last executing test programs: 16.180734851s ago: executing program 3 (id=218): syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ba0d001040000102030109028d000301635006080b00ff010130020904000000010130000a24010a2900010000000c240b07010500000007f80013240306"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) socket(0x2, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f0000001700)={0x20, 0x9, 0x6f, {0x6f, 0x21, "acea7e52fdb0a2428e940aa81d7220b1beea407c4bc1ea7b41d92b52baa72d928ceee8a623c786a8e3a06840a683149e014eeca4d3a4312d70bbe14778ccd36fa39fbd4e4078e8c88ad845d861b68031e03e7e92040da66a263cd98e91b94214d6a2b9582d59bcc5a9c79aa2e8"}}, 0x0}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 12.289887854s ago: executing program 0 (id=224): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x500, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) syz_io_uring_setup(0x29d7, 0x0, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001380)) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x3903697e767aa280}, 0x1, 0x0, 0x0, 0x1}, 0x40080) socket(0x10, 0x3, 0x0) sendfile(r5, r5, 0x0, 0x1002000ff) 11.197668511s ago: executing program 0 (id=225): socket(0xa, 0x3, 0x3a) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x28, 0xfa12, {0x0, {0xa, 0x4e23, 0xfffffffd, @loopback, 0x4}}}, 0x30) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000a80)={0x13, 0x10, 0xfa00, {&(0x7f0000000880)}}, 0x18) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', 0x0, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x175a978679bbbe1d, 0x80a0a1240160183d) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001980)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r2}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000000)="7638300c000000000000e900feff", 0x0, 0x10000, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10004017}, 0x81) r3 = socket(0x2b, 0x80801, 0x1) setsockopt$inet6_int(r3, 0x29, 0x3a, &(0x7f0000000280)=0x3ff, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000004060300"/17], 0x1c}}, 0x40000) 10.564464616s ago: executing program 3 (id=227): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x1, 0xd6fe2, 0x2fc247}) close_range(r0, 0xffffffffffffffff, 0x0) 10.154364716s ago: executing program 0 (id=228): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc0145b0e, &(0x7f0000000040)={0x100004, 0x0, 0xff, 0x9, 0x3, 0xfffffffe}) close_range(r1, 0xffffffffffffffff, 0x400000000000000) getsockname$packet(r0, 0x0, 0x0) 9.759642585s ago: executing program 3 (id=229): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) write(0xffffffffffffffff, 0x0, 0x0) capset(&(0x7f0000000080)={0x20080522}, 0x0) syz_open_dev$midi(&(0x7f00000000c0), 0x100000000, 0x10880) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) 9.112368371s ago: executing program 2 (id=231): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x1ba) capset(&(0x7f0000000080)={0x20080522}, 0x0) syz_open_dev$midi(&(0x7f00000000c0), 0x100000000, 0x10880) mount$9p_tcp(0x0, 0x0, &(0x7f0000000300), 0x4000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=r4], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r5, &(0x7f00000001c0), &(0x7f0000000040)=@tcp6, 0x2}, 0x20) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) 8.084186546s ago: executing program 2 (id=232): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r1 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x3, 0x2, 0x9, 0xffff, 0xb, 0x80000003, 0x100000000000b06c}, 0x0, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r3, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="ec0002001000130720000000fedbdf25e0000001000000000000000000000000ac00000000000000000000000400004e210e020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc010000000000000000000000000000000004d632000000e000000200000000000000000000000000000000000000000000000000000000020000000000000009000000000000000d00000000000000000000000000000001000080000000004305000000000000040000000000000000000000000000800000000000000000fdffffffffffffff0000000000000000020000002cbd700003350000020000004d000000"], 0xec}, 0x1, 0x0, 0x0, 0x880}, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x16ba82, 0x10) write$cgroup_int(r4, &(0x7f0000000180)=0xfe5f, 0x12) set_mempolicy_home_node(&(0x7f0000417000/0x2000)=nil, 0x2000, 0x0, 0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) syz_open_procfs(0x0, &(0x7f00000190c0)='net/dev\x00') 7.040264621s ago: executing program 2 (id=233): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x500, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x1c3902, 0x0) syz_io_uring_setup(0x29d7, 0x0, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) getdents64(0xffffffffffffffff, 0x0, 0x0) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000001380)) sendmsg$TIPC_NL_LINK_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x3903697e767aa280}, 0x1, 0x0, 0x0, 0x1}, 0x40080) socket(0x10, 0x3, 0x0) sendfile(r5, r5, 0x0, 0x1002000ff) 6.880383895s ago: executing program 0 (id=234): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), 0xffffffffffffffff) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff, 0x17, 0x0, @val=@tracing={0x0, 0x4b61}}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 5.989476906s ago: executing program 2 (id=235): syz_usb_connect$uac3(0x0, 0x9f, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000040ba0d001040000102030109028d000301635006080b00ff010130020904000000010130000a24010a2900010000000c240b07010500000007f80013240306"], 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="ef00000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_open_dev$usbfs(0x0, 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_clone3(0x0, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x2) socket(0x2, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f0000001700)={0x20, 0x9, 0x6f, {0x6f, 0x21, "acea7e52fdb0a2428e940aa81d7220b1beea407c4bc1ea7b41d92b52baa72d928ceee8a623c786a8e3a06840a683149e014eeca4d3a4312d70bbe14778ccd36fa39fbd4e4078e8c88ad845d861b68031e03e7e92040da66a263cd98e91b94214d6a2b9582d59bcc5a9c79aa2e8"}}, 0x0}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r6 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.904080578s ago: executing program 3 (id=236): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x40) 5.762765812s ago: executing program 1 (id=237): r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000100)=""/15, 0xf}], 0x1, 0x1, 0xaadd) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, 0x0, &(0x7f0000000740)) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000080)={0x6, {"7fb13911afb5ea7f027063aa876dd358", "cfe484e50900", "d9ca451d96249a1dee77476cc87f7d0a"}, 0x6}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x10004, 0x0, r2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x80101) 5.727142692s ago: executing program 3 (id=238): r0 = inotify_init1(0x0) inotify_add_watch(r0, 0x0, 0xa4000271) mkdirat(0xffffffffffffff9c, 0x0, 0x16c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvmmsg(r3, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}, 0xf29d}], 0x1a000, 0x40010102, 0x0) r4 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r4, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) ioctl$XFS_IOC_INUMBERS(0xffffffffffffffff, 0x80405880, &(0x7f0000000100)={{0x2, 0x2, 0x10, 0x400, 0x200}, [{0x1, 0x11, 0x2, 0x67}, {0x6, 0x0, 0x81, 0x1}, {0x7fffffff, 0x1, 0x5, 0x6}, {0x9, 0x4, 0x9, 0x8}]}) 4.772001895s ago: executing program 0 (id=239): ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x3c) pwritev(0xffffffffffffffff, &(0x7f0000000480), 0x0, 0x4, 0x6) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) socket(0x2b, 0x1, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) landlock_restrict_self(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = landlock_create_ruleset(0x0, 0x0, 0x3) landlock_restrict_self(r4, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x0, 0x0, 0x6}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r5, 0x40505412, &(0x7f0000000800)={0x2, 0x0, 0x0, 0x0, 0xf}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text32={0x20, &(0x7f0000000100)="0f01c2b8010000000f01c10f013f0f01c2660f3a16af5f850000e90f78143266baf80cb80c0f258fef66bafc0ced66b86f008ec0b9c50800000f32c4e2b93a5f00", 0x41}], 0x1, 0x14, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 4.771590726s ago: executing program 1 (id=240): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x1ba) capset(&(0x7f0000000080)={0x20080522}, 0x0) syz_open_dev$midi(&(0x7f00000000c0), 0x100000000, 0x10880) mount$9p_tcp(0x0, 0x0, &(0x7f0000000300), 0x4000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=r4], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r5, &(0x7f00000001c0), &(0x7f0000000040)=@tcp6, 