 [ 1176.072211][T26022] ? do_syscall_64+0x14d/0xf80 [ 1176.072229][T26022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.072250][T26022] ? __asan_memset+0x22/0x50 [ 1176.072272][T26022] ? blk_get_meta_cap+0x16d/0x7a0 [ 1176.072298][T26022] ? __pfx_blk_get_meta_cap+0x10/0x10 [ 1176.072365][T26022] ? blkdev_common_ioctl+0x14b7/0x3250 [ 1176.072404][T26022] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1176.072437][T26022] ? kasan_quarantine_put+0xbb/0x1f0 [ 1176.072479][T26022] ? tomoyo_path_number_perm+0x219/0x630 [ 1176.072504][T26022] ? tomoyo_path_number_perm+0x219/0x630 [ 1176.072541][T26022] ? do_vfs_ioctl+0x117b/0x1540 [ 1176.072601][T26022] ? __pfx_smack_file_ioctl+0x10/0x10 [ 1176.072638][T26022] ? __pfx_lo_ioctl+0x10/0x10 [ 1176.072673][T26022] blkdev_ioctl+0x5e6/0x750 [ 1176.072706][T26022] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1176.072736][T26022] ? __fget_files+0x2a/0x420 [ 1176.072769][T26022] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1176.072793][T26022] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1176.072826][T26022] __se_sys_ioctl+0xff/0x170 [ 1176.072852][T26022] do_syscall_64+0x14d/0xf80 [ 1176.072877][T26022] ? trace_irq_disable+0x3b/0x150 [ 1176.072905][T26022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.072928][T26022] ? clear_bhb_loop+0x40/0x90 [ 1176.072956][T26022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1176.072978][T26022] RIP: 0033:0x7f06803ec819 [ 1176.073005][T26022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1176.073019][T26022] RSP: 002b:00007f067e63e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1176.073037][T26022] RAX: ffffffffffffffda RBX: 00007f0680665fa0 RCX: 00007f06803ec819 [ 1176.073049][T26022] RDX: 00002000000002c0 RSI: 0000000000004c0a RDI: 0000000000000003 [ 1176.073060][T26022] RBP: 00007f067e63e090 R08: 0000000000000000 R09: 0000000000000000 [ 1176.073071][T26022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1176.073080][T26022] R13: 00007f0680666038 R14: 00007f0680665fa0 R15: 00007ffe3e20e238 [ 1176.073107][T26022] [ 1176.772680][ T9] usb 3-1: USB disconnect, device number 39 [ 1176.960837][ T1307] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.382455][ T9] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 1177.419443][ T1307] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1177.448669][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.448772][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.552796][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1177.555641][ T9] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2 [ 1177.555675][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 140, changing to 11 [ 1177.555705][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59326, setting to 1024 [ 1177.566498][ T9] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1177.566533][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1177.566556][ T9] usb 1-1: Product: syz [ 1177.566572][ T9] usb 1-1: Manufacturer: syz [ 1177.566587][ T9] usb 1-1: SerialNumber: syz [ 1177.677199][ T9] usb 1-1: config 0 descriptor?? [ 1177.678786][T26046] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1177.682656][ T5817] Bluetooth: hci0: command tx timeout [ 1177.731624][ T9] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1177.924902][T13896] usb 1-1: Failed to submit usb control message: -71 [ 1177.924941][T13896] usb 1-1: unable to send the bmi data to the device: -71 [ 1177.924961][T13896] usb 1-1: unable to get target info from device [ 1177.924978][T13896] usb 1-1: could not get target info (-71) [ 1177.925215][T13896] usb 1-1: could not probe fw (-71) [ 1177.925616][T21667] usb 1-1: USB disconnect, device number 38 [ 1177.993323][ T1307] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.009513][ T5858] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 1178.082556][ T5817] Bluetooth: hci4: command 0x0c1a tx timeout [ 1178.202427][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 1178.206767][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1178.206800][ T5858] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1178.206840][ T5858] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1178.206864][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.254878][ T5858] usb 4-1: config 0 descriptor?? [ 1178.596852][ T1307] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1178.672432][ T9] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1178.828931][ T5858] corsair 0003:1B1C:1B02.005F: unknown main item tag 0x0 [ 1178.828971][ T5858] corsair 0003:1B1C:1B02.005F: unknown main item tag 0x0 [ 1178.829002][ T5858] corsair 0003:1B1C:1B02.005F: unknown main item tag 0x0 [ 1178.829033][ T5858] corsair 0003:1B1C:1B02.005F: unknown main item tag 0x0 [ 1178.829063][ T5858] corsair 0003:1B1C:1B02.005F: unknown main item tag 0x0 [ 1178.832643][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 1178.858727][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1178.858762][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.910593][ T5858] corsair 0003:1B1C:1B02.005F: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.3-1/input0 [ 1179.032502][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1179.032524][ T9] pvrusb2: ********** [ 1179.032533][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1179.032547][ T9] pvrusb2: Important functionality might not be entirely working. [ 1179.032558][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1179.032572][ T9] pvrusb2: ********** [ 1179.061668][ T5858] corsair 0003:1B1C:1B02.005F: Read invalid backlight brightness: 79. [ 1179.262813][ T2371] pvrusb2: Invalid write control endpoint [ 1179.282523][T14217] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 1179.427203][T25993] chnl_net:caif_netlink_parms(): no params data found [ 1179.439610][T14217] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1179.439638][T14217] usb 1-1: config 0 has no interface number 0 [ 1179.439686][T14217] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1179.439716][T14217] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1179.439756][T14217] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1179.439781][T14217] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1179.499560][T26116] pvrusb2: Invalid write control endpoint [ 1179.515816][T14217] usb 1-1: config 0 descriptor?? [ 1179.685155][ T2371] pvrusb2: Invalid write control endpoint [ 1179.685172][ T2371] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1179.685183][ T2371] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1179.685194][ T2371] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1179.685206][ T2371] pvrusb2: Device being rendered inoperable [ 1179.685257][ T2371] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1179.685321][ T2371] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1179.686763][ T2371] pvrusb2: Attached sub-driver cx25840 [ 1179.686777][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1179.686789][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1179.770887][T20032] Bluetooth: hci0: command tx timeout [ 1180.183167][T20032] Bluetooth: hci4: command 0x0c1a tx timeout [ 1180.434288][T21667] usb 4-1: USB disconnect, device number 78 [ 1181.842579][T20032] Bluetooth: hci0: command tx timeout [ 1181.862583][T21667] usb 3-1: USB disconnect, device number 40 [ 1182.655175][T26146] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3230'. [ 1183.024075][T21667] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1183.322483][T21667] usb 3-1: Using ep0 maxpacket: 32 [ 1183.325182][T21667] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1183.325215][T21667] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1183.328649][T21667] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1183.328682][T21667] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1183.328706][T21667] usb 3-1: Product: syz [ 1183.328723][T21667] usb 3-1: Manufacturer: syz [ 1183.328739][T21667] usb 3-1: SerialNumber: syz [ 1183.567982][T21667] usb 3-1: config 0 descriptor?? [ 1183.620574][T14217] usbhid 1-1:0.1: can't add hid device: -71 [ 1183.620700][T14217] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 1183.648753][T14217] usb 1-1: USB disconnect, device number 39 [ 1183.912625][T25993] bridge0: port 1(bridge_slave_0) entered blocking state [ 1183.912834][T25993] bridge0: port 1(bridge_slave_0) entered disabled state [ 1183.913147][T25993] bridge_slave_0: entered allmulticast mode [ 1183.924971][T20032] Bluetooth: hci0: command tx timeout [ 1183.928697][T25993] bridge_slave_0: entered promiscuous mode [ 1183.931497][ T1307] bridge_slave_1: left allmulticast mode [ 1183.931525][ T1307] bridge_slave_1: left promiscuous mode [ 1183.931742][ T1307] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.033840][ T1307] bridge_slave_0: left allmulticast mode [ 1184.034157][ T1307] bridge_slave_0: left promiscuous mode [ 1184.034738][ T1307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1185.743218][ T1307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1185.803236][ T1307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1185.826360][ T1307] bond0 (unregistering): Released all slaves [ 1185.932099][T25993] bridge0: port 2(bridge_slave_1) entered blocking state [ 1185.932185][T25993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1185.932668][T25993] bridge_slave_1: entered allmulticast mode [ 1185.934552][T12999] usb 3-1: USB disconnect, device number 41 [ 1185.959754][T25993] bridge_slave_1: entered promiscuous mode [ 1186.184573][T26329] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1186.184775][T26329] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1186.184902][T26329] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1186.185022][T26329] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1186.185199][T26329] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1186.185252][T26329] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1186.230117][ T1307] tipc: Disabling bearer [ 1186.230310][ T1307] tipc: Left network mode [ 1186.287651][T25993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1186.300439][T26329] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1186.314175][T25993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1186.403782][T25993] team0: Port device team_slave_0 added [ 1186.407989][T25993] team0: Port device team_slave_1 added [ 1186.460506][T25993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1186.460526][T25993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1186.460558][T25993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1186.506664][T25993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1186.506683][T25993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1186.506715][T25993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1186.619648][T25993] hsr_slave_0: entered promiscuous mode [ 1186.666321][T25993] hsr_slave_1: entered promiscuous mode [ 1186.667291][T25993] debugfs: 'hsr0' already exists in 'hsr' [ 1186.667320][T25993] Cannot create hsr debugfs directory [ 1187.047291][T14217] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1187.126685][ T1307] rxrpc: Call ffff88803aeb6040 still in use (1,Complete,1409,0)! [ 1187.230647][T14217] usb 3-1: Using ep0 maxpacket: 16 [ 1187.238266][T14217] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1187.238304][T14217] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1187.238353][T14217] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1187.238378][T14217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.241181][T26462] 9pnet_fd: Insufficient options for proto=fd [ 1187.292795][T14217] usb 3-1: config 0 descriptor?? [ 1187.706604][T26489] netlink: 'syz.3.3246': attribute type 39 has an invalid length. [ 1187.786007][T14217] corsair 0003:1B1C:1B02.0060: unknown main item tag 0x0 [ 1187.786035][T14217] corsair 0003:1B1C:1B02.0060: unknown main item tag 0x0 [ 1187.786056][T14217] corsair 0003:1B1C:1B02.0060: unknown main item tag 0x0 [ 1187.786076][T14217] corsair 0003:1B1C:1B02.0060: unknown main item tag 0x0 [ 1187.786095][T14217] corsair 0003:1B1C:1B02.0060: unknown main item tag 0x0 [ 1187.842959][T14217] corsair 0003:1B1C:1B02.0060: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 1187.940845][T14217] corsair 0003:1B1C:1B02.0060: Read invalid backlight brightness: 79. [ 1188.242554][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 1188.242778][ T5805] Bluetooth: hci2: command 0x0c1a tx timeout [ 1188.242811][ T5805] Bluetooth: hci3: command 0x0406 tx timeout [ 1188.242841][ T5805] Bluetooth: hci4: command 0x0c1a tx timeout [ 1188.242872][ T5805] Bluetooth: hci5: command 0x0419 tx timeout [ 1188.812544][T21667] usb 3-1: USB disconnect, device number 42 [ 1188.983332][T26554] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1189.425160][T26577] kAFS: No cell specified [ 1189.511823][T26580] 9pnet_fd: Insufficient options for proto=fd [ 1189.672511][T26567] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1189.672723][T26567] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1189.672900][T26567] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1189.673083][T26567] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1189.673614][T26567] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1190.353911][T21667] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1190.572876][T21667] usb 3-1: Using ep0 maxpacket: 32 [ 1190.628246][T21667] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1190.628293][T21667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1190.665376][T21667] usb 3-1: config 0 descriptor?? [ 1190.803661][T26611] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3259'. [ 1190.803686][T26611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3259'. [ 1190.851091][T26611] veth1_to_batadv: entered allmulticast mode [ 1190.889732][T26611] pim6reg: entered allmulticast mode [ 1190.920320][T26611] netlink: 'syz.0.3259': attribute type 8 has an invalid length. [ 1190.920343][T26611] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3259'. [ 1191.142634][T26617] netlink: 252 bytes leftover after parsing attributes in process `syz.0.3259'. [ 1191.678091][T26611] veth1_to_team: entered promiscuous mode [ 1191.682486][ T5817] Bluetooth: hci2: command 0x0c1a tx timeout [ 1191.682526][ T5817] Bluetooth: hci0: command 0x0c1a tx timeout [ 1191.682623][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 1191.682655][ T5817] Bluetooth: hci4: command 0x0c1a tx timeout [ 1191.682687][ T5817] Bluetooth: hci5: command 0x0419 tx timeout [ 1191.689776][T26611] gretap0: entered promiscuous mode [ 1191.733329][T26611] batadv_slave_0: entered promiscuous mode [ 1191.733545][T26611] batadv_slave_0: left promiscuous mode [ 1191.782500][T26611] veth1_to_team: left promiscuous mode [ 1191.887142][T26611] gretap0: left promiscuous mode [ 1191.940720][T21667] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 1191.969908][T21667] usb 3-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 1191.969954][T21667] usb 3-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 1192.110458][T25993] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1192.150388][T25993] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1192.196161][T25993] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1192.212797][T26642] kAFS: No cell specified [ 1192.293685][T25993] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1192.299972][ T37] audit: type=1326 audit(1776103042.645:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26643 comm="syz.1.