last executing test programs: 10m48.648640688s ago: executing program 2 (id=3): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) write(r2, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000003c0)={0x0, 0x2, 0x7fff, 0xffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xf0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYRESDEC=0x0]) 10m47.842203527s ago: executing program 2 (id=7): syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x0, 0x0, 0x0}, 0x94) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0xfffffffd, 0x8, 0x80, 0x8, '\x00', 0x4001}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101501, 0x0) ioctl$TIOCSETD(r5, 0x5423, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000079102800000016fea3ecaa0000f30400001e500000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x77, 0x101341) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000000c0)={0x80, 0x6, 0x2fe, 0xe5, 0xe0, 0xfeff, 0x0}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmmsg$inet(r7, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)={0x30, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8, 0x8, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) 10m46.291301774s ago: executing program 2 (id=9): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r4}, 0x4) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) socket(0x25, 0x1, 0x9) listen(0xffffffffffffffff, 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) 10m41.963795027s ago: executing program 2 (id=14): ptrace$setregset(0x4205, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000002f00090073cc72e16accbe0a040000002a0011802e"], 0x40}, 0x1, 0x0, 0x0, 0x2004e884}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000001380), 0xffffffffffffffff) 10m39.917540246s ago: executing program 2 (id=17): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffffffff220000000e0001006e657464657673696d0000000f0002006e657464657673696de00b2fcf184aa85abced64d9da7d5630000008008e00000000000c008f0000000000000000000c009000a63a000000000000ac22e906fab6ed7398b7ecef323dd5e202176430dc837074f9fae18f510ca0517e30051fce7881fcd5fa488796a38b6b66dc53ed1b3a6de0b785a4dfabf72f630b2ca0c08152"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122"], 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000009000000000000000800000091f935000000000095000000000000809e13a9befda3eb5cc49ff4a9e8c10515917e9d16014f40f63d2da81c97e1a8ff2ee80a12e135008cf16e80d6c6905b0061aa111b74b18e02bf7636da926bf21986f3d1f029d4b848f118de0ff951"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002040), r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000100)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r5, @ANYBLOB="01002bbd7000ffdbdf25010000000500018ee7817fdf4138bee862d3ad7438bb0bca35832896244a9d50c116925589e9edf8117bed788f90b346a2ddc653f3168ce9ed00eb9b9e0c160ae009bbfe0410084c52cf4bee06efdf3d96da82a1d0b4f462a4c1d82ec6255811a9d225d0d0bfcb4b9c1492268497dabb7ae4f69fb751972f3570c58e345221000725d76dde024cb91be80ddb3a"], 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200005d00000109022400010000600009040180020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000000)={0x1010, 0x4, 0x1, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r7, 0x1) 10m24.093945164s ago: executing program 32 (id=17): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000ffffffff220000000e0001006e657464657673696d0000000f0002006e657464657673696de00b2fcf184aa85abced64d9da7d5630000008008e00000000000c008f0000000000000000000c009000a63a000000000000ac22e906fab6ed7398b7ecef323dd5e202176430dc837074f9fae18f510ca0517e30051fce7881fcd5fa488796a38b6b66dc53ed1b3a6de0b785a4dfabf72f630b2ca0c08152"], 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122"], 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000009000000000000000800000091f935000000000095000000000000809e13a9befda3eb5cc49ff4a9e8c10515917e9d16014f40f63d2da81c97e1a8ff2ee80a12e135008cf16e80d6c6905b0061aa111b74b18e02bf7636da926bf21986f3d1f029d4b848f118de0ff951"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f00000001c0)={{0xf}, 0x1, 0x0, 0x2}) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000002040), r3) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NLBL_UNLABEL_C_ACCEPT(r3, &(0x7f0000002180)={0x0, 0x0, &(0x7f0000002140)={&(0x7f0000000100)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r5, @ANYBLOB="01002bbd7000ffdbdf25010000000500018ee7817fdf4138bee862d3ad7438bb0bca35832896244a9d50c116925589e9edf8117bed788f90b346a2ddc653f3168ce9ed00eb9b9e0c160ae009bbfe0410084c52cf4bee06efdf3d96da82a1d0b4f462a4c1d82ec6255811a9d225d0d0bfcb4b9c1492268497dabb7ae4f69fb751972f3570c58e345221000725d76dde024cb91be80ddb3a"], 0x1c}, 0x1, 0x0, 0x0, 0x48004}, 0x0) r6 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000205f14120200005d00000109022400010000600009040180020300000009210604000122050009058103"], 0x0) syz_usb_control_io(r6, 0x0, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000000)={0x1010, 0x4, 0x1, 0x0, 0x2}, 0x30, 0x0) landlock_restrict_self(r7, 0x1) 3m6.786527739s ago: executing program 0 (id=627): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1a7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet(0x2, 0x4000000000000001, 0x0) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0x95008100, 0x0, 0x0, 0x0, 0x0, 0x0) 3m1.081347924s ago: executing program 0 (id=634): rt_sigprocmask(0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ppoll(0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0), 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079002000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) socket(0x25, 0x1, 0x9) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) socket$nl_generic(0x10, 0x3, 0x10) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0) 2m59.811137265s ago: executing program 0 (id=636): openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/mdstat\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs_dir/buffer_size_kb\x00', 0x1, 0x0) write(r3, &(0x7f0000000180)='3', 0x1) rename(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=32,lpwwnn=0', 0x41) syz_open_dev$video(&(0x7f00000004c0), 0x81, 0xa082) mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', 0x0, 0x0, &(0x7f0000000040)) 2m58.716373241s ago: executing program 0 (id=637): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0f85403, &(0x7f0000000540)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0xfffffffb, 0x25, 'id1\x00', 'timer1\x00', 0x0, 0x9, 0x200, 0x38e41e62, 0x64}) 2m56.602679271s ago: executing program 0 (id=639): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000240)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="700000001000810500"/20, @ANYRES32=0x0], 0x70}}, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x169802, 0x0) sendfile(r6, r6, &(0x7f0000000000)=0x9, 0x3) bind$inet(r5, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r5, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) 2m42.002223918s ago: executing program 0 (id=660): io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60080, 0x0) r0 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x0, 0x30, 0x2e]}}, 0x0, 0x1d, 0x0, 0x1}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x22020600) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) socket(0x28, 0x5, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="e1ffffff0000000000000000000058f771627440c437ef97a4e0c1e6be0111eb714f3f20b7c25c33473523c6ecb6f8ce101baf1ff624e80dea6884972eb8a5058c530000000000000036411a154c3a110974286daf5bf99b0b826e9066b700ae9beb97f706e2bf9eb1f0ab85584af0f34cbb7c09185f466ec3e2d7aa40c41afeb8c15d38d19205bd16d4812f9b2784a204204332f24964e62eab60b11d19884cf7f15800e6a37b1ab40ef17ea5c542f49f78167c0158af5f221b052bdd90e2143536928e76e5617260e6228bb132df192ca7002c182149659ce1b969c7da4157369e43b936b49ac3f2ed0824"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[], 0x0) mbind(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000240)=0x100000001, 0x7, 0x0) 2m26.76969897s ago: executing program 33 (id=660): io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0xab}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x60080, 0x0) r0 = fsopen(&(0x7f0000000040)='ntfs3\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x5}, {0x0, [0x0, 0x30, 0x2e]}}, 0x0, 0x1d, 0x0, 0x1}, 0x28) close_range(r0, 0xffffffffffffffff, 0x0) unshare(0x22020600) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r4, 0x11b, 0x8, &(0x7f0000003140), &(0x7f0000000040)=0x30) socket(0x28, 0x5, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="e1ffffff0000000000000000000058f771627440c437ef97a4e0c1e6be0111eb714f3f20b7c25c33473523c6ecb6f8ce101baf1ff624e80dea6884972eb8a5058c530000000000000036411a154c3a110974286daf5bf99b0b826e9066b700ae9beb97f706e2bf9eb1f0ab85584af0f34cbb7c09185f466ec3e2d7aa40c41afeb8c15d38d19205bd16d4812f9b2784a204204332f24964e62eab60b11d19884cf7f15800e6a37b1ab40ef17ea5c542f49f78167c0158af5f221b052bdd90e2143536928e76e5617260e6228bb132df192ca7002c182149659ce1b969c7da4157369e43b936b49ac3f2ed0824"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[], 0x0) mbind(&(0x7f0000007000/0x4000)=nil, 0x4000, 0x3, &(0x7f0000000240)=0x100000001, 0x7, 0x0) 14.625304072s ago: executing program 5 (id=906): write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000001540)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 8.773382071s ago: executing program 5 (id=918): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000280)={0x170, 0x14, 0x8, 0x70bd2c, 0x25dfdbfb, "", [@nested={0xc, 0x56, 0x0, 0x1, [@nested={0x4, 0x166}, @nested={0x4, 0xa6}]}, @generic="950368a3b26efdada008808323cad28697da35af0c8cbd32960cac24a0ad3e8a6abd3535aaabf76e13fd28dcc3c30475c21b4f7a3e2dba2f9181a787d244849ec8447cb2308e119f9a01e9e58678a8ae3a5eec46d62a4bf58dfa5791826570f4a5d5b4b0718205eade2052e48689a40e9f8e8d652ccd5a2f5adafb325508cd646c5ed6c0c3c1d7acbaca5b3feb791252550c78326ca4f5a3d629ebe1d0367be9e026e80b7eaa8e42e9ae9963d1477fe79e47693168bb3f26cff9da71b3461ddd69c9209c2209b45054d9abf35e8a0b", @generic="dbda042f4b59ce724c23c824a7396731f4dc806d540f28cb223fa7b4c10aa58aa7b59d1085bcb4e3e1f29a3055696dc120b72e0717578fc70091ca3b307d180993a38bdbb323492bd236da283bb48b0ee7b3a6cca6bc4d8a7a670011af18fdd809b8cc3bd6c83c10063170d7c899553823518c52d7136b756c2bfb", @typed={0x8, 0xaa, 0x0, 0x0, @u32=0x8}]}, 0x170}, {0x0}], 0x2, 0x0, 0x0, 0x55c2499837e1ced9}, 0x24000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r2, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@getlink={0x28, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_EXT_MASK={0x8, 0x1d, 0x3ff}]}, 0x28}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 8.721065423s ago: executing program 3 (id=919): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 8.182422606s ago: executing program 4 (id=921): r0 = socket$packet(0x11, 0x2, 0x300) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000001480)}, {&(0x7f0000000040)='`', 0x1}], 0x3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x24000080) openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_procfs(r1, &(0x7f00000002c0)='personality\x00') ioctl$FS_IOC_FSSETXATTR(0xffffffffffffffff, 0x50009404, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a80)={0x6, 0x0, &(0x7f0000001180), 0x0, 0x80000001, 0xdf, &(0x7f0000000600)=""/223, 0x41100, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000009c0)=[0xffffffffffffffff], &(0x7f0000000a00)=[{0x0, 0x2, 0x3, 0x8}, {0x2, 0x5, 0x2, 0x1}, {0x0, 0x3, 0x4, 0x2}], 0x10, 0x4}, 0x94) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x7, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff00c}, {0x6, 0x0, 0x5, 0x12e}]}, 0x10) syz_emit_ethernet(0x16, &(0x7f00000003c0)={@local, @local, @void, {@llc={0x4, {@snap={0xaa, 0xaa, "eb", 'k3\"'}}}}}, 0x0) 6.72520464s ago: executing program 4 (id=923): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x2000, 0x800}, 0x20) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r3, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xfc, {"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", 0x1000}}, 0x1006) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, 0x0, 0x100000001, {0x7, 0x28, 0x800002, 0x2143844, 0x4004, 0x9, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffbfffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) pselect6(0x40, &(0x7f0000000100)={0x3f, 0x4, 0x10, 0x100001, 0x5, 0x2, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0) 6.538079505s ago: executing program 5 (id=924): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000340)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) 6.517299555s ago: executing program 4 (id=925): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000540)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0xfffffffb, 0x25, 'id1\x00', 'timer1\x00', 0x0, 0x9, 0x200, 0x38e41e62, 0x64}) 6.489356106s ago: executing program 1 (id=926): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffd1, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000a80)="b9fff5308944268cb899e36e0800e8e47176b3446b2c1d8839b01d436c0e6c922608", 0x0, 0x2005, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000680)=@newqdisc={0xf0, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x12, 0x0, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x3}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0xc5, '\x00', 0x6, 0x9, 0xa, 0x6}}}}, @TCA_STAB={0xa0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0xb, 0x9, 0x40, 0x1, 0x0, 0x10, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x4, 0xda, 0x0, 0x1, 0x1, 0x8, 0x7ff, 0x2}}, {0x8, 0x2, [0x0, 0x5]}}, {{0x1c, 0x1, {0xb, 0x7, 0x81, 0x2, 0x1, 0x1000, 0x2, 0x5}}, {0xe, 0x2, [0xef52, 0x5, 0x3, 0x8, 0x2]}}, {{0x1c, 0x1, {0xb2, 0xb7, 0x6, 0x7f, 0x2, 0x7, 0x7, 0x3}}, {0xa, 0x2, [0x22, 0x2, 0x4]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x10}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), r1) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB="18000008", @ANYRES16=r5, @ANYBLOB="010025bd7000fedbdf251400000004000780"], 0x18}}, 0x20040010) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) sendmsg$802154_dgram(r0, &(0x7f0000000200)={&(0x7f0000000080), 0x14, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x8804, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000100000008000100030000002c0004800500030080ff00000500030080ff00000500030080ff00000500030080ff000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) 4.890176344s ago: executing program 4 (id=927): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000004dc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{0x0}, {&(0x7f0000000200)="aa2a", 0x2}], 0x2}}, {{&(0x7f0000000440)={0x2, 0x4e21, @local}, 