last executing test programs: 25.88091508s ago: executing program 1 (id=183): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000002ec0)=[{&(0x7f0000000040)="a4202f5100d00d2666b2962e4ef853b73825a30aa3fa220ed67dad3f3262940b8fa457aae78e3ab16d862e60e2cd4f242f4f61caa5978ad9", 0x38}, {&(0x7f0000000200)="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", 0xff}, {&(0x7f0000001ec0)="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", 0x1000}], 0x3) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = syz_clone(0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r3, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001e40)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000000308010100000000000030870000010000060500030082000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x24000002) ptrace(0x10, r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a05000000000000000002010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000068000000060a010400000000000000000100000008000b40000000004000048010000180090001006d617371000000002c00018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000050900010073797a30"], 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x0) ptrace$setregset(0x4205, r2, 0x2, &(0x7f0000000000)={0x0}) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="14ffdbdf2562b394de00"/20], 0x14}, {&(0x7f00000000c0)={0x64, 0x1b, 0x2, 0x70bd26, 0x25dfdbfc, "", [@generic="7f4cc0bd847607b861b98b27ef8ddd53e29492e13dbafd316807491199788c879c75f8f4dec0a9910789baffe69095c1a9906475da6ba07419272a92f7a15fc639a7e6990688d157becb4ce9d67db3a5c763c6eb"]}, 0x64}], 0x2, 0x0, 0x0, 0x40001a0}, 0x0) ioctl$KVM_INTERRUPT(r1, 0x4004ae86, &(0x7f00000001c0)=0x10001) 25.676129875s ago: executing program 1 (id=185): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x3, 0x1000000000000000, 0x4002004c4, 0x1004, 0x8000000000000000, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0x70000, 0x214000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_usb_connect$uac1(0x2, 0x72, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1235, 0x8014, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x5, 0x0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x7, 0x1, 0x1, {0x7, 0x25, 0x1, 0xc, 0xc, 0x9c50}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x2, 0x9, 0x0, {0x7, 0x25, 0x1, 0xc, 0x8, 0x7}}}}}}}}]}}, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0}) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f0000000440)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b80)="f77d2b5dd5", 0x5}], 0x1}}], 0x1, 0x2090) 24.42252425s ago: executing program 3 (id=191): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x4c, r1, 0x1, 0x1, 0xfffffffc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x0, 0x1, 0xc}]}]}, 0x4c}}, 0x0) 24.352944413s ago: executing program 3 (id=192): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETDEBUG(r1, 0x400454c9, &(0x7f00000001c0)=0x6) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000400)='msdos\x00', 0x1c851, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r2}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) syz_usb_connect(0x5, 0x46, &(0x7f0000000840)=ANY=[@ANYBLOB="12010000e780cc08c0070515c5b80102030109023400010000800009040000038e4ee2000905000000041a060109050104400003030f07059acb"], 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000400)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000240)={&(0x7f0000000040)=[r5], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r2], &(0x7f0000000200), &(0x7f0000000580)=[r3], &(0x7f0000000040)}) 22.831853629s ago: executing program 3 (id=199): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000000000)={0x8, {"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", 0x1000}}, 0x1006) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder-control\x00', 0x1002, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) sendmmsg$unix(r2, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x18, 0x1, 0x1, [r3, r2]}}], 0x30, 0x48010}}], 0x1, 0x20000840) r4 = syz_usb_connect(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902340001000000000904fb00026c5d650009050402100000fa000905820240"], 0x0) syz_usb_control_io$sierra_net(r4, &(0x7f00000007c0)={0x14, 0x0, 0x0}, &(0x7f0000000d00)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="20070ae300006664cae1069b4b40a26d1221afa4c4a4a6f14db77e59795ca64937a057bedd4720a222d8495097ba82104830805f33cfa9cf61583a40e2d51621074d17e18a2a74d2eb316957943b572e802bc78f9144ea449341872d413834f6ab4b4b0cd8123252eb96e740ca19b4686e40d53fe52e4ea76ca6d39f55f5707286fef419a753acacb8a3e50e22bed95f6c6a323f9a4225b05f0eacb9b95cf98e72812eee02d18965207f90240feca731d01f03b39d552bb72816acbb12fb6206bca3262d7d910195e8a2b649463f3ec1d438b0b5e73607265ea0656b4322ba4d194f5d33f44b55b5"], 0x0, 0x0}) 22.384214084s ago: executing program 1 (id=204): syz_open_dev$vim2m(&(0x7f00000000c0), 0x10000ffb, 0x2) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x960, 0x0) socket$igmp6(0xa, 0x3, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000340)='ns/time_for_children\x00') openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) socket(0xa, 0x3, 0xff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x808840, 0x11e) r0 = open(&(0x7f0000000240)='./file1\x00', 0x84242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x4, 0x0, 0x7, 0x203, 0x2, 0x1, {0x6, 0xfd, 0x20ff, 0x8, 0xe, 0xf33a, 0x4, 0x4, 0xfffffffc, 0x6000, 0x6, 0x0, 0x0, 0x5, 0x8}}, {0x0, 0x13}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000080), 0x7f03) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x181c42, 0x56) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x20040810) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000280)={r2, 0xfe, 0xa, 0xfffffffffffffffe}) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000040)={0x28, 0x0, r5, r5, 0xfffffffffffffffc, 0x100000000, 0x1e2a}) 21.545636008s ago: executing program 1 (id=205): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a5726f", 0x45}, {&(0x7f00000006c0)="080c04", 0x3}, {&(0x7f0000000780)="4274aa814c8f6ea8d8db43178dd2f41ef596a3ca465412910e05cba0f5d97e67886d55be18cac95a1aa093479596c3613670aaf2a3b1edc465bedfdb5156035719c0baa8bb8bf2a825ec04f424dda801fea000f41edc43511e9c8bf89656071e91ae4c356d6a9ca608af6b83cc9f3d9ae37c2bfab2e5708062c659e44272215dba2195", 0x83}, {&(0x7f0000000300)="a1755527af3bc7c4671ac86bf0a2338efb5db19ac572af50ea485d175761731e22c55a759161b4a9abe65d440cccf63983cbbcac2913f2df6e269ebe5875", 0x3e}], 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f00000100000007ac1e0001"], 0x1a0}, 0x41) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) r4 = socket$alg(0x26, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000005700)=""/4097, 0x1001}, {&(0x7f0000004580)=""/4072, 0xfe8}, {&(0x7f0000000280)=""/115, 0x73}, {&(0x7f0000000a80)=""/179, 0xb3}, {&(0x7f0000000840)=""/197, 0xc5}], 0x5}, 0x10100) r6 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000017010000040000001b09000000000000400000000000000017010000020000002c0037e0b6bc3173e55897b7ccc4ef99f90000cbaa1ccd9bfee412c63157d3eb3695c261b412835b7a916953716c8c9555e4863eab3e7dc2432caa85d0a327"], 0x58, 0x44803}], 0x1, 0x40800) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xffffffffffffff86}, {&(0x7f0000000700)=""/78, 0x53}], 0x2, 0x0, 0x2d}, 0x16060) mount$9p_tcp(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', &(0x7f0000000680), 0x20804, &(0x7f0000000c80)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000004e21,privport,loose,access=any,access=user,nodevmap,cache=none,cache=fscache,posixacl,access=client,euid>', @ANYRESDEC=0x0, @ANYBLOB="2c88"]) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r3, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000500)=[@text16={0x10, &(0x7f00000009c0)="baf80c66b80817cf8c66efbafc0cb80000b813010f00d8ea0400b1000f20c06635000001000f22c02e670fc79b08000000baf80c66b8b5e62c8466efbafc0cec66b9b10800000f320f72d09ab8d1008ed03e3e0ff46d00", 0x57}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x119000) ioctl$CEC_S_MODE(r8, 0x40046109, &(0x7f0000000140)=0x11) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="24000000f34b0ab8dab97b8a35f0dca6efb9bb3d79a81fcf1667e775cfd4deae3960dd36014d6792a5b124ebbde30f75b5aa6a8c", @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r9, @ANYBLOB="080005000c000000"], 0x24}}, 0x4000) r10 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r10, 0xf0000000) 21.008008279s ago: executing program 1 (id=206): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x13, 0xffffffffffffffff, 0x3000) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000080)="3f16", 0x2, 0x20000000, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @private0, 0x8}, 0x1c) 20.991663834s ago: executing program 3 (id=207): syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0x41b6, 0x412000) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r4, 0x8080583a, &(0x7f0000000180)={0x2577, 0x9, 0x8001, 0x9, 0xaa6, 0x0, 0x6}) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r5, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000000)=0xfffffffa, 0x4) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000456000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_int(r6, 0x29, 0x50, 0x0, &(0x7f0000000000)) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x3, 0x0, 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace$peekuser(0x3, r7, 0x7) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) write$UHID_CREATE(0xffffffffffffffff, 0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000090024206d041cc3400000000001090224"], 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000300)={0x0, 0x9}, &(0x7f0000000380)=0x8) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f00000005c0)={"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"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 20.34693629s ago: executing program 2 (id=212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x1f, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x810}, 0x4084) 20.346470068s ago: executing program 2 (id=213): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000000600)="447df50ce4033a7b5ad00b83244c00b711803e7cca2504a2600da98efff9e7d67f87b17ffd582b04d632ebd866f28678899ae0d6306cd39420b7b7f78deaaf2908c2a572", 0x44}, {&(0x7f00000006c0)="080c04", 0x3}, {&(0x7f0000000880)="a1755527af3bc7c4671ac86bf0a2338efb5db19ac572af50ea485d175761731e22c55a759161b4a9abe65d440cccf63983cbbcac2913f2df6e269e", 0x3b}], 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="ac1414bb0000000000000000140000000000000000000000020000000600000000000000d8000000000000000000000007000000072b52000000000a0101020a010100ac14141b640101020a010102ac1414bbac14143ee000000200000000071731ac14143cac1e0101e0000002ac1414aaffffffff442cdf11ac1e010100000005ffffffff00000002ac1414bb00000006ffffffff000000000000000000000003441435230a01010200000001ffffffff00000007444477937f00000100000007ac"], 0x1a0}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(gcm-aes-ce,hmac(sha1-ce))\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="040e33050910"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r7 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r7, 0x11, 0xb, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, r5, 0x5, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r8, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000080)=0x100f) recvmsg(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) 20.123100783s ago: executing program 1 (id=215): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf25030000000c00060004000000000000000c00040001000000000000080c00020002000000000000000800010000000000640007800c"], 0xc0}, 0x1, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804) 19.900219215s ago: executing program 0 (id=217): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats={0x15}}) r1 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r1, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0xb, 0x9, 0x4}, 0x1, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x2, 0xfffffffc}}, 0x8000, 0x0}}) syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000180)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f00000001c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01864c2, &(0x7f0000000280)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r2, 0xc01864c2, &(0x7f00000002c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000300)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r2, 0xc01864cb, &(0x7f0000000400)={&(0x7f0000000340)=[r3, r4, r5, r6, r7], &(0x7f0000000380)=[0x3, 0xd4c, 0x37, 0xffffffffffffffff, 0x3ff, 0x90], 0x5, 0x1}) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r10 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0) syz_usb_control_io$printer(r10, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r10, 0x82, 0x12, &(0x7f0000000240)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b", @ANYRES16=r9]) r11 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r11, 0x0, 0x0) clock_adjtime(0x17, &(0x7f0000000000)={0x80ea33, 0x9, 0x379ee6, 0x0, 0x9, 0x9, 0x8c, 0x3, 0xa, 0x7, 0x3, 0x4, 0xb, 0x80000000000002, 0x8001, 0xffffffffffffffff, 0x80, 0x2, 0x9, 0x5, 0x200, 0x3, 0x11cb, 0x101, 0x40, 0x40009}) listen(r11, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) 19.551122863s ago: executing program 2 (id=218): openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r0 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)="80", 0x26892}], 0x1}, 0xfc) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000240)="f9", 0x1}], 0x1}, 0x24000004) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r1, 0x9) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r4, 0x84, 0x82, 0x0, 0x0) recvmsg(r2, &(0x7f0000000500)={&(0x7f00000001c0)=@hci, 0x80, &(0x7f0000000040)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1, 0x0, 0x0, 0xf5ffffff}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = syz_open_dev$dmmidi(&(0x7f0000000080), 0x2000, 0x80) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS32(r6, 0xc0245720, &(0x7f00000000c0)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r8, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r9, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x7, 0x34}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r5, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private0, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 19.122281761s ago: executing program 3 (id=219): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000180)="e1", 0x1}], 0x1}}, {{&(0x7f0000000140)={0x2, 0x4e22, @private=0xa010101}, 0x10, 0x0}}], 0x2, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000280)={0x2, [0x0, 0x0]}, &(0x7f00000002c0)=0xc) 18.947886815s ago: executing program 3 (id=220): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000000000000000e41b07c0900ac00060311000000040005000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc5614f7da773c20c6a6c8bd414c8da", 0xd8}], 0x1}, 0x0) mprotect(&(0x7f00001b5000/0x4000)=nil, 0x4000, 0x8) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) writev(r8, &(0x7f0000000500)=[{&(0x7f0000000180)="3a61319a26af", 0x6}], 0x1) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)='nr0\x00') r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000fddbdf251900000008000300", @ANYRES32=r11, @ANYBLOB="0500613e61708b457168df76b679c10112de934f6f1e039f0d3904897323999b89bb02a7f0611f5baddbf8599e9df731eb1c6a92300f6eabc06118c386a96f9d26008d24101167d1c181744e3ae86bee904033a3765f6fa72cf60f2bbc46658bc73a1fca626c285e63eeab615d0b4f49034cbe2ca4bb53dfda7a6ad35634480d56afb754c6be708f82cc684f73ed0d05"], 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000840) r12 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002200)=@deltfilter={0x1264, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0x3, 0xffe0}, {0x9}}, [@f_tcindex={{0xc}, {0x1234, 0x2, [@TCA_TCINDEX_ACT={0x1224, 0x7, [@m_vlan={0x1134, 0x0, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x7, 0x5, 0x9, 0x24b5}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x173}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x0, 0x3, 0x2, 0x2d9146fb}, 0x3}}]}, {0x10b5, 0x6, "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"/4273}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xec, 0x1d, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf95}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1c8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x6, 0x6, 0x3, 0x1}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xc, 0x7f, 0x10000000, 0x3, 0x7}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x6d, 0x6, "284ba233e3cfdce0526f09bed11f3fb59cf8080d263e660194c45527364ae868259cb5ba7e935c81fdbae34844ad9f0ed6d55d3294957dbf111b31501c8d651b5eb003949d29a7d00d5443ed61851f217fe0a1a71817eae1f9d5544bbefed1bc4c04955eb155987a7b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7}}}}]}, @TCA_TCINDEX_HASH={0xfffffdbc, 0x1, 0xfb03}, @TCA_TCINDEX_POLICE={0x4}]}}]}, 0x1264}, 0x1, 0x0, 0x0, 0x40}, 0x0) 18.663847067s ago: executing program 2 (id=221): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x1, 0xfffffffc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_SEC_DEVKEY={0x30, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x0, 0x1, 0xc}]}]}, 0x4c}}, 0x0) 18.599249141s ago: executing program 2 (id=222): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x32d3, 0x4) r1 = syz_usb_connect(0x5, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="120100003d2ab420720c0d009b27010203010902120001000000000904"], 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, 0x0, &(0x7f0000000380)) syz_usb_control_io(r1, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000500)={0x20, 0x30}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)={0x40, 0x21, 0x1, 0x1}}) syz_usb_control_io$uac3(r1, 0x0, &(0x7f0000000a40)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) 18.272400967s ago: executing program 0 (id=223): r0 = syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000240)={0x20, 0x3, 0x1, "f7"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.757797009s ago: executing program 0 (id=224): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x4000800) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x2000000) 17.547841421s ago: executing program 0 (id=225): socket$nl_netfilter(0x10, 0x3, 0xc) 17.437292512s ago: executing program 0 (id=226): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000300)={0x0, 0x1f, 0x62, "2c834bc1d4d276c4b09fcfe9296981c98f6a5d4475b0f755d2d6418719898e629b710a0906ccef21f58c95b502dcaaedf77440945bd820477191d331de70d07617310b871678e8a62a6980167a30c4436ac2b6112f3775728da0036b53d053a3127c"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x5}, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x1}}, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000700)={0x40, 0xb, 0x2, '!:'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, &(0x7f0000000c00)={0x40, 0x3, 0x6, "d3394f9142a5"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_disconnect(r0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000300)={0x0, 0x1f, 0x62, "2c834bc1d4d276c4b09fcfe9296981c98f6a5d4475b0f755d2d6418719898e629b710a0906ccef21f58c95b502dcaaedf77440945bd820477191d331de70d07617310b871678e8a62a6980167a30c4436ac2b6112f3775728da0036b53d053a3127c"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x5}, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x4, {0x2, 0x1}}, 0x0, 0x0, &(0x7f00000006c0)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000700)={0x40, 0xb, 0x2, '!:'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000e40)={0x2c, &(0x7f0000000c00)={0x40, 0x3, 0x6, "d3394f9142a5"}, 0x0, 0x0, 0x0, 0x0}) (async) 16.968147902s ago: executing program 2 (id=227): syslog(0x369dd417, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0xf1a) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private1, 0x10103, 0x0, 0x1, 0x7, 0xfc65, 0x9}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x10100, 0x0, 0xff, 0x3, 0xfc62, 0xd6e9, 0x2000000}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000002d80), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x64058805) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x3c42, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r8, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}, 0xe2}], 0xf000, 0x40012012, 0x0) ppoll(&(0x7f00000000c0)=[{r7}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_int(r6, 0x0, 0x12, 0x0, 0x0) 15.910209336s ago: executing program 0 (id=228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)={0x28, r1, 0x1, 0x0, 0x2200, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 4.173536292s ago: executing program 32 (id=215): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf25030000000c00060004000000000000000c00040001000000000000080c00020002000000000000000800010000000000640007800c"], 0xc0}, 0x1, 0x0, 0x0, 0x66393c82b5350394}, 0x20000804) 3.122731503s ago: executing program 33 (id=220): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000a40)="d8000000180081064e81f782db4cb904021d0800fd007c05e8fe55a10a0005000000000000000e41b07c0900ac00060311000000040005000a0012060048035c3b61c102000000007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c220175730d16a4683f5ae24e25ccac9e00360db79826835d3a71d95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000000348cc5614f7da773c20c6a6c8bd414c8da", 0xd8}], 0x1}, 0x0) mprotect(&(0x7f00001b5000/0x4000)=nil, 0x4000, 0x8) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, &(0x7f0000000000), 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r6, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) writev(r8, &(0x7f0000000500)=[{&(0x7f0000000180)="3a61319a26af", 0x6}], 0x1) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, &(0x7f00000000c0)='nr0\x00') r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010026bd7000fddbdf251900000008000300", @ANYRES32=r11, @ANYBLOB="0500613e61708b457168df76b679c10112de934f6f1e039f0d3904897323999b89bb02a7f0611f5baddbf8599e9df731eb1c6a92300f6eabc06118c386a96f9d26008d24101167d1c181744e3ae86bee904033a3765f6fa72cf60f2bbc46658bc73a1fca626c285e63eeab615d0b4f49034cbe2ca4bb53dfda7a6ad35634480d56afb754c6be708f82cc684f73ed0d05"], 0x24}, 0x1, 0x0, 0x0, 0x4008880}, 0x20000840) r12 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000002200)=@deltfilter={0x1264, 0x2d, 0x200, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x8, 0xffe0}, {0x3, 0xffe0}, {0x9}}, [@f_tcindex={{0xc}, {0x1234, 0x2, [@TCA_TCINDEX_ACT={0x1224, 0x7, [@m_vlan={0x1134, 0x0, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x7, 0x5, 0x9, 0x24b5}, 0x1}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x173}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x3}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x0, 0x3, 0x2, 0x2d9146fb}, 0x3}}]}, {0x10b5, 0x6, "2f8728b336b0993952126d3f754e7dd62b3499596cfbb21bbb05ff81a2d10a674e3c7bc8fc3492f7e594424ded8278cf522206a305000000738570cf77a5b1a3661f00a256ced42105ccdbe1303cddaf27f1ecbe2f010b929d1b39bd08a8eb9503d77275a706ac29af91d8163297a3c31f5e418a185512cd05e846850e9eb9ecf10e1677c98e2c729cd98e423d6973070c3500936a384a4c60bfef85025bc5595d950bd9ca86fc758be0cdde7dbbb91ebbd89e0cccea374711f33d6c694f4d499a4652120b8e868bbc66914b26ae704ea535775846f925bebbb8bae8b00fa6d60e68107f8f98faca17fc68f7b80a1a353d0b5ddfe1d9fd62b319d9c830c9b546c4b3c5738635a1744fd13b24e80e743df688f8152cad9aba211ceddb39f84d34512574575ccf8e9354fcc16401f0a553bdca5c908ed15f98d6e0b79dcdbb5cf4d35ecaae41c1dcc9ad53b8545839f86d9073c988310667e7b146e1d3e8c0a07a2f8764c9702e1e4520941cd411305a68c8cf0c1c3c410f2909b2012539cfb1fa2f8da825fe19aa3cc8941803b7e7e6f9466dd1cda41f0f0beb8d8771c8a549606e7020605ac63042da9831dc935f7ab319b142b4cafead6a8c2c64d9a4fbe97c75348d2f7da493067f0ceb914ad13f209026115ed2091227ba5aac9373c17b8f0a06861506ac42764fd19df9a4e7fbac51129877860563f65ae62e32534bf7f5f4b2ce99e950c6856632dbb96f64d6b027bf1befe7e89b9b3c12623af8761312e38469c6730ee53188c841c81cedbd8f49a1b7e5d29bc2990fc380a19920f04fddb10720aeeefe1da636cb9752bb39e94d1509fa356a75137a468c0b67c5796dbc0d49f4bdca60d3e363629cd9e841434c39efb206ebf71a7ab28c0168547d48eb419e5f3f42e40b27b58575aaaa9f28a0e1310f44febb000a9cb51ed092c81635241df9bf91dd3e0df720248d026352085a052338cc3cd74887c1e06e6c75ad4bbd7462120c88c6c09ff969c2ea81f71b2e207f3e941b5d95ac7f876ad8147c8a032d1d93d29d7c5f05a70d5363477eebd060e4aa12850cfc4c4729d971c578670a305450241230e1922e402590b8614541fb69e03b62d213edbd971f01b0fc5f980ec1255e41e29462d01df2b35ec321895a782e838d74c9839259c484e5759a64d6f5f02f7aa4720d2534bb72e8201992f8cbd47461845347ab1b688ddf21f8c25300832e7fa1c01400ae2754a0b36509429a1afa9a02d093251f794d7f8ca8c0904b81947e4c173b168df20da73b1247d12c309edbbaebdf525330069e72866a9072d021c86853c3f10d58c8005889ffac4fff26788f85eeca09e52e7c93d96d23755256125c6b655cd311c9d53e7c57dab0a322369278c2c5333973e4b085c4531e98e8d0e4f1aeaf366e50d15aea5cd1d23ca2dd880ae77670b39dc3b5ee0b31baabda5460a52e29db885425df29aabefa52fd8f9f5c456bd33c0f0d2d95d370780d7441e1dffe7e07685f21402370f6e0cb3785fc3d41f543df6e4269caa79e612570fadd46677c3741c031368732db5cfb5426d58ba1407980b368dcd3e72ce11c9bf9c8b62e001b7f3e3e07e114b23be91fc9bcb4234ff8243b668337cfcfb5a9002b23cb125c420c36ddc92d5fa562e7442e8e1098ddb0ade25d85ec1968801a2ebc81f1b776a40e69f0ec889065c5dd453442afdfce58d3d135bc66d3f46a1a5ff95cf2e78ba3f12771c8ccc91f2a604a718d0ff766c4278f11c07f1ab619f3872d5d47fe376fded89c8492b6d3981d54e9da81a7cc7fc93767077f0856906319e1eb7f2b0c037217efcc0ff32e6987e7b29de8670e9848fe01709c9e0cd107dac4503e56af2ebdbd06295cb652af0c29d1d68e5e86e8e07cdbac44508e8ab268b4e501e44e49a626ec2d392a8c4874ab7df6298d9056a807389941b8862c810d850767b9e2660a3814ae1ece510c1c7e6d0db573c5201c2f3b9e9fefd5d7992b025e1e854041ab82fe870d9248fd393775f5a65e6c21c6f1ac772d0454969262e9a19c36cc982396037618e5e53cf47bb20fc89dd3df32ee8ae8aedc91e8f35ce7f557af8ef6ac73859bc5a96e0e64b462caef181604f171b319885d14a1bfdf9788c9268558d2cfca24085046e6b8ce42193d995167767c4b23ef2229a4bae5bd3c9e72b42548c990f0062c5755b7dca966da4934f132eeaac939336981bf9a441d02443b20611d3d7ec7774faff43d6d3c120389e8a2a26e8ceeafd4eb97dc0ec2843d94f538b1d7c6081523ca2d90f0bfcc785502e66adcda396ae43723c80c2324536919aacde6624300b2d82a11ace14dd38c1e751765a9818e475f805e604d0c337b2e7f3e705e0f96d0a10e1f273fa014c91fb0eeecc92fabf46d6e3314bb5c2295aee1f82834aa09614febb9387442dcaf4c4b8b72d75e44c601d8ed43693dc9b8521d71f56bfc60177a07bd199c18a6a7b23112f7bc6a945e170f8fd72ddd4c5a133ace3ae0792ec0fce5ed6da721a6d6333b3054b73d70d16115744f34d0b33e60d06769d3b355e806eaee286c1c6cca87f77d85f6c4fa9671b5b0389c4e65ed2618a3b77792595ecacb31275315690962af72debc987d904237219bb43b4a7367c03e270042c148f23f80b78f6a51bd5d2c9fb957ce5ea687e40e7c70ead87cc719d637ecce67d36c1fd566f48a33ebb118ac3d830150d2b9b3ee61ea37fc024adb7c41c25fd33e53885235eeab921b5cab5beab4af9d208309c3052824ee5e70469c1c25f3bcf46819eb2a3e49ed783db5199169ec3035e25c70c0a02e2542ba85603a90a5b051e38046fbf8dd03e9d5825910955bd238b1a60a1c382159e85335309a054fb291984e84847e8b496d2104e64668e5cec5525ece8f09dded3ffac93fa76c9c23adc5dcc88318d1a392714e5a5018af453ddc63d2e3801caa6376fb7c184b9f3209fa25177b28b4546adf97cbbd40d4a7fb1da962b9f07a9bc1dc327a96e60ddf6449117a3bd84e8db1eae40b6217236b6602d8fdbd56011e770527bd90bf8326b45d648d7556b91ecaaeb6c3a0701f38e9930663f36938c5534cce552a05fb5000c6f7202b74eec1e4a4ed4a082f7134bed5309614ba2c4088540e8321f3c9d2684e13fa82d2a179f145da2277558fd8f41830250f4f91b206230b9c7cd56a9f0960f409520e73bb43b7d2eb0abb1fec0fd241e093072c59326913f2b7202b2b7347d0cd49bc4ceb79984221f9c9b0432000cc633fe1a020f74e192c1af071461eb00b9643d2e68d3a8b853c1606b1632585b32031c1e28af6b0e344c64d79c7c045997c6efc27c45d9489f33883dffe4a188afd4558750f67a4aed2ac366f94a4e10b170adb9751cefd0c8732d456de407abd60ae0b8c8ced82514edf156c0b7250f0006adac2cca66e83acb455ba19976a0e9d29c4bba745e2516e3a33ca7e02b5c42eb708d2412803bfac12c3838c9238e792d566be6229a5e3154b4bf1ba26fe56e8267f0ce99db5f4c7daf052705a4c5c8f6a6caa1d410a1b110e46bd634413ed971999827c631fcf49207d253c59bd4e55f3890a76061f3413ad6a8f5d40982476cf3e9a47b5dec4fea667be4caf7c0ad5f66eabaa5bbf355e46ec86a5ab39ebf6a188ce195ead68aa960721a7287b21cc3671f72847bfebc0ccbcb60246a5cbae190ec5cc5f7909f4d9211fb178664fb5b490550f1792c424f887367197989d0e7bd0a2e2306c8bf43a920534e703b09a21e7c8d64b983cb4f4cef803a41d42417980af1ffe3cdda2668f5aaae7d522d48186842642a2ea9bf75487c413bd8189c6de192586ddae0eae0fdbc59bac177e1f32a3941e5a7d569320a2e8d5a4b2226b23f4704c0eb1452d6eb658bcfefc143e279e83efc57284875d1607cdbed9d2e6248b75cbf8cebc822e7fa6f64b77e100525fd6c93174f94f1bcd250250de79cae24bef1af3693c431f9e4e33702e3931fb7e239cc361e6f2703a269ac2778da797e79cef35e1adb3d6c57abddc5ffa45333ad53d6949e47f00a62b071d8473daaa2c3ae019aaf57ceca9c5d588865eb64567f835736bc114054d92f849339972017bcea859b3bdeda9cb577163fbdcf01cf09a304999a6e5acd823e5f399f36c07750362d1d453baa5321d89573e74035b0aa6cfe181a3efdf561af0815291d1a84ae2bacc96231fd753d2dd9dbac6e23bed80ca35af5b451ea47fa6a6c32159b68372912ae2b02ae9fee3629304612ef7b0e2f29e5c915b9a7a29a8adff66ee01f344f1727126da4177ae71db5b0397a2cbd1581d6609f04dac815bba792fe9d29487da89de86bcd2a7605eeae3b3e089447495fe09b48835d9c54d8a5954b83de51cd8908b3cd645e09472f752e1f9527894c8b09df40cb36961a53cffe8567278fde5203259142d575f0b4ae95df9ff569d518d1dd6f9721229d251fc0f031f2a071dacd68edeb8faaa734f76905d5a9d65bf364f4798f430ad0653019e07bfd065632fbdc34d91a10f71a878c354065782c9276a20d9d55bc50e90cf814037072226b862747ff08fab5549ea6a7aac3697841d1eed5629eaed4a528b825640e409228dcf0acedfd67e22eda301a5d47ee1de16ae1fcf40c220b64462ffcb8280ed732736e7dc0d697a61058a6bf36521e1b0c852ae072c1519cb13482e733998618d67b2e258df71a75fba7c04100d4ed7d4f99182464436233e8d95c4499e937c56c0d4e14b15129aed4cae524cca390585c7802275c8ca1e73173054058c73cbf39f79cf690602852fcb3f4fc7d03d5a48d43b26c2517177fe5a7e5a8c3230521c7429e038e0658363f8ebbf8790c6c1efb99c0c708b6cd16fee0c52ef58a0d09f9473b9917d743053315b1e227a9a7b929d10d76d430d8db8377d004ab3bd9deac15cde8b9bea6012a18918b4d9a9099df561bc283dde3876acba4e66569d52881e4e6887fc0e97c66d387e1c4aadec7f25efa0de21997cb04076fa3f19d8d9ec85e690a07330a277d135e4515d53293755e1037dff2d41cd33e22826b9475ccf3192875e637133bd4bbaeef195924fe500f9ddc508095ba6431d0f09723c4687b6ec2fdfd79fd19e683642c3b08c98709bb2465371ef53119bbd8aae5061dbd156209d887fb817cbf473eace3476465f7b7902adf0c2d42c902929327bb0c69fbd6a3a3077d9a650c3a808b3e1eb6d37394db96c74b6aa63f76be212688a19761960a7546080dd0a797bb7c568ed68803d897f6cfbdf196d531ab1919b77809cc4f72404c5a319d8a29477ffa0510e2a079756519ec4bcb10fb18c37dfe1c7b574833f7423e85287ec3d18a804bb5c88d765e75db7aa14ebc70c3f3eedaf101b3ce93d317f310b252903cb01979ba10156a5c065fb383e324652751c597f7ae19ac961f40dab828ab89e5dd55c51cb7aee1ee8b14950bc8629ce112fd69fb4dcb40ac7bc9c872c484944c2e487531a5d36d5bc70a1f85616006701c5449dffbfa7828e54bdec51599c06b0efcf3211a3230527c99e98832b1323e723679604ad115ed1e21f97228fa9953a36815285bf3040b07e679b1833e588f1a64b5e412e0b1b98cf7e0ea4f7124ab8ac4b6d0fe1f73bd66f1e7ff3f43ace81443833e107fa0cf2856f800ee5ada2e181cef6c055d7ebba76753ca17356fd21a92ff26e8353e8cf36b62127b59cce381dfea1d1815181f4cbe0f45740943f2d7148d45bf1fb90f764d1e8fe4646e52fba5312284071f5480aa20d3001bb7cc8f341d89d25642ed6b091c29efe92a8b5539109f59a09c59cf4261253e2ef6e8baaee097980fea998243acd7b2e9606aef6218275afd3811e197b236b3282eeba3404a6d51bdd22f173a21330d197b2e11496d45d32958300e8441f76e52b10e4482bc6fc1a514389b9e58bd006b77a278b4de761d9fdb77e8d91263b4c514dcc7160310b9d919ae613620de9b85d891b484f0a54e1fa571b7fb95922dd5b22a289c1a4fe8b9bf0db5297992ecaabe800"/4273}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_vlan={0xec, 0x1d, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xf95}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1c8}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x4, 0x6, 0x6, 0x3, 0x1}, 0x2}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xc, 0x7f, 0x10000000, 0x3, 0x7}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}]}, {0x6d, 0x6, "284ba233e3cfdce0526f09bed11f3fb59cf8080d263e660194c45527364ae868259cb5ba7e935c81fdbae34844ad9f0ed6d55d3294957dbf111b31501c8d651b5eb003949d29a7d00d5443ed61851f217fe0a1a71817eae1f9d5544bbefed1bc4c04955eb155987a7b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x7}}}}]}, @TCA_TCINDEX_HASH={0xfffffdbc, 0x1, 0xfb03}, @TCA_TCINDEX_POLICE={0x4}]}}]}, 0x1264}, 0x1, 0x0, 0x0, 0x40}, 0x0) 1.066678117s ago: executing program 34 (id=227): syslog(0x369dd417, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r0, 0x4b32, 0xf1a) r1 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100006df57108e2042414ebc7010203010902380003960000000904cc070002596105052406000105240006000d240f01900800000000070008060600000011090401"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000240)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private1, 0x10103, 0x0, 0x1, 0x7, 0xfc65, 0x9}, 0x20) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000200)={@loopback, 0x10100, 0x0, 0xff, 0x3, 0xfc62, 0xd6e9, 0x2000000}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000002d80), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NETID(r4, &(0x7f0000002e40)={0x0, 0x0, &(0x7f0000002e00)={&(0x7f0000002dc0)={0x1c, r5, 0x1, 0x70bd2a, 0x25dfdbff}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x64058805) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x3c42, 0x3, 0x0, 0x0, 0x0}, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000000)) r8 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r8, &(0x7f0000004b40)=[{{0x0, 0x0, 0x0}, 0xe2}], 0xf000, 0x40012012, 0x0) ppoll(&(0x7f00000000c0)=[{r7}], 0x1, 0x0, 0x0, 0x0) getsockopt$inet_int(r6, 0x0, 0x12, 0x0, 0x0) 0s ago: executing program 35 (id=228): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000b00)={0x28, r1, 0x1, 0x0, 0x2200, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'eth', 0x3a, 'gre0\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) kernel console output (not intermixed with test programs): ort 1(bridge_slave_0) entered disabled state [ 79.040790][ T5611] bridge_slave_0: entered allmulticast mode [ 79.042660][ T5611] bridge_slave_0: entered promiscuous mode [ 79.092194][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.092470][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.092649][ T5611] bridge_slave_1: entered allmulticast mode [ 79.094494][ T5611] bridge_slave_1: entered promiscuous mode [ 79.112678][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.165721][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.227363][ T5609] Bluetooth: hci2: command tx timeout [ 79.231375][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.231631][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.231778][ T5617] bridge_slave_0: entered allmulticast mode [ 79.233544][ T5617] bridge_slave_0: entered promiscuous mode [ 79.240369][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.240656][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.240886][ T5613] bridge_slave_0: entered allmulticast mode [ 79.244866][ T5613] bridge_slave_0: entered promiscuous mode [ 79.261384][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.285076][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.285381][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.291758][ T5617] bridge_slave_1: entered allmulticast mode [ 79.296956][ T5617] bridge_slave_1: entered promiscuous mode [ 79.298423][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.298707][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.298931][ T5613] bridge_slave_1: entered allmulticast mode [ 79.302432][ T5613] bridge_slave_1: entered promiscuous mode [ 79.306744][ T5609] Bluetooth: hci3: command tx timeout [ 79.313576][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.319789][ T5607] team0: Port device team_slave_0 added [ 79.391788][ T5607] team0: Port device team_slave_1 added [ 79.608949][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.613817][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.618241][ T5611] team0: Port device team_slave_0 added [ 79.645817][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.649647][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.652501][ T5611] team0: Port device team_slave_1 added [ 79.654050][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.654061][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.654077][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.726919][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.726930][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.726946][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.810413][ T5617] team0: Port device team_slave_0 added [ 79.822481][ T5613] team0: Port device team_slave_0 added [ 79.825533][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.825548][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.825573][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.839899][ T5617] team0: Port device team_slave_1 added [ 79.844291][ T5613] team0: Port device team_slave_1 added [ 79.847053][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.847069][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.847092][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.978100][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.978111][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.978126][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.979913][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.979923][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.979938][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.992075][ T5607] hsr_slave_0: entered promiscuous mode [ 79.994455][ T5607] hsr_slave_1: entered promiscuous mode [ 80.004475][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.004492][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.004516][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.007961][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.007976][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.008000][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.150209][ T5611] hsr_slave_0: entered promiscuous mode [ 80.152299][ T5611] hsr_slave_1: entered promiscuous mode [ 80.154612][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 80.154744][ T5611] Cannot create hsr debugfs directory [ 80.283915][ T5617] hsr_slave_0: entered promiscuous mode [ 80.285207][ T5617] hsr_slave_1: entered promiscuous mode [ 80.287380][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 80.287403][ T5617] Cannot create hsr debugfs directory [ 80.301871][ T5613] hsr_slave_0: entered promiscuous mode [ 80.304260][ T5613] hsr_slave_1: entered promiscuous mode [ 80.306619][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 80.306643][ T5613] Cannot create hsr debugfs directory [ 81.076210][ T4926] Bluetooth: hci0: command tx timeout [ 81.076350][ T5609] Bluetooth: hci1: command tx timeout [ 81.170225][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 81.218735][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.224740][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.253047][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.257927][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.291786][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.317077][ T5609] Bluetooth: hci2: command tx timeout [ 81.317387][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.342688][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.387354][ T5609] Bluetooth: hci3: command tx timeout [ 81.475589][ T5617] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 81.523341][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.527529][ T5617] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 81.569885][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.574132][ T5617] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 81.593988][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.625703][ T5617] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 81.672976][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.872940][ T5613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.905005][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.921049][ T5613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.987168][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.020213][ T5613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.060109][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.064826][ T5613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.102172][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.205555][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.249578][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.260181][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.291739][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.309699][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.349493][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.354994][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.376683][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.500320][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.597890][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.643030][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.643205][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.670326][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.703235][ T3127] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.703377][ T3127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.798222][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.849196][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.849750][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.863860][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.898211][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.898327][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.971579][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.997711][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.041366][ T3127] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.041459][ T3127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.147020][ T5609] Bluetooth: hci1: command tx timeout [ 83.147037][ T4926] Bluetooth: hci0: command tx timeout [ 83.171720][ T3127] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.171816][ T3127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.225810][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.288510][ T3127] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.288618][ T3127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.361476][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.361716][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.386615][ T4926] Bluetooth: hci2: command tx timeout [ 83.467048][ T4926] Bluetooth: hci3: command tx timeout [ 84.424928][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.508379][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.792907][ T5607] veth0_vlan: entered promiscuous mode [ 84.830047][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.899912][ T5617] veth0_vlan: entered promiscuous mode [ 84.908026][ T5607] veth1_vlan: entered promiscuous mode [ 84.982472][ T5617] veth1_vlan: entered promiscuous mode [ 84.994712][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.120081][ T5607] veth0_macvtap: entered promiscuous mode [ 85.142546][ T5613] veth0_vlan: entered promiscuous mode [ 85.185071][ T5607] veth1_macvtap: entered promiscuous mode [ 85.218984][ T5617] veth0_macvtap: entered promiscuous mode [ 85.228432][ T4926] Bluetooth: hci0: command tx timeout [ 85.228463][ T4926] Bluetooth: hci1: command tx timeout [ 85.295280][ T5617] veth1_macvtap: entered promiscuous mode [ 85.309323][ T5613] veth1_vlan: entered promiscuous mode [ 85.357268][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.375676][ T5611] veth0_vlan: entered promiscuous mode [ 85.407855][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.411970][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.465249][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.466310][ T5609] Bluetooth: hci2: command tx timeout [ 85.470683][ T5611] veth1_vlan: entered promiscuous mode [ 85.477818][ T168] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.500277][ T168] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.519962][ T168] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.538411][ T168] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.556064][ T5609] Bluetooth: hci3: command tx timeout [ 85.602636][ T168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.618453][ T168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.624683][ T168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.636077][ T5613] veth0_macvtap: entered promiscuous mode [ 85.640234][ T168] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.762411][ T5613] veth1_macvtap: entered promiscuous mode [ 86.145444][ T5611] veth0_macvtap: entered promiscuous mode [ 86.164340][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.210821][ T5611] veth1_macvtap: entered promiscuous mode [ 86.251874][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.291161][ T43] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.294145][ T43] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.313560][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.313592][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.336263][ T43] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.357470][ T43] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.399396][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.413712][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.413730][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.500287][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.530630][ T161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.530649][ T161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.648902][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.666660][ T1902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.666678][ T1902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.666839][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.727708][ T168] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.767595][ T56] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.977454][ T1886] cfg80211: failed to load regulatory.db [ 87.340890][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.340910][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.762941][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.762959][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.019403][ T161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.019423][ T161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.221722][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.221740][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.496420][ T1886] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 88.820183][ T1886] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 88.820225][ T1886] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 88.820248][ T1886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.116992][ T1886] usb 3-1: config 0 descriptor?? [ 89.751065][ T5619] usb 3-1: USB disconnect, device number 2 [ 90.197388][ T5790] netlink: 'syz.1.8': attribute type 4 has an invalid length. [ 90.460297][ T5797] overlayfs: overlapping lowerdir path [ 90.923483][ T5806] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 91.242766][ T5810] FAULT_INJECTION: forcing a failure. [ 91.242766][ T5810] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 91.242817][ T5810] CPU: 0 UID: 0 PID: 5810 Comm: syz.2.13 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 91.242842][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 91.242859][ T5810] Call Trace: [ 91.242870][ T5810] [ 91.242879][ T5810] dump_stack_lvl+0xe8/0x150 [ 91.242909][ T5810] should_fail_ex+0x46b/0x600 [ 91.242940][ T5810] _copy_from_user+0x2d/0xb0 [ 91.242974][ T5810] comedi_unlocked_ioctl+0x7f8/0x1b00 [ 91.243023][ T5810] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 91.243058][ T5810] ? tomoyo_path_number_perm+0x219/0x630 [ 91.243085][ T5810] ? tomoyo_path_number_perm+0x219/0x630 [ 91.243113][ T5810] ? do_vfs_ioctl+0x117b/0x1540 [ 91.243144][ T5810] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 91.243207][ T5810] ? __fget_files+0x2a/0x420 [ 91.243233][ T5810] ? __fget_files+0x2a/0x420 [ 91.243254][ T5810] ? __fget_files+0x3a6/0x420 [ 91.243276][ T5810] ? __fget_files+0x2a/0x420 [ 91.243301][ T5810] ? bpf_lsm_file_ioctl+0x9/0x20 [ 91.243320][ T5810] ? __pfx_comedi_unlocked_ioctl+0x10/0x10 [ 91.243345][ T5810] __se_sys_ioctl+0xff/0x170 [ 91.243370][ T5810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.243391][ T5810] do_syscall_64+0x15f/0xf80 [ 91.243435][ T5810] ? trace_irq_disable+0x3b/0x140 [ 91.243460][ T5810] ? clear_bhb_loop+0x40/0x90 [ 91.243482][ T5810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.243501][ T5810] RIP: 0033:0x7f8be32acdd9 [ 91.243524][ T5810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.243540][ T5810] RSP: 002b:00007f8be14fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.243561][ T5810] RAX: ffffffffffffffda RBX: 00007f8be3525fa0 RCX: 00007f8be32acdd9 [ 91.243575][ T5810] RDX: 0000200000000180 RSI: 0000000080506409 RDI: 0000000000000004 [ 91.243587][ T5810] RBP: 00007f8be14fe090 R08: 0000000000000000 R09: 0000000000000000 [ 91.243600][ T5810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.243612][ T5810] R13: 00007f8be3526038 R14: 00007f8be3525fa0 R15: 00007ffcf0007318 [ 91.243642][ T5810] [ 91.559118][ T5809] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'. [ 91.749256][ T5818] 9p: Bad value for 'rfdno' [ 91.794684][ T5802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.927102][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 93.086899][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 93.090788][ T9] usb 3-1: config 251 has an invalid interface number: 202 but max is 0 [ 93.090817][ T9] usb 3-1: config 251 has no interface number 0 [ 93.090863][ T9] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 16 [ 93.090886][ T9] usb 3-1: config 251 interface 202 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 93.090906][ T9] usb 3-1: config 251 interface 202 altsetting 1 endpoint 0x6 has invalid maxpacket 1024, setting to 64 [ 93.090933][ T9] usb 3-1: config 251 interface 202 altsetting 1 has an endpoint descriptor with address 0xC1, changing to 0x81 [ 93.090959][ T9] usb 3-1: config 251 interface 202 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 256 [ 93.090981][ T9] usb 3-1: config 251 interface 202 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 93.091006][ T9] usb 3-1: config 251 interface 202 has no altsetting 0 [ 93.210404][ T9] usb 3-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=bb.c9 [ 93.210438][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.210459][ T9] usb 3-1: Product: syz [ 93.210472][ T9] usb 3-1: Manufacturer: syz [ 93.210485][ T9] usb 3-1: SerialNumber: syz [ 93.292940][ T5831] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.293321][ T5831] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 93.685227][ T9] cxacru 3-1:251.202: send of cm 0x90 failed (-71) [ 93.685268][ T9] cxacru 3-1:251.202: usbatm_usb_probe: invalid endpoint 02! [ 93.721913][ T9] cxacru 3-1:251.202: probe with driver cxacru failed with error -22 [ 93.794765][ T9] usb 3-1: USB disconnect, device number 3 [ 94.098042][ T5853] binder: BINDER_SET_CONTEXT_MGR already set [ 94.098058][ T5853] binder: 5852:5853 ioctl 4018620d 200000001000 returned -16 [ 94.194657][ T58] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 94.388787][ T58] usb 1-1: unable to get BOS descriptor or descriptor too short [ 94.390087][ T58] usb 1-1: config 114 has an invalid interface number: 240 but max is 0 [ 94.390110][ T58] usb 1-1: config 114 has no interface number 0 [ 94.390154][ T58] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x1 has invalid maxpacket 1023 [ 94.390176][ T58] usb 1-1: config 114 interface 240 altsetting 232 has an endpoint descriptor with address 0xCA, changing to 0x8A [ 94.390198][ T58] usb 1-1: config 114 interface 240 altsetting 232 bulk endpoint 0x8A has invalid maxpacket 16 [ 94.390220][ T58] usb 1-1: config 114 interface 240 has no altsetting 0 [ 94.393564][ T58] usb 1-1: string descriptor 0 read error: -22 [ 94.393704][ T58] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 94.393727][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.424110][ T5850] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 94.462447][ T5850] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 94.552595][ T58] ir_usb 1-1:114.240: IR Dongle converter detected [ 94.588306][ T5712] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 94.678461][ T58] usb 1-1: IRDA class descriptor not found, device not bound [ 94.785329][ T5712] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 94.785357][ T5712] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 94.785411][ T5712] usb 4-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.815375][ T58] usb 1-1: USB disconnect, device number 2 [ 94.907419][ T5714] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.095160][ T5875] netlink: 40 bytes leftover after parsing attributes in process `syz.2.32'. [ 95.113537][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.113573][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.113732][ T5714] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.113817][ T5714] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.113840][ T5714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.193786][ T5714] usb 2-1: config 0 descriptor?? [ 95.354793][ T5699] IPVS: starting estimator thread 0... [ 95.477311][ T5880] IPVS: using max 11 ests per chain, 26400 per kthread [ 95.628639][ T58] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 95.694611][ T5714] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 95.694644][ T5714] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 95.694661][ T5714] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 95.694678][ T5714] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 95.694694][ T5714] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 95.694711][ T5714] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 95.694759][ T5714] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 95.694775][ T5714] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 95.694811][ T5714] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 95.694832][ T5714] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 95.794922][ T58] usb 1-1: Using ep0 maxpacket: 16 [ 95.809638][ T58] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 95.809672][ T58] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 95.812523][ T5866] FAULT_INJECTION: forcing a failure. [ 95.812523][ T5866] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 95.812553][ T5866] CPU: 1 UID: 0 PID: 5866 Comm: syz.1.29 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 95.812575][ T5866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 95.812584][ T5866] Call Trace: [ 95.812591][ T5866] [ 95.812597][ T5866] dump_stack_lvl+0xe8/0x150 [ 95.812621][ T5866] should_fail_ex+0x46b/0x600 [ 95.812647][ T5866] _copy_to_user+0x31/0xb0 [ 95.812673][ T5866] simple_read_from_buffer+0xe1/0x170 [ 95.812696][ T5866] proc_fail_nth_read+0x1be/0x230 [ 95.812719][ T5866] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.812740][ T5866] ? rw_verify_area+0x2ac/0x4e0 [ 95.812760][ T5866] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 95.812783][ T5866] vfs_read+0x212/0xa80 [ 95.812808][ T5866] ? __pfx_vfs_read+0x10/0x10 [ 95.812837][ T5866] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 95.812860][ T5866] ? lockdep_hardirqs_on+0x7a/0x110 [ 95.812883][ T5866] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 95.812905][ T5866] ? mutex_lock_nested+0x152/0x1d0 [ 95.812923][ T5866] ? fdget_pos+0x252/0x320 [ 95.812949][ T5866] ksys_read+0x156/0x270 [ 95.812972][ T5866] ? __pfx_ksys_read+0x10/0x10 [ 95.813007][ T5866] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.813024][ T5866] do_syscall_64+0x15f/0xf80 [ 95.813044][ T5866] ? clear_bhb_loop+0x40/0x90 [ 95.813064][ T5866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.813079][ T5866] RIP: 0033:0x7f321512d60e [ 95.813094][ T5866] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 95.813107][ T5866] RSP: 002b:00007f32133c5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 95.813124][ T5866] RAX: ffffffffffffffda RBX: 00007f32133c66c0 RCX: 00007f321512d60e [ 95.813136][ T5866] RDX: 000000000000000f RSI: 00007f32133c60a0 RDI: 0000000000000004 [ 95.813145][ T5866] RBP: 00007f32133c6090 R08: 0000000000000000 R09: 0000000000000000 [ 95.813154][ T5866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 95.813162][ T5866] R13: 00007f32153e6038 R14: 00007f32153e5fa0 R15: 00007fff9b7a83e8 [ 95.813185][ T5866] [ 95.813666][ T58] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 95.813692][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.813710][ T58] usb 1-1: Product: syz [ 95.813724][ T58] usb 1-1: Manufacturer: syz [ 95.813738][ T58] usb 1-1: SerialNumber: syz [ 95.893858][ T58] usb 1-1: config 0 descriptor?? [ 95.973569][ T58] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 95.973607][ T58] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 96.333225][ T5714] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 96.498930][ T5888] netlink: 'syz.1.36': attribute type 15 has an invalid length. [ 96.498965][ T5888] netlink: 24 bytes leftover after parsing attributes in process `syz.1.36'. [ 96.515220][ T5879] netlink: 'syz.0.34': attribute type 2 has an invalid length. [ 96.515351][ T5879] netlink: 132 bytes leftover after parsing attributes in process `syz.0.34'. [ 96.537084][ T58] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 96.568656][ T58] em28xx 1-1:0.0: Config register raw data: 0xfb [ 96.568682][ T58] em28xx 1-1:0.0: I2S Audio (3 sample rate(s)) [ 96.568699][ T58] em28xx 1-1:0.0: No AC97 audio processor [ 96.699324][ T5714] usb 2-1: USB disconnect, device number 2 [ 96.767435][ T5879] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 97.329710][ T5887] fido_id[5887]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory [ 97.358788][ T5712] usb 4-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 97.358828][ T5712] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.429575][ T5712] usb 4-1: can't set config #1, error -71 [ 97.477841][ T5712] usb 4-1: USB disconnect, device number 2 [ 97.782303][ T58] usb 1-1: USB disconnect, device number 3 [ 97.934091][ T5898] Cannot find set identified by id 0 to match [ 97.997379][ T5900] Zero length message leads to an empty skb [ 98.017764][ T5714] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.120403][ T5904] FAULT_INJECTION: forcing a failure. [ 98.120403][ T5904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 98.120426][ T5904] CPU: 1 UID: 0 PID: 5904 Comm: syz.2.41 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 98.120439][ T5904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 98.120446][ T5904] Call Trace: [ 98.120451][ T5904] [ 98.120456][ T5904] dump_stack_lvl+0xe8/0x150 [ 98.120475][ T5904] should_fail_ex+0x46b/0x600 [ 98.120492][ T5904] _copy_to_iter+0x404/0x17d0 [ 98.120516][ T5904] ? __pfx__copy_to_iter+0x10/0x10 [ 98.120539][ T5904] seq_read_iter+0xbf6/0xe20 [ 98.120567][ T5904] seq_read+0x36a/0x490 [ 98.120590][ T5904] ? get_pid_task+0x20/0x1f0 [ 98.120616][ T5904] ? __pfx_seq_read+0x10/0x10 [ 98.120636][ T5904] ? apparmor_file_permission+0x1f4/0x300 [ 98.120654][ T5904] ? __pfx_seq_read+0x10/0x10 [ 98.120669][ T5904] proc_reg_read+0x1f6/0x2f0 [ 98.120685][ T5904] ? __pfx_proc_reg_read+0x10/0x10 [ 98.120701][ T5904] vfs_read+0x212/0xa80 [ 98.120721][ T5904] ? __pfx_vfs_read+0x10/0x10 [ 98.120737][ T5904] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 98.120761][ T5904] ? lockdep_hardirqs_on+0x7a/0x110 [ 98.120779][ T5904] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 98.120796][ T5904] ? mutex_lock_nested+0x152/0x1d0 [ 98.120809][ T5904] ? fdget_pos+0x252/0x320 [ 98.120827][ T5904] ksys_read+0x156/0x270 [ 98.120843][ T5904] ? __pfx_ksys_read+0x10/0x10 [ 98.120862][ T5904] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.120875][ T5904] do_syscall_64+0x15f/0xf80 [ 98.120885][ T5904] ? trace_irq_disable+0x3b/0x140 [ 98.120901][ T5904] ? clear_bhb_loop+0x40/0x90 [ 98.120916][ T5904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.120927][ T5904] RIP: 0033:0x7f8be32acdd9 [ 98.120939][ T5904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.120949][ T5904] RSP: 002b:00007f8be14fe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 98.120966][ T5904] RAX: ffffffffffffffda RBX: 00007f8be3525fa0 RCX: 00007f8be32acdd9 [ 98.120974][ T5904] RDX: 000000000000100d RSI: 0000200000000040 RDI: 0000000000000004 [ 98.120982][ T5904] RBP: 00007f8be14fe090 R08: 0000000000000000 R09: 0000000000000000 [ 98.120989][ T5904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.120995][ T5904] R13: 00007f8be3526038 R14: 00007f8be3525fa0 R15: 00007ffcf0007318 [ 98.121014][ T5904] [ 98.172321][ T5714] usb 2-1: Using ep0 maxpacket: 16 [ 98.246054][ T5714] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 98.249232][ T5714] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 98.249266][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024 [ 98.249292][ T5714] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024 [ 98.249317][ T5714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.249337][ T5714] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.249357][ T5714] usb 2-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 98.424240][ T5714] usb 2-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3 [ 98.424275][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.424303][ T5714] usb 2-1: Product: syz [ 98.424317][ T5714] usb 2-1: Manufacturer: syz [ 98.424330][ T5714] usb 2-1: SerialNumber: syz [ 98.507707][ T5714] usb 2-1: config 0 descriptor?? [ 98.508662][ T5888] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 98.540596][ T5714] iuu_phoenix 2-1:0.0: iuu_phoenix converter detected [ 98.565422][ T5714] usb 2-1: iuu_phoenix converter now attached to ttyUSB0 [ 98.739956][ T58] usb 2-1: USB disconnect, device number 3 [ 98.743801][ T5916] netlink: 156 bytes leftover after parsing attributes in process `syz.3.47'. [ 98.824151][ T5917] capability: warning: `syz.0.46' uses deprecated v2 capabilities in a way that may be insecure [ 98.855617][ T58] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0 [ 98.857707][ T58] iuu_phoenix 2-1:0.0: device disconnected [ 98.871111][ T5714] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 98.995960][ T5714] usb 3-1: device descriptor read/64, error -71 [ 99.096026][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.245991][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 99.246126][ T5714] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 99.249457][ T9] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 99.249486][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.249503][ T9] usb 1-1: config 0 has no interface number 0 [ 99.249530][ T9] usb 1-1: too many endpoints for config 0 interface 128 altsetting 237: 149, using maximum allowed: 30 [ 99.249567][ T9] usb 1-1: config 0 interface 128 altsetting 237 has 0 endpoint descriptors, different from the interface descriptor's value: 149 [ 99.249592][ T9] usb 1-1: config 0 interface 128 has no altsetting 0 [ 99.252678][ T9] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 99.252705][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.252717][ T9] usb 1-1: Product: syz [ 99.252726][ T9] usb 1-1: Manufacturer: syz [ 99.252734][ T9] usb 1-1: SerialNumber: syz [ 99.380596][ T9] usb 1-1: config 0 descriptor?? [ 99.395015][ T9] asix 1-1:0.128: probe with driver asix failed with error -22 [ 99.417325][ T5714] usb 3-1: device descriptor read/64, error -71 [ 99.526821][ T5714] usb usb3-port1: attempt power cycle [ 99.558648][ T5923] netlink: 'syz.1.50': attribute type 10 has an invalid length. [ 99.586639][ T5923] geneve1: entered promiscuous mode [ 99.614474][ T5699] usb 1-1: USB disconnect, device number 4 [ 99.687979][ T5925] binder: BINDER_SET_CONTEXT_MGR already set [ 99.687995][ T5925] binder: 5922:5925 ioctl 4018620d 200000000440 returned -16 [ 99.689499][ T5925] binder: 5922:5925 unknown command 0 [ 99.689784][ T5925] binder: 5922:5925 ioctl c0306201 2000000001c0 returned -22 [ 99.744530][ T5923] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 99.748846][ T5927] syz.3.51 uses obsolete (PF_INET,SOCK_PACKET) [ 99.935996][ T5714] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 99.957571][ T5714] usb 3-1: device descriptor read/8, error -71 [ 100.166054][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 100.199925][ T5714] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 100.226670][ T5714] usb 3-1: device descriptor read/8, error -71 [ 100.301183][ T9] usb 2-1: device descriptor read/64, error -71 [ 100.337920][ T5714] usb usb3-port1: unable to enumerate USB device [ 100.418740][ T5935] netlink: 'syz.0.55': attribute type 11 has an invalid length. [ 100.543296][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 100.587416][ T5714] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.686118][ T9] usb 2-1: device descriptor read/64, error -71 [ 100.758163][ T5714] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.758221][ T5714] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 100.758246][ T5714] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.820304][ T5714] usb 4-1: config 0 descriptor?? [ 100.832739][ T9] usb usb2-port1: attempt power cycle [ 100.877404][ T5714] pwc: Askey VC010 type 2 USB webcam detected. [ 101.316223][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 101.334804][ T5714] pwc: recv_control_msg error -32 req 02 val 2b00 [ 101.336281][ T5714] pwc: recv_control_msg error -32 req 02 val 2700 [ 101.337074][ T5714] pwc: recv_control_msg error -32 req 02 val 2c00 [ 101.337869][ T5714] pwc: recv_control_msg error -32 req 04 val 1000 [ 101.338630][ T5714] pwc: recv_control_msg error -32 req 04 val 1300 [ 101.339403][ T5714] pwc: recv_control_msg error -32 req 04 val 1400 [ 101.348647][ T9] usb 2-1: device descriptor read/8, error -71 [ 101.696029][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 101.720732][ T9] usb 2-1: device descriptor read/8, error -71 [ 101.768069][ T5714] pwc: recv_control_msg error -32 req 02 val 2100 [ 101.771183][ T5714] pwc: recv_control_msg error -32 req 04 val 1500 [ 101.782445][ T5714] pwc: recv_control_msg error -32 req 02 val 2500 [ 101.784241][ T5714] pwc: recv_control_msg error -32 req 02 val 2400 [ 101.827537][ T5714] pwc: recv_control_msg error -32 req 02 val 2600 [ 101.835772][ T9] usb usb2-port1: unable to enumerate USB device [ 101.860078][ T5945] tap0: tun_chr_ioctl cmd 1074025677 [ 101.860315][ T5945] tap0: linktype set to 805 [ 101.878131][ T5714] pwc: recv_control_msg error -32 req 02 val 2900 [ 102.108112][ T5714] pwc: recv_control_msg error -71 req 04 val 1100 [ 102.108782][ T5714] pwc: recv_control_msg error -71 req 04 val 1200 [ 102.160099][ T5714] pwc: Registered as video103. [ 102.271227][ T5714] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 102.440120][ T5714] usb 4-1: USB disconnect, device number 3 [ 102.831641][ T58] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 103.016917][ T58] usb 1-1: Using ep0 maxpacket: 32 [ 103.020691][ T58] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 103.020720][ T58] usb 1-1: config 0 has no interface number 0 [ 103.020767][ T58] usb 1-1: config 0 interface 184 has no altsetting 0 [ 103.055050][ T58] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 103.055079][ T58] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.055090][ T58] usb 1-1: Product: syz [ 103.055099][ T58] usb 1-1: Manufacturer: syz [ 103.055107][ T58] usb 1-1: SerialNumber: syz [ 103.076091][ T5714] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 103.108489][ T58] usb 1-1: config 0 descriptor?? [ 103.284462][ T5714] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 103.284493][ T5714] usb 4-1: config 1 has no interface number 0 [ 103.284538][ T5714] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.284565][ T5714] usb 4-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 103.284604][ T5714] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x6 has invalid wMaxPacketSize 0 [ 103.418794][ T5714] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 103.418829][ T5714] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.418850][ T5714] usb 4-1: Product: syz [ 103.418864][ T5714] usb 4-1: Manufacturer: syz [ 103.418878][ T5714] usb 4-1: SerialNumber: syz [ 103.839349][ T58] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 103.839382][ T58] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 103.888619][ T5966] netlink: 'syz.1.63': attribute type 1 has an invalid length. [ 104.045336][ T58] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -61 [ 104.045369][ T58] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -61 [ 104.045393][ T58] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -61 [ 104.045670][ T58] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 104.298638][ T5714] cdc_ncm 4-1:1.1: bind() failure [ 104.382700][ T5951] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 104.456066][ T32] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 104.478568][ T5953] netlink: 20 bytes leftover after parsing attributes in process `syz.3.59'. [ 104.616040][ T32] usb 3-1: Using ep0 maxpacket: 32 [ 104.623820][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.623854][ T32] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 104.623893][ T32] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 104.623916][ T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.680806][ T32] usb 3-1: config 0 descriptor?? [ 104.693540][ T32] hub 3-1:0.0: USB hub found [ 104.712062][ T5714] usb 1-1: USB disconnect, device number 5 [ 104.803968][ T5965] Set syz1 is full, maxelem 6117 reached [ 104.827809][ T5619] usb 4-1: USB disconnect, device number 4 [ 104.895683][ T32] hub 3-1:0.0: 1 port detected [ 105.123161][ T5972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 105.125277][ T5972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 105.236044][ T5714] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 105.405715][ T5714] usb 2-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40 [ 105.405749][ T5714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.405771][ T5714] usb 2-1: Product: syz [ 105.405786][ T5714] usb 2-1: Manufacturer: syz [ 105.405801][ T5714] usb 2-1: SerialNumber: syz [ 105.533549][ T5697] hub 3-1:0.0: activate --> -90 [ 105.811518][ T5714] usb 2-1: unit 5 not found! [ 105.811545][ T5714] usb 2-1: unit 102 not found! [ 106.033933][ T5984] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 106.033955][ T5984] UDF-fs: Scanning with blocksize 512 failed [ 106.079771][ T5984] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 106.079795][ T5984] UDF-fs: Scanning with blocksize 1024 failed [ 106.096659][ T5984] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 106.096739][ T5984] UDF-fs: Scanning with blocksize 2048 failed [ 106.187108][ T5714] usb 2-1: USB disconnect, device number 8 [ 106.195121][ T5984] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 106.195143][ T5984] UDF-fs: Scanning with blocksize 4096 failed [ 106.291444][ T5699] usb 3-1: USB disconnect, device number 8 [ 106.308340][ T5987] tipc: Started in network mode [ 106.308370][ T5987] tipc: Node identity ac14140f, cluster identity 4711 [ 106.326731][ T5987] tipc: New replicast peer: 100.1.1.2 [ 106.327196][ T5987] tipc: Enabled bearer , priority 10 [ 106.346031][ T32] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 106.431920][ T5697] usb 3-1-port1: config error [ 106.509349][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 106.538765][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.538799][ T32] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.538835][ T32] usb 4-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 106.538858][ T32] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.545388][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.0.71'. [ 106.613329][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 106.644244][ T32] usb 4-1: config 0 descriptor?? [ 107.159747][ T32] hid_parser_main: 5 callbacks suppressed [ 107.159771][ T32] apple 0003:05AC:024B.0002: unknown main item tag 0x3 [ 107.159798][ T32] apple 0003:05AC:024B.0002: unknown main item tag 0x3 [ 107.159821][ T32] apple 0003:05AC:024B.0002: unknown main item tag 0x3 [ 107.159847][ T32] apple 0003:05AC:024B.0002: unknown main item tag 0x3 [ 107.159873][ T32] apple 0003:05AC:024B.0002: unknown main item tag 0x3 [ 107.159908][ T32] apple 0003:05AC:024B.0002: unknown main item tag 0x3 [ 107.159934][ T32] apple 0003:05AC:024B.0002: unknown main item tag 0x3 [ 107.159961][ T32] apple 0003:05AC:024B.0002: unknown main item tag 0x3 [ 107.159987][ T32] apple 0003:05AC:024B.0002: unknown main item tag 0x3 [ 107.160008][ T32] apple 0003:05AC:024B.0002: unknown main item tag 0x3 [ 107.180854][ T32] apple 0003:05AC:024B.0002: hidraw0: USB HID v0.00 Device [HID 05ac:024b] on usb-dummy_hcd.3-1/input0 [ 107.392846][ T5699] usb 4-1: USB disconnect, device number 5 [ 107.447635][ T5714] tipc: Node number set to 2886997007 [ 107.712696][ T6009] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 107.712835][ T6009] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 107.859970][ T6009] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 107.909650][ T6009] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 107.909806][ T6009] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 107.999130][ T6009] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 108.072638][ T6009] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 108.072740][ T6009] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.148089][ T6009] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.234055][ T6009] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 108.234140][ T6009] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.328024][ T6009] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.599903][ T6037] ======================================================= [ 108.599903][ T6037] WARNING: The mand mount option has been deprecated and [ 108.599903][ T6037] and is ignored by this kernel. Remove the mand [ 108.599903][ T6037] option from the mount to silence this warning. [ 108.599903][ T6037] ======================================================= [ 108.695464][ T6039] netlink: 8 bytes leftover after parsing attributes in process `syz.0.88'. [ 108.726220][ T5714] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 108.776043][ T58] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 108.856003][ T5714] usb 3-1: device descriptor read/64, error -71 [ 108.938906][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.938934][ T58] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.938957][ T58] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 108.938970][ T58] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.942282][ T58] usb 4-1: config 0 descriptor?? [ 108.992381][ T5619] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 109.116188][ T5714] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 109.136069][ T5619] usb 1-1: Using ep0 maxpacket: 8 [ 109.143902][ T5619] usb 1-1: config index 0 descriptor too short (expected 26, got 18) [ 109.161676][ T5619] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 109.161714][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.161735][ T5619] usb 1-1: Product: syz [ 109.161749][ T5619] usb 1-1: Manufacturer: syz [ 109.161763][ T5619] usb 1-1: SerialNumber: syz [ 109.197940][ T5619] usb 1-1: config 0 descriptor?? [ 109.204893][ T5619] gspca_main: sq930x-2.14.0 probing 2770:930c [ 109.256070][ T5714] usb 3-1: device descriptor read/64, error -71 [ 109.379218][ T5714] usb usb3-port1: attempt power cycle [ 109.437117][ T6043] process 'syz.1.90' launched './file2' with NULL argv: empty string added [ 109.511411][ T58] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.3-1/input0 [ 109.722694][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.750152][ T58] playstation 0003:054C:0DF2.0003: Invalid reportID received, expected 9 got 188 [ 109.750191][ T58] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense pairing info: -22 [ 109.750244][ T58] playstation 0003:054C:0DF2.0003: Failed to get MAC address from DualSense [ 109.750264][ T58] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 109.806443][ T5714] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 109.835669][ T58] playstation 0003:054C:0DF2.0003: probe with driver playstation failed with error -22 [ 109.919992][ T5714] usb 3-1: device descriptor read/8, error -71 [ 109.946804][ T5609] Bluetooth: hci1: command 0x0c1a tx timeout [ 109.972004][ T5619] gspca_sq930x: ucbus_write failed -110 [ 109.972099][ T5619] sq930x 1-1:0.0: probe with driver sq930x failed with error -110 [ 110.039821][ T6035] IPv4: Oversized IP packet from 127.202.26.0 [ 110.109469][ T5609] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.129194][ T5699] usb 1-1: USB disconnect, device number 6 [ 110.155188][ T58] usb 4-1: USB disconnect, device number 6 [ 110.206027][ T5714] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 110.227613][ T5714] usb 3-1: device descriptor read/8, error -71 [ 110.267072][ T5609] Bluetooth: hci3: command 0x0c1a tx timeout [ 110.310833][ T6051] 9p: Bad value for 'wfdno' [ 110.337097][ T5714] usb usb3-port1: unable to enumerate USB device [ 110.429991][ T6053] netlink: 32 bytes leftover after parsing attributes in process `syz.1.92'. [ 110.938283][ T6063] binder: 6061:6063 ioctl 40046205 0 returned -22 [ 110.989002][ T6065] binder: 6061:6065 ioctl 40046f01 200000000200 returned -22 [ 111.116606][ T5609] Bluetooth: hci0: unexpected event for opcode 0x203b [ 111.120509][ T6078] netlink: 348 bytes leftover after parsing attributes in process `syz.1.98'. [ 111.121510][ T37] audit: type=1326 audit(1778338304.807:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6075 comm="syz.3.99" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8fdbfcdd9 code=0x0 [ 111.171096][ T6078] binder_alloc: 6076: pid 6076 spamming oneway? 1 buffers allocated for a total size of 4096 [ 111.196773][ T58] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 111.348446][ T58] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.348499][ T58] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 111.348514][ T58] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.353975][ T58] usb 1-1: config 0 descriptor?? [ 111.556000