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb220edb99 code=0x7ffc0000 [ 1192.300472][ T37] audit: type=1326 audit(1776103042.645:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26643 comm="syz.1.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb220edb99 code=0x7ffc0000 [ 1192.302062][ T37] audit: type=1326 audit(1776103042.645:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26643 comm="syz.1.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fcb220edb99 code=0x7ffc0000 [ 1192.302117][ T37] audit: type=1326 audit(1776103042.645:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26643 comm="syz.1.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2214c819 code=0x7ffc0000 [ 1192.302166][ T37] audit: type=1326 audit(1776103042.645:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26643 comm="syz.1.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2214c819 code=0x7ffc0000 [ 1192.302215][ T37] audit: type=1326 audit(1776103042.645:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26643 comm="syz.1.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2214c819 code=0x7ffc0000 [ 1192.302264][ T37] audit: type=1326 audit(1776103042.645:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26643 comm="syz.1.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2214c819 code=0x7ffc0000 [ 1192.303001][ T37] audit: type=1326 audit(1776103042.645:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26643 comm="syz.1.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2214c819 code=0x7ffc0000 [ 1192.303133][ T37] audit: type=1326 audit(1776103042.645:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26643 comm="syz.1.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2214c819 code=0x7ffc0000 [ 1192.303282][ T37] audit: type=1326 audit(1776103042.645:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=26643 comm="syz.1.3266" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb2214c819 code=0x7ffc0000 [ 1193.234039][T25993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.289999][T25993] 8021q: adding VLAN 0 to HW filter on device team0 [ 1193.319868][ T3548] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.321844][ T3548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1193.378318][ T6908] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.378450][ T6908] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1193.472915][T25993] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1193.472954][T25993] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1193.597945][T26652] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1193.598230][T26652] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1193.599298][T26652] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1193.599584][T26652] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1193.599850][T26652] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1195.616812][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 1195.618179][ T5805] Bluetooth: hci4: command 0x0c1a tx timeout [ 1195.618567][ T5805] Bluetooth: hci2: command 0x0c1a tx timeout [ 1195.619239][ T5805] Bluetooth: hci5: command 0x0419 tx timeout [ 1195.619689][ T5805] Bluetooth: hci3: command 0x0406 tx timeout [ 1196.402203][T25993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1196.474891][T26692] afs: Unknown parameter 'dy' [ 1196.602537][ T5858] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 1196.759984][ T5858] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1196.760021][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1196.760044][ T5858] usb 4-1: Product: syz [ 1196.760060][ T5858] usb 4-1: Manufacturer: syz [ 1196.760076][ T5858] usb 4-1: SerialNumber: syz [ 1196.807951][ T5858] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1196.807980][ T5858] r8152-cfgselector 4-1: config 0 descriptor?? [ 1197.030370][T26680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1197.034788][T26680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1197.062043][ T5858] r8152-cfgselector 4-1: Unknown version 0x0000 [ 1197.063482][ T5858] r8152-cfgselector 4-1: bad CDC descriptors [ 1197.078152][T25993] veth0_vlan: entered promiscuous mode [ 1197.113820][T25993] veth1_vlan: entered promiscuous mode [ 1197.289239][T25993] veth0_macvtap: entered promiscuous mode [ 1197.299960][T26680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3274'. [ 1197.305186][T25993] veth1_macvtap: entered promiscuous mode [ 1197.370384][T25993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1197.380186][T25993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1197.426764][ T67] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.427060][ T67] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.427845][ T3548] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.429353][ T3548] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1197.480067][T26710] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1197.486551][T26710] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1197.508733][T26710] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1197.508919][T26710] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1197.509094][T26710] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1197.863333][ T7391] r8152-cfgselector 4-1: USB disconnect, device number 79 [ 1198.091666][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1198.091690][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.299773][T26752] afs: Unknown parameter 'dy' [ 1199.522449][ T5817] Bluetooth: hci0: command 0x0c1a tx timeout [ 1199.522578][ T5817] Bluetooth: hci4: command 0x0c1a tx timeout [ 1199.522611][ T5817] Bluetooth: hci5: command 0x0419 tx timeout [ 1199.522642][ T5817] Bluetooth: hci2: command 0x0c1a tx timeout [ 1199.522670][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 1199.673444][T26770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3289'. [ 1199.823533][T12999] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 1200.199460][T12999] usb 4-1: Using ep0 maxpacket: 32 [ 1200.204461][T12999] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1200.204492][T12999] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.246136][T12999] usb 4-1: config 0 descriptor?? [ 1200.451304][T12999] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1200.462121][T12999] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1200.475453][T12999] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1200.475509][T12999] usb 4-1: media controller created [ 1200.506446][T12999] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1200.605977][T26770] erspan0: entered promiscuous mode [ 1200.623123][T26770] erspan0: left promiscuous mode [ 1201.325185][ T3596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1201.325208][ T3596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.569564][T12999] az6027: usb out operation failed. (-110) [ 1202.570708][T12999] az6027: usb out operation failed. (-32) [ 1202.570725][T12999] stb0899_attach: Driver disabled by Kconfig [ 1202.570736][T12999] az6027: no front-end attached [ 1202.570736][T12999] [ 1202.571193][T12999] az6027: usb out operation failed. (-32) [ 1202.571210][T12999] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1202.616628][T12999] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input102 [ 1202.635944][T12999] dvb-usb: schedule remote query interval to 400 msecs. [ 1202.635969][T12999] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1202.709711][T26806] afs: Unknown parameter 'dy' [ 1202.740338][ T9] usb 4-1: USB disconnect, device number 80 [ 1203.300809][T26838] FAULT_INJECTION: forcing a failure. [ 1203.300809][T26838] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.300849][T26838] CPU: 0 UID: 0 PID: 26838 Comm: syz.0.3302 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1203.300880][T26838] Tainted: [L]=SOFTLOCKUP [ 1203.300888][T26838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1203.300902][T26838] Call Trace: [ 1203.300911][T26838] [ 1203.300921][T26838] dump_stack_lvl+0xe8/0x150 [ 1203.300958][T26838] should_fail_ex+0x46b/0x600 [ 1203.300996][T26838] should_failslab+0xa8/0x100 [ 1203.301022][T26838] __kmalloc_noprof+0xdf/0x7b0 [ 1203.301045][T26838] ? sock_kmalloc+0xd6/0x160 [ 1203.301078][T26838] sock_kmalloc+0xd6/0x160 [ 1203.301109][T26838] skcipher_recvmsg+0x517/0x1140 [ 1203.301156][T26838] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1203.301187][T26838] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1203.301219][T26838] ? security_socket_recvmsg+0x7e/0x2c0 [ 1203.301253][T26838] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 1203.301279][T26838] sock_recvmsg+0x172/0x1b0 [ 1203.301314][T26838] ____sys_recvmsg+0x1f2/0x4b0 [ 1203.301351][T26838] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1203.301395][T26838] ? import_iovec+0x73/0xa0 [ 1203.301421][T26838] ___sys_recvmsg+0x215/0x590 [ 1203.301455][T26838] ? __pfx____sys_recvmsg+0x10/0x10 [ 1203.301516][T26838] ? __fget_files+0x3a6/0x420 [ 1203.301557][T26838] __x64_sys_recvmsg+0x1c0/0x2a0 [ 1203.301588][T26838] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1203.301627][T26838] ? __pfx_ksys_write+0x10/0x10 [ 1203.301674][T26838] do_syscall_64+0x14d/0xf80 [ 1203.301699][T26838] ? trace_irq_disable+0x3b/0x150 [ 1203.301733][T26838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.301756][T26838] ? clear_bhb_loop+0x40/0x90 [ 1203.301784][T26838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.301807][T26838] RIP: 0033:0x7f06803ec819 [ 1203.301828][T26838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1203.301847][T26838] RSP: 002b:00007f067e63e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1203.301871][T26838] RAX: ffffffffffffffda RBX: 00007f0680665fa0 RCX: 00007f06803ec819 [ 1203.301887][T26838] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000000004 [ 1203.301901][T26838] RBP: 00007f067e63e090 R08: 0000000000000000 R09: 0000000000000000 [ 1203.301915][T26838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1203.301929][T26838] R13: 00007f0680666038 R14: 00007f0680665fa0 R15: 00007ffe3e20e238 [ 1203.301965][T26838] [ 1203.370286][ T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1203.493853][T26822] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1203.496915][T26822] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1203.497394][T26822] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1203.497902][T26822] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1203.498285][T26822] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1204.116142][T26851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3304'. [ 1204.189497][T26851] erspan0: entered promiscuous mode [ 1204.328477][T26851] erspan0: left promiscuous mode [ 1204.723955][ T5858] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 1205.314931][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1205.314971][ T5858] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1205.315013][ T5858] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 1205.315039][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.322099][ T5858] usb 1-1: config 0 descriptor?? [ 1205.522837][ T5817] Bluetooth: hci0: command 0x0c1a tx timeout [ 1205.522880][ T5817] Bluetooth: hci4: command 0x0c1a tx timeout [ 1205.522912][ T5817] Bluetooth: hci2: command 0x0c1a tx timeout [ 1205.522995][T20032] Bluetooth: hci3: command 0x0406 tx timeout [ 1205.523080][ T5805] Bluetooth: hci5: command 0x0419 tx timeout [ 1205.631909][ T5858] usbhid 1-1:0.0: can't add hid device: -71 [ 1205.632046][ T5858] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1205.663334][ T5858] usb 1-1: USB disconnect, device number 40 [ 1205.707502][T26899] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3314'. [ 1210.296774][T26903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3313'. [ 1210.415251][T26917] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1211.005343][T26911] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1211.005552][T26911] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1211.005756][T26911] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1211.005944][T26911] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1211.006138][T26911] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1211.916170][ T7391] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1212.132572][ T7391] usb 5-1: Using ep0 maxpacket: 8 [ 1212.133419][ T7391] usb 5-1: too many configurations: 34, using maximum allowed: 8 [ 1212.135134][ T7391] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1212.135159][ T7391] usb 5-1: can't read configurations, error -61 [ 1212.262557][ T7391] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1212.352471][ T5858] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 1212.412450][ T7391] usb 5-1: Using ep0 maxpacket: 8 [ 1212.413389][ T7391] usb 5-1: too many configurations: 34, using maximum allowed: 8 [ 1212.415566][ T7391] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1212.415602][ T7391] usb 5-1: can't read configurations, error -61 [ 1212.416239][ T7391] usb usb5-port1: attempt power cycle [ 1212.534374][ T5858] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 1212.534404][ T5858] usb 1-1: config 0 has no interface number 0 [ 1212.534453][ T5858] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1212.534472][ T5858] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1212.534501][ T5858] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1212.534518][ T5858] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1212.539535][ T5858] usb 1-1: config 