0x10, &(0x7f00000005c0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f00000006c0)="f2f93732f75a863fe4e1c50ff2d0db5b4cd278efefd2abf8647776cdee2c51553046156fff39bf7ed7ca7525838ee26a2bf0c125616fe4f8342e8dd970c79f3744952700441874f9d5f2e79c5d1d3f575ee5a1492c6c48f3b8b9de258239dcdac852246a6a8c35bf39e0cddc520496ca1e249bef026392d436d1", 0x7a}, {&(0x7f0000000740)="48a9c0de9bdf699bff7b61db102abf35c7f6ef86ee8c3b22e58758726cbfde71c7639efb9c597b994356da087978ab7486ff3f89046ab6875b4859d2811468c7957f7510277f0aa2d5abba0bfa784b2f76f6fb7a91da8339351a4799cb304e30ae81043171669e2c78c40c9f3bc253ed277eab0fbef8208e38d8bda50f21b404f4263ddc9e79c33b2d0fb72ff8e25ae2f7a461c3551dacb89588bb2becab17d754f9c1e767a74de233d143", 0xab}, {&(0x7f0000000800)="580988395bd8d4d6880de312c285b667b78fb779aaa2d1468a627e3ef38439e62fa165bbfeff7f011003f6f1ae0f2ca847e84c8c39245d0dbc30739d5d4e8ba4e2a2548fe0986b643644381ac303c6a27462ec48dcb6899ec40a845801ce23746d3d547ea689f5c5bb99b16fc2185dd9ec95e6fdc81b1b96cf9e327b476dfd17d8b19fe12c5f362bf9abe3", 0x8b}, {&(0x7f00000008c0)="cf74e6fe305a973f0733bf6b1c7e6e932a70003fe0c89f9cbf18900b924d764e84bb03131c8dfb8b342fa89740cd9c38de807dce707553d6b21d533cbd79d7f97a3fd6d996cefcabbf409923a94b30b491f1ae083a5078965d31eb785e76a6b80d0b6d715935935baee4f8eca30f315f8d02acee9e43dc365a6b92d4c6e4212a78d7f0d42dcb3df25c42d15c2f5c12e6921196a080ac23205679b3f25cadcb1dcd8065bd9fdfaef836b1f96b8a35d590d43b9b18c4a7d90b9d4dfd8fdb6c02d4c558920ff4a9c026adda646f04b6f18e79ec2502445773cc77aeff33ef7d8c2f5cfce535dd8bc23bb1", 0xe9}, {&(0x7f0000001780)="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", 0x4e2}, {&(0x7f0000002780)="bac35c723e1bb1f4177f19b9672933a722ef139ab356868e59bbfd8c270f1f43661bab8d49289c62720cbc951888bfded61d5d4117b09bc66f3a4875284916140a0f8542d1a2d0bd35238e63b8bd735edfce9b6aed5c0be82ac686504ee7815049a4fdd521", 0x65}], 0x6}}], 0x3, 0x4000000) 4.794974186s ago: executing program 5 (id=928): write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000001540)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) syz_ublk_setup_queues(0xffffffffffffffff, r4, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x257}, &(0x7f0000000580)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 4.790932506s ago: executing program 1 (id=929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x3}, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000000), 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e00000010800"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd502"], 0x7c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000400)}, 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 4.62518401s ago: executing program 3 (id=930): r0 = userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r4, &(0x7f0000000400), 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000780)={0xaa, 0x30}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x30c1, &(0x7f0000000040)={0x0, 0xc89f, 0x0, 0x0, 0x1b0}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 4.386473076s ago: executing program 1 (id=931): syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) time(0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000f00)=""/102400, 0x19000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x4) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002882, 0x0) dup(0xffffffffffffffff) r3 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000000040201, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000100)=0xdfe1) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) r4 = syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x5, &(0x7f0000000140)=ANY=[@ANYRESDEC=r4], &(0x7f0000000000)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x0, 0x32, 0x0, &(0x7f00000000c0)="7a7f822c2aff88df53ef2a2d86dd5367f5fdfe81b4a31ec9fa80f7d278c24752114f5ac100931fc74757b5fe31fdec5ab57b", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) 3.289592412s ago: executing program 5 (id=932): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff000000070581024000"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) 3.214947864s ago: executing program 3 (id=933): r0 = msgget$private(0x0, 0x193) msgsnd(r0, &(0x7f0000000180)=ANY=[], 0x8, 0x800) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSLCKTRMIOS(r1, 0x5457, &(0x7f0000000000)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40014) r3 = syz_clone3(&(0x7f0000000080)={0x1a8808400, 0x0, 0x0, 0x0, {0x3d}, 0x0, 0x0, 0x0, 0x0, 0xfffffeaa}, 0x58) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(r3, 0x1, &(0x7f0000000300)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) r6 = open(0x0, 0x108843, 0x55) fcntl$setlease(r6, 0x400, 0x1) open(&(0x7f0000000080)='./file0\x00', 0x101200, 0x0) r7 = socket$inet6(0x10, 0x2, 0x0) sendmsg(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000015c0)=[{0x0}], 0x1}, 0x4000) 2.711741056s ago: executing program 3 (id=934): r0 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='team_slave_1\x00', 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f00000000c0)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}}], 0x1, 0x4040) 2.635489578s ago: executing program 3 (id=935): socket$nl_netfilter(0x10, 0x3, 0xc) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = socket$inet6(0xa, 0x6, 0xd12f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, 0x0, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r6, 0xfffffffc) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a06ffffff7f070000000000000058000b480400945f64009400050038923944000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet6_int(r0, 0x29, 0x4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0xb, &(0x7f0000000000)=ANY=[], &(0x7f0000000100)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) 1.642662601s ago: executing program 3 (id=936): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x2008000, 0x0, 0xfffffffffffffe93, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r4, 0xc0f85403, &(0x7f0000000540)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0xfffffffb, 0x25, 'id1\x00', 'timer1\x00', 0x0, 0x9, 0x200, 0x38e41e62, 0x64}) 1.537170933s ago: executing program 4 (id=937): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000340)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, 0x0) 1.465292335s ago: executing program 4 (id=938): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) syz_open_dev$sg(&(0x7f0000000140), 0x0, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x41001, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0}) 599.295476ms ago: executing program 1 (id=939): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x3}, 0x0) r2 = socket(0x10, 0x2, 0x0) write(r2, &(0x7f0000000000), 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, &(0x7f00000001c0)={0x77359400}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e00000010800"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd502000000"], 0x7c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x10, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff008001fff", 0x0, 0x104, 0x6000000000000000, 0x0, 0x0, &(0x7f0000000400)}, 0x50) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8924, &(0x7f00000000c0)={'wlan0\x00', 0x1}) 299.293313ms ago: executing program 1 (id=940): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c00000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="431f07000b02000008000a00", @ANYRES32, @ANYBLOB="08000500", @ANYRES32, @ANYBLOB="1c0012800b0001006970766c616e"], 0x4c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x40050) syz_emit_ethernet(0xcf, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x99, 0x3a, 0xff, @empty, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x2e}, [{0x18, 0x10, "5e98f8a9906fcf391a9af666c53a05fe082d64759b1dacc756c40cbdd7fd650eac769a903b8557234282893d01928413677d8488bd647c5aa12e7fa028480e6e4d131461500cb162792e6e6cbbe0bb22d99decb3bd77662f0a0cc6ae227a9ddd1473a03dff5ce4dd20637da068698fce7a60478cf18e128ad7a1f3d085233d78302fd4"}]}}}}}}, 0x0) 65.150228ms ago: executing program 5 (id=941): r0 = userfaultfd(0x801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$pppl2tp(0x18, 0x1, 0x1) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000045, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r4, &(0x7f0000000400), 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000780)={0xaa, 0x30}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x24004045) io_uring_setup(0x30c1, &(0x7f0000000040)={0x0, 0xc89f, 0x0, 0x0, 0x1b0}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) 0s ago: executing program 1 (id=942): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000180)={0x4, 0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000280)=@attr_other={0x0, 0x3ff, 0x3, 0x0}) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 54.162398][ T5435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.178097][ T5435] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.89' (ED25519) to the list of known hosts. syzkaller login: [ 74.868087][ T5761] cgroup: Unknown subsys name 'net' [ 75.033904][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.746845][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 78.421659][ T5777] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 78.431103][ T5789] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 78.457868][ T5789] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 78.477083][ T5789] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 78.488072][ T5789] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 78.500299][ T5787] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 78.502543][ T5777] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 78.508599][ T5789] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 78.522696][ T5787] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 78.527302][ T5777] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 78.530928][ T5789] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 78.537391][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 78.543862][ T5787] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 78.551763][ T5777] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 78.560178][ T5787] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 78.566017][ T5791] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 78.575146][ T5789] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 78.579639][ T5777] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 78.595121][ T5789] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 78.600213][ T5777] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 78.609570][ T5789] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 78.620894][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 78.637294][ T5789] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 78.644694][ T5789] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.055166][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 79.102683][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 79.149198][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 79.293022][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.301320][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.308707][ T5774] bridge_slave_0: entered allmulticast mode [ 79.315519][ T5774] bridge_slave_0: entered promiscuous mode [ 79.343645][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.350939][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.358416][ T5774] bridge_slave_1: entered allmulticast mode [ 79.365193][ T5774] bridge_slave_1: entered promiscuous mode [ 79.378871][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 79.395396][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.402595][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.410574][ T5773] bridge_slave_0: entered allmulticast mode [ 79.418301][ T5773] bridge_slave_0: entered promiscuous mode [ 79.459318][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.469357][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.476486][ T5773] bridge_slave_1: entered allmulticast mode [ 79.483421][ T5773] bridge_slave_1: entered promiscuous mode [ 79.522160][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.542972][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.550163][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.557446][ T5772] bridge_slave_0: entered allmulticast mode [ 79.564225][ T5772] bridge_slave_0: entered promiscuous mode [ 79.582324][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.589713][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.596964][ T5772] bridge_slave_1: entered allmulticast mode [ 79.603747][ T5772] bridge_slave_1: entered promiscuous mode [ 79.613470][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.625052][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.662532][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.723583][ T5774] team0: Port device team_slave_0 added [ 79.732296][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.743540][ T5774] team0: Port device team_slave_1 added [ 79.773558][ T5773] team0: Port device team_slave_0 added [ 79.782013][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.812309][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.819540][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.827223][ T5775] bridge_slave_0: entered allmulticast mode [ 79.833941][ T5775] bridge_slave_0: entered promiscuous mode [ 79.843535][ T5773] team0: Port device team_slave_1 added [ 79.880949][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.889606][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.896873][ T5775] bridge_slave_1: entered allmulticast mode [ 79.903650][ T5775] bridge_slave_1: entered promiscuous mode [ 79.929019][ T5772] team0: Port device team_slave_0 added [ 79.935987][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.943625][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.970242][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.982948][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.990050][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.016050][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.046129][ T5772] team0: Port device team_slave_1 added [ 80.055340][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.062598][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.091205][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.102887][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.109955][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.136034][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.157142][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.201107][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.222673][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.229825][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.255869][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.276239][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.283307][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.309299][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.361998][ T5775] team0: Port device team_slave_0 added [ 80.395277][ T5773] hsr_slave_0: entered promiscuous mode [ 80.402832][ T5773] hsr_slave_1: entered promiscuous mode [ 80.413422][ T5775] team0: Port device team_slave_1 added [ 80.423571][ T5774] hsr_slave_0: entered promiscuous mode [ 80.431180][ T5774] hsr_slave_1: entered promiscuous mode [ 80.437838][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.445596][ T5774] Cannot create hsr debugfs directory [ 80.521265][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.528515][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.554659][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.572636][ T5772] hsr_slave_0: entered promiscuous mode [ 80.579358][ T5772] hsr_slave_1: entered promiscuous mode [ 80.585818][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.593478][ T5772] Cannot create hsr debugfs directory [ 80.631483][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.638672][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.664961][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.667467][ T5786] Bluetooth: hci2: command tx timeout [ 80.675849][ T5789] Bluetooth: hci0: command tx timeout [ 80.681395][ T51] Bluetooth: hci1: command tx timeout [ 80.746946][ T51] Bluetooth: hci3: command tx timeout [ 80.785617][ T5775] hsr_slave_0: entered promiscuous mode [ 80.792607][ T5775] hsr_slave_1: entered promiscuous mode [ 80.799256][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.807326][ T5775] Cannot create hsr debugfs directory [ 81.114631][ T5773] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.143587][ T5773] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.154000][ T5773] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.181830][ T5773] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.227721][ T5774] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.238965][ T5774] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.264182][ T5774] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.275553][ T5774] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.332576][ T5772] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 81.343288][ T5772] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 81.355766][ T5772] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 81.369271][ T5772] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 81.481636][ T5775] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.491705][ T5775] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.502768][ T5775] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.530225][ T5775] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.593140][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.640586][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.656116][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.663460][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.693852][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.700987][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.788672][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.827969][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.845082][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.883818][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.893025][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.900244][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.925772][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.951898][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.959120][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.976279][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.983511][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.002680][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.054268][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.061487][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.088266][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.095451][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.136089][ T1096] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.143298][ T1096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.256312][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.419602][ T5773] veth0_vlan: entered promiscuous mode [ 82.454283][ T5773] veth1_vlan: entered promiscuous mode [ 82.529960][ T5773] veth0_macvtap: entered promiscuous mode [ 82.552913][ T5773] veth1_macvtap: entered promiscuous mode [ 82.610079][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.639227][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.682147][ T5773] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.693713][ T5773] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.706995][ T5773] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.716882][ T5773] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.747615][ T51] Bluetooth: hci0: command tx timeout [ 82.751389][ T5786] Bluetooth: hci1: command tx timeout [ 82.753057][ T5789] Bluetooth: hci2: command tx timeout [ 82.795551][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.827116][ T5789] Bluetooth: hci3: command tx timeout [ 82.864440][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.908048][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.949410][ T5772] veth0_vlan: entered promiscuous mode [ 82.962443][ T5772] veth1_vlan: entered promiscuous mode [ 83.035355][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.051684][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.126474][ T5775] veth0_vlan: entered promiscuous mode [ 83.152134][ T5774] veth0_vlan: entered promiscuous mode [ 83.152288][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.165157][ T5774] veth1_vlan: entered promiscuous mode [ 83.172595][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.180567][ T5772] veth0_macvtap: entered promiscuous mode [ 83.200276][ T5775] veth1_vlan: entered promiscuous mode [ 83.211202][ T5772] veth1_macvtap: entered promiscuous mode [ 83.287721][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.301621][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.314931][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.368513][ T5774] veth0_macvtap: entered promiscuous mode [ 83.375895][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.406199][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.423386][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.440832][ T5775] veth0_macvtap: entered promiscuous mode [ 83.454478][ T5772] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.464577][ T5772] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.475611][ T5772] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.484862][ T5772] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.504226][ T5774] veth1_macvtap: entered promiscuous mode [ 83.524539][ T5775] veth1_macvtap: entered promiscuous mode [ 83.674720][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.695887][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.719389][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.735427][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.747922][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.774911][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.803075][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.813211][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.828194][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.838127][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.849935][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.861063][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.147655][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.205576][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.301352][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.309101][ T5843] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.326260][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.391781][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.485155][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.526179][ T5843] usb 2-1: device descriptor read/64, error -71 [ 84.554202][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.594610][ T5775] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.608364][ T5775] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.617907][ T5775] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.630586][ T5775] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.644234][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.645308][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.663016][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.665652][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.683923][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.694565][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.704631][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.715806][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.728405][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.739855][ T5774] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.749871][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.759081][ T5774] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.768029][ T5774] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.828254][ T5843] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 84.831111][ T51] Bluetooth: hci2: command tx timeout [ 84.835792][ T5786] Bluetooth: hci0: command tx timeout [ 84.848110][ T5789] Bluetooth: hci1: command tx timeout [ 84.907459][ T5789] Bluetooth: hci3: command tx timeout [ 84.965195][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.992221][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.006720][ T5843] usb 2-1: device descriptor read/64, error -71 [ 85.045992][ T1096] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.078122][ T1096] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.114673][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.134806][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.138260][ T5843] usb usb2-port1: attempt power cycle [ 85.315929][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.338020][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.576842][ T5843] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 85.639000][ T5843] usb 2-1: device descriptor read/8, error -71 [ 85.926883][ T5843] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 85.978392][ T5843] usb 2-1: device descriptor read/8, error -71 [ 86.145318][ T5843] usb usb2-port1: unable to enumerate USB device [ 86.919835][ T5789] Bluetooth: hci1: command tx timeout [ 86.925926][ T5789] Bluetooth: hci0: command tx timeout [ 86.931951][ T5789] Bluetooth: hci2: command tx timeout [ 86.986974][ T5786] Bluetooth: hci3: command tx timeout [ 88.499088][ T0] NOHZ tick-stop error: local softirq work is pending, handler #340!!! [ 90.086639][ T5836] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.210542][ T788] cfg80211: failed to load regulatory.db [ 96.016598][ T5817] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.197336][ T5817] usb 1-1: device descriptor read/64, error -71 [ 96.486989][ T5817] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 96.771028][ T5817] usb 1-1: device descriptor read/64, error -71 [ 97.639787][ T5817] usb usb1-port1: attempt power cycle [ 98.736603][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 103.856627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 104.413143][ T5924] autofs4:pid:5924:autofs_fill_super: called with bogus options [ 106.416575][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 107.616677][ T5789] Bluetooth: hci4: command 0x1003 tx timeout [ 107.623649][ T5786] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 108.976567][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 109.899052][ T5836] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 110.496588][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 110.537151][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.558731][ T5836] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.592118][ T5836] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 110.656981][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.726200][ T5836] usb 3-1: config 0 descriptor?? [ 111.946776][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 113.272486][ T5789] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.284821][ T5789] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.293670][ T5789] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.302475][ T5789] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.320697][ T5789] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 113.333576][ T5789] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.706645][ T28] audit: type=1800 audit(1788058482.060:2): pid=5959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.33" name="size" dev="configfs" ino=8359 res=0 errno=0 [ 114.120055][ T5836] usb 3-1: can't set config #0, error -71 [ 114.158589][ T5965] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.516753][ T5836] usb 3-1: USB disconnect, device number 2 [ 114.723657][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.387243][ T5786] Bluetooth: hci4: command tx timeout [ 116.656867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #1c0!!! [ 117.212357][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.471300][ T5786] Bluetooth: hci4: command tx timeout [ 117.511703][ T5955] chnl_net:caif_netlink_parms(): no params data found [ 118.968398][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.043922][ T5955] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.051450][ T5955] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.059266][ T5955] bridge_slave_0: entered allmulticast mode [ 119.074821][ T5955] bridge_slave_0: entered promiscuous mode [ 119.137792][ T5955] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.144996][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.207039][ T5955] bridge_slave_1: entered allmulticast mode [ 119.265059][ T5955] bridge_slave_1: entered promiscuous mode [ 119.516106][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.546841][ T5786] Bluetooth: hci4: command tx timeout [ 119.896158][ T5955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.000335][ T5955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.114065][ T5784] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.190658][ T5955] team0: Port device team_slave_0 added [ 120.243147][ T5955] team0: Port device team_slave_1 added [ 120.352385][ T5784] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.353050][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.398131][ T5784] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 120.427508][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.434586][ T5784] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0 [ 120.501135][ T5784] usb 1-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice= 1.00 [ 120.516616][ T5955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.519426][ T5784] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.537831][ T6018] netlink: 'syz.3.44': attribute type 1 has an invalid length. [ 120.551072][ T5955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.566681][ T5955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.665484][ T5955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.753234][ T5784] usb 1-1: Product: syz [ 120.758326][ T5784] usb 1-1: Manufacturer: syz [ 120.762972][ T5784] usb 1-1: SerialNumber: syz [ 121.776526][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 122.886549][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 123.206547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 123.506648][ T5786] Bluetooth: hci4: command tx timeout [ 123.521242][ T5784] ttusb_dec_send_command: command bulk message failed: error -110 [ 123.578696][ T5784] ttusb-dec: probe of 1-1:1.0 failed with error -110 [ 123.613116][ T5784] usb 1-1: USB disconnect, device number 6 [ 125.142626][ T5955] hsr_slave_0: entered promiscuous mode [ 125.200456][ T5955] hsr_slave_1: entered promiscuous mode [ 127.219192][ T5955] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.256606][ T5955] Cannot create hsr debugfs directory [ 131.682905][ T6076] binder: 6075:6076 ioctl c0306201 0 returned -14 [ 131.874496][ T5955] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 131.986847][ T6081] mmap: syz.0.55 (6081) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 132.119730][ T5955] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 132.323878][ T11] hsr_slave_0: left promiscuous mode [ 132.382512][ T11] hsr_slave_1: left promiscuous mode [ 132.470035][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.506664][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.546794][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.569797][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.362435][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.369854][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.508983][ T11] bridge_slave_1: left allmulticast mode [ 133.514663][ T11] bridge_slave_1: left promiscuous mode [ 133.568446][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.655689][ T11] bridge_slave_0: left allmulticast mode [ 133.676696][ T11] bridge_slave_0: left promiscuous mode [ 133.682519][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.733736][ T11] veth1_macvtap: left promiscuous mode [ 134.760335][ T11] veth0_macvtap: left promiscuous mode [ 134.777389][ T11] veth1_vlan: left promiscuous mode [ 134.783418][ T11] veth0_vlan: left promiscuous mode [ 137.250509][ T6101] netlink: 'syz.1.57': attribute type 1 has an invalid length. [ 138.264320][ T5837] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 138.482536][ T5837] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.505657][ T5837] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 138.515559][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.532589][ T5837] mdc800 1-1:1.0: probe fails -> wrong Interface [ 138.754127][ T5837] usb 1-1: USB disconnect, device number 7 [ 140.250616][ T11] team0 (unregistering): Port device team_slave_1 removed [ 140.468095][ T11] team0 (unregistering): Port device team_slave_0 removed [ 140.677177][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.916991][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.988531][ T6128] netlink: 'syz.3.67': attribute type 1 has an invalid length. [ 144.049412][ T11] bond0 (unregistering): Released all slaves [ 146.293372][ T5955] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 146.556680][ T5955] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 146.961436][ T5955] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.111698][ T5955] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.163751][ T3478] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.171008][ T3478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.258142][ T3478] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.265975][ T3478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.209041][ T5955] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 149.233418][ T5955] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.367963][ T5955] veth0_vlan: entered promiscuous mode [ 151.404517][ T5955] veth1_vlan: entered promiscuous mode [ 151.509466][ T5955] veth0_macvtap: entered promiscuous mode [ 151.521096][ T5955] veth1_macvtap: entered promiscuous mode [ 151.600409][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.644768][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.674767][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.706270][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.747784][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.776588][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.808491][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.854618][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.907338][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.936625][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.966530][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.976396][ T5955] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.023879][ T5955] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.058191][ T5955] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.169701][ T5955] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.236749][ T5955] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.245533][ T5955] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.286566][ T5955] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.592771][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.619216][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.720309][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.755606][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.488129][ T6229] netlink: 'syz.4.75': attribute type 1 has an invalid length. [ 166.128369][ T6287] netlink: 'syz.1.87': attribute type 1 has an invalid length. [ 169.742091][ T6313] netlink: 80 bytes leftover after parsing attributes in process `syz.3.91'. [ 173.206646][ T5837] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 173.456857][ T5837] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 173.465981][ T5837] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.517721][ T5837] usb 1-1: config 0 descriptor?? [ 173.548211][ T5837] cp210x 1-1:0.0: cp210x converter detected [ 175.569166][ T5837] usb 1-1: cp210x converter now attached to ttyUSB0 [ 176.014143][ T6346] syz.0.96[6346]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 177.608443][ T5837] usb 1-1: USB disconnect, device number 8 [ 178.612990][ T5837] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 178.644371][ T5837] cp210x 1-1:0.0: device disconnected [ 181.342069][ T6382] netlink: 80 bytes leftover after parsing attributes in process `syz.3.101'. [ 183.144447][ T6389] Zero length message leads to an empty skb [ 185.844580][ T6409] netlink: 'syz.4.97': attribute type 1 has an invalid length. [ 191.062664][ T6434] netlink: 80 bytes leftover after parsing attributes in process `syz.4.112'. [ 195.327144][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.333492][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.669040][ T5787] Bluetooth: hci3: command 0x0406 tx timeout [ 202.676244][ T5777] Bluetooth: hci0: command 0x0406 tx timeout [ 202.676258][ T5085] Bluetooth: hci2: command 0x0406 tx timeout [ 204.031979][ T51] Bluetooth: hci4: link tx timeout [ 204.037669][ T51] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 207.299724][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 208.392608][ T6542] netlink: 52 bytes leftover after parsing attributes in process `syz.4.121'. [ 243.676918][ T5817] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 244.436693][ T5817] usb 4-1: device descriptor read/64, error -71 [ 244.659150][ T6738] netlink: 44 bytes leftover after parsing attributes in process `syz.0.157'. [ 244.701542][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.157'. [ 244.735352][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.157'. [ 244.745139][ T5817] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 244.916568][ T5817] usb 4-1: device descriptor read/64, error -71 [ 245.036858][ T5817] usb usb4-port1: attempt power cycle [ 245.476663][ T5817] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 245.549153][ T5817] usb 4-1: device descriptor read/8, error -71 [ 245.826547][ T5817] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 245.901729][ T5817] usb 4-1: device descriptor read/8, error -71 [ 246.068175][ T6756] syz.0.168 (6756): attempted to duplicate a private mapping with mremap. This is not supported. [ 247.042345][ T5817] usb usb4-port1: unable to enumerate USB device [ 250.487138][ T28] audit: type=1326 audit(1788058618.860:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.4.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfdd9e159 code=0x7ffc0000 [ 250.573660][ T28] audit: type=1326 audit(1788058618.860:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.4.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfdd9e159 code=0x7ffc0000 [ 250.736923][ T28] audit: type=1326 audit(1788058618.860:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.4.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfdd9e159 code=0x7ffc0000 [ 251.696549][ T28] audit: type=1326 audit(1788058618.860:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.4.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfdd9e159 code=0x7ffc0000 [ 252.056752][ T28] audit: type=1326 audit(1788058618.860:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.4.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7fdcfdd9e159 code=0x7ffc0000 [ 252.165749][ T28] audit: type=1326 audit(1788058618.860:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.4.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfdd9e159 code=0x7ffc0000 [ 252.259087][ T28] audit: type=1326 audit(1788058618.860:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.4.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfdd9e159 code=0x7ffc0000 [ 252.363848][ T28] audit: type=1326 audit(1788058618.860:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.4.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfdd9e159 code=0x7ffc0000 [ 252.431844][ T28] audit: type=1326 audit(1788058618.860:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.4.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdcfdd9e159 code=0x7ffc0000 [ 252.479231][ T28] audit: type=1326 audit(1788058618.860:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6774 comm="syz.4.173" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=86 compat=0 ip=0x7fdcfdd9e159 code=0x7ffc0000 [ 252.914168][ T6788] netlink: 44 bytes leftover after parsing attributes in process `syz.4.176'. [ 252.934290][ T6788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.176'. [ 252.970241][ T6788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.176'. [ 254.696551][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 254.970880][ T23] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.991004][ T23] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 255.045122][ T23] usb 1-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 255.576644][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 255.620015][ T23] idmouse 1-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 256.030670][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.037062][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.537303][ T23] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 258.100375][ T27] usb 1-1: USB disconnect, device number 9 [ 258.149349][ T27] idmouse 1-1:1.0: disconnected [ 258.197755][ T23] usb 2-1: device descriptor read/64, error -71 [ 258.361498][ T6817] netlink: 32 bytes leftover after parsing attributes in process `syz.3.184'. [ 258.476714][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 259.389246][ T23] usb 2-1: device descriptor read/64, error -71 [ 259.506843][ T23] usb usb2-port1: attempt power cycle [ 260.897416][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 261.003033][ T23] usb 2-1: device descriptor read/8, error -71 [ 261.537507][ T23] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 261.687558][ T6829] netlink: 68 bytes leftover after parsing attributes in process `syz.0.188'. [ 261.757421][ T23] usb 2-1: device not accepting address 9, error -71 [ 261.908277][ T23] usb usb2-port1: unable to enumerate USB device [ 265.130663][ T6853] netlink: 44 bytes leftover after parsing attributes in process `syz.3.187'. [ 265.137759][ T51] Bluetooth: hci4: link tx timeout [ 265.140899][ T6853] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'. [ 265.145391][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 265.156877][ T6853] netlink: 8 bytes leftover after parsing attributes in process `syz.3.187'. [ 265.163559][ T51] Bluetooth: hci4: link tx timeout [ 265.175634][ T51] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 266.438227][ T6860] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 267.780567][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 268.056537][ T5819] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 268.236560][ T5819] usb 4-1: device descriptor read/64, error -71 [ 268.526570][ T5819] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 268.937921][ T5819] usb 4-1: device descriptor read/64, error -71 [ 269.066745][ T5819] usb usb4-port1: attempt power cycle [ 271.006576][ T5819] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 271.057414][ T5819] usb 4-1: device descriptor read/8, error -71 [ 271.356600][ T5819] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 271.406903][ T5819] usb 4-1: device descriptor read/8, error -71 [ 271.546779][ T5819] usb usb4-port1: unable to enumerate USB device [ 274.203449][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 278.707773][ T6916] netlink: 44 bytes leftover after parsing attributes in process `syz.1.204'. [ 