0x2}, 0x20) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "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"}) 3.539548195s ago: executing program 1 (id=241): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)}, 0x80) r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r1 = userfaultfd(0x80001) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x8482, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$sequencer(0xffffff9c, &(0x7f0000001bc0), 0x88302, 0x0) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0442, 0x11) write$tcp_mem(r3, &(0x7f0000000140)={0x7, 0x2d, 0x0, 0x3a, 0x800000, 0x2c}, 0x48) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 3.287179551s ago: executing program 0 (id=242): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x803, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r3, 0xc0145b0e, &(0x7f0000000040)={0x100004, 0x0, 0xff, 0x9, 0x3, 0xfffffffe}) close_range(r1, 0xffffffffffffffff, 0x400000000000000) getsockname$packet(r0, 0x0, 0x0) 2.354729273s ago: executing program 2 (id=243): mount(0x0, &(0x7f0000000000)='./security\x00', &(0x7f0000000040)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./security/tomoyo/domain_policy\x00', 0x1, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448e0, &(0x7f0000000140)) 2.317840844s ago: executing program 1 (id=244): mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/1/root/var\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', 0x1ff) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './proc/1/root/var/run/gssproxy.sock\x00'}, 0x30) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/use-gss-proxy\x00', 0x1, 0x20) write(r1, &(0x7f0000000280)='1', 0x1) 1.266869259s ago: executing program 1 (id=245): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f00000006c0)={0x2c, @multicast2, 0x4e20, 0x1, 'sh\x00', 0x27, 0x9, 0x43}, 0x2c) r1 = getpid() r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x200000, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000500)={0x6, 0x0, [{0x100000, 0x16, &(0x7f00000000c0)=""/22}, {0x200000, 0x16, &(0x7f0000000600)=""/22}, {0x40000, 0xa1, &(0x7f0000000240)=""/161}, {0x60000, 0x40, &(0x7f0000000300)=""/64}, {0x3b000, 0xf2, &(0x7f0000000340)=""/242}, {0x100000, 0x0, 0x0}]}) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c00000003060104aeaed2000200000105000100070000000000000000000000950000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000080) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r2) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_LINK_CREATE(0x8, &(0x7f0000001880)={0xffffffffffffffff, 0xffffffffffffffff, 0x17, 0x0, @val=@tracing={0x0, 0x4b61}}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b0000000000000000000000c4ffffff00000000", @ANYRES32=r2, @ANYBLOB="04000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="01000000000000000500"/28], 0x50) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendto$inet(r0, 0x0, 0x0, 0x8000, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r0, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) r6 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000540)="1400000016000b63d224068520c6d0242d127212", 0x14}], 0x1}, 0x4004084) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000700)=0x20, 0x4) r7 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') r8 = openat(r7, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) write(r8, &(0x7f0000000d00)='nf 127.0.0.1 2000000000 l\\calhost\n', 0x24) r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x10010) 1.266230019s ago: executing program 2 (id=246): capset(0x0, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000073119a0000000000160000000000000095007400000000001690d3823e7e89a93309c68ee1b282ed7b63029fd0ac620f19aab66bda50579b561e04800cd71846e23506a05e3f2d396e"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) syz_usb_connect(0x3, 0x32, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mysys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_vhci(0x0, 0x7) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='dummy_hcd.0\x00', 0xb) connect$inet(0xffffffffffffffff, 0x0, 0x0) mremap(&(0x7f0000674000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000ff9000/0x4000)=nil) syz_open_dev$usbfs(&(0x7f0000000140), 0xb, 0x2) 199.333185ms ago: executing program 1 (id=247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) write(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000080)='./file0\x00', 0x1ba) syz_open_dev$midi(&(0x7f00000000c0), 0x100000000, 0x10880) mount$9p_tcp(&(0x7f0000000200), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x4000, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@privport}]}}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r5, &(0x7f00000001c0), &(0x7f0000000040)=@tcp6, 0x2}, 0x20) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000140)={0x0, 0x2, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d80672e65a6a0a72e19c2b60bd6276fd8bb6366e9d1ed9a60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d10d1f600"}) ioctl$USBDEVFS_ALLOW_SUSPEND(r2, 0x5522) 0s ago: executing program 3 (id=248): fchdir(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000005c0)=ANY=[@ANYRES32, @ANYRESOCT=0x0, @ANYRESOCT=0x0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') fstat(0xffffffffffffffff, &(0x7f0000000340)) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xff000000}}], 0x1, 0x0) init_module(&(0x7f0000000d40)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x2, 0x8, 0x3, 0x3, 0x6, 0x68, 0x1e8, 0x40, 0x274, 0x6, 0x3, 0x38, 0x3, 0xc, 0xce, 0x1}, [{0x3, 0x6, 0x2, 0x7, 0x2, 0x5, 0x4, 0x1}, {0x70000000, 0x4, 0x8092, 0x0, 0x7, 0x4, 0x100, 0x5}, {0x6474e551, 0x10, 0x5, 0x7, 0xb, 0x9, 0x101, 0xd21}], "8debeca486ab3a", ['\x00', '\x00']}, 0x2ef, &(0x7f0000001040)='debugfs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000900)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe84, 0x2, 0x3, 0x178}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6a87, 0x1, 0x10000, 0x39f}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2f77, 0x100, 0x0, 0x25c}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8610, 0x1, 0x0, 0x2f0}}], 0x4, &(0x7f0000002840)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x3}, 0x0, 0x0, '\x00', {0x4, 0x93e, 0x0, &(0x7f0000001840)=@buf_4k="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"}}, &(0x7f00000028c0)) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, &(0x7f0000002900)={0xfffffffffffffffa, r1, 0x0, {0x200, 0x81}, 0x4b}, 0x1) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r5 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000080)={0x2a694b000, &(0x7f0000000040), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r5}}, 0x58) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200890, 0x0) syz_open_procfs(0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x2}, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r6, 0x400452c8, &(0x7f0000000100)) kernel console output (not intermixed with test programs): no interfaces have a carrier [ 57.407412][ T5438] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.429138][ T5438] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.126' (ED25519) to the list of known hosts. syzkaller login: [ 76.347685][ T5764] cgroup: Unknown subsys name 'net' [ 76.489842][ T5764] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 78.171935][ T5764] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.867460][ T5780] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.878547][ T5780] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.887500][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.897258][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.905136][ T5780] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.922240][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.941691][ T5780] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.949754][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.953261][ T5791] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.965513][ T5780] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.981773][ T5794] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.984142][ T5780] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.996531][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 80.004040][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.017290][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.027115][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 80.034372][ T5088] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.037163][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 