0 descriptor?? [ 1212.759383][ T7391] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1213.160141][T26956] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3323'. [ 1213.230200][ T5805] Bluetooth: hci3: command 0x0406 tx timeout [ 1213.230245][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 1213.230277][ T5805] Bluetooth: hci4: command 0x0c1a tx timeout [ 1213.230309][ T5805] Bluetooth: hci2: command 0x0c1a tx timeout [ 1213.230341][ T5805] Bluetooth: hci5: command 0x0419 tx timeout [ 1213.237137][ T7391] usb 5-1: Using ep0 maxpacket: 8 [ 1213.238097][ T7391] usb 5-1: too many configurations: 34, using maximum allowed: 8 [ 1213.240343][ T7391] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1213.240381][ T7391] usb 5-1: can't read configurations, error -61 [ 1213.357303][ T5858] usbhid 1-1:0.1: can't add hid device: -71 [ 1213.357430][ T5858] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 1213.394519][ T5858] usb 1-1: USB disconnect, device number 41 [ 1213.452528][ T7391] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1213.473084][ T7391] usb 5-1: Using ep0 maxpacket: 8 [ 1213.473644][ T7391] usb 5-1: too many configurations: 34, using maximum allowed: 8 [ 1213.475156][ T7391] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1213.475180][ T7391] usb 5-1: can't read configurations, error -61 [ 1213.475581][ T7391] usb usb5-port1: unable to enumerate USB device [ 1214.790006][T26985] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.791750][T26985] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.829922][T26985] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.830101][T26985] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1214.830482][T26985] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.830750][T26985] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1214.886228][T26985] team0: Failed to send options change via netlink (err -105) [ 1214.886255][T26985] team0: Port device bridge0 added [ 1218.367515][ T5805] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1218.369228][ T5805] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1218.370911][ T5805] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1218.403190][ T5805] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1218.404576][ T5805] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1218.615237][T27041] sg_write: data in/out 426972/130 bytes for SCSI command 0x0-- guessing data in; [ 1218.615237][T27041] program syz.4.3346 not setting count and/or reply_len properly [ 1218.742617][T27046] netlink: 'syz.0.3345': attribute type 2 has an invalid length. [ 1218.742642][T27046] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3345'. [ 1218.872684][T14217] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1219.022490][T14217] usb 5-1: Using ep0 maxpacket: 32 [ 1219.026796][T14217] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 1219.026826][T14217] usb 5-1: config 0 has no interface number 0 [ 1219.026872][T14217] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1219.026903][T14217] usb 5-1: config 0 interface 85 has no altsetting 0 [ 1219.070141][T14217] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1219.070169][T14217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1219.070262][T14217] usb 5-1: Product: syz [ 1219.070278][T14217] usb 5-1: Manufacturer: syz [ 1219.070293][T14217] usb 5-1: SerialNumber: syz [ 1219.107933][T14217] usb 5-1: config 0 descriptor?? [ 1219.392973][T27023] chnl_net:caif_netlink_parms(): no params data found [ 1219.725813][T14217] appletouch 5-1:0.85: Geyser mode initialized. [ 1219.740972][T14217] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input103 [ 1219.759572][T27023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1219.771014][T27023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1219.771440][T27023] bridge_slave_0: entered allmulticast mode [ 1219.783264][T27023] bridge_slave_0: entered promiscuous mode [ 1219.794433][T27023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1219.794567][T27023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1219.794738][T27023] bridge_slave_1: entered allmulticast mode [ 1219.803495][T27023] bridge_slave_1: entered promiscuous mode [ 1219.947656][ T7391] usb 5-1: USB disconnect, device number 94 [ 1219.981901][T27023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1219.997608][T27023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1220.059151][T27023] team0: Port device team_slave_0 added [ 1220.069020][T27023] team0: Port device team_slave_1 added [ 1220.230641][ T7391] appletouch 5-1:0.85: input: appletouch disconnected [ 1220.252960][T27023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1220.252979][T27023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.253011][T27023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1220.255939][T27023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1220.255955][T27023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1220.255986][T27023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1220.485289][T20032] Bluetooth: hci1: command tx timeout [ 1220.599828][T27023] hsr_slave_0: entered promiscuous mode [ 1220.618816][T27023] hsr_slave_1: entered promiscuous mode [ 1220.619760][T27023] debugfs: 'hsr0' already exists in 'hsr' [ 1220.619787][T27023] Cannot create hsr debugfs directory [ 1220.842427][ T7259] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 1220.999245][ T7259] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1220.999280][ T7259] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1220.999304][ T7259] usb 1-1: Product: syz [ 1220.999321][ T7259] usb 1-1: Manufacturer: syz [ 1220.999349][ T7259] usb 1-1: SerialNumber: syz [ 1221.529054][ T7259] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1221.529118][ T7259] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1221.652599][ T7391] usb 5-1: new high-speed USB device number 95 using dummy_hcd [ 1221.802546][ T7391] usb 5-1: Using ep0 maxpacket: 32 [ 1221.805317][ T7391] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1221.805349][ T7391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1221.880171][ T7391] usb 5-1: config 0 descriptor?? [ 1221.954592][T27023] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1222.018382][T27023] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1222.073056][T27023] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1222.122730][ T7391] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1222.429052][ T7391] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1222.439589][ T7391] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1222.439715][ T7391] usb 5-1: media controller created [ 1223.296002][T20032] Bluetooth: hci1: command tx timeout [ 1223.705046][ T7391] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1224.010332][T27023] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1224.256435][ T7259] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 1224.256496][ T7259] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1224.258152][ T7259] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1224.308310][ T7259] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1224.387283][ T7259] usb 1-1: USB disconnect, device number 42 [ 1224.529775][ T7391] az6027: usb out operation failed. (-71) [ 1224.531141][ T7391] az6027: usb out operation failed. (-71) [ 1224.531159][ T7391] stb0899_attach: Driver disabled by Kconfig [ 1224.531170][ T7391] az6027: no front-end attached [ 1224.531170][ T7391] [ 1224.531618][ T7391] az6027: usb out operation failed. (-71) [ 1224.531635][ T7391] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1224.585738][ T7391] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input104 [ 1224.589938][ T7391] dvb-usb: schedule remote query interval to 400 msecs. [ 1224.589961][ T7391] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1224.623403][ T7391] usb 5-1: USB disconnect, device number 95 [ 1224.753859][ T7391] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1225.347636][T27023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1225.363000][T20032] Bluetooth: hci1: command tx timeout [ 1225.839656][T27023] 8021q: adding VLAN 0 to HW filter on device team0 [ 1225.869793][ T7884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1225.869926][ T7884] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1225.891302][ T7884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1225.891566][ T7884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1226.511187][T27443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3371'. [ 1226.775901][T27023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1226.962622][ T5873] usb 5-1: new high-speed USB device number 96 using dummy_hcd [ 1227.117760][ T5873] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1227.117799][ T5873] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1227.117815][ T5873] usb 5-1: Product: syz [ 1227.117826][ T5873] usb 5-1: Manufacturer: syz [ 1227.117838][ T5873] usb 5-1: SerialNumber: syz [ 1227.292004][T27023] veth0_vlan: entered promiscuous mode [ 1227.335892][T27023] veth1_vlan: entered promiscuous mode [ 1227.492500][T20032] Bluetooth: hci1: command tx timeout [ 1227.604182][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1227.604228][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1227.638238][T27023] veth0_macvtap: entered promiscuous mode [ 1227.677826][T27023] veth1_macvtap: entered promiscuous mode [ 1227.713221][T27023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1227.742201][T27023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.779512][ T7884] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.798173][ T7884] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.806060][ T7884] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.806108][ T7884] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.904065][ T820] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 1228.094376][ T820] usb 1-1: Using ep0 maxpacket: 32 [ 1228.099890][ T820] usb 1-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1228.099929][ T820] usb 1-1: config 0 interface 0 has no altsetting 0 [ 1228.099966][ T820] usb 1-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1228.099992][ T820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.155721][ T820] usb 1-1: config 0 descriptor?? [ 1228.325764][ T3596] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.325788][ T3596] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.469552][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 1228.469615][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1228.470497][ T5873] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1228.525691][ T3525] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.525720][ T3525] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.527263][ T5873] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1228.560987][ T5873] usb 5-1: USB disconnect, device number 96 [ 1228.615330][T27472] tipc: Started in network mode [ 1228.615359][T27472] tipc: Node identity ac14140f, cluster identity 4711 [ 1228.616963][T27472] tipc: New replicast peer: 255.255.255.255 [ 1228.645023][T27472] tipc: Enabled bearer , priority 10 [ 1228.652037][T27472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3377'. [ 1228.652127][T27472] tipc: Disabling bearer [ 1228.746229][T27472] fuse: Unknown parameter 'user_id0000000000000000000000000000000000000000' [ 1228.793950][T27472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.798288][T27472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.846791][ T820] usbhid 1-1:0.0: can't add hid device: -71 [ 1228.846923][ T820] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1228.904793][ T820] usb 1-1: USB disconnect, device number 43 [ 1229.225741][T27518] afs: Bad value for 'source' [ 1229.734670][T27536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3386'. [ 1230.174288][ T7391] usb 5-1: new high-speed USB device number 97 using dummy_hcd [ 1230.352582][ T7391] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1230.352664][ T7391] usb 5-1: config 0 has no interface number 0 [ 1230.352809][ T7391] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.352887][ T7391] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1230.352978][ T7391] usb 5-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1230.353065][ T7391] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.485011][ T7391] usb 5-1: config 0 descriptor?? [ 1232.724572][ T7391] prodikeys 0003:041E:2801.0061: unknown main item tag 0x0 [ 1232.724613][ T7391] prodikeys 0003:041E:2801.0061: unknown main item tag 0x0 [ 1232.724645][ T7391] prodikeys 0003:041E:2801.0061: unknown main item tag 0x0 [ 1232.724676][ T7391] prodikeys 0003:041E:2801.0061: unknown main item tag 0x0 [ 1232.724707][ T7391] prodikeys 0003:041E:2801.0061: unknown main item tag 0x0 [ 1232.724737][ T7391] prodikeys 0003:041E:2801.0061: unknown main item tag 0x0 [ 1232.724767][ T7391] prodikeys 0003:041E:2801.0061: unknown main item tag 0x0 [ 1232.790353][ T7391] prodikeys 0003:041E:2801.0061: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.4-1/input1 [ 1232.791736][ T7391] hid_prodikeys: hid-prodikeys: failed to find output report [ 1232.791736][ T7391] [ 1232.983181][ T7391] usb 5-1: USB disconnect, device number 97 [ 1233.107679][T27553] fido_id[27553]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 1233.198210][T27571] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3389'. [ 1233.997879][T27578] futex_wake_op: syz.5.3391 tries to shift op by 144; fix this program [ 1234.005632][T27578] misc userio: The device must be registered before sending interrupts [ 1234.317103][T27585] 9p: Could not find request transport: fd0x0000000000000003 [ 1234.922711][T27593] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3398'. [ 1239.573501][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.573575][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.766111][T27602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3401'. [ 1241.342537][T14217] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 1241.447883][T27637] 9p: Could not find request transport: fd0x0000000000000003 [ 1241.519341][T14217] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1241.519379][T14217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1241.519403][T14217] usb 1-1: Product: syz [ 1241.519419][T14217] usb 1-1: Manufacturer: syz [ 1241.519434][T14217] usb 1-1: SerialNumber: syz [ 1241.739267][T27647] afs: Bad value for 'source' [ 1242.014663][T14217] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1242.014738][T14217] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1243.349835][ T820] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 1243.532518][ T820] usb 6-1: Using ep0 maxpacket: 32 [ 1243.537729][ T820] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1243.537761][ T820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1243.557851][ T820] usb 6-1: config 0 descriptor?? [ 1243.654852][T14217] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 1243.654979][T14217] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1243.656426][T14217] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1244.627746][T14217] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71 [ 1244.642028][ T820] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1244.695234][T14217] usb 1-1: USB disconnect, device number 44 [ 1244.702485][ T820] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1244.718630][ T820] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1244.718687][ T820] usb 6-1: media controller created [ 1244.779116][ T820] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1246.717929][T27702] 9p: Could not find request transport: fd0x0000000000000003 [ 1246.837360][ T820] az6027: usb out operation failed. (-71) [ 1246.837788][ T820] az6027: usb out operation failed. (-71) [ 1246.837804][ T820] stb0899_attach: Driver disabled by Kconfig [ 1246.837816][ T820] az6027: no front-end attached [ 1246.837816][ T820] [ 1246.838200][ T820] az6027: usb out operation failed. (-71) [ 1246.838216][ T820] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1246.888261][ T820] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input105 [ 1246.921351][ T820] dvb-usb: schedule remote query interval to 400 msecs. [ 1246.921384][ T820] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1246.941629][ T820] usb 6-1: USB disconnect, device number 2 [ 1247.022504][ T31] usb 5-1: new high-speed USB device number 98 using dummy_hcd [ 1247.182674][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 1247.186915][ T31] usb 5-1: too many configurations: 34, using maximum allowed: 8 [ 1247.205795][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1247.206060][ T31] usb 5-1: can't read configurations, error -61 [ 1247.681845][ T820] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1247.682485][ T31] usb 5-1: new high-speed USB device number 99 using dummy_hcd [ 1247.832470][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 1247.833535][ T31] usb 5-1: too many configurations: 34, using maximum allowed: 8 [ 1247.835634][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1247.835670][ T31] usb 5-1: can't read configurations, error -61 [ 1247.836375][ T31] usb usb5-port1: attempt power cycle [ 1248.042663][ T820] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 1248.182493][ T31] usb 5-1: new high-speed USB device number 100 using dummy_hcd [ 1248.200193][ T820] usb 6-1: Using ep0 maxpacket: 16 [ 1248.212608][ T820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1248.212646][ T820] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1248.212689][ T820] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1248.212718][ T820] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1248.217907][ T31] usb 5-1: Using ep0 maxpacket: 8 [ 1248.218756][ T31] usb 5-1: too many configurations: 34, using maximum allowed: 8 [ 1248.220550][ T820] usb 6-1: config 0 descriptor?? [ 1248.221027][ T31] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1248.221062][ T31] usb 5-1: can't read configurations, error -61 [ 1248.342458][ T31] usb 5-1: new high-speed USB device number 101 using dummy_hcd [ 1248.491659][ T31] usb 5-1: device descriptor read/8, error -71 [ 1248.599570][ T31] usb usb5-port1: unable to enumerate USB device [ 1249.598585][ T820] corsair 0003:1B1C:1B02.0062: unknown main item tag 0x0 [ 1249.598625][ T820] corsair 0003:1B1C:1B02.0062: unknown main item tag 0x0 [ 1249.598653][ T820] corsair 0003:1B1C:1B02.0062: unknown main item tag 0x0 [ 1249.598682][ T820] corsair 0003:1B1C:1B02.0062: unknown main item tag 0x0 [ 1249.632593][T12999] usb 5-1: new high-speed USB device number 102 using dummy_hcd [ 1250.459756][ T820] corsair 0003:1B1C:1B02.0062: unknown main item tag 0x0 [ 1250.472609][ T820] corsair 0003:1B1C:1B02.0062: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.5-1/input0 [ 1250.504242][T12999] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1250.504362][T12999] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.504386][T12999] usb 5-1: Product: syz [ 1250.504403][T12999] usb 5-1: Manufacturer: syz [ 1250.504419][T12999] usb 5-1: SerialNumber: syz [ 1250.622484][ T820] corsair 0003:1B1C:1B02.0062: Read invalid backlight brightness: 79. [ 1250.845367][T27792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3435'. [ 1251.019708][ T5858] usb 6-1: USB disconnect, device number 3 [ 1251.094416][T12999] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1251.094485][T12999] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1251.130366][T27804] netlink: 'syz.0.3436': attribute type 39 has an invalid length. [ 1251.946813][T12999] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 1251.946875][T12999] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1251.947712][T12999] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1252.007566][T12999] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1252.041944][T12999] usb 5-1: USB disconnect, device number 102 [ 1252.229162][T27822] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3439'. [ 1252.255844][T27822] erspan0: entered promiscuous mode [ 1252.258903][T27822] erspan0: left promiscuous mode [ 1252.532912][T27852] tipc: New replicast peer: 255.255.255.255 [ 1252.533519][T27852] tipc: Enabled bearer , priority 10 [ 1252.534433][T27852] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3445'. [ 1252.534455][T27852] tipc: Disabling bearer [ 1252.535335][T27854] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3446'. [ 1252.539700][T27852] fuse: Unknown parameter '0x0000000000000006' [ 1252.763139][T27865] FAULT_INJECTION: forcing a failure. [ 1252.763139][T27865] name failslab, interval 1, probability 0, space 0, times 0 [ 1252.763174][T27865] CPU: 1 UID: 0 PID: 27865 Comm: syz.4.3449 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1252.763203][T27865] Tainted: [L]=SOFTLOCKUP [ 1252.763211][T27865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1252.763222][T27865] Call Trace: [ 1252.763230][T27865] [ 1252.763239][T27865] dump_stack_lvl+0xe8/0x150 [ 1252.763273][T27865] should_fail_ex+0x46b/0x600 [ 1252.763305][T27865] should_failslab+0xa8/0x100 [ 1252.763326][T27865] __kmalloc_noprof+0xdf/0x7b0 [ 1252.763344][T27865] ? bpf_test_init+0x9f/0x150 [ 1252.763368][T27865] ? kstrtouint+0x6e/0xe0 [ 1252.763394][T27865] bpf_test_init+0x9f/0x150 [ 1252.763424][T27865] bpf_prog_test_run_xdp+0x529/0x1160 [ 1252.763465][T27865] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1252.763499][T27865] ? __fget_files+0x2a/0x420 [ 1252.763528][T27865] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1252.763558][T27865] bpf_prog_test_run+0x2cd/0x340 [ 1252.763588][T27865] __sys_bpf+0x643/0x950 [ 1252.763616][T27865] ? __pfx___sys_bpf+0x10/0x10 [ 1252.763638][T27865] ? rt_mutex_slowunlock+0x1cb/0x300 [ 1252.763685][T27865] ? ksys_write+0x248/0x270 [ 1252.763726][T27865] ? __pfx_ksys_write+0x10/0x10 [ 1252.763764][T27865] __x64_sys_bpf+0x7c/0x90 [ 1252.763788][T27865] do_syscall_64+0x14d/0xf80 [ 1252.763810][T27865] ? trace_irq_disable+0x3b/0x150 [ 1252.763833][T27865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.763852][T27865] ? clear_bhb_loop+0x40/0x90 [ 1252.763874][T27865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1252.763891][T27865] RIP: 0033:0x7fb77bcac819 [ 1252.763909][T27865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1252.763925][T27865] RSP: 002b:00007fb779f06028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1252.763943][T27865] RAX: ffffffffffffffda RBX: 00007fb77bf25fa0 RCX: 00007fb77bcac819 [ 1252.763957][T27865] RDX: 0000000000000050 RSI: 0000200000000640 RDI: 000000000000000a [ 1252.763969][T27865] RBP: 00007fb779f06090 R08: 0000000000000000 R09: 0000000000000000 [ 1252.763980][T27865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1252.763991][T27865] R13: 00007fb77bf26038 R14: 00007fb77bf25fa0 R15: 00007ffd72523cf8 [ 1252.764020][T27865] [ 1252.872440][ T820] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 1253.112461][ T820] usb 1-1: Using ep0 maxpacket: 32 [ 1253.116369][ T820] usb 1-1: config 0 has an invalid interface number: 119 but max is 0 [ 1253.116400][ T820] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1253.116422][ T820] usb 1-1: config 0 has no interface number 0 [ 1253.116477][ T820] usb 1-1: config 0 interface 119 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1253.118906][ T820] usb 1-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 1253.118938][ T820] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.118960][ T820] usb 1-1: Product: syz [ 1253.118976][ T820] usb 1-1: Manufacturer: syz [ 1253.118992][ T820] usb 1-1: SerialNumber: syz [ 1253.203719][ T820] usb 1-1: config 0 descriptor?? [ 1253.219359][ T820] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.119/input/input106 [ 1253.558583][ T5858] usb 1-1: USB disconnect, device number 45 [ 1254.851635][T21667] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 1254.851724][T21667] dvb_usb_az6027 3-1:0.0: probe with driver dvb_usb_az6027 failed with error -110 [ 1254.872386][T14217] usb 5-1: new high-speed USB device number 103 using dummy_hcd [ 1254.881709][T21667] usb 3-1: USB disconnect, device number 43 [ 1255.062558][T14217] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1255.062594][T14217] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.062616][T14217] usb 5-1: Product: syz [ 1255.062633][T14217] usb 5-1: Manufacturer: syz [ 1255.062649][T14217] usb 5-1: SerialNumber: syz [ 1255.232491][ T820] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1255.292434][T21667] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1255.399116][ T820] usb 6-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1255.399232][ T820] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1255.399256][ T820] usb 6-1: Product: syz [ 1255.399273][ T820] usb 6-1: Manufacturer: syz [ 1255.399288][ T820] usb 6-1: SerialNumber: syz [ 1255.447361][ T820] r8152-cfgselector 6-1: Unknown version 0x0000 [ 1255.447389][ T820] r8152-cfgselector 6-1: config 0 descriptor?? [ 1255.497464][T14217] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1255.497587][T14217] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1255.642483][T21667] usb 3-1: device not accepting address 44, error -71 [ 1255.660184][T27912] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1255.661454][T27912] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1256.896965][T14217] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 1256.897027][T14217] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1256.897968][T14217] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1257.015821][T27912] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3457'. [ 1257.157442][T14217] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -71 [ 1257.197319][T14217] usb 5-1: USB disconnect, device number 103 [ 1257.323073][T27964] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 1257.555171][ T31] r8152-cfgselector 6-1: USB disconnect, device number 4 [ 1257.632646][T21667] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1257.962473][T21667] usb 3-1: Using ep0 maxpacket: 32 [ 1257.964858][T21667] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1257.964895][T21667] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1257.964930][T21667] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1257.964954][T21667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.991887][T21667] usb 3-1: config 0 descriptor?? [ 1259.277362][T27959] tipc: New replicast peer: 255.255.255.255 [ 1259.278624][T27959] tipc: Enabled bearer , priority 10 [ 1259.279354][T27959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3463'. [ 1259.279376][T27959] tipc: Disabling bearer [ 1259.302456][T27959] fuse: Unknown parameter '0x0000000000000007' [ 1259.430722][T27959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1259.445369][T27959] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1259.469279][T21667] usbhid 3-1:0.0: can't add hid device: -71 [ 1259.469420][T21667] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1259.507032][T21667] usb 3-1: USB disconnect, device number 45 [ 1259.852491][ T820] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 1260.004038][ T820] usb 1-1: Using ep0 maxpacket: 16 [ 1260.006447][ T820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.009080][ T820] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1260.009110][ T820] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1260.009161][ T820] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1260.009187][ T820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1260.025397][ T820] usb 1-1: config 0 descriptor?? [ 1260.142710][T14217] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1260.447774][T14217] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1260.447804][T14217] usb 6-1: config 0 has no interface number 0 [ 1260.447985][T14217] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1260.448072][T14217] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1260.448115][T14217] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1260.448142][T14217] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.307307][T28016] FAULT_INJECTION: forcing a failure. [ 1262.307307][T28016] name failslab, interval 1, probability 0, space 0, times 0 [ 1262.307348][T28016] CPU: 1 UID: 0 PID: 28016 Comm: syz.2.3470 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1262.307381][T28016] Tainted: [L]=SOFTLOCKUP [ 1262.307390][T28016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1262.307404][T28016] Call Trace: [ 1262.307415][T28016] [ 1262.307426][T28016] dump_stack_lvl+0xe8/0x150 [ 1262.307464][T28016] should_fail_ex+0x46b/0x600 [ 1262.307509][T28016] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1262.307543][T28016] should_failslab+0xa8/0x100 [ 1262.307569][T28016] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1262.307600][T28016] kmem_cache_alloc_lru_noprof+0x8b/0x680 [ 1262.307635][T28016] ? __lock_acquire+0x6b5/0x2cf0 [ 1262.307656][T28016] ? sock_alloc_inode+0x28/0xc0 [ 1262.307694][T28016] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1262.307725][T28016] sock_alloc_inode+0x28/0xc0 [ 1262.307759][T28016] alloc_inode+0x6a/0x1b0 [ 1262.307789][T28016] __sock_create+0x12d/0x9d0 [ 1262.307835][T28016] mptcp_subflow_create_socket+0xfb/0x800 [ 1262.307878][T28016] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1262.307911][T28016] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1262.307939][T28016] ? lockdep_hardirqs_on+0x7a/0x110 [ 1262.307966][T28016] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1262.307997][T28016] __mptcp_nmpc_sk+0x14e/0x790 [ 1262.308032][T28016] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1262.308074][T28016] mptcp_sendmsg_fastopen+0xd4/0x580 [ 1262.308114][T28016] mptcp_sendmsg+0x17af/0x19d0 [ 1262.308145][T28016] ? smack_socket_sendmsg+0x48c/0x590 [ 1262.308178][T28016] ? __pfx_smack_socket_sendmsg+0x10/0x10 [ 1262.308212][T28016] ? __lock_acquire+0x6b5/0x2cf0 [ 1262.308240][T28016] ? __lock_acquire+0x6b5/0x2cf0 [ 1262.308269][T28016] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 1262.308296][T28016] ? __kernel_text_address+0xd/0x30 [ 1262.308322][T28016] ? sock_rps_record_flow+0x19/0x400 [ 1262.308351][T28016] ? inet_sendmsg+0x2f4/0x370 [ 1262.308380][T28016] ____sys_sendmsg+0x7da/0x9c0 [ 1262.308414][T28016] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1262.308453][T28016] ? import_iovec+0x73/0xa0 [ 1262.308482][T28016] ___sys_sendmsg+0x2a5/0x360 [ 1262.308523][T28016] ? __pfx____sys_sendmsg+0x10/0x10 [ 1262.308594][T28016] ? __fget_files+0x2a/0x420 [ 1262.308623][T28016] ? __fget_files+0x3a6/0x420 [ 1262.308665][T28016] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1262.308704][T28016] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1262.308743][T28016] ? __pfx_ksys_write+0x10/0x10 [ 1262.308792][T28016] do_syscall_64+0x14d/0xf80 [ 1262.308818][T28016] ? trace_irq_disable+0x3b/0x150 [ 1262.308846][T28016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.308871][T28016] ? clear_bhb_loop+0x40/0x90 [ 1262.308900][T28016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.308924][T28016] RIP: 0033:0x7f557a4cc819 [ 1262.308945][T28016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1262.308965][T28016] RSP: 002b:00007f55786dc028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1262.308990][T28016] RAX: ffffffffffffffda RBX: 00007f557a746180 RCX: 00007f557a4cc819 [ 1262.309008][T28016] RDX: 0000000030004081 RSI: 0000200000000940 RDI: 0000000000000006 [ 1262.309023][T28016] RBP: 00007f55786dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1262.309038][T28016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1262.309052][T28016] R13: 00007f557a746218 R14: 00007f557a746180 R15: 00007ffc6ec1e898 [ 1262.309090][T28016] [ 1262.309102][T28016] socket: no more sockets [ 1263.783129][ T820] usbhid 1-1:0.0: can't add hid device: -71 [ 1263.783276][ T820] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1263.880779][T14217] usb 6-1: config 0 descriptor?? [ 1263.891362][ T820] usb 1-1: USB disconnect, device number 46 [ 1264.103279][T28030] kAFS: No cell specified [ 1265.596400][T14217] usbhid 6-1:0.1: can't add hid device: -71 [ 1265.596593][T14217] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 1265.672902][T14217] usb 6-1: USB disconnect, device number 5 [ 1265.690595][T28037] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3473'. [ 1266.352622][T28054] netlink: 'syz.5.3475': attribute type 39 has an invalid length. [ 1266.983002][T28061] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1266.983219][T28061] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1266.983420][T28061] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1266.983603][T28061] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1266.983778][T28061] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1266.983875][T28061] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1267.130403][T28061] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1267.244991][T28084] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3481'. [ 1267.652760][ T10] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 1267.828587][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 1267.831014][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1267.831067][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1267.831108][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1267.831200][ T10] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1267.831225][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.966221][ T10] usb 1-1: config 0 descriptor?? [ 1269.114222][ T5805] Bluetooth: hci1: command 0x0c1a tx timeout [ 1269.117544][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 1269.119385][ T5805] Bluetooth: hci4: command 0x0c1a tx timeout [ 1269.119543][ T5805] Bluetooth: hci2: command 0x0c1a tx timeout [ 1269.119695][ T5805] Bluetooth: hci5: command 0x0419 tx timeout [ 1269.533999][ T10] usbhid 1-1:0.0: can't add hid device: -71 [ 1269.534123][ T10] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1269.572485][ T10] usb 1-1: USB disconnect, device number 47 [ 1270.052973][T21667] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1270.202538][T21667] usb 3-1: Using ep0 maxpacket: 32 [ 1270.206030][T21667] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.206068][T21667] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1270.206105][T21667] usb 3-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1270.206131][T21667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.259530][T21667] usb 3-1: config 0 descriptor?? [ 1270.371967][T28139] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1270.403066][T28139] bond1: (slave lo): Enslaving as an active interface with an up link [ 1270.412034][T28139] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1270.701080][T28117] tipc: New replicast peer: 255.255.255.255 [ 1270.701780][T28117] tipc: Enabled bearer , priority 10 [ 1270.720104][T28117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3488'. [ 1270.720130][T28117] tipc: Disabling bearer [ 1270.751848][T28117] fuse: Unknown parameter '0x0000000000000007' [ 1270.803289][T28117] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.803948][T28117] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.846882][T21667] usbhid 3-1:0.0: can't add hid device: -71 [ 1270.847012][T21667] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1270.851327][T21667] usb 3-1: USB disconnect, device number 46 [ 1271.203212][T20032] Bluetooth: hci1: command 0x0c1a tx timeout [ 1271.888434][T28208] FAULT_INJECTION: forcing a failure. [ 1271.888434][T28208] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.888477][T28208] CPU: 1 UID: 0 PID: 28208 Comm: syz.2.3501 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1271.888533][T28208] Tainted: [L]=SOFTLOCKUP [ 1271.888542][T28208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1271.888557][T28208] Call Trace: [ 1271.888566][T28208] [ 1271.888577][T28208] dump_stack_lvl+0xe8/0x150 [ 1271.888616][T28208] should_fail_ex+0x46b/0x600 [ 1271.888657][T28208] should_failslab+0xa8/0x100 [ 1271.888685][T28208] __kmalloc_noprof+0xdf/0x7b0 [ 1271.888707][T28208] ? kfree+0x4d/0x6c0 [ 1271.888738][T28208] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1271.888774][T28208] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1271.888817][T28208] ? tomoyo_path_number_perm+0x219/0x630 [ 1271.888843][T28208] tomoyo_path_number_perm+0x246/0x630 [ 1271.888872][T28208] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1271.888908][T28208] ? __lock_acquire+0x6b5/0x2cf0 [ 1271.888971][T28208] ? __fget_files+0x2a/0x420 [ 1271.889006][T28208] ? __fget_files+0x2a/0x420 [ 1271.889035][T28208] ? __fget_files+0x3a6/0x420 [ 1271.889065][T28208] ? __fget_files+0x2a/0x420 [ 1271.889101][T28208] security_file_ioctl+0xc3/0x2a0 [ 1271.889130][T28208] __se_sys_ioctl+0x47/0x170 [ 1271.889157][T28208] do_syscall_64+0x14d/0xf80 [ 1271.889182][T28208] ? trace_irq_disable+0x3b/0x150 [ 1271.889208][T28208] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.889233][T28208] ? clear_bhb_loop+0x40/0x90 [ 1271.889262][T28208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.889286][T28208] RIP: 0033:0x7f557a4cc819 [ 1271.889308][T28208] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1271.889328][T28208] RSP: 002b:00007f557871e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1271.889353][T28208] RAX: ffffffffffffffda RBX: 00007f557a745fa0 RCX: 00007f557a4cc819 [ 1271.889371][T28208] RDX: 0000000000000000 RSI: 000000000000b101 RDI: 0000000000000003 [ 1271.889386][T28208] RBP: 00007f557871e090 R08: 0000000000000000 R09: 0000000000000000 [ 1271.889401][T28208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1271.889416][T28208] R13: 00007f557a746038 R14: 00007f557a745fa0 R15: 00007ffc6ec1e898 [ 1271.889454][T28208] [ 1271.889463][T28208] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1272.384430][T28222] 9pnet_fd: Insufficient options for proto=fd [ 1272.530345][T14217] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1273.112435][T14217] usb 3-1: Using ep0 maxpacket: 8 [ 1273.115851][T14217] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1273.115874][T14217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1273.124807][T14217] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1273.124822][T14217] pvrusb2: ********** [ 1273.124827][T14217] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1273.124837][T14217] pvrusb2: Important functionality might not be entirely working. [ 1273.124844][T14217] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1273.124853][T14217] pvrusb2: ********** [ 1273.282541][T20032] Bluetooth: hci1: command 0x0c1a tx timeout [ 1274.632623][T28237] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3507'. [ 1274.806943][ T2371] pvrusb2: Invalid write control endpoint [ 1274.927165][ T2371] pvrusb2: Invalid write control endpoint [ 1274.927178][ T2371] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1274.927186][ T2371] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1274.927192][ T2371] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1274.927200][ T2371] pvrusb2: Device being rendered inoperable [ 1274.965082][ T2371] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1274.965295][ T2371] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1275.041505][T28215] pvrusb2: Attempted to execute control transfer when device not ok [ 1275.137800][ T31] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 1275.282640][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 1275.283563][ T31] usb 6-1: too many configurations: 34, using maximum allowed: 8 [ 1275.286738][ T31] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1275.286776][ T31] usb 6-1: can't read configurations, error -61 [ 1275.402825][ T2371] pvrusb2: Attached sub-driver cx25840 [ 1275.402842][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1275.402855][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1275.412531][ T31] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1275.562509][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 1275.563474][ T31] usb 6-1: too many configurations: 34, using maximum allowed: 8 [ 1275.565727][ T31] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1275.565764][ T31] usb 6-1: can't read configurations, error -61 [ 1275.566384][ T31] usb usb6-port1: attempt power cycle [ 1276.096480][ T31] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 1276.205032][ T31] usb 6-1: Using ep0 maxpacket: 8 [ 1276.219563][ T31] usb 6-1: too many configurations: 34, using maximum allowed: 8 [ 1276.231712][ T31] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1276.231752][ T31] usb 6-1: can't read configurations, error -61 [ 1276.754870][T14217] usb 3-1: USB disconnect, device number 47 [ 1276.926026][ T31] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1277.538486][ T31] usb 6-1: device not accepting address 9, error -71 [ 1277.538952][ T31] usb usb6-port1: unable to enumerate USB device [ 1279.073093][T28292] 9pnet_fd: Insufficient options for proto=fd [ 1279.632912][ T31] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 1279.745060][T28312] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3521'. [ 1280.436659][T12999] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1280.692543][T21667] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1280.692767][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 1280.694187][T12999] usb 3-1: Using ep0 maxpacket: 32 [ 1280.695994][ T31] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1280.696016][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.699174][T12999] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1280.699195][T12999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.753755][ T31] usb 1-1: config 0 descriptor?? [ 1280.768302][T12999] usb 3-1: config 0 descriptor?? [ 1280.842496][T21667] usb 6-1: Using ep0 maxpacket: 8 [ 1280.843336][T21667] usb 6-1: too many configurations: 34, using maximum allowed: 8 [ 1280.845059][T21667] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1280.845084][T21667] usb 6-1: can't read configurations, error -61 [ 1280.932499][ T5858] usb 5-1: new high-speed USB device number 104 using dummy_hcd [ 1280.960007][ T31] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1280.972521][T21667] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1281.003650][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1281.003914][T12999] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1281.005752][ T31] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1281.005813][ T31] usb 1-1: media controller created [ 1281.039713][T12999] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1281.073922][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1281.079972][T12999] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1281.080045][T12999] usb 3-1: media controller created [ 1281.092578][ T5858] usb 5-1: Using ep0 maxpacket: 8 [ 1281.105971][ T5858] usb 5-1: config 127 has an invalid interface number: 171 but max is 1 [ 1281.106051][ T5858] usb 5-1: config 127 has an invalid descriptor of length 0, skipping remainder of the config [ 1281.106110][ T5858] usb 5-1: config 127 has 1 interface, different from the descriptor's value: 2 [ 1281.106176][ T5858] usb 5-1: config 127 has no interface number 0 [ 1281.106330][ T5858] usb 5-1: config 127 interface 171 has no altsetting 0 [ 1281.122515][T21667] usb 6-1: Using ep0 maxpacket: 8 [ 1281.126201][T21667] usb 6-1: too many configurations: 34, using maximum allowed: 8 [ 1281.138743][T21667] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 1281.138982][T21667] usb 6-1: can't read configurations, error -61 [ 1281.157138][T21667] usb usb6-port1: attempt power cycle [ 1281.205438][ T5858] usb 5-1: New USB device found, idVendor=04e2, idProduct=1414, bcdDevice=c5.b9 [ 1281.205469][ T5858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1281.205485][ T5858] usb 5-1: Product: syz [ 1281.205496][ T5858] usb 5-1: Manufacturer: syz [ 1281.205509][ T5858] usb 5-1: SerialNumber: syz [ 1282.340535][T21667] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1282.417185][T21667] usb 6-1: device descriptor read/8, error -71 [ 1282.561739][T12999] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1282.774779][ T5858] usb 5-1: USB disconnect, device number 104 [ 1283.681883][ T31] az6027: usb out operation failed. (-71) [ 1283.682512][ T31] az6027: usb out operation failed. (-71) [ 1283.682527][ T31] stb0899_attach: Driver disabled by Kconfig [ 1283.682538][ T31] az6027: no front-end attached [ 1283.682538][ T31] [ 1283.682962][ T31] az6027: usb out operation failed. (-71) [ 1283.682975][ T31] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1283.884977][ T31] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input107 [ 1283.909644][ T31] dvb-usb: schedule remote query interval to 400 msecs. [ 1283.909671][ T31] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1283.928560][T12999] az6027: usb out operation failed. (-71) [ 1283.928981][T12999] az6027: usb out operation failed. (-71) [ 1283.928996][T12999] stb0899_attach: Driver disabled by Kconfig [ 1283.929007][T12999] az6027: no front-end attached [ 1283.929007][T12999] [ 1283.931228][T12999] az6027: usb out operation failed. (-71) [ 1283.931248][T12999] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1283.975942][T12999] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input108 [ 1284.054266][ T31] usb 1-1: USB disconnect, device number 48 [ 1284.087293][T12999] dvb-usb: schedule remote query interval to 400 msecs. [ 1284.087319][T12999] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1284.125069][T12999] usb 3-1: USB disconnect, device number 48 [ 1284.891775][ T31] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1285.051166][T12999] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1285.290513][T28404] 9pnet_fd: Insufficient options for proto=fd [ 1285.652877][ T31] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 1286.419621][ T31] usb 1-1: Using ep0 maxpacket: 16 [ 1286.428871][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1286.428907][ T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1286.428931][ T31] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1286.428977][ T31] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1286.429003][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1286.664591][ T31] usb 1-1: config 0 descriptor?? [ 1288.425614][ T5873] usb 5-1: new high-speed USB device number 105 using dummy_hcd [ 1288.456523][ T31] usbhid 1-1:0.0: can't add hid device: -71 [ 1288.456656][ T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1288.497080][ T31] usb 1-1: USB disconnect, device number 49 [ 1288.572416][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 1288.574548][ T5873] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1288.574579][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.634103][ T5873] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1288.634122][ T5873] pvrusb2: ********** [ 1288.634130][ T5873] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1288.634144][ T5873] pvrusb2: Important functionality might not be entirely working. [ 1288.634154][ T5873] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1288.634167][ T5873] pvrusb2: ********** [ 1288.823707][ T2371] pvrusb2: Invalid write control endpoint [ 1288.886670][ T2371] pvrusb2: Invalid write control endpoint [ 1288.886699][ T2371] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1288.886711][ T2371] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1288.886720][ T2371] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1288.886733][ T2371] pvrusb2: Device being rendered inoperable [ 1288.886810][ T2371] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1288.886861][ T2371] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1288.888565][ T2371] pvrusb2: Attached sub-driver cx25840 [ 1288.888580][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1288.888592][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1288.922627][ T10] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 1289.043328][T28418] pvrusb2: Attempted to execute control transfer when device not ok [ 1289.121003][ T10] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1289.121035][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1289.121058][ T10] usb 3-1: config 0 has no interface number 0 [ 1289.121107][ T10] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1289.121156][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1289.121182][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.610025][ T10] usb 3-1: config 0 descriptor?? [ 1289.916483][ T10] usbhid 3-1:0.1: couldn't find an input interrupt endpoint [ 1290.994029][ T10] usb 5-1: USB disconnect, device number 105 [ 1291.133876][T28482] 9pnet_fd: Insufficient options for proto=fd [ 1291.722424][ T10] usb 5-1: new high-speed USB device number 106 using dummy_hcd [ 1292.716598][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 1292.743490][ T10] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1292.743515][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1292.786700][ T10] usb 5-1: config 0 descriptor?? [ 1292.923924][T14217] usb 3-1: USB disconnect, device number 49 [ 1293.026196][ T10] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1293.053824][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1293.061039][ T10] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1293.061100][ T10] usb 5-1: media controller created [ 1293.163802][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1293.808751][T28525] afs: Bad value for 'source' [ 1295.156065][ T10] az6027: usb out operation failed. (-71) [ 1295.156387][ T10] az6027: usb out operation failed. (-71) [ 1295.156397][ T10] stb0899_attach: Driver disabled by Kconfig [ 1295.156405][ T10] az6027: no front-end attached [ 1295.156405][ T10] [ 1295.156746][ T10] az6027: usb out operation failed. (-71) [ 1295.156758][ T10] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1295.161480][ T10] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input109 [ 1295.180265][ T10] dvb-usb: schedule remote query interval to 400 msecs. [ 1295.180291][ T10] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1295.194257][ T10] usb 5-1: USB disconnect, device number 106 [ 1295.432443][T14217] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1295.483427][ T10] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1295.599570][T14217] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 1295.599605][T14217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1295.599629][T14217] usb 3-1: Product: syz [ 1295.599641][T14217] usb 3-1: Manufacturer: syz [ 1295.599652][T14217] usb 3-1: SerialNumber: syz [ 1295.637911][T14217] r8152-cfgselector 3-1: Unknown version 0x0000 [ 1295.637939][T14217] r8152-cfgselector 3-1: config 0 descriptor?? [ 1295.863158][T28532] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1295.863900][T28532] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1296.079856][T28532] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3549'. [ 1296.853260][ T10] r8152-cfgselector 3-1: USB disconnect, device number 50 [ 1298.271939][T14217] usb 5-1: new high-speed USB device number 107 using dummy_hcd [ 1298.432740][T14217] usb 5-1: Using ep0 maxpacket: 32 [ 1298.448415][T14217] usb 5-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1298.448452][T14217] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1298.448478][T14217] usb 5-1: New USB device found, idVendor=0079, idProduct=0011, bcdDevice= 0.00 [ 1298.448495][T14217] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1298.491097][T14217] usb 5-1: config 0 descriptor?? [ 1299.287873][T28575] tipc: Started in network mode [ 1299.287898][T28575] tipc: Node identity ac14140f, cluster identity 4711 [ 1299.289554][T28575] tipc: New replicast peer: 255.255.255.255 [ 1299.325567][T28575] tipc: Enabled bearer , priority 10 [ 1299.345287][T28575] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3555'. [ 1299.345307][T28575] tipc: Disabling bearer [ 1299.389476][T28575] fuse: Unknown parameter 'fd0x0000000000000007' [ 1299.465295][T28575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1299.468708][T28575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1299.513517][T14217] usbhid 5-1:0.0: can't add hid device: -71 [ 1299.513609][T14217] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1299.519394][T14217] usb 5-1: USB disconnect, device number 107 [ 1300.346816][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.346893][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.458955][T14217] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1301.200546][T14217] usb 6-1: Using ep0 maxpacket: 8 [ 1301.223431][T14217] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1301.223461][T14217] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.253194][T14217] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1301.253208][T14217] pvrusb2: ********** [ 1301.253213][T14217] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1301.253223][T14217] pvrusb2: Important functionality might not be entirely working. [ 1301.253230][T14217] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1301.253239][T14217] pvrusb2: ********** [ 1301.448574][ T2371] pvrusb2: Invalid write control endpoint [ 1301.514332][ T2371] pvrusb2: Invalid write control endpoint [ 1301.514371][ T2371] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1301.514382][ T2371] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1301.514392][ T2371] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1301.515332][ T2371] pvrusb2: Device being rendered inoperable [ 1301.515410][ T2371] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1301.515463][ T2371] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1301.517017][ T2371] pvrusb2: Attached sub-driver cx25840 [ 1301.517030][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1301.517043][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1301.657011][T28630] pvrusb2: Attempted to execute control transfer when device not ok [ 1303.346982][ T7259] usb 6-1: USB disconnect, device number 14 [ 1303.643118][T28688] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3571'. [ 1304.605888][T14217] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 1305.069687][T14217] usb 1-1: Using ep0 maxpacket: 32 [ 1305.183651][T14217] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x62, changing to 0x2 [ 1305.183685][T14217] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 140, changing to 11 [ 1305.183713][T14217] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 59326, setting to 1024 [ 1305.200120][T14217] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16 [ 1305.200213][T14217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.200277][T14217] usb 1-1: Product: syz [ 1305.200322][T14217] usb 1-1: Manufacturer: syz [ 1305.200365][T14217] usb 1-1: SerialNumber: syz [ 1305.261467][T14217] usb 1-1: config 0 descriptor?? [ 1305.263042][T28667] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1305.356316][T14217] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1305.382518][T21667] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1305.485984][T14217] usb 1-1: USB disconnect, device number 50 [ 1305.487773][ T6906] usb 1-1: Failed to submit usb control message: -71 [ 1305.487799][ T6906] usb 1-1: unable to send the bmi data to the device: -71 [ 1305.487813][ T6906] usb 1-1: unable to get target info from device [ 1305.487826][ T6906] usb 1-1: could not get target info (-71) [ 1305.488049][ T6906] usb 1-1: could not probe fw (-71) [ 1305.532418][T21667] usb 3-1: Using ep0 maxpacket: 8 [ 1305.533460][T21667] usb 3-1: too many configurations: 34, using maximum allowed: 8 [ 1305.535807][T21667] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1305.535846][T21667] usb 3-1: can't read configurations, error -61 [ 1305.665859][T21667] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1306.202419][T21667] usb 3-1: Using ep0 maxpacket: 8 [ 1306.203396][T21667] usb 3-1: too many configurations: 34, using maximum allowed: 8 [ 1306.339183][T21667] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1306.339224][T21667] usb 3-1: can't read configurations, error -71 [ 1306.356679][T21667] usb usb3-port1: attempt power cycle [ 1306.575327][T28734] afs: Bad value for 'source' [ 1306.763070][T21667] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1306.812748][T14217] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1307.004717][T21667] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1307.005031][T21667] usb 3-1: config 0 has no interface number 0 [ 1307.010559][T21667] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.011223][T21667] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1307.055504][T21667] usb 3-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1307.055736][T21667] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.201978][T21667] usb 3-1: config 0 descriptor?? [ 1307.217624][T14217] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1307.217654][T14217] usb 6-1: config 0 has no interface number 0 [ 1307.217700][T14217] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1307.217730][T14217] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1307.217769][T14217] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 1307.217792][T14217] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1307.246314][T14217] usb 6-1: config 0 descriptor?? [ 1308.466582][T21667] prodikeys 0003:041E:2801.0063: unknown main item tag 0x0 [ 1308.468790][T21667] prodikeys 0003:041E:2801.0063: unknown main item tag 0x0 [ 1308.471495][T21667] prodikeys 0003:041E:2801.0063: unknown main item tag 0x0 [ 1308.477772][T21667] prodikeys 0003:041E:2801.0063: unknown main item tag 0x0 [ 1308.507435][T21667] prodikeys 0003:041E:2801.0063: unknown main item tag 0x0 [ 1308.517898][T21667] prodikeys 0003:041E:2801.0063: unknown main item tag 0x0 [ 1308.519444][T21667] prodikeys 0003:041E:2801.0063: unknown main item tag 0x0 [ 1308.557085][T21667] prodikeys 0003:041E:2801.0063: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.2-1/input1 [ 1308.558191][T21667] hid_prodikeys: hid-prodikeys: failed to find output report [ 1308.558191][T21667] [ 1308.855531][T28722] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3577'. [ 1309.124897][T14217] usbhid 6-1:0.1: can't add hid device: -71 [ 1309.125030][T14217] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 1309.882757][T14217] usb 6-1: USB disconnect, device number 15 [ 1310.051687][ T5873] usb 3-1: USB disconnect, device number 53 [ 1310.687717][T21667] usb 5-1: new high-speed USB device number 108 using dummy_hcd [ 1310.982422][T21667] usb 5-1: Using ep0 maxpacket: 8 [ 1310.984836][T21667] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1310.984867][T21667] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.161442][T28792] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3588'. [ 1311.346817][T21667] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1311.346987][T21667] pvrusb2: ********** [ 1311.347089][T21667] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1311.347131][T21667] pvrusb2: Important functionality might not be entirely working. [ 1311.347685][T21667] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1311.347786][T21667] pvrusb2: ********** [ 1311.818427][T12999] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1312.012724][ T2371] pvrusb2: Invalid write control endpoint [ 1312.092598][T12999] usb 3-1: Using ep0 maxpacket: 8 [ 1312.114999][T12999] usb 3-1: too many configurations: 34, using maximum allowed: 8 [ 1312.493334][T28798] pvrusb2: Invalid write control endpoint [ 1312.527968][T12999] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1312.528013][T12999] usb 3-1: can't read configurations, error -61 [ 1312.703343][T12999] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1312.836566][ T2371] pvrusb2: Invalid write control endpoint [ 1312.836584][ T2371] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1312.836596][ T2371] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1312.836606][ T2371] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1312.836618][ T2371] pvrusb2: Device being rendered inoperable [ 1312.839996][ T2371] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1312.840058][ T2371] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_d) [ 1312.930242][T12999] usb 3-1: Using ep0 maxpacket: 8 [ 1313.317448][T12999] usb 3-1: too many configurations: 34, using maximum allowed: 8 [ 1313.474105][T12999] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1313.474150][T12999] usb 3-1: can't read configurations, error -61 [ 1313.525115][ T2371] pvrusb2: Attached sub-driver cx25840 [ 1313.525133][ T2371] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1313.525146][ T2371] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1313.551280][T12999] usb usb3-port1: attempt power cycle [ 1313.995180][T14217] usb 5-1: USB disconnect, device number 108 [ 1314.060681][T28821] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3593'. [ 1314.633965][T12999] usb usb3-port1: Cannot enable. Maybe the USB cable is bad? [ 1314.769367][T12999] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1315.262427][T12999] usb 3-1: Using ep0 maxpacket: 32 [ 1315.305530][T12999] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1315.305564][T12999] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1315.313602][T12999] usb 3-1: config 0 descriptor?? [ 1315.638406][T12999] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1315.658125][T12999] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1315.663561][T12999] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1315.663714][T12999] usb 3-1: media controller created [ 1315.905911][T12999] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1319.759610][T12999] az6027: usb out operation failed. (-110) [ 1319.850784][T28879] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3602'. [ 1320.422536][T12999] az6027: usb out operation failed. (-32) [ 1320.422551][T12999] stb0899_attach: Driver disabled by Kconfig [ 1320.422559][T12999] az6027: no front-end attached [ 1320.422559][T12999] [ 1320.423141][T12999] az6027: usb out operation failed. (-32) [ 1320.423154][T12999] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1320.481831][T12999] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input110 [ 1320.502489][T12999] dvb-usb: schedule remote query interval to 400 msecs. [ 1320.502512][T12999] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1320.586777][T14217] usb 3-1: USB disconnect, device number 57 [ 1320.632477][T21667] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 1321.192738][T21667] usb 1-1: Using ep0 maxpacket: 8 [ 1321.196680][T21667] usb 1-1: too many configurations: 34, using maximum allowed: 8 [ 1321.263087][T21667] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1321.263288][T21667] usb 1-1: can't read configurations, error -61 [ 1321.422809][T21667] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 1321.705160][T21667] usb 1-1: Using ep0 maxpacket: 8 [ 1321.710197][T21667] usb 1-1: too many configurations: 34, using maximum allowed: 8 [ 1321.753962][T21667] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1321.754455][T21667] usb 1-1: can't read configurations, error -61 [ 1321.814744][T21667] usb usb1-port1: attempt power cycle [ 1322.060680][T14217] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1322.130874][T28916] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3607'. [ 1323.222042][T21667] usb usb1-port1: Cannot enable. Maybe the USB cable is bad? [ 1323.319816][T28938] FAULT_INJECTION: forcing a failure. [ 1323.319816][T28938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1323.319859][T28938] CPU: 0 UID: 0 PID: 28938 Comm: syz.2.3613 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1323.319891][T28938] Tainted: [L]=SOFTLOCKUP [ 1323.319901][T28938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1323.319916][T28938] Call Trace: [ 1323.319926][T28938] [ 1323.319937][T28938] dump_stack_lvl+0xe8/0x150 [ 1323.319976][T28938] should_fail_ex+0x46b/0x600 [ 1323.320015][T28938] _copy_from_iter+0x1d3/0x1670 [ 1323.320058][T28938] ? trace_kmem_cache_alloc+0x29/0xf0 [ 1323.320093][T28938] ? __alloc_skb+0x27d/0x7d0 [ 1323.320117][T28938] ? __pfx__copy_from_iter+0x10/0x10 [ 1323.320148][T28938] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 1323.320183][T28938] ? __alloc_skb+0x27d/0x7d0 [ 1323.320212][T28938] ? netlink_sendmsg+0x650/0xb40 [ 1323.320245][T28938] ? skb_put+0x11b/0x210 [ 1323.320272][T28938] netlink_sendmsg+0x6c0/0xb40 [ 1323.320326][T28938] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1323.320363][T28938] ? unwind_get_return_address+0x4d/0x90 [ 1323.320393][T28938] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1323.320438][T28938] ____sys_sendmsg+0x94c/0x9c0 [ 1323.320473][T28938] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1323.320510][T28938] ? import_iovec+0x73/0xa0 [ 1323.320538][T28938] ___sys_sendmsg+0x2a5/0x360 [ 1323.320573][T28938] ? __pfx____sys_sendmsg+0x10/0x10 [ 1323.320638][T28938] ? __fget_files+0x2a/0x420 [ 1323.320669][T28938] ? __fget_files+0x3a6/0x420 [ 1323.320709][T28938] __x64_sys_sendmsg+0x1c3/0x2a0 [ 1323.320739][T28938] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1323.320777][T28938] ? __pfx_ksys_write+0x10/0x10 [ 1323.320825][T28938] do_syscall_64+0x14d/0xf80 [ 1323.320858][T28938] ? trace_irq_disable+0x3b/0x150 [ 1323.320885][T28938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.320910][T28938] ? clear_bhb_loop+0x40/0x90 [ 1323.320938][T28938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.320961][T28938] RIP: 0033:0x7f557a4cc819 [ 1323.320982][T28938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1323.321002][T28938] RSP: 002b:00007f557871e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1323.321026][T28938] RAX: ffffffffffffffda RBX: 00007f557a745fa0 RCX: 00007f557a4cc819 [ 1323.321043][T28938] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000004 [ 1323.321058][T28938] RBP: 00007f557871e090 R08: 0000000000000000 R09: 0000000000000000 [ 1323.321073][T28938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1323.321087][T28938] R13: 00007f557a746038 R14: 00007f557a745fa0 R15: 00007ffc6ec1e898 [ 1323.321123][T28938] [ 1323.372970][T21667] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 1323.487900][T28936] afs: Bad value for 'source' [ 1323.547252][T21667] usb 1-1: device descriptor read/8, error -71 [ 1323.653101][T21667] usb usb1-port1: unable to enumerate USB device [ 1324.122604][T14217] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1324.592455][T14217] usb 6-1: Using ep0 maxpacket: 32 [ 1324.596685][T14217] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1324.596719][T14217] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1324.638661][T14217] usb 6-1: config 0 descriptor?? [ 1324.860196][T14217] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1324.876399][T14217] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1324.877420][T14217] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1324.877478][T14217] usb 6-1: media controller created [ 1325.396736][T14217] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1325.472365][ T10] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1326.133965][ T10] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1326.134066][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.134090][ T10] usb 3-1: Product: syz [ 1326.134106][ T10] usb 3-1: Manufacturer: syz [ 1326.134122][ T10] usb 3-1: SerialNumber: syz [ 1326.809376][T28980] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3619'. [ 1327.772728][T14217] az6027: usb out operation failed. (-110) [ 1327.773138][T14217] az6027: usb out operation failed. (-32) [ 1327.773150][T14217] stb0899_attach: Driver disabled by Kconfig [ 1327.773158][T14217] az6027: no front-end attached [ 1327.773158][T14217] [ 1327.773470][T14217] az6027: usb out operation failed. (-32) [ 1327.773481][T14217] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1327.775709][T14217] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input111 [ 1327.777579][T14217] dvb-usb: schedule remote query interval to 400 msecs. [ 1327.777595][T14217] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1327.790474][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 1327.790665][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 1327.957169][T28984] bridge0: port 3(macsec0) entered blocking state [ 1327.958450][T28984] bridge0: port 3(macsec0) entered disabled state [ 1327.992530][ T5873] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1328.136498][T28984] macsec0: entered promiscuous mode [ 1328.151916][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 1328.158213][ T5873] usb 1-1: too many configurations: 34, using maximum allowed: 8 [ 1328.160623][ T5873] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1328.160663][ T5873] usb 1-1: can't read configurations, error -61 [ 1328.286612][ T5873] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1328.422089][T28995] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3622'. [ 1328.596244][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 1328.597613][ T5873] usb 1-1: too many configurations: 34, using maximum allowed: 8 [ 1328.614245][ T5873] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1328.614305][ T5873] usb 1-1: can't read configurations, error -61 [ 1328.615814][ T5873] usb usb1-port1: attempt power cycle [ 1329.009920][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -EPROTO [ 1329.009981][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1329.011509][ T10] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1329.022444][ T5873] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1329.043849][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 1329.044653][ T5873] usb 1-1: too many configurations: 34, using maximum allowed: 8 [ 1329.046703][ T5873] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1329.046746][ T5873] usb 1-1: can't read configurations, error -61 [ 1329.105310][ T10] lan78xx 3-1:1.0: probe with driver lan78xx failed with error -71 [ 1329.129656][ T10] usb 3-1: USB disconnect, device number 58 [ 1329.144547][T21667] usb 6-1: USB disconnect, device number 16 [ 1329.172518][ T5873] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1329.193455][ T5873] usb 1-1: Using ep0 maxpacket: 8 [ 1329.194399][ T5873] usb 1-1: too many configurations: 34, using maximum allowed: 8 [ 1329.196607][ T5873] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 1329.196644][ T5873] usb 1-1: can't read configurations, error -61 [ 1329.198000][ T5873] usb usb1-port1: unable to enumerate USB device [ 1329.469062][T29014] batman_adv: batadv0: Adding interface: macvtap1 [ 1329.469082][T29014] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.469115][T29014] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1329.551254][T29023] afs: Bad value for 'source' [ 1329.636336][T21667] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1330.263484][T21667] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1330.502574][T21667] usb 6-1: device descriptor read/64, error -71 [ 1330.600501][T29046] batman_adv: batadv0: Adding interface: macvtap1 [ 1330.600514][T29046] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1330.600536][T29046] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 1330.742596][T21667] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1330.872492][T21667] usb 6-1: device descriptor read/64, error -71 [ 1330.952581][ T7259] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1330.983099][T21667] usb usb6-port1: attempt power cycle [ 1331.082476][ T7259] usb 1-1: device descriptor read/64, error -71 [ 1331.272616][T12999] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1331.322421][T21667] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1331.322419][ T7259] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1331.349222][T21667] usb 6-1: device descriptor read/8, error -71 [ 1331.402602][T12999] usb 3-1: device descriptor read/64, error -71 [ 1331.462455][ T7259] usb 1-1: device descriptor read/64, error -71 [ 1331.507994][T29073] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3636'. [ 1331.692131][ T7259] usb usb1-port1: attempt power cycle [ 1331.772474][T21667] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1331.799080][T21667] usb 6-1: device descriptor read/8, error -71 [ 1331.852482][T12999] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 1331.902927][T21667] usb usb6-port1: unable to enumerate USB device [ 1332.052515][T12999] usb 3-1: device descriptor read/64, error -71 [ 1332.062513][ T7259] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1332.083156][ T7259] usb 1-1: device descriptor read/8, error -71 [ 1332.277414][T12999] usb usb3-port1: attempt power cycle [ 1332.462031][T29083] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3638'. [ 1332.700560][T12999] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 1333.265781][ T7259] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1333.283624][ T7259] usb 1-1: device descriptor read/8, error -71 [ 1333.289412][T12999] usb 3-1: device descriptor read/8, error -71 [ 1333.394268][ T7259] usb usb1-port1: unable to enumerate USB device [ 1333.432426][ T5873] usb 5-1: new high-speed USB device number 109 using dummy_hcd [ 1333.533449][T12999] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 1333.614241][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 1333.998313][ T5873] usb 5-1: too many configurations: 34, using maximum allowed: 8 [ 1334.001573][T12999] usb 3-1: device descriptor read/8, error -71 [ 1334.018968][ T5873] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1334.019006][ T5873] usb 5-1: can't read configurations, error -61 [ 1334.103318][T12999] usb usb3-port1: unable to enumerate USB device [ 1334.152442][ T5873] usb 5-1: new high-speed USB device number 110 using dummy_hcd [ 1334.315116][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 1334.321585][ T5873] usb 5-1: too many configurations: 34, using maximum allowed: 8 [ 1334.366533][ T5873] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1334.366826][ T5873] usb 5-1: can't read configurations, error -61 [ 1334.399887][ T5873] usb usb5-port1: attempt power cycle [ 1334.842439][ T5873] usb 5-1: new high-speed USB device number 111 using dummy_hcd [ 1334.863306][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 1334.864175][ T5873] usb 5-1: too many configurations: 34, using maximum allowed: 8 [ 1334.866440][ T5873] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 1334.866477][ T5873] usb 5-1: can't read configurations, error -61 [ 1334.931041][T29110] afs: Bad value for 'source' [ 1335.002199][ T5873] usb 5-1: new high-speed USB device number 112 using dummy_hcd [ 1335.166543][ T5873] usb 5-1: Using ep0 maxpacket: 8 [ 1335.184549][ T5873] usb 5-1: too many configurations: 34, using maximum allowed: 8 [ 1335.360396][ T5873] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1335.360584][ T5873] usb 5-1: can't read configurations, error -71 [ 1335.390431][ T5873] usb usb5-port1: unable to enumerate USB device [ 1336.073666][T29121] overlayfs: failed to clone upperpath [ 1337.363425][T29124] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1337.363664][T29124] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1337.363846][T29124] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1337.364026][T29124] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1337.364218][T29124] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1337.458480][T29126] futex_wake_op: syz.2.3648 tries to shift op by 144; fix this program [ 1338.273019][ T5873] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1338.439495][T29161] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3656'. [ 1339.383024][ T5873] usb 6-1: Using ep0 maxpacket: 32 [ 1339.385142][ T5873] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1339.385177][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.420253][ T5873] usb 6-1: config 0 descriptor?? [ 1339.442667][T20032] Bluetooth: hci1: command 0x0c1a tx timeout [ 1339.442685][ T5805] Bluetooth: hci0: command 0x0c1a tx timeout [ 1339.442710][T20032] Bluetooth: hci4: command 0x0c1a tx timeout [ 1339.442721][ T5805] Bluetooth: hci2: command 0x0c1a tx timeout [ 1339.442742][T20032] Bluetooth: hci5: command 0x0419 tx timeout [ 1339.472400][T21667] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 1339.633034][T21667] usb 3-1: Using ep0 maxpacket: 8 [ 1339.641650][T21667] usb 3-1: too many configurations: 34, using maximum allowed: 8 [ 1339.661776][ T5873] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1339.679039][T21667] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1339.679229][T21667] usb 3-1: can't read configurations, error -61 [ 1339.842950][T21667] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1340.008211][ T5873] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1340.050638][ T5873] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1340.050699][ T5873] usb 6-1: media controller created [ 1340.112565][T21667] usb 3-1: Using ep0 maxpacket: 8 [ 1340.116177][T21667] usb 3-1: too many configurations: 34, using maximum allowed: 8 [ 1340.192226][T21667] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 1340.192614][T21667] usb 3-1: can't read configurations, error -61 [ 1340.246853][T21667] usb usb3-port1: attempt power cycle [ 1340.671549][ T5873] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1341.214507][T21667] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1341.467063][T21667] usb 3-1: device not accepting address 65, error -71 [ 1342.146629][ T38] INFO: task kworker/u8:10:1307 blocked for more than 144 seconds. [ 1342.146660][ T38] Tainted: G L syzkaller #0 [ 1342.146675][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this mes[ 1342.146675][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1342.146792][ T38] task:kworker/u8:10 state:D stack:21280 pid:1307 tgid:1307 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1342.146866][ T38] Workqueue: netns cleanup_net [ 1342.146895][ T38] Call Trace: [ 1342.146905][ T38] [ 1342.146920][ T38] __schedule+0x1553/0x5240 [ 1342.146952][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 1342.146990][ T38] ? rt_spin_lock+0x1e0/0x400 [ 1342.147041][ T38] ? __pfx___schedule+0x10/0x10 [ 1342.147078][ T38] ? schedule+0x90/0x360 [ 1342.147106][ T38] schedule+0x164/0x360 [ 1342.147133][ T38] rxrpc_destroy_all_calls+0x44e/0x570 [ 1342.147170][ T38] ? __pfx_rxrpc_destroy_all_calls+0x10/0x10 [ 1342.147210][ T38] ? __pfx_var_wake_function+0x10/0x10 [ 1342.147248][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1342.147276][ T38] ? __timer_delete_sync+0x53e/0x610 [ 1342.147313][ T38] rxrpc_exit_net+0x6f/0xc0 [ 1342.147340][ T38] ops_undo_list+0x49f/0x940 [ 1342.147360][ T38] ? rt_spin_unlock+0x1f0/0x200 [ 1342.147411][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 1342.147433][ T38] ? rt_spin_unlock+0x14f/0x200 [ 1342.147468][ T38] ? idr_destroy+0x21b/0x2a0 [ 1342.147491][ T38] ? rt_spin_unlock+0x160/0x200 [ 1342.147527][ T38] cleanup_net+0x56e/0x800 [ 1342.147561][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 1342.147594][ T38] ? process_scheduled_works+0xa8d/0x18c0 [ 1342.147627][ T38] ? process_scheduled_works+0xa8d/0x18c0 [ 1342.147660][ T38] process_scheduled_works+0xb6e/0x18c0 [ 1342.147719][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1342.147772][ T38] ? assign_work+0x3d5/0x5e0 [ 1342.147811][ T38] worker_thread+0xa53/0xfc0 [ 1342.147994][ T38] kthread+0x388/0x470 [ 1342.148022][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1342.148056][ T38] ? __pfx_kthread+0x10/0x10 [ 1342.148075][ T38] ret_from_fork+0x51e/0xb90 [ 1342.148124][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1342.149513][ T38] ? __switch_to+0xc7d/0x1450 [ 1342.149554][ T38] ? __pfx_kthread+0x10/0x10 [ 1342.149583][ T38] ret_from_fork_asm+0x1a/0x30 [ 1342.149635][ T38] [ 1342.149780][ T38] [ 1342.149780][ T38] Showing all locks held in the system: [ 1342.149808][ T38] 3 locks held by kworker/1:0/31: [ 1342.149825][ T38] 1 lock held by khungtaskd/38: [ 1342.149839][ T38] #0: ffffffff8ddcb980 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1342.149914][ T38] 3 locks held by kworker/u8:10/1307: [ 1342.149932][ T38] #0: ffff88801aee1138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1342.149997][ T38] #1: ffffc90005f37c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1342.150060][ T38] #2: ffffffff8f14ede0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1342.150137][ T38] 2 locks held by getty/5556: [ 1342.150275][ T38] #0: ffff8880376200a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1342.150348][ T38] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13c0 [ 1342.150409][ T38] 6 locks held by kworker/1:6/5873: [ 1342.150423][ T38] #0: ffff8880222c6138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1342.150486][ T38] #1: ffffc90004e5fc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1342.150554][ T38] #2: ffff888029e6a210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 1342.150612][ T38] #3: ffff888062470210 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1342.150670][ T38] #4: ffff888060e431d8 (&dev->mutex){....}-{4:4}, at: __device_attach+0x88/0x450 [ 1342.150733][ T38] #5: ffff8880445a0f78 (&d->usb_mutex){+.+.}-{4:4}, at: az6027_frontend_attach+0x4b/0x560 [ 1342.150793][ T38] 6 locks held by kworker/1:4/21667: [ 1342.150806][ T38] #0: ffff8880222c6138 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1342.150884][ T38] #1: ffffc90007abfc40 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1342.150947][ T38] #2: ffff888029db2210 (&dev->mutex){....}-{4:4}, at: hub_event+0x17c/0x4f60 [ 1342.151001][ T38] #3: ffff888029db9640 (&port_dev->status_lock){+.+.}-{4:4}, at: hub_event+0x21b0/0x4f60 [ 1342.151064][ T38] #4: ffff888024be4f58 (hcd->address0_mutex){+.+.}-{4:4}, at: hub_event+0x21e0/0x4f60 [ 1342.153608][ T38] #5: ffffffff8e9fcaa0 (ehci_cf_port_reset_rwsem){.+.+}-{4:4}, at: hub_port_reset+0x14e/0x1820 [ 1342.153918][ T38] 4 locks held by syz.1.3644/29119: [ 1342.153941][ T38] 5 locks held by syz.5.3653/29174: [ 1342.153955][ T38] 4 locks held by syz.4.3657/29170: [ 1342.153973][ T38] [ 1342.153979][ T38] ============================================= [ 1342.153979][ T38] [ 1342.154022][ T38] NMI backtrace for cpu 0 [ 1342.154089][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1342.154122][ T38] Tainted: [L]=SOFTLOCKUP [ 1342.154131][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1342.154154][ T38] Call Trace: [ 1342.154201][ T38] [ 1342.154240][ T38] dump_stack_lvl+0xe8/0x150 [ 1342.154284][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 1342.154347][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1342.154423][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1342.154460][ T38] sys_info+0x135/0x170 [ 1342.154525][ T38] watchdog+0xfd9/0x1030 [ 1342.154598][ T38] ? watchdog+0x21a/0x1030 [ 1342.154637][ T38] kthread+0x388/0x470 [ 1342.154714][ T38] ? __pfx_watchdog+0x10/0x10 [ 1342.154762][ T38] ? __pfx_kthread+0x10/0x10 [ 1342.154790][ T38] ret_from_fork+0x51e/0xb90 [ 1342.154868][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1342.154928][ T38] ? __switch_to+0xc7d/0x1450 [ 1342.154962][ T38] ? __pfx_kthread+0x10/0x10 [ 1342.155032][ T38] ret_from_fork_asm+0x1a/0x30 [ 1342.155103][ T38] [ 1342.155138][ T38] Sending NMI from CPU 0 to CPUs 1: [ 1342.155200][ C1] NMI backtrace for cpu 1 [ 1342.155217][ C1] CPU: 1 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1342.155247][ C1] Tainted: [L]=SOFTLOCKUP [ 1342.155254][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1342.155266][ C1] RIP: 0010:io_serial_in+0x77/0xc0 [ 1342.155288][ C1] Code: e8 ae f5 93 fc 44 89 f9 d3 e3 49 83 ee 80 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 ef 19 fa fc 41 03 1e 89 da ec <0f> b6 c0 5b 41 5c 41 5e 41 5f e9 5a 82 f7 05 cc 44 89 f9 80 e1 07 [ 1342.155305][ C1] RSP: 0000:ffffc900001679d0 EFLAGS: 00000202 [ 1342.155322][ C1] RAX: 1ffffffff332bb00 RBX: 00000000000003fd RCX: 0000000000000000 [ 1342.155336][ C1] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 1342.155348][ C1] RBP: ffffffff9995dd10 R08: 0000000000000000 R09: 0000000000000000 [ 1342.155361][ C1] R10: dffffc0000000000 R11: ffffffff85308fc0 R12: dffffc0000000000 [ 1342.155376][ C1] R13: 0000000000000000 R14: ffffffff9995da80 R15: 0000000000000000 [ 1342.155389][ C1] FS: 0000000000000000(0000) GS:ffff888126432000(0000) knlGS:0000000000000000 [ 1342.155411][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1342.155425][ C1] CR2: 000020000004b000 CR3: 000000000dbba000 CR4: 00000000003526f0 [ 1342.155442][ C1] Call Trace: [ 1342.155449][ C1] [ 1342.155459][ C1] wait_for_lsr+0x1aa/0x2f0 [ 1342.155493][ C1] serial8250_console_write+0x120d/0x1b90 [ 1342.155533][ C1] ? __pfx_serial8250_console_write+0x10/0x10 [ 1342.155566][ C1] ? __pfx_univ8250_console_write+0x10/0x10 [ 1342.155598][ C1] console_flush_one_record+0x68b/0xb90 [ 1342.155632][ C1] ? console_flush_one_record+0xfa/0xb90 [ 1342.155666][ C1] ? __pfx_console_flush_one_record+0x10/0x10 [ 1342.155696][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1342.155723][ C1] legacy_kthread_func+0x1b6/0x250 [ 1342.155754][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1342.155783][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1342.155813][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1342.155846][ C1] kthread+0x388/0x470 [ 1342.155866][ C1] ? __pfx_legacy_kthread_func+0x10/0x10 [ 1342.155893][ C1] ? __pfx_kthread+0x10/0x10 [ 1342.155913][ C1] ret_from_fork+0x51e/0xb90 [ 1342.155941][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1342.155966][ C1] ? __switch_to+0xc7d/0x1450 [ 1342.155991][ C1] ? __pfx_kthread+0x10/0x10 [ 1342.156012][ C1] ret_from_fork_asm+0x1a/0x30 [ 1342.156039][ C1] [ 1342.183934][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1342.183967][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1342.184014][ T38] Tainted: [L]=SOFTLOCKUP [ 1342.184024][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1342.184038][ T38] Call Trace: [ 1342.184048][ T38] [ 1342.184060][ T38] vpanic+0x56c/0xa60 [ 1342.184108][ T38] ? __pfx___schedule+0x10/0x10 [ 1342.184132][ T38] ? __pfx_vpanic+0x10/0x10 [ 1342.184172][ T38] panic+0xc5/0xd0 [ 1342.184216][ T38] ? __pfx_panic+0x10/0x10 [ 1342.184252][ T38] ? preempt_schedule_thunk+0x16/0x30 [ 1342.184286][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1342.184328][ T38] watchdog+0x1023/0x1030 [ 1342.184355][ T38] ? watchdog+0x21a/0x1030 [ 1342.184403][ T38] kthread+0x388/0x470 [ 1342.184430][ T38] ? __pfx_watchdog+0x10/0x10 [ 1342.184456][ T38] ? __pfx_kthread+0x10/0x10 [ 1342.184481][ T38] ret_from_fork+0x51e/0xb90 [ 1342.184521][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1342.184562][ T38] ? __switch_to+0xc7d/0x1450 [ 1342.184597][ T38] ? __pfx_kthread+0x10/0x10 [ 1342.184624][ T38] ret_from_fork_asm+0x1a/0x30 [ 1342.184662][ T38] [ 1342.185356][ T38] Kernel Offset: disabled