278.726564][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.204'. [ 278.738839][ T6916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.204'. [ 281.877572][ T6941] netlink: 64 bytes leftover after parsing attributes in process `syz.1.218'. [ 282.107384][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 282.615412][ T6945] process 'syz.4.219' launched './file1' with NULL argv: empty string added [ 285.046637][ T23] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 285.278505][ T23] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 285.307091][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.336181][ T23] usb 5-1: config 0 descriptor?? [ 285.359835][ T23] cp210x 5-1:0.0: cp210x converter detected [ 285.853534][ T23] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 285.879524][ T23] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 285.887354][ T23] cp210x 5-1:0.0: GPIO initialisation failed: -32 [ 285.904321][ T23] usb 5-1: cp210x converter now attached to ttyUSB0 [ 285.923022][ T23] usb 5-1: USB disconnect, device number 2 [ 285.943615][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 285.963594][ T23] cp210x 5-1:0.0: device disconnected [ 287.626577][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 293.559678][ T7006] netlink: 64 bytes leftover after parsing attributes in process `syz.3.228'. [ 294.636876][ T5817] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 294.866740][ T5819] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 294.991621][ T5817] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 295.226647][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 295.291931][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.339214][ T5819] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 295.382565][ T5817] usb 4-1: config 0 descriptor?? [ 295.410857][ T5819] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 295.430231][ T5817] cp210x 4-1:0.0: cp210x converter detected [ 296.840726][ T5819] usb 1-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 296.850528][ T5819] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.080330][ T5817] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 297.283808][ T5817] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 297.473811][ T5817] cp210x 4-1:0.0: GPIO initialisation failed: -32 [ 297.520612][ T5819] usb 1-1: USB disconnect, device number 10 [ 297.559537][ T5817] usb 4-1: cp210x converter now attached to ttyUSB0 [ 297.592207][ T5817] usb 4-1: USB disconnect, device number 11 [ 297.619802][ T5817] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 297.629477][ T5817] cp210x 4-1:0.0: device disconnected [ 299.822842][ T7038] netlink: 64 bytes leftover after parsing attributes in process `syz.3.247'. [ 301.786580][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 303.394722][ T7050] binder: BINDER_SET_CONTEXT_MGR already set [ 303.494918][ T7056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.252'. [ 304.346627][ T7050] binder: 7049:7050 ioctl 4018620d 200000004a80 returned -16 [ 307.614009][ T27] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 309.228672][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 309.266554][ T27] usb 1-1: Using ep0 maxpacket: 32 [ 309.287263][ T27] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 309.306020][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.357105][ T27] usb 1-1: config 0 descriptor?? [ 311.476663][ T27] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 311.621284][ T27] usb 1-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 311.665663][ T27] usb 1-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 317.475052][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.481545][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.746728][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 330.546299][ T7183] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 334.336536][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 336.571398][ T7219] loop0: detected capacity change from 0 to 3904 [ 336.709589][ T7219] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 336.734329][ T7219] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 336.799140][ T7219] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 336.849216][ T7219] loop0: [ 337.237891][ T7223] binder: 7221:7223 ioctl 4018620d 0 returned -22 [ 339.437118][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 345.922383][ T7266] binder: 7263:7266 ioctl 4018620d 0 returned -22 [ 346.214992][ T7273] binder: 7272:7273 ioctl c0306201 0 returned -14 [ 347.966629][ T5789] Bluetooth: hci4: command 0x0406 tx timeout [ 350.016672][ T5776] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 350.206550][ T5776] usb 2-1: Using ep0 maxpacket: 16 [ 350.462778][ T5776] usb 2-1: New USB device found, idVendor=054c, idProduct=002e, bcdDevice= 5.00 [ 350.472135][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.507749][ T5776] usb 2-1: Product: syz [ 350.512059][ T5776] usb 2-1: Manufacturer: syz [ 350.546651][ T5776] usb 2-1: SerialNumber: syz [ 350.627154][ T5776] usb 2-1: config 0 descriptor?? [ 350.639337][ T5776] usb-storage 2-1:0.0: USB Mass Storage device detected [ 350.797551][ T5776] usb-storage 2-1:0.0: Quirks match for vid 054c pid 002e: 1 [ 352.326850][ T5776] usb 2-1: USB disconnect, device number 10 [ 352.527228][ T7300] binder: 7299:7300 ioctl 4018620d 0 returned -22 [ 353.991102][ T7304] binder: 7301:7304 ioctl c0306201 0 returned -14 [ 355.046535][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 356.548649][ T7327] binder: 7326:7327 ioctl c0306201 0 returned -14 [ 360.586503][ T5789] Bluetooth: hci4: command 0x0406 tx timeout [ 364.875390][ T7359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 367.048123][ T7374] binder: 7373:7374 ioctl c0306201 0 returned -14 [ 373.817920][ T27] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use /scripts/get_dvb_firmware to get the firmware [ 373.974036][ T27] dvb_usb_az6027: probe of 1-1:0.0 failed with error -110 [ 374.067263][ T27] usb 1-1: USB disconnect, device number 11 [ 374.298961][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.3.354'. [ 374.355573][ T7407] binder: 7405:7407 ioctl c0306201 0 returned -14 [ 379.053170][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.066464][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.066400][ C0] sched: RT throttling activated [ 389.776615][ T5817] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 390.111609][ T5817] usb 1-1: New USB device found, idVendor=056a, idProduct=033b, bcdDevice= 0.00 [ 390.136629][ T5836] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 390.250694][ T5817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 390.399929][ T5836] usb 5-1: device descriptor read/64, error -71 [ 390.786652][ T5836] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 390.957146][ T5836] usb 5-1: device descriptor read/64, error -71 [ 391.089067][ T5836] usb usb5-port1: attempt power cycle [ 392.206861][ T5817] usb 1-1: can't set config #1, error -71 [ 392.220606][ T5817] usb 1-1: USB disconnect, device number 12 [ 392.376757][ T5836] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 392.627646][ T5836] usb 5-1: device descriptor read/8, error -71 [ 400.362349][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'. [ 402.516456][ T5776] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 404.084938][ T5776] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 404.107868][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.129568][ T5776] usb 1-1: config 0 descriptor?? [ 404.142631][ T5776] cp210x 1-1:0.0: cp210x converter detected [ 404.561783][ T5776] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 404.586742][ T5776] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 404.594461][ T5776] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 404.638649][ T5776] usb 1-1: cp210x converter now attached to ttyUSB0 [ 404.797128][ T5776] usb 1-1: USB disconnect, device number 13 [ 404.838584][ T5776] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 404.881174][ T5776] cp210x 1-1:0.0: device disconnected [ 408.348648][ T7566] netlink: 'syz.1.404': attribute type 30 has an invalid length. [ 408.526742][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz.1.404'. [ 408.535624][ T7566] bond0: option arp_missed_max: invalid value (0) [ 408.584377][ T7566] bond0: option arp_missed_max: allowed values 1 - 255 [ 411.374057][ T7591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 414.066591][ T5837] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 414.799679][ T5837] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 414.826042][ T5837] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.856000][ T5837] usb 5-1: config 0 descriptor?? [ 414.880200][ T5837] cp210x 5-1:0.0: cp210x converter detected [ 416.207980][ T5837] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 416.225846][ T5837] cp210x 5-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 416.728695][ T5837] cp210x 5-1:0.0: GPIO initialisation failed: -121 [ 416.806087][ T5837] usb 5-1: cp210x converter now attached to ttyUSB0 [ 416.900599][ T5837] usb 5-1: USB disconnect, device number 7 [ 416.957394][ T5837] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 416.988563][ T5837] cp210x 5-1:0.0: device disconnected [ 419.647178][ T5776] hid-generic 0005:046D:C082.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 422.148268][ T7652] fido_id[7652]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 422.585007][ T7652] fido_id (7652) used greatest stack depth: 20904 bytes left [ 422.892020][ T5776] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 423.140044][ T5776] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 423.156819][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.181328][ T5776] usb 1-1: config 0 descriptor?? [ 423.205908][ T5776] cp210x 1-1:0.0: cp210x converter detected [ 423.613854][ T5776] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 423.633712][ T5776] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 423.660297][ T5776] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 423.812970][ T5776] usb 1-1: cp210x converter now attached to ttyUSB0 [ 424.029818][ T7663] binder: BINDER_SET_CONTEXT_MGR already set [ 424.125064][ T5776] usb 1-1: USB disconnect, device number 14 [ 424.195752][ T7663] binder: 7662:7663 ioctl 4018620d 200000004a80 returned -16 [ 424.264111][ T5776] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 424.374459][ T7663] binder: 7662:7663 ioctl c0306201 0 returned -14 [ 424.459944][ T5776] cp210x 1-1:0.0: device disconnected [ 426.077424][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 429.483577][ T7699] binder: BINDER_SET_CONTEXT_MGR already set [ 429.516691][ T7699] binder: 7694:7699 ioctl 4018620d 200000004a80 returned -16 [ 429.549549][ T7699] binder: 7694:7699 ioctl c0306201 0 returned -14 [ 432.224853][ T5776] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 432.530813][ T5776] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 432.550258][ T5776] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.607685][ T5776] usb 1-1: config 0 descriptor?? [ 432.637093][ T5776] cp210x 1-1:0.0: cp210x converter detected [ 433.052362][ T5776] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 433.075097][ T5776] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 433.087768][ T5776] cp210x 1-1:0.0: GPIO initialisation failed: -121 [ 433.104680][ T5776] usb 1-1: cp210x converter now attached to ttyUSB0 [ 433.333796][ T23] usb 1-1: USB disconnect, device number 15 [ 433.354001][ T23] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 433.375162][ T23] cp210x 1-1:0.0: device disconnected [ 438.681616][ T5786] Bluetooth: hci4: ACL packet for unknown connection handle 200 [ 438.742831][ T7753] binder: 7752:7753 ioctl c0306201 0 returned -14 [ 441.370562][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 441.377134][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.383414][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.156558][ T788] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 452.326840][ T788] usb 5-1: device descriptor read/64, error -71 [ 452.680750][ T788] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 452.726699][ T7811] binder: BINDER_SET_CONTEXT_MGR already set [ 452.743933][ T7811] binder: 7806:7811 ioctl 4018620d 200000004a80 returned -16 [ 454.336670][ T788] usb 5-1: device descriptor read/64, error -71 [ 454.774390][ T788] usb usb5-port1: attempt power cycle [ 462.247881][ T7855] binder: BINDER_SET_CONTEXT_MGR already set [ 462.267250][ T7855] binder: 7854:7855 ioctl 4018620d 200000004a80 returned -16 [ 467.859031][ T28] kauditd_printk_skb: 153 callbacks suppressed [ 467.859087][ T28] audit: type=1800 audit(1788058836.240:166): pid=7879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.491" name="file0" dev="overlay" ino=751 res=0 errno=0 [ 470.702336][ T7899] netlink: 80 bytes leftover after parsing attributes in process `syz.0.499'. [ 478.792707][ T7939] netlink: 28 bytes leftover after parsing attributes in process `syz.4.512'. [ 479.256521][ T5818] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 479.496567][ T5818] usb 4-1: device descriptor read/64, error -71 [ 480.136651][ T5818] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 480.366700][ T5818] usb 4-1: device descriptor read/64, error -71 [ 480.528218][ T5818] usb usb4-port1: attempt power cycle [ 482.227433][ T5818] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 482.276832][ T5818] usb 4-1: device descriptor read/8, error -71 [ 484.184543][ T7971] netlink: 44 bytes leftover after parsing attributes in process `syz.0.521'. [ 484.212927][ T7971] netlink: 12 bytes leftover after parsing attributes in process `syz.0.521'. [ 484.243140][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 484.264921][ T7974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.521'. [ 486.087176][ T23] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 486.277941][ T23] usb 5-1: device descriptor read/64, error -71 [ 486.626645][ T23] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 486.864482][ T23] usb 5-1: device descriptor read/64, error -71 [ 487.006701][ T23] usb usb5-port1: attempt power cycle [ 487.612255][ T7992] netlink: 80 bytes leftover after parsing attributes in process `syz.1.524'. [ 488.856704][ T23] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 489.122361][ T23] usb 5-1: device not accepting address 13, error -71 [ 491.942136][ T8018] netlink: 80 bytes leftover after parsing attributes in process `syz.3.539'. [ 493.386564][ T5818] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 493.926440][ T5818] usb 1-1: device descriptor read/64, error -71 [ 494.205991][ T5818] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 494.386526][ T5818] usb 1-1: device descriptor read/64, error -71 [ 494.507213][ T5818] usb usb1-port1: attempt power cycle [ 494.936643][ T5818] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 495.008159][ T5818] usb 1-1: device descriptor read/8, error -71 [ 495.286635][ T5818] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 495.362829][ T5818] usb 1-1: device descriptor read/8, error -71 [ 496.636862][ T5818] usb usb1-port1: unable to enumerate USB device [ 498.053903][ T8061] netlink: 80 bytes leftover after parsing attributes in process `syz.4.548'. [ 501.084600][ T5837] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 501.291489][ T5837] usb 2-1: device descriptor read/64, error -71 [ 501.586686][ T5837] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 502.162022][ T8087] netlink: 80 bytes leftover after parsing attributes in process `syz.0.560'. [ 503.053170][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.435538][ T5837] usb 2-1: device descriptor read/64, error -71 [ 504.444558][ T5789] Bluetooth: hci4: command 0x0406 tx timeout [ 504.446492][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.596888][ T5837] usb usb2-port1: attempt power cycle [ 508.220862][ T8122] netlink: 80 bytes leftover after parsing attributes in process `syz.1.571'. [ 512.546535][ T5784] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 512.716642][ T5784] usb 5-1: device descriptor read/64, error -71 [ 513.026630][ T5784] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 513.411745][ T5784] usb 5-1: device descriptor read/64, error -71 [ 514.326492][ T5786] Bluetooth: hci4: command 0x0406 tx timeout [ 514.606902][ T8159] 9pnet_fd: Insufficient options for proto=fd [ 514.816788][ T5784] usb usb5-port1: attempt power cycle [ 515.472528][ T8164] netlink: 80 bytes leftover after parsing attributes in process `syz.3.581'. [ 516.436462][ T5784] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 518.097346][ T5784] usb 5-1: device not accepting address 17, error -71 [ 523.342435][ T8207] netlink: 80 bytes leftover after parsing attributes in process `syz.3.591'. [ 525.586757][ T5836] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 525.876444][ T5836] usb 2-1: Using ep0 maxpacket: 8 [ 525.914318][ T5836] usb 2-1: config 8 has an invalid interface number: 188 but max is 0 [ 525.933188][ T5836] usb 2-1: config 8 has no interface number 0 [ 525.947105][ T5836] usb 2-1: config 8 interface 188 altsetting 0 has an invalid endpoint with address 0xFD, skipping [ 525.982287][ T5836] usb 2-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=8f.67 [ 526.005744][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.056426][ T5836] usb 2-1: Product: syz [ 526.060679][ T5836] usb 2-1: Manufacturer: syz [ 526.065311][ T5836] usb 2-1: SerialNumber: syz [ 527.190641][ T5836] vmk80xx 2-1:8.188: driver 'vmk80xx' failed to auto-configure device. [ 527.256460][ T5836] usb 2-1: USB disconnect, device number 14 [ 532.407125][ T8247] netlink: 168 bytes leftover after parsing attributes in process `syz.1.603'. [ 536.202338][ T8267] netlink: 80 bytes leftover after parsing attributes in process `syz.0.602'. [ 537.140852][ T5784] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 542.098722][ T5818] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 542.246653][ T5784] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 542.356570][ T5818] usb 4-1: Using ep0 maxpacket: 8 [ 542.403493][ T5818] usb 4-1: unable to get BOS descriptor or descriptor too short [ 542.452273][ T5818] usb 4-1: config 0 has an invalid interface number: 88 but max is 0 [ 542.466163][ T5818] usb 4-1: config 0 has no interface number 0 [ 542.502540][ T5784] usb 5-1: Using ep0 maxpacket: 16 [ 542.531348][ T5818] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 542.606878][ T5784] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.630920][ T5818] usb 4-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 542.641642][ T5784] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 542.651921][ T5818] usb 4-1: config 0 interface 88 has no altsetting 0 [ 542.664755][ T5784] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 542.680765][ T5784] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 542.701309][ T5784] usb 5-1: Product: syz [ 542.709434][ T5818] usb 4-1: string descriptor 0 read error: -22 [ 542.721018][ T5818] usb 4-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 542.734907][ T5784] usb 5-1: Manufacturer: syz [ 542.747600][ T5784] usb 5-1: SerialNumber: syz [ 542.756389][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 542.843174][ T5818] usb 4-1: config 0 descriptor?? [ 543.036163][ T5818] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.88/input/input6 [ 543.053447][ T5784] usb 5-1: 0:2 : does not exist [ 544.310570][ T5784] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 544.444030][ T5784] usb 5-1: USB disconnect, device number 19 [ 544.460699][ T788] usb 4-1: USB disconnect, device number 17 [ 544.740337][ T8285] udevd[8285]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.746551][ T8310] ip6gretap0: entered allmulticast mode [ 547.087802][ T8329] netlink: 564 bytes leftover after parsing attributes in process `syz.1.624'. [ 549.426699][ T5789] Bluetooth: hci4: command 0x0406 tx timeout [ 551.223209][ T8352] netlink: 80 bytes leftover after parsing attributes in process `syz.4.620'. [ 555.246462][ T5818] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 555.579559][ T5818] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 555.588810][ T5818] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 555.617684][ T5818] usb 4-1: config 0 descriptor?? [ 555.629872][ T5818] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 555.847374][ T5818] gspca_cpia1: usb_control_msg 05, error -71 [ 555.856995][ T5818] gspca_cpia1: usb_control_msg 01, error -71 [ 555.864030][ T5818] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0) [ 555.887269][ T5818] usb 4-1: USB disconnect, device number 18 [ 563.233668][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.240134][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 571.363297][ T8462] netlink: 80 bytes leftover after parsing attributes in process `syz.0.639'. [ 572.539526][ T8463] syz.0.639 (8463) used greatest stack depth: 18896 bytes left [ 580.782735][ T8499] netlink: 80 bytes leftover after parsing attributes in process `syz.4.668'. [ 586.746522][ T5818] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 586.976686][ T5818] usb 1-1: device descriptor read/64, error -71 [ 587.476710][ T5818] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 587.939796][ T5818] usb 1-1: device descriptor read/64, error -71 [ 588.072908][ T5818] usb usb1-port1: attempt power cycle [ 589.296417][ T5818] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 589.367162][ T5818] usb 1-1: device descriptor read/8, error -71 [ 589.630999][ T5786] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 589.651724][ T5786] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 589.660339][ T5786] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 589.670365][ T5786] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 589.687516][ T5786] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 589.695986][ T5786] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 589.704344][ T5818] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 589.747311][ T5818] usb 1-1: device descriptor read/8, error -71 [ 589.888918][ T5818] usb usb1-port1: unable to enumerate USB device [ 590.689354][ T4447] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.819102][ T4447] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.925703][ T4447] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.001606][ T4447] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.139647][ T5789] Bluetooth: hci1: command tx timeout [ 592.263054][ T8543] chnl_net:caif_netlink_parms(): no params data found [ 592.451150][ T8543] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.458518][ T8543] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.465884][ T8543] bridge_slave_0: entered allmulticast mode [ 592.474193][ T8543] bridge_slave_0: entered promiscuous mode [ 592.484043][ T8543] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.491647][ T8543] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.506749][ T8543] bridge_slave_1: entered allmulticast mode [ 592.525701][ T8543] bridge_slave_1: entered promiscuous mode [ 592.659561][ T8543] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.752415][ T8543] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 594.377482][ T5789] Bluetooth: hci1: command tx timeout [ 594.381741][ T8570] netlink: 80 bytes leftover after parsing attributes in process `syz.4.682'. [ 594.621277][ T8543] team0: Port device team_slave_0 added [ 594.708130][ T8543] team0: Port device team_slave_1 added [ 594.882761][ T8543] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.913752][ T8543] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.983071][ T8543] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 595.193296][ T8543] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 595.242054][ T8543] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 595.326518][ T8543] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 596.251585][ T8543] hsr_slave_0: entered promiscuous mode [ 596.258568][ T8543] hsr_slave_1: entered promiscuous mode [ 596.266948][ T8543] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 596.274553][ T8543] Cannot create hsr debugfs directory [ 596.506792][ T5786] Bluetooth: hci1: command tx timeout [ 597.446173][ T8605] netlink: 52 bytes leftover after parsing attributes in process `syz.4.688'. [ 598.586619][ T5786] Bluetooth: hci1: command tx timeout [ 598.665446][ T8621] netlink: 52 bytes leftover after parsing attributes in process `syz.4.690'. [ 600.025618][ T8630] netlink: 80 bytes leftover after parsing attributes in process `syz.3.691'. [ 600.476641][ T4447] hsr_slave_0: left promiscuous mode [ 600.530613][ T4447] hsr_slave_1: left promiscuous mode [ 600.550392][ T4447] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 600.578689][ T4447] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 600.593808][ T4447] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 600.634284][ T4447] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 600.677384][ T4447] bridge_slave_1: left allmulticast mode [ 600.683104][ T4447] bridge_slave_1: left promiscuous mode [ 600.717610][ T4447] bridge0: port 2(bridge_slave_1) entered disabled state [ 601.004541][ T4447] bridge_slave_0: left allmulticast mode [ 601.035259][ T4447] bridge_slave_0: left promiscuous mode [ 601.085045][ T4447] bridge0: port 1(bridge_slave_0) entered disabled state [ 601.347714][ T4447] veth1_macvtap: left promiscuous mode [ 601.389055][ T4447] veth0_macvtap: left promiscuous mode [ 601.435518][ T4447] veth1_vlan: left promiscuous mode [ 601.466098][ T4447] veth0_vlan: left promiscuous mode [ 605.856779][ T4447] team0 (unregistering): Port device team_slave_1 removed [ 605.933872][ T4447] team0 (unregistering): Port device team_slave_0 removed [ 605.987134][ T4447] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 606.063622][ T4447] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 606.501659][ T4447] bond0 (unregistering): Released all slaves [ 606.661416][ T8674] netlink: 52 bytes leftover after parsing attributes in process `syz.3.699'. [ 607.188901][ T8543] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 607.245141][ T8543] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 607.282819][ T8543] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 607.526494][ T8543] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 608.163348][ T8543] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.316806][ T8543] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.402308][ T7815] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.409573][ T7815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.497554][ T7815] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.504812][ T7815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 610.011022][ T8543] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 610.275475][ T8720] netlink: 72 bytes leftover after parsing attributes in process `syz.3.707'. [ 611.223366][ T8733] netlink: 52 bytes leftover after parsing attributes in process `syz.4.708'. [ 612.410996][ T8543] veth0_vlan: entered promiscuous mode [ 612.470175][ T8543] veth1_vlan: entered promiscuous mode [ 612.582128][ T8543] veth0_macvtap: entered promiscuous mode [ 612.618258][ T8543] veth1_macvtap: entered promiscuous mode [ 612.742708][ T8543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 612.901511][ T8543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 612.924081][ T8543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.713096][ T8543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.738513][ T8543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 613.761205][ T8543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 613.847313][ T8543] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 613.926959][ T8543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 613.958341][ T8543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.014648][ T8543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.030668][ T8543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.046613][ T8755] loop0: detected capacity change from 0 to 3904 [ 614.062091][ T8543] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 614.078530][ T8543] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 614.090382][ T8543] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 614.123408][ T8755] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 614.133940][ T8543] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.152647][ T8755] ldm_parse_privhead(): PRIVHEAD disk size doesn't match real disk size [ 614.161290][ T8543] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.184597][ T8543] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.195037][ T8755] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 614.214136][ T8543] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 614.225481][ T8755] loop0: [ 614.526631][ T4447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 614.534532][ T4447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.033756][ T7815] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 616.073718][ T7815] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 616.887862][ T8778] syz.1.715: attempt to access beyond end of device [ 616.887862][ T8778] nbd1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 616.901107][ T8778] F2FS-fs (nbd1): Unable to read 1th superblock [ 616.908285][ T8778] syz.1.715: attempt to access beyond end of device [ 616.908285][ T8778] nbd1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 616.933336][ T8779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 616.955120][ T8778] F2FS-fs (nbd1): Unable to read 2th superblock [ 617.521200][ T8382] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 617.730957][ T8382] usb 5-1: Using ep0 maxpacket: 8 [ 617.738560][ T8382] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 617.764185][ T8382] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 617.793944][ T8382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.828073][ T8382] usb 5-1: Product: syz [ 617.832310][ T8382] usb 5-1: Manufacturer: syz [ 617.878575][ T8382] usb 5-1: SerialNumber: syz [ 617.905435][ T8382] usb 5-1: config 0 descriptor?? [ 617.936705][ T8382] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 617.944942][ T8382] usb 5-1: setting power ON [ 617.976719][ T8382] dvb-usb: bulk message failed: -22 (2/0) [ 618.015295][ T8382] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 618.220149][ T8769] dvb-usb: bulk message failed: -22 (3/0) [ 618.226150][ T8769] dvb-usb: bulk message failed: -22 (3/0) [ 618.246528][ T8382] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 618.268809][ T8382] usb 5-1: media controller created [ 619.000128][ T8382] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 619.180002][ T8382] usb 5-1: selecting invalid altsetting 6 [ 619.186235][ T8382] usb 5-1: digital interface selection failed (-22) [ 619.225629][ T8382] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 619.272902][ T8382] usb 5-1: setting power OFF [ 619.305591][ T8382] dvb-usb: bulk message failed: -22 (2/0) [ 620.361270][ T8382] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 620.408394][ T8382] (NULL device *): no alternate interface [ 620.558077][ T8382] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 620.656815][ T8382] usb 5-1: USB disconnect, device number 20 [ 620.686793][ T788] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 622.218694][ T788] usb 2-1: config index 0 descriptor too short (expected 74, got 72) [ 622.236565][ T788] usb 2-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 622.258354][ T788] usb 2-1: config 1 interface 0 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 622.288682][ T788] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 1.00 [ 622.306388][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 622.315651][ T788] usb 2-1: Product: syz [ 622.320077][ T788] usb 2-1: Manufacturer: syz [ 622.324720][ T788] usb 2-1: SerialNumber: syz [ 622.363025][ T788] usb 2-1: can't set config #1, error -71 [ 622.394878][ T788] usb 2-1: USB disconnect, device number 15 [ 624.823849][ T8833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.732'. [ 625.765807][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.772316][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.216439][ T8382] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 627.446485][ T8382] usb 6-1: Using ep0 maxpacket: 32 [ 627.496573][ T23] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 627.593924][ T8382] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 627.606460][ T8382] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 627.651107][ T8382] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 627.935389][ T8382] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.964074][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 627.974822][ T8382] usb 6-1: config 0 descriptor?? [ 627.985929][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 628.018392][ T23] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= a.f5 [ 628.069120][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 628.109218][ T23] usb 5-1: Product: syz [ 628.114237][ T23] usb 5-1: Manufacturer: syz [ 628.138248][ T23] usb 5-1: SerialNumber: syz [ 628.163680][ T23] usb 5-1: config 0 descriptor?? [ 628.182533][ T8861] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 628.200181][ T23] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 629.764114][ T5817] usb 5-1: USB disconnect, device number 21 [ 629.953138][ T8883] udevd[8883]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 630.821022][ T5837] usb 6-1: USB disconnect, device number 2 [ 632.566684][ T5837] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 632.789261][ T5837] usb 5-1: config index 0 descriptor too short (expected 74, got 72) [ 632.805726][ T5837] usb 5-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 632.866587][ T5837] usb 5-1: config 1 interface 0 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 632.922888][ T5837] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 1.00 [ 632.966432][ T5837] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.015291][ T5837] usb 5-1: Product: syz [ 633.035575][ T5837] usb 5-1: Manufacturer: syz [ 633.055915][ T5837] usb 5-1: SerialNumber: syz [ 633.229405][ T5837] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 634.688343][ T7812] usb 5-1: Failed to submit usb control message: -71 [ 634.695372][ T7812] usb 5-1: unable to send the bmi data to the device: -71 [ 634.768167][ T5837] usb 5-1: USB disconnect, device number 22 [ 634.777541][ T7812] usb 5-1: unable to get target info from device [ 634.783999][ T7812] usb 5-1: could not get target info (-71) [ 634.796622][ T7812] usb 5-1: could not probe fw (-71) [ 638.107517][ T5786] Bluetooth: hci1: link tx timeout [ 638.113202][ T5786] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 638.126998][ T5789] Bluetooth: hci1: link tx timeout [ 638.132191][ T5789] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 639.777350][ T5836] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 640.816874][ T5789] Bluetooth: hci1: command 0x0406 tx timeout [ 641.614654][ T8976] Bluetooth: Invalid esc byte 0x04 [ 641.626796][ T5836] usb 4-1: device not accepting address 19, error -71 [ 641.701998][ T8976] Bluetooth: ISO socket layer initialized [ 641.739392][ T7815] Bluetooth: (null): Invalid header checksum [ 641.745940][ T7815] Bluetooth: (null): Invalid header checksum [ 641.825007][ T7815] Bluetooth: (null): Invalid header checksum [ 641.855991][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.3.753'. [ 641.936150][ T8623] Bluetooth: (null): Invalid header checksum [ 642.039886][ T7815] Bluetooth: (null): Invalid header checksum [ 642.466616][ T28] audit: type=1800 audit(1788059010.840:167): pid=8986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.754" name="file0" dev="overlay" ino=1097 res=0 errno=0 [ 643.223249][ T8992] netlink: 28 bytes leftover after parsing attributes in process `syz.3.755'. [ 646.786456][ T23] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 646.976661][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 647.002530][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.059593][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 648.096780][ T23] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 648.126430][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 648.157783][ T23] usb 5-1: config 0 descriptor?? [ 648.176478][ T28] audit: type=1800 audit(1788059016.550:168): pid=9037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.763" name="file0" dev="overlay" ino=1127 res=0 errno=0 [ 648.362650][ T9046] netlink: 44 bytes leftover after parsing attributes in process `syz.3.766'. [ 648.373311][ T9046] netlink: 12 bytes leftover after parsing attributes in process `syz.3.766'. [ 650.751784][ T23] usb 5-1: USB disconnect, device number 23 [ 652.768317][ T9093] netlink: 44 bytes leftover after parsing attributes in process `syz.4.775'. [ 652.786525][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.4.775'. [ 652.799866][ T9074] netlink: 20 bytes leftover after parsing attributes in process `syz.5.765'. [ 655.329240][ T28] audit: type=1800 audit(1788059023.690:169): pid=9124 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.781" name="file0" dev="overlay" ino=1131 res=0 errno=0 [ 655.881932][ T9135] netlink: 44 bytes leftover after parsing attributes in process `syz.1.784'. [ 655.935648][ T9135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.784'. [ 656.622633][ T9144] netlink: 20 bytes leftover after parsing attributes in process `syz.4.786'. [ 660.277285][ T9151] sctp: failed to load transform for md5: -4 [ 660.520466][ T28] audit: type=1800 audit(1788059028.900:170): pid=9167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.791" name="file0" dev="overlay" ino=1166 res=0 errno=0 [ 660.860618][ T9175] netlink: 168 bytes leftover after parsing attributes in process `syz.1.792'. [ 663.843012][ T9198] netlink: 20 bytes leftover after parsing attributes in process `syz.3.795'. [ 665.406471][ T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 665.646102][ T23] usb 6-1: Using ep0 maxpacket: 32 [ 665.678984][ T23] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 665.706460][ T23] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 665.756209][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 665.798920][ T23] usb 6-1: config 0 descriptor?? [ 666.624720][ T9225] netlink: 44 bytes leftover after parsing attributes in process `syz.4.797'. [ 666.664452][ T9225] netlink: 12 bytes leftover after parsing attributes in process `syz.4.797'. [ 666.687099][ T788] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 666.899002][ T788] usb 2-1: config index 0 descriptor too short (expected 74, got 72) [ 666.943126][ T788] usb 2-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 666.970057][ T788] usb 2-1: config 1 interface 0 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 667.006152][ T28] audit: type=1800 audit(1788059035.370:171): pid=9234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.800" name="file0" dev="overlay" ino=1051 res=0 errno=0 [ 667.044671][ T788] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 1.00 [ 667.054535][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.065439][ T788] usb 2-1: Product: syz [ 667.075317][ T788] usb 2-1: Manufacturer: syz [ 667.080555][ T788] usb 2-1: SerialNumber: syz [ 667.128309][ T788] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 667.867922][ T5776] usb 2-1: USB disconnect, device number 16 [ 667.874454][ T9120] usb 2-1: Failed to submit usb control message: -71 [ 667.888256][ T9120] usb 2-1: unable to send the bmi data to the device: -71 [ 667.895499][ T9120] usb 2-1: unable to get target info from device [ 667.906057][ T9120] usb 2-1: could not get target info (-71) [ 667.924333][ T9120] usb 2-1: could not probe fw (-71) [ 668.157123][ T5817] usb 6-1: USB disconnect, device number 3 [ 673.086488][ T5817] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 673.281666][ T5817] usb 5-1: Using ep0 maxpacket: 32 [ 673.289367][ T5817] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 673.309248][ T5817] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 673.343053][ T5817] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.400216][ T5817] usb 5-1: config 0 descriptor?? [ 675.102711][ T9303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.806'. [ 676.198109][ T9308] netlink: 44 bytes leftover after parsing attributes in process `syz.5.809'. [ 676.216417][ T9308] netlink: 12 bytes leftover after parsing attributes in process `syz.5.809'. [ 678.050000][ T5818] usb 5-1: USB disconnect, device number 24 [ 679.880395][ T9335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.815'. [ 679.920084][ T9335] ipvlan2: entered allmulticast mode [ 679.929916][ T9335] syz_tun: entered allmulticast mode [ 682.083449][ T9349] netlink: 20 bytes leftover after parsing attributes in process `syz.1.824'. [ 685.324324][ T9362] netlink: 44 bytes leftover after parsing attributes in process `syz.5.825'. [ 685.345566][ T9362] netlink: 12 bytes leftover after parsing attributes in process `syz.5.825'. [ 687.255245][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.266389][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.610916][ T5776] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 688.143497][ T9383] netlink: 20 bytes leftover after parsing attributes in process `syz.5.835'. [ 689.166787][ T5776] usb 2-1: Using ep0 maxpacket: 32 [ 689.238288][ T9385] netlink: 168 bytes leftover after parsing attributes in process `syz.3.828'. [ 689.340207][ T5776] usb 2-1: device descriptor read/all, error -71 [ 690.387906][ T9391] netlink: 44 bytes leftover after parsing attributes in process `syz.3.838'. [ 690.402157][ T9391] netlink: 12 bytes leftover after parsing attributes in process `syz.3.838'. [ 690.946703][ T9397] netlink: 12 bytes leftover after parsing attributes in process `syz.4.834'. [ 691.104488][ T5786] Bluetooth: hci1: link tx timeout [ 691.110602][ T5786] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 691.123706][ T5786] Bluetooth: hci1: link tx timeout [ 691.129230][ T5786] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 691.138432][ T5786] Bluetooth: hci1: link tx timeout [ 691.143729][ T5786] Bluetooth: hci1: killing stalled connection 10:aa:aa:aa:aa:aa [ 693.148192][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 695.720363][ T9423] netlink: 44 bytes leftover after parsing attributes in process `syz.5.847'. [ 695.740019][ T9423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.847'. [ 695.807169][ T5836] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 695.986744][ T5836] usb 2-1: Using ep0 maxpacket: 32 [ 696.004985][ T5836] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 696.014174][ T5836] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.036685][ T5836] usb 2-1: config 0 descriptor?? [ 696.234613][ T5818] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 696.251458][ T5836] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 696.267649][ T5836] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 696.294317][ T5836] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 696.439865][ T5818] usb 6-1: config index 0 descriptor too short (expected 74, got 72) [ 696.453593][ T5818] usb 6-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 696.469750][ T5818] usb 6-1: config 1 interface 0 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 696.494183][ T5818] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 1.00 [ 696.516464][ T5818] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 696.524580][ T5818] usb 6-1: Product: syz [ 696.530503][ T5818] usb 6-1: Manufacturer: syz [ 696.535152][ T5818] usb 6-1: SerialNumber: syz [ 696.567393][ T5818] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 696.775117][ T5818] usb 6-1: USB disconnect, device number 4 [ 696.776453][ T3472] usb 6-1: Failed to submit usb control message: -71 [ 696.802384][ T3472] usb 6-1: unable to send the bmi data to the device: -71 [ 696.815793][ T3472] usb 6-1: unable to get target info from device [ 696.842544][ T3472] usb 6-1: could not get target info (-71) [ 696.853875][ T3472] usb 6-1: could not probe fw (-71) [ 698.989563][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 700.696165][ T9464] netlink: 44 bytes leftover after parsing attributes in process `syz.5.856'. [ 700.723305][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.5.856'. [ 702.787340][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 703.006436][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 703.033482][ T9] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 703.043310][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.065484][ T9] usb 6-1: config 0 descriptor?? [ 703.119667][ T9488] syz.4.858: attempt to access beyond end of device [ 703.119667][ T9488] nbd4: rw=0, sector=0, nr_sectors = 8 limit=0 [ 703.132525][ T9488] F2FS-fs (nbd4): Unable to read 1th superblock [ 703.139022][ T9488] syz.4.858: attempt to access beyond end of device [ 703.139022][ T9488] nbd4: rw=0, sector=8, nr_sectors = 8 limit=0 [ 703.151838][ T9488] F2FS-fs (nbd4): Unable to read 2th superblock [ 703.501965][ T9] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 705.471665][ T9497] netlink: 44 bytes leftover after parsing attributes in process `syz.5.867'. [ 705.496389][ T9497] netlink: 12 bytes leftover after parsing attributes in process `syz.5.867'. [ 705.721977][ T9499] netlink: 12 bytes leftover after parsing attributes in process `syz.5.868'. [ 707.876451][ T5789] Bluetooth: hci1: command 0x0406 tx timeout [ 709.757512][ T9524] netlink: 44 bytes leftover after parsing attributes in process `syz.5.876'. [ 709.791263][ T9524] netlink: 12 bytes leftover after parsing attributes in process `syz.5.876'. [ 709.845229][ T9525] netlink: 20 bytes leftover after parsing attributes in process `syz.5.876'. [ 710.170455][ T9545] Trying to write to read-only block-device nullb0 [ 712.106768][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 712.544013][ T9561] netlink: 44 bytes leftover after parsing attributes in process `syz.1.889'. [ 712.553103][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.889'. [ 712.563543][ T9561] netlink: 20 bytes leftover after parsing attributes in process `syz.1.889'. [ 717.847981][ T9590] netlink: 44 bytes leftover after parsing attributes in process `syz.5.899'. [ 717.881172][ T9590] netlink: 12 bytes leftover after parsing attributes in process `syz.5.899'. [ 717.902836][ T9591] netlink: 20 bytes leftover after parsing attributes in process `syz.5.899'. [ 720.254177][ T5789] Bluetooth: hci1: command 0x0406 tx timeout [ 720.736176][ T9617] netlink: 44 bytes leftover after parsing attributes in process `syz.3.908'. [ 720.775505][ T9617] netlink: 12 bytes leftover after parsing attributes in process `syz.3.908'. [ 720.836751][ T9618] netlink: 20 bytes leftover after parsing attributes in process `syz.3.908'. [ 726.115166][ T9657] netlink: 44 bytes leftover after parsing attributes in process `syz.4.920'. [ 726.135766][ T9657] netlink: 12 bytes leftover after parsing attributes in process `syz.4.920'. [ 726.166154][ T9657] netlink: 20 bytes leftover after parsing attributes in process `syz.4.920'. [ 726.284983][ T5786] Bluetooth: hci1: command 0x0406 tx timeout [ 730.037126][ T9690] netlink: 44 bytes leftover after parsing attributes in process `syz.1.929'. [ 730.046087][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.929'. [ 730.088078][ T9687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.929'. [ 733.786397][ T5789] Bluetooth: hci1: command 0x0406 tx timeout [ 734.111949][ T9721] netlink: 44 bytes leftover after parsing attributes in process `syz.1.939'. [ 734.136882][ T9721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.939'. [ 734.164909][ T9721] netlink: 20 bytes leftover after parsing attributes in process `syz.1.939'. [ 734.387679][ T9723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.940'. [ 735.152449][ C0] ------------[ cut here ]------------ [ 735.158383][ C0] WARNING: CPU: 0 PID: 0 at net/mac80211/tx.c:5048 __ieee80211_beacon_get+0x1141/0x1520 [ 735.168401][ C0] Modules linked in: [ 735.172335][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 735.179458][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 735.189571][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 735.195977][ C0] Code: f7 4c 89 ef e8 10 ba b7 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 cb d7 79 f7 0f 0b e9 61 f8 ff ff e8 bf d7 79 f7 <0f> 0b e9 85 fb ff ff e8 b3 d7 79 f7 48 c7 c7 20 c7 65 8e 4c 89 e6 [ 735.215678][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 735.221855][ C0] RAX: ffffffff8a0d9ab1 RBX: dffffc0000000000 RCX: ffffffff8ce93440 [ 735.229883][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 735.237909][ C0] RBP: 0000000000000000 R08: ffffffff8ce93440 R09: 0000000000000003 [ 735.245916][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888063fd6440 [ 735.253942][ C0] R13: ffff88805bf81c24 R14: ffff888063fd6930 R15: ffff88805bf81c00 [ 735.261975][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 735.270960][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 735.277597][ C0] CR2: 0000001b32522ff8 CR3: 00000000261cb000 CR4: 00000000003526f0 [ 735.285603][ C0] Call Trace: [ 735.288992][ C0] [ 735.291904][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 735.297584][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 735.303096][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 735.309936][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 735.315586][ C0] __iterate_interfaces+0x225/0x4c0 [ 735.320855][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 735.327156][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 735.334392][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 735.340691][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 735.347787][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 735.353040][ C0] ? hw_scan_work+0xf10/0xf10 [ 735.357801][ C0] __hrtimer_run_queues+0x525/0xc10 [ 735.363185][ C0] ? hrtimer_interrupt+0x980/0x980 [ 735.368366][ C0] ? read_tsc+0x9/0x20 [ 735.372537][ C0] hrtimer_run_softirq+0x177/0x290 [ 735.374715][ T5968] ------------[ cut here ]------------ [ 735.377742][ C0] handle_softirqs+0x27d/0x820 [ 735.377804][ C0] ? read_tsc+0x9/0x20 [ 735.377827][ C0] ? ktime_get+0x24b/0x280 [ 735.377855][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 735.383537][ T5968] WARNING: CPU: 1 PID: 5968 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 735.388310][ C0] ? do_softirq+0x1a0/0x1a0 [ 735.388338][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 735.388366][ C0] __irq_exit_rcu+0xd3/0x190 [ 735.388386][ C0] ? irq_exit_rcu+0x20/0x20 [ 735.388416][ C0] irq_exit_rcu+0x9/0x20 [ 735.388431][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 735.388489][ C0] [ 735.388497][ C0] [ 735.388545][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 735.388636][ C0] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 735.388660][ C0] Code: 31 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 e9 d5 04 00 00 4c 89 e7 e8 73 87 3b 09 e8 4e 1a 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 735.388679][ C0] RSP: 0018:ffffffff8ce07b00 EFLAGS: 00000286 [ 735.388702][ C0] RAX: 5ab2751962149200 RBX: 0000000000000000 RCX: 5ab2751962149200 [ 735.392765][ T5968] Modules linked in: [ 735.397204][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d3360 [ 735.397221][ C0] RBP: ffffffff8ce07b50 R08: ffffffff8e8c872f R09: 1ffffffff1d190e5 [ 735.397235][ C0] R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: ffffffff8ce93440 [ 735.397249][ C0] R13: ffff8880b8e3cf88 R14: dffffc0000000000 R15: ffff8880b8e3cd08 [ 735.397292][ C0] __schedule+0x15b6/0x4660 [ 735.402089][ T5968] CPU: 1 PID: 5968 Comm: kworker/u4:12 Not tainted syzkaller #0 [ 735.413065][ C0] ? asan.module_dtor+0x20/0x20 [ 735.413099][ C0] ? flush_smp_call_function_queue+0x11e/0x250 [ 735.417622][ T5968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 735.422798][ C0] ? tick_nohz_restart_sched_tick+0x1f0/0x1f0 [ 735.427408][ T5968] Workqueue: phy13 ieee80211_csa_finalize_work [ 735.431902][ C0] schedule_idle+0x4e/0x80 [ 735.436124][ T5968] [ 735.436134][ T5968] RIP: 0010:ieee80211_vif_use_reserved_switch+0x110e/0x2900 [ 735.441774][ C0] do_idle+0x55c/0x5c0 [ 735.441803][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 735.444729][ T5968] Code: 48 89 df e8 54 a8 cd f7 e9 d6 fc ff ff e8 9a 2a 75 f7 eb 24 e8 93 2a 75 f7 c7 04 24 f4 ff ff ff e9 cc f5 ff ff e8 82 2a 75 f7 <0f> 0b 0f 0b e9 b7 f5 ff ff e8 74 2a 75 f7 48 8b 7c 24 08 4c 8b 74 [ 735.447688][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 735.447726][ C0] ? do_idle+0x5/0x5c0 [ 735.447752][ C0] cpu_startup_entry+0x43/0x60 [ 735.447777][ C0] rest_init+0x2e2/0x300 [ 735.453797][ T5968] RSP: 0018:ffffc9000448f9c0 EFLAGS: 00010293 [ 735.459653][ C0] ? time_init+0x40/0x40 [ 735.459751][ C0] arch_call_rest_init+0xe/0x10 [ 735.459774][ C0] start_kernel+0x461/0x4e0 [ 735.459801][ C0] x86_64_start_reservations+0x2a/0x30 [ 735.459830][ C0] x86_64_start_kernel+0x60/0x60 [ 735.459859][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 735.459918][ C0] [ 735.459929][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 735.459940][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 [ 735.459958][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 735.459969][ C0] Call Trace: [ 735.459977][ C0] [ 735.459985][ C0] dump_stack_lvl+0x18c/0x250 [ 735.460013][ C0] ? show_regs_print_info+0x20/0x20 [ 735.460037][ C0] ? load_image+0x420/0x420 [ 735.460084][ C0] panic+0x2ca/0x720 [ 735.460114][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 735.460146][ C0] ? secondary_startup_64_no_verify+0x179/0x17b [ 735.460173][ C0] __warn+0x2e0/0x470 [ 735.460195][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 735.460222][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 735.460246][ C0] report_bug+0x2be/0x4f0 [ 735.460311][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 735.460335][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 735.460357][ C0] ? __ieee80211_beacon_get+0x1143/0x1520 [ 735.460380][ C0] handle_bug+0xcf/0x120 [ 735.460400][ C0] exc_invalid_op+0x1a/0x50 [ 735.460419][ C0] asm_exc_invalid_op+0x1a/0x20 [ 735.460437][ C0] RIP: 0010:__ieee80211_beacon_get+0x1141/0x1520 [ 735.460461][ C0] Code: f7 4c 89 ef e8 10 ba b7 f7 45 31 ed 4c 8b bc 24 a0 00 00 00 e9 7f fe ff ff e8 cb d7 79 f7 0f 0b e9 61 f8 ff ff e8 bf d7 79 f7 <0f> 0b e9 85 fb ff ff e8 b3 d7 79 f7 48 c7 c7 20 c7 65 8e 4c 89 e6 [ 735.460474][ C0] RSP: 0018:ffffc90000007a18 EFLAGS: 00010246 [ 735.460490][ C0] RAX: ffffffff8a0d9ab1 RBX: dffffc0000000000 RCX: ffffffff8ce93440 [ 735.460502][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 735.460521][ C0] RBP: 0000000000000000 R08: ffffffff8ce93440 R09: 0000000000000003 [ 735.460531][ C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff888063fd6440 [ 735.460542][ C0] R13: ffff88805bf81c24 R14: ffff888063fd6930 R15: ffff88805bf81c00 [ 735.460562][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 735.460591][ C0] ? __ieee80211_beacon_get+0x1141/0x1520 [ 735.460612][ C0] ? __ieee80211_beacon_get+0x36/0x1520 [ 735.460646][ C0] ieee80211_beacon_get_tim+0xbf/0x580 [ 735.460673][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 735.460706][ C0] mac80211_hwsim_beacon_tx+0x3bd/0x770 [ 735.460734][ C0] __iterate_interfaces+0x225/0x4c0 [ 735.460754][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 735.460773][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 735.460795][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 735.460814][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 735.460837][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 735.460855][ C0] ? hw_scan_work+0xf10/0xf10 [ 735.460874][ C0] __hrtimer_run_queues+0x525/0xc10 [ 735.460912][ C0] ? hrtimer_interrupt+0x980/0x980 [ 735.460928][ C0] ? read_tsc+0x9/0x20 [ 735.460956][ C0] hrtimer_run_softirq+0x177/0x290 [ 735.460980][ C0] handle_softirqs+0x27d/0x820 [ 735.461009][ C0] ? read_tsc+0x9/0x20 [ 735.461025][ C0] ? ktime_get+0x24b/0x280 [ 735.461047][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 735.461069][ C0] ? do_softirq+0x1a0/0x1a0 [ 735.461090][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 735.461115][ C0] __irq_exit_rcu+0xd3/0x190 [ 735.461131][ C0] ? irq_exit_rcu+0x20/0x20 [ 735.461157][ C0] irq_exit_rcu+0x9/0x20 [ 735.461172][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 735.461193][ C0] [ 735.461199][ C0] [ 735.461206][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 735.461224][ C0] RIP: 0010:finish_task_switch+0x267/0x8f0 [ 735.461242][ C0] Code: 31 09 85 c0 0f 84 30 01 00 00 48 85 db 0f 85 4f 01 00 00 e9 d5 04 00 00 4c 89 e7 e8 73 87 3b 09 e8 4e 1a 30 00 fb 4c 8b 65 b8 <49> 8d bc 24 00 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 735.461254][ C0] RSP: 0018:ffffffff8ce07b00 EFLAGS: 00000286 [ 735.461268][ C0] RAX: 5ab2751962149200 RBX: 0000000000000000 RCX: 5ab2751962149200 [ 735.461279][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: ffffffff8b1d3360 [ 735.461291][ C0] RBP: ffffffff8ce07b50 R08: ffffffff8e8c872f R09: 1ffffffff1d190e5 [ 735.461302][ C0] R10: dffffc0000000000 R11: fffffbfff1d190e6 R12: ffffffff8ce93440 [ 735.461314][ C0] R13: ffff8880b8e3cf88 R14: dffffc0000000000 R15: ffff8880b8e3cd08 [ 735.461349][ C0] __schedule+0x15b6/0x4660 [ 735.461405][ C0] ? asan.module_dtor+0x20/0x20 [ 735.461433][ C0] ? flush_smp_call_function_queue+0x11e/0x250 [ 735.461456][ C0] ? tick_nohz_restart_sched_tick+0x1f0/0x1f0 [ 735.461487][ C0] schedule_idle+0x4e/0x80 [ 735.461508][ C0] do_idle+0x55c/0x5c0 [ 735.461535][ C0] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 735.461557][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 735.461588][ C0] ? do_idle+0x5/0x5c0 [ 735.461609][ C0] cpu_startup_entry+0x43/0x60 [ 735.461629][ C0] rest_init+0x2e2/0x300 [ 735.461644][ C0] ? time_init+0x40/0x40 [ 735.461667][ C0] arch_call_rest_init+0xe/0x10 [ 735.461684][ C0] start_kernel+0x461/0x4e0 [ 735.461704][ C0] x86_64_start_reservations+0x2a/0x30 [ 735.461727][ C0] x86_64_start_kernel+0x60/0x60 [ 735.461748][ C0] secondary_startup_64_no_verify+0x179/0x17b [ 735.461783][ C0] [ 735.479793][ C0] Kernel Offset: disabled