80.049832][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 80.057310][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 80.066177][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 80.094413][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.103904][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 80.112041][ T5787] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 80.600980][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 80.615569][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 80.734229][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 80.826322][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 80.854616][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.862950][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.870404][ T5779] bridge_slave_0: entered allmulticast mode [ 80.877824][ T5779] bridge_slave_0: entered promiscuous mode [ 80.894058][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.901498][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.908997][ T5779] bridge_slave_1: entered allmulticast mode [ 80.916329][ T5779] bridge_slave_1: entered promiscuous mode [ 80.978111][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.988407][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.995725][ T5776] bridge_slave_0: entered allmulticast mode [ 81.003427][ T5776] bridge_slave_0: entered promiscuous mode [ 81.012316][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.019517][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.026790][ T5776] bridge_slave_1: entered allmulticast mode [ 81.034391][ T5776] bridge_slave_1: entered promiscuous mode [ 81.064685][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.078148][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.128264][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.135916][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.143396][ T5778] bridge_slave_0: entered allmulticast mode [ 81.150544][ T5778] bridge_slave_0: entered promiscuous mode [ 81.169253][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.176626][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.183969][ T5778] bridge_slave_1: entered allmulticast mode [ 81.191176][ T5778] bridge_slave_1: entered promiscuous mode [ 81.207360][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.248726][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.262869][ T5779] team0: Port device team_slave_0 added [ 81.316509][ T5779] team0: Port device team_slave_1 added [ 81.325003][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.338496][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.359921][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.367360][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.375033][ T5775] bridge_slave_0: entered allmulticast mode [ 81.382580][ T5775] bridge_slave_0: entered promiscuous mode [ 81.418643][ T5776] team0: Port device team_slave_0 added [ 81.425582][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.433066][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.440267][ T5775] bridge_slave_1: entered allmulticast mode [ 81.447931][ T5775] bridge_slave_1: entered promiscuous mode [ 81.479169][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.486337][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.512534][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.527322][ T5776] team0: Port device team_slave_1 added [ 81.566596][ T5778] team0: Port device team_slave_0 added [ 81.573712][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.580709][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.607024][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.646544][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.659355][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.671118][ T5778] team0: Port device team_slave_1 added [ 81.691096][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.698466][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.724583][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.737743][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.745113][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.771476][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.837303][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.844443][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.870764][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.921603][ T5776] hsr_slave_0: entered promiscuous mode [ 81.928179][ T5776] hsr_slave_1: entered promiscuous mode [ 81.938198][ T5775] team0: Port device team_slave_0 added [ 81.947758][ T5775] team0: Port device team_slave_1 added [ 81.954543][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.962033][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.988063][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.011031][ T5779] hsr_slave_0: entered promiscuous mode [ 82.018742][ T5779] hsr_slave_1: entered promiscuous mode [ 82.025391][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.034418][ T5779] Cannot create hsr debugfs directory [ 82.077811][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.084982][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.109849][ T5789] Bluetooth: hci0: command tx timeout [ 82.113079][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.129939][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.137326][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.163944][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.181606][ T5789] Bluetooth: hci3: command tx timeout [ 82.181679][ T51] Bluetooth: hci1: command tx timeout [ 82.193386][ T5787] Bluetooth: hci2: command tx timeout [ 82.262157][ T5778] hsr_slave_0: entered promiscuous mode [ 82.268565][ T5778] hsr_slave_1: entered promiscuous mode [ 82.275456][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.283311][ T5778] Cannot create hsr debugfs directory [ 82.354346][ T5775] hsr_slave_0: entered promiscuous mode [ 82.360923][ T5775] hsr_slave_1: entered promiscuous mode [ 82.367477][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.375182][ T5775] Cannot create hsr debugfs directory [ 82.773935][ T5776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.795184][ T5776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.819672][ T5776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.832735][ T5776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.892184][ T5779] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.909980][ T5779] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.933359][ T5779] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.944178][ T5779] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.042020][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 83.056243][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 83.067691][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 83.108137][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.173318][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.188351][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.209258][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 83.220288][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 83.308834][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.355694][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.400434][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.430583][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.438006][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.451625][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.466759][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.473954][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.512867][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.520047][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.535972][ T2968] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.543651][ T2968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.558617][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.609480][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.650442][ T2968] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.657679][ T2968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.678943][ T2913] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.686188][ T2913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.709064][ T5779] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.826488][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.873170][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.914651][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.921880][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.958844][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.966097][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.191675][ T51] Bluetooth: hci0: command tx timeout [ 84.254856][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.263881][ T51] Bluetooth: hci3: command tx timeout [ 84.271914][ T51] Bluetooth: hci1: command tx timeout [ 84.277363][ T51] Bluetooth: hci2: command tx timeout [ 84.442950][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.468932][ T5779] veth0_vlan: entered promiscuous mode [ 84.523427][ T5779] veth1_vlan: entered promiscuous mode [ 84.585999][ T5776] veth0_vlan: entered promiscuous mode [ 84.600960][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.616236][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.646545][ T5779] veth0_macvtap: entered promiscuous mode [ 84.659355][ T5779] veth1_macvtap: entered promiscuous mode [ 84.682169][ T5776] veth1_vlan: entered promiscuous mode [ 84.733536][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.775793][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.804636][ T5775] veth0_vlan: entered promiscuous mode [ 84.810727][ T5778] veth0_vlan: entered promiscuous mode [ 84.833986][ T5779] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.843049][ T5779] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.852970][ T5779] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.862045][ T5779] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.896396][ T5778] veth1_vlan: entered promiscuous mode [ 84.911005][ T5775] veth1_vlan: entered promiscuous mode [ 84.927910][ T5776] veth0_macvtap: entered promiscuous mode [ 84.979542][ T5776] veth1_macvtap: entered promiscuous mode [ 85.030743][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.047613][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.059757][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.092871][ T5775] veth0_macvtap: entered promiscuous mode [ 85.126977][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.138156][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.152255][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.164107][ T5775] veth1_macvtap: entered promiscuous mode [ 85.174682][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.189807][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.190688][ T5778] veth0_macvtap: entered promiscuous mode [ 85.215121][ T5776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.225279][ T5776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.234376][ T5776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.243207][ T5776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.267236][ T5778] veth1_macvtap: entered promiscuous mode [ 85.312843][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.320890][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.329550][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.342992][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.354426][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.365334][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.376631][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.407593][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.418901][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.435595][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.447873][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.458308][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.469586][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.482411][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.497313][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.512325][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.525705][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.536663][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.549844][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.567385][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.589458][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.599876][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.611608][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.622053][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.633158][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.645477][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.687455][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.727936][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.748128][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.761625][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.787103][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.798061][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.807614][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.819785][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.936247][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.970066][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.068672][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.092632][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.154621][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.181488][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.227964][ T2968] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.250322][ T2968] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.261611][ T5787] Bluetooth: hci0: command tx timeout [ 86.345200][ T5787] Bluetooth: hci2: command tx timeout [ 86.350680][ T5787] Bluetooth: hci1: command tx timeout [ 86.352458][ T51] Bluetooth: hci3: command tx timeout [ 86.455072][ T2954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.469425][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.490689][ T2954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.518718][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.811953][ T23] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 86.857802][ T5849] syz.0.5[5849]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 86.869403][ T5849] process 'syz.0.5' launched '/dev/fd/3' with NULL argv: empty string added [ 87.019386][ T23] usb 2-1: config 4 has an invalid interface number: 44 but max is 0 [ 87.042659][ T23] usb 2-1: config 4 has no interface number 0 [ 87.056339][ T5789] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 87.068644][ T5789] CPU: 0 PID: 5789 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 87.076263][ T5789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.086371][ T5789] Workqueue: hci2 hci_rx_work [ 87.091142][ T5789] Call Trace: [ 87.093819][ T23] usb 2-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 87.094442][ T5789] [ 87.106469][ T5789] dump_stack_lvl+0x18c/0x250 [ 87.111202][ T5789] ? show_regs_print_info+0x20/0x20 [ 87.116453][ T5789] ? load_image+0x420/0x420 [ 87.121044][ T5789] sysfs_create_dir_ns+0x26e/0x2a0 [ 87.126222][ T5789] ? __lock_acquire+0x7d80/0x7d80 [ 87.131335][ T5789] ? sysfs_warn_dup+0xa0/0xa0 [ 87.136070][ T5789] ? do_raw_spin_unlock+0x121/0x230 [ 87.137441][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.141312][ T5789] kobject_add_internal+0x617/0xc90 [ 87.141357][ T5789] kobject_add+0x164/0x240 [ 87.141393][ T5789] ? kobject_init+0x1d0/0x1d0 [ 87.163883][ T5789] ? get_device_parent+0x366/0x390 [ 87.169052][ T5789] device_add+0x3fa/0xc40 [ 87.173429][ T5789] hci_conn_add_sysfs+0xd5/0x1e0 [ 87.178417][ T5789] le_conn_complete_evt+0xe9f/0x1480 [ 87.183748][ T5789] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 87.190026][ T5789] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 87.195692][ T5789] ? mutex_unlock+0x10/0x10 [ 87.200262][ T5789] ? skb_pull_data+0xf0/0x1f0 [ 87.204973][ T5789] hci_le_enh_conn_complete_evt+0x189/0x460 [ 87.210899][ T5789] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 87.217344][ T5789] ? hci_remote_host_features_evt+0x150/0x150 [ 87.223445][ T5789] hci_event_packet+0x7b4/0x1280 [ 87.228417][ T5789] ? __lock_acquire+0x7d80/0x7d80 [ 87.233470][ T5789] ? lock_chain_count+0x20/0x20 [ 87.238356][ T5789] ? bis_list+0x290/0x290 [ 87.242746][ T5789] ? lockdep_hardirqs_on+0x98/0x150 [ 87.247991][ T5789] ? hci_send_to_monitor+0xd7/0x4f0 [ 87.253220][ T5789] hci_rx_work+0x43a/0xd60 [ 87.257677][ T5789] ? process_scheduled_works+0x975/0x1600 [ 87.263458][ T5789] process_scheduled_works+0xa60/0x1600 [ 87.269070][ T5789] ? worker_attach_to_pool+0x370/0x370 [ 87.274574][ T5789] ? assign_work+0x3cc/0x5d0 [ 87.279199][ T5789] worker_thread+0xa5e/0xfe0 [ 87.283844][ T5789] kthread+0x2fa/0x390 [ 87.287982][ T5789] ? pr_cont_work+0x550/0x550 [ 87.292694][ T5789] ? kthread_blkcg+0xd0/0xd0 [ 87.297315][ T5789] ret_from_fork+0x48/0x80 [ 87.301763][ T5789] ? kthread_blkcg+0xd0/0xd0 [ 87.306376][ T5789] ret_from_fork_asm+0x11/0x20 [ 87.311181][ T5789] [ 87.320191][ T5789] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 87.334563][ T5789] Bluetooth: hci2: failed to register connection device [ 87.376185][ T23] usb 2-1: Product: syz [ 87.380455][ T23] usb 2-1: Manufacturer: syz [ 87.423804][ T23] usb 2-1: SerialNumber: syz [ 87.457744][ T5843] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 87.770178][ T5866] kernel profiling enabled (shift: 7) [ 87.913566][ T5856] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 87.982032][ T5856] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 87.997138][ T23] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 88.072433][ T23] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 88.112392][ T5856] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 88.122626][ T23] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 88.141496][ T23] usb 2-1: media controller created [ 88.174075][ T23] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.192460][ T5856] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.212368][ T5856] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.230641][ T5856] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.254087][ T5856] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.267184][ T5856] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.279180][ T5856] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.295399][ T5856] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.305713][ T5856] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.314163][ T5856] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.326009][ T5856] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.476554][ T23] DVB: Unable to find symbol dib7000p_attach() [ 88.506356][ T23] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 89.502415][ T23] rc_core: IR keymap rc-dib0700-rc5 not found [ 89.508588][ T23] Registered IR keymap rc-empty [ 89.542006][ T5789] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.593829][ T23] dvb-usb: could not initialize remote control. [ 89.600151][ T23] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 89.863283][ T23] usb 2-1: USB disconnect, device number 2 [ 90.408882][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.415338][ T5789] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.422613][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.624112][ T23] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 91.127494][ T5908] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.162804][ T23] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.623210][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.002026][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 92.010344][ T23] usb 2-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 92.130429][ T1206] cfg80211: failed to load regulatory.db [ 92.133762][ T23] usb 2-1: config 0 interface 0 has no altsetting 0 [ 92.143498][ T23] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 92.153068][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.324431][ T23] usb 2-1: config 0 descriptor?? [ 92.502267][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.508914][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.511983][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.671513][ T28] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 92.749356][ T5923] pim6reg1: entered promiscuous mode [ 92.759425][ T5923] pim6reg1: entered allmulticast mode [ 92.787887][ T23] mcp2221 0003:04D8:00DD.0001: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 92.904776][ T28] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 92.921858][ T28] usb 3-1: config 4 has no interface number 0 [ 92.940546][ T28] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 92.953988][ T28] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.962740][ T28] usb 3-1: Product: syz [ 92.967007][ T28] usb 3-1: Manufacturer: syz [ 92.972359][ T28] usb 3-1: SerialNumber: syz [ 92.994102][ T5917] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 93.238738][ T23] usb 2-1: USB disconnect, device number 3 [ 93.435630][ T28] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 93.450281][ T28] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 93.461618][ T28] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 93.468904][ T28] usb 3-1: media controller created [ 93.486325][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 93.589286][ T28] DVB: Unable to find symbol dib7000p_attach() [ 93.609417][ T28] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 93.702309][ T5787] Bluetooth: hci0: command 0x0c1a tx timeout [ 93.721532][ T28] rc_core: IR keymap rc-dib0700-rc5 not found [ 93.738758][ T28] Registered IR keymap rc-empty [ 93.751929][ T28] dvb-usb: could not initialize remote control. [ 93.781784][ T28] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 93.812573][ T28] usb 3-1: USB disconnect, device number 2 [ 93.877587][ T28] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 94.136833][ T5936] pim6reg: entered allmulticast mode [ 94.581441][ T5787] Bluetooth: hci1: command 0x0c1a tx timeout [ 94.587604][ T5789] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.593736][ T5789] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.592710][ T176] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 96.661604][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 96.920770][ T176] usb 3-1: config 4 has an invalid interface number: 44 but max is 0 [ 97.020160][ T176] usb 3-1: config 4 has no interface number 0 [ 97.104316][ T176] usb 3-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20 [ 97.141531][ T176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.179870][ T176] usb 3-1: Product: syz [ 97.196470][ T176] usb 3-1: Manufacturer: syz [ 97.201158][ T176] usb 3-1: SerialNumber: syz [ 97.294920][ T5965] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 97.749668][ T176] dvb-usb: found a 'Gigabyte U7000' in warm state. [ 97.854777][ T176] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 98.699647][ T176] dvbdev: DVB: registering new adapter (Gigabyte U7000) [ 98.733978][ T176] usb 3-1: media controller created [ 98.811187][ T176] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.108032][ T176] DVB: Unable to find symbol dib7000p_attach() [ 100.114452][ T176] dvb-usb: no frontend was attached by 'Gigabyte U7000' [ 100.229572][ T6004] netlink: 348 bytes leftover after parsing attributes in process `syz.0.48'. [ 102.171625][ T176] rc_core: IR keymap rc-dib0700-rc5 not found [ 102.178309][ T176] Registered IR keymap rc-empty [ 102.228126][ T176] dvb-usb: could not initialize remote control. [ 102.271762][ T176] dvb-usb: Gigabyte U7000 successfully initialized and connected. [ 102.319262][ T176] usb 3-1: USB disconnect, device number 3 [ 102.383032][ T176] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected. [ 102.522806][ T6019] netlink: 8 bytes leftover after parsing attributes in process `syz.3.55'. [ 102.567892][ T6019] netlink: 28 bytes leftover after parsing attributes in process `syz.3.55'. [ 103.181691][ T5897] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 103.515019][ T5897] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 103.596939][ T5897] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 103.631557][ T5897] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 103.668179][ T5897] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.687026][ T5897] usb 1-1: Product: syz [ 103.704142][ T5897] usb 1-1: Manufacturer: syz [ 103.708811][ T5897] usb 1-1: SerialNumber: syz [ 103.735520][ T5897] usb-storage 1-1:1.0: USB Mass Storage device detected [ 103.774035][ T5897] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 103.843321][ T5897] scsi host1: usb-storage 1-1:1.0 [ 105.664156][ T6055] Invalid ELF header type: 3 != 1 [ 105.679286][ T6055] ======================================================= [ 105.679286][ T6055] WARNING: The mand mount option has been deprecated and [ 105.679286][ T6055] and is ignored by this kernel. Remove the mand [ 105.679286][ T6055] option from the mount to silence this warning. [ 105.679286][ T6055] ======================================================= [ 106.053148][ T5897] usb 1-1: USB disconnect, device number 2 [ 106.067405][ T6056] pim6reg: left allmulticast mode [ 106.941467][ T5897] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 107.002649][ T6072] pim6reg: entered allmulticast mode [ 107.231987][ T5897] usb 1-1: Using ep0 maxpacket: 8 [ 107.344826][ T5897] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 107.420222][ T5897] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.526979][ T5897] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.651011][ T5897] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.755565][ T5897] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.861609][ T5897] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 107.870739][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.382850][ T5897] usb 1-1: GET_CAPABILITIES returned 0 [ 108.388706][ T5897] usbtmc 1-1:16.0: can't read capabilities [ 108.513286][ T6090] Invalid ELF header type: 3 != 1 [ 109.351128][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.363273][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.374403][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.392559][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.401714][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.410839][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.421474][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.430622][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.439739][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.449449][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.458566][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.467684][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.516267][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.525464][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.534595][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.570210][ C1] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 109.583644][ T5971] usb 1-1: USB disconnect, device number 3 [ 109.752251][ T8] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 109.812191][ T6097] pim6reg: entered allmulticast mode [ 109.958470][ T6098] pim6reg: left allmulticast mode [ 110.615886][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.646731][ T8] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 110.664496][ T8] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 110.686590][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.698819][ T8] usb 4-1: Product: syz [ 110.703937][ T8] usb 4-1: Manufacturer: syz [ 110.708668][ T8] usb 4-1: SerialNumber: syz [ 110.744195][ T8] usb-storage 4-1:1.0: USB Mass Storage device detected [ 110.774544][ T8] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 110.787591][ T8] scsi host1: usb-storage 4-1:1.0 [ 112.034210][ T28] usb 4-1: USB disconnect, device number 2 [ 112.264552][ T6105] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.273218][ T6105] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.111546][ T6128] Invalid ELF header type: 3 != 1 [ 113.552014][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 113.563154][ T6105] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.670449][ T6105] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.771940][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 113.783000][ T8] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 113.809378][ T8] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 113.831249][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 113.873970][ T8] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 113.901166][ T8] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.945989][ T8] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 113.969033][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.033278][ T6125] sched: RT throttling activated [ 114.241878][ T8] usb 1-1: GET_CAPABILITIES returned 0 [ 114.247482][ T8] usbtmc 1-1:16.0: can't read capabilities [ 114.459736][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.468943][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.478076][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.494045][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.503242][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.512367][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.533130][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.542303][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.551408][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.567770][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.576932][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.586053][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.608780][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.617969][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.627117][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.643212][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 114.657478][ T8] usb 1-1: USB disconnect, device number 4 [ 115.183753][ T6105] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.193344][ T6105] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.206778][ T6105] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.215880][ T6105] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.441665][ T6114] pim6reg: entered allmulticast mode [ 116.791466][ T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.974120][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.993136][ T23] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 117.011417][ T5837] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.020828][ T23] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 117.034681][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.042989][ T23] usb 2-1: Product: syz [ 117.047283][ T23] usb 2-1: Manufacturer: syz [ 117.058035][ T23] usb 2-1: SerialNumber: syz [ 117.085920][ T23] usb-storage 2-1:1.0: USB Mass Storage device detected [ 117.104587][ T23] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 117.124628][ T23] scsi host1: usb-storage 2-1:1.0 [ 117.209441][ T5837] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 117.244827][ T5837] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 117.288892][ T5837] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 117.309947][ T5837] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.320069][ T5837] usb 4-1: Product: syz [ 117.329168][ T5837] usb 4-1: Manufacturer: syz [ 117.347377][ T5837] usb 4-1: SerialNumber: syz [ 117.419162][ T6175] pim6reg: entered allmulticast mode [ 118.403026][ T6166] netlink: 16 bytes leftover after parsing attributes in process `syz.3.98'. [ 118.469724][ T6166] Zero length message leads to an empty skb [ 118.533467][ T6182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.564592][ T6182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.773646][ T5971] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 118.930181][ T5837] usb 4-1: unit 0 not found! [ 118.982503][ T5971] usb 1-1: Using ep0 maxpacket: 8 [ 119.004001][ T5971] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 119.024414][ T5837] usb 4-1: USB disconnect, device number 3 [ 119.031621][ T5971] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 119.049706][ T5971] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 119.069663][ T5971] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 119.080775][ T5971] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 119.094787][ T5971] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 119.104320][ T5971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.279669][ T790] usb 2-1: USB disconnect, device number 4 [ 119.363074][ T5971] usb 1-1: GET_CAPABILITIES returned 0 [ 119.375318][ T5971] usbtmc 1-1:16.0: can't read capabilities [ 119.435657][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.575102][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.584386][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.593514][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.603539][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.612700][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.621827][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.632687][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.641878][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.651014][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.665165][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.674322][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.684416][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.693575][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.702711][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.713314][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.722467][ C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 119.787851][ T5837] usb 1-1: USB disconnect, device number 5 [ 119.853455][ T6197] Invalid ELF header type: 3 != 1 [ 124.641454][ T5837] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.761512][ T790] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 124.911179][ T5837] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.926021][ T5837] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 124.943200][ T5837] usb 3-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 124.953392][ T5837] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.961816][ T5837] usb 3-1: Product: syz [ 124.966296][ T5837] usb 3-1: Manufacturer: syz [ 124.971007][ T5837] usb 3-1: SerialNumber: syz [ 125.007783][ T5837] usb-storage 3-1:1.0: USB Mass Storage device detected [ 125.029712][ T5837] usb-storage 3-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 125.042724][ T5837] scsi host1: usb-storage 3-1:1.0 [ 125.153726][ T790] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.163964][ T790] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.177690][ T790] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 125.187023][ T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.195206][ T790] usb 1-1: Product: syz [ 125.199463][ T790] usb 1-1: Manufacturer: syz [ 125.204221][ T790] usb 1-1: SerialNumber: syz [ 125.246366][ T6248] Invalid ELF header type: 3 != 1 [ 126.162413][ T6238] netlink: 16 bytes leftover after parsing attributes in process `syz.0.115'. [ 126.362958][ T6257] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 126.399667][ T6257] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.726847][ T23] usb 3-1: USB disconnect, device number 4 [ 126.871830][ T790] usb 1-1: unit 0 not found! [ 126.901719][ T790] usb 1-1: USB disconnect, device number 6 [ 126.922798][ T5876] udevd[5876]: setting mode of /dev/bus/usb/001/006 to 020664 failed: No such file or directory [ 126.949361][ T5876] udevd[5876]: setting owner of /dev/bus/usb/001/006 to uid=0, gid=0 failed: No such file or directory [ 126.970910][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 130.672671][ T23] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 130.847783][ T6300] pim6reg: entered allmulticast mode [ 130.974631][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.078101][ T23] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.208662][ T23] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 131.292299][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.360188][ T23] usb 3-1: Product: syz [ 131.388105][ T23] usb 3-1: Manufacturer: syz [ 131.422313][ T23] usb 3-1: SerialNumber: syz [ 131.753261][ T6297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.130'. [ 131.885285][ T6305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.914214][ T6305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.188543][ T23] usb 3-1: unit 0 not found! [ 132.259244][ T23] usb 3-1: USB disconnect, device number 5 [ 132.299619][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.631915][ T6322] autofs4:pid:6322:autofs_fill_super: called with bogus options [ 133.067915][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.075515][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.651680][ T6356] Invalid ELF header type: 3 != 1 [ 140.104563][ T6366] pim6reg: left allmulticast mode [ 140.231459][ T790] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 141.034557][ T6372] autofs4:pid:6372:autofs_fill_super: called with bogus options [ 141.103889][ T790] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.136582][ T790] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.159353][ T790] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 141.174512][ T790] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.191667][ T790] usb 2-1: Product: syz [ 141.201620][ T790] usb 2-1: Manufacturer: syz [ 141.211416][ T790] usb 2-1: SerialNumber: syz [ 141.446497][ T6361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.148'. [ 142.077068][ T6361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.111911][ T6361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.246065][ T790] usb 2-1: unit 0 not found! [ 142.277691][ T790] usb 2-1: USB disconnect, device number 5 [ 142.327349][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.042959][ T6402] Invalid ELF header type: 3 != 1 [ 145.221413][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 145.678418][ T6412] pim6reg: left allmulticast mode [ 148.241685][ T790] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 148.471494][ T790] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.671639][ T23] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 148.920375][ T790] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 149.155691][ T790] usb 1-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 149.191410][ T790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.201525][ T23] usb 4-1: device descriptor read/64, error -71 [ 149.219858][ T790] usb 1-1: Product: syz [ 149.245425][ T790] usb 1-1: Manufacturer: syz [ 149.281268][ T790] usb 1-1: SerialNumber: syz [ 149.574322][ T23] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 149.653345][ T6432] netlink: 16 bytes leftover after parsing attributes in process `syz.0.167'. [ 149.751586][ T23] usb 4-1: device descriptor read/64, error -71 [ 149.817919][ T6453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.874166][ T6453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 149.885275][ T23] usb usb4-port1: attempt power cycle [ 150.289974][ T790] usb 1-1: unit 0 not found! [ 150.355080][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 150.374144][ T790] usb 1-1: USB disconnect, device number 7 [ 150.429811][ T23] usb 4-1: device descriptor read/8, error -71 [ 150.501016][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.811756][ T23] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 150.965841][ T23] usb 4-1: device descriptor read/8, error -71 [ 151.359673][ T23] usb usb4-port1: unable to enumerate USB device [ 152.901412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 156.171570][ T5783] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 156.301383][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 156.341459][ T5783] usb 2-1: device descriptor read/64, error -71 [ 156.496825][ T8] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 156.511951][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 156.528145][ T8] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 156.542459][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.550508][ T8] usb 4-1: Product: syz [ 156.559134][ T8] usb 4-1: Manufacturer: syz [ 156.565229][ T8] usb 4-1: SerialNumber: syz [ 156.631530][ T5783] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 156.807195][ T5783] usb 2-1: device descriptor read/64, error -71 [ 156.840868][ T6510] netlink: 16 bytes leftover after parsing attributes in process `syz.3.187'. [ 156.953909][ T5783] usb usb2-port1: attempt power cycle [ 156.993314][ T6518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 157.208732][ T6518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.202691][ T8] usb 4-1: unit 0 not found! [ 158.263733][ T8] usb 4-1: USB disconnect, device number 8 [ 159.096907][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 162.881561][ T5783] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 163.511402][ T5783] usb 4-1: device descriptor read/64, error -71 [ 163.883724][ T5783] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 165.885816][ T6568] autofs4:pid:6568:autofs_fill_super: called with bogus options [ 165.931716][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 166.125199][ T8] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 166.251987][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 166.277484][ T8] usb 2-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 166.289617][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.206'. [ 166.308827][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.464712][ T8] usb 2-1: Product: syz [ 166.468909][ T8] usb 2-1: Manufacturer: syz [ 166.474331][ T8] usb 2-1: SerialNumber: syz [ 166.697807][ T6566] netlink: 16 bytes leftover after parsing attributes in process `syz.1.202'. [ 166.832030][ T6583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 166.840986][ T6583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.172251][ T8] usb 2-1: unit 0 not found! [ 168.192975][ T8] usb 2-1: USB disconnect, device number 9 [ 168.326207][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.951704][ T176] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 171.093477][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.216'. [ 171.321537][ T176] usb 2-1: device descriptor read/64, error -71 [ 171.711553][ T176] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 171.959297][ T6618] pim6reg: entered allmulticast mode [ 172.011437][ T176] usb 2-1: device descriptor read/64, error -71 [ 172.781618][ T176] usb usb2-port1: attempt power cycle [ 172.951465][ T790] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 173.201519][ T176] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 173.286288][ T176] usb 2-1: device descriptor read/8, error -71 [ 173.612088][ T176] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 173.708283][ T176] usb 2-1: device descriptor read/8, error -71 [ 173.843990][ T790] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 173.850972][ T176] usb usb2-port1: unable to enumerate USB device [ 173.860114][ T790] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 173.885684][ T790] usb 4-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 173.901771][ T790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.909849][ T790] usb 4-1: Product: syz [ 173.927858][ T790] usb 4-1: Manufacturer: syz [ 173.935767][ T790] usb 4-1: SerialNumber: syz [ 174.436425][ T6636] netlink: 16 bytes leftover after parsing attributes in process `syz.3.218'. [ 174.987063][ T6642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.996143][ T6642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 175.986385][ T790] usb 4-1: unit 0 not found! [ 176.882134][ T790] usb 4-1: USB disconnect, device number 11 [ 177.073381][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.538766][ T6659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.225'. [ 178.371442][ T790] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 178.561416][ T790] usb 1-1: device descriptor read/64, error -71 [ 178.841615][ T790] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 179.002145][ T790] usb 1-1: device descriptor read/64, error -71 [ 179.130648][ T790] usb usb1-port1: attempt power cycle [ 179.602409][ T790] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 179.766828][ T790] usb 1-1: device descriptor read/8, error -71 [ 180.121945][ T790] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 180.165362][ T790] usb 1-1: device descriptor read/8, error -71 [ 180.431979][ T790] usb usb1-port1: unable to enumerate USB device [ 182.263444][ T6692] autofs4:pid:6692:autofs_fill_super: called with bogus options [ 182.451450][ T176] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 182.885783][ T176] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 182.898589][ T176] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 182.912225][ T176] usb 3-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 182.922015][ T176] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.930118][ T176] usb 3-1: Product: syz [ 182.935334][ T176] usb 3-1: Manufacturer: syz [ 182.940080][ T176] usb 3-1: SerialNumber: syz [ 183.186890][ T6690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.235'. [ 183.341548][ T6707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.401746][ T6707] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.585894][ T176] usb 3-1: unit 0 not found! [ 184.614935][ T176] usb 3-1: USB disconnect, device number 6 [ 184.664278][ T5876] udevd[5876]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 185.671401][ T5837] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 185.852840][ T5837] usb 1-1: device descriptor read/64, error -71 [ 186.594860][ T5837] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 186.865075][ T6736] dummy_hcd dummy_hcd.0: remove, state 1 [ 186.881981][ T6736] usb usb1: USB disconnect, device number 1 [ 186.902356][ T5837] usb usb1-port1: attempt power cycle [ 186.922293][ T6738] IPVS: set_ctl: invalid protocol: 44 224.0.0.2:20000 [ 187.125183][ T6736] dummy_hcd dummy_hcd.0: stopped [ 187.154120][ T6736] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 188.022287][ T6744] 9pnet_fd: p9_fd_create_tcp (6744): problem connecting socket to 127.0.0.1 [ 188.066379][ T6727] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 188.078156][ T6727] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 188.086617][ T6727] CPU: 0 PID: 6727 Comm: syz.0.242 Not tainted syzkaller #0 [ 188.093937][ T6727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 188.104037][ T6727] RIP: 0010:set_link_state+0x27/0x1000 [ 188.109556][ T6727] Code: 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 00 49 cb fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 1b cc 23 fb 49 8b 0e 4d 8d a6 93 00 [ 188.129233][ T6727] RSP: 0018:ffffc90004caf718 EFLAGS: 00010046 [ 188.135333][ T6727] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88807d418000 [ 188.143339][ T6727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.151367][ T6727] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 188.159471][ T6727] R10: dffffc0000000000 R11: fffff52000995ecc R12: 0000000000000a02 [ 188.167466][ T6727] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.175473][ T6727] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 188.184428][ T6727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.191044][ T6727] CR2: 00007f60dc001000 CR3: 000000007c59b000 CR4: 00000000003506f0 [ 188.199046][ T6727] Call Trace: [ 188.202353][ T6727] [ 188.205302][ T6727] ? mutex_lock_nested+0x20/0x20 [ 188.210266][ T6727] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 188.216191][ T6727] dummy_pullup+0xc1/0x120 [ 188.220638][ T6727] ? dummy_set_selfpowered+0x150/0x150 [ 188.226127][ T6727] usb_gadget_disconnect_locked+0x120/0x440 [ 188.232305][ T6727] gadget_unbind_driver+0xc2/0x3e0 [ 188.237447][ T6727] ? gadget_bind_driver+0x770/0x770 [ 188.242665][ T6727] device_release_driver_internal+0x408/0x6f0 [ 188.248766][ T6727] driver_detach+0x1f3/0x2d0 [ 188.253386][ T6727] bus_remove_driver+0x221/0x2f0 [ 188.258353][ T6727] usb_gadget_unregister_driver+0x4e/0x70 [ 188.264094][ T6727] raw_release+0xda/0x260 [ 188.268447][ T6727] ? raw_open+0x520/0x520 [ 188.272794][ T6727] __fput+0x221/0x940 [ 188.276802][ T6727] task_work_run+0x1d4/0x260 [ 188.281438][ T6727] ? task_work_cancel+0x220/0x220 [ 188.286488][ T6727] do_exit+0x986/0x2530 [ 188.290673][ T6727] ? put_task_struct+0xc0/0xc0 [ 188.295456][ T6727] ? preempt_schedule_common+0x82/0xc0 [ 188.300932][ T6727] ? preempt_schedule+0xc0/0xd0 [ 188.305799][ T6727] ? schedule_preempt_disabled+0x20/0x20 [ 188.311452][ T6727] do_group_exit+0x22d/0x2f0 [ 188.316119][ T6727] get_signal+0x12a6/0x1390 [ 188.320657][ T6727] arch_do_signal_or_restart+0xc2/0x7b0 [ 188.326239][ T6727] ? get_sigframe_size+0x20/0x20 [ 188.331214][ T6727] ? exit_to_user_mode_loop+0x3b/0x110 [ 188.336699][ T6727] exit_to_user_mode_loop+0x70/0x110 [ 188.342011][ T6727] exit_to_user_mode_prepare+0xee/0x180 [ 188.347585][ T6727] syscall_exit_to_user_mode+0x1a/0x50 [ 188.353120][ T6727] do_syscall_64+0x61/0xb0 [ 188.357562][ T6727] ? clear_bhb_loop+0x40/0x90 [ 188.362260][ T6727] ? clear_bhb_loop+0x40/0x90 [ 188.366959][ T6727] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.372878][ T6727] RIP: 0033:0x7f1ed2f9dd6b [ 188.377331][ T6727] Code: Unable to access opcode bytes at 0x7f1ed2f9dd41. [ 188.386358][ T6727] RSP: 002b:00007f1ed3f3bf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 188.394786][ T6727] RAX: fffffffffffffffc RBX: 0000000000000005 RCX: 00007f1ed2f9dd6b [ 188.402767][ T6727] RDX: 00007f1ed3f3cfd0 RSI: 0000000080085502 RDI: 0000000000000005 [ 188.410748][ T6727] RBP: 00007f1ed3f3cfd0 R08: 0000000000000040 R09: 00007f1ed3f3bfc8 [ 188.418735][ T6727] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000080085502 [ 188.426721][ T6727] R13: 0000000800000000 R14: 0000000000000012 R15: 00007f1ed3053882 [ 188.434710][ T6727] [ 188.437752][ T6727] Modules linked in: [ 188.441679][ T6727] ---[ end trace 0000000000000000 ]--- [ 188.447141][ T6727] RIP: 0010:set_link_state+0x27/0x1000 [ 188.452630][ T6727] Code: 0f 1f 00 55 41 57 41 56 41 55 41 54 53 48 83 ec 38 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 00 49 cb fa 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 1b cc 23 fb 49 8b 0e 4d 8d a6 93 00 [ 188.472253][ T6727] RSP: 0018:ffffc90004caf718 EFLAGS: 00010046 [ 188.478352][ T6727] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff88807d418000 [ 188.486335][ T6727] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 188.494317][ T6727] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 188.502301][ T6727] R10: dffffc0000000000 R11: fffff52000995ecc R12: 0000000000000a02 [ 188.510284][ T6727] R13: dffffc0000000000 R14: 0000000000000000 R15: 0000000000000000 [ 188.518269][ T6727] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 188.527220][ T6727] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 188.533816][ T6727] CR2: 00007f60dc001000 CR3: 000000007c59b000 CR4: 00000000003506f0 [ 188.541809][ T6727] Kernel panic - not syncing: Fatal exception [ 188.548446][ T6727] Kernel Offset: disabled [ 188.552774][ T6727] Rebooting in 86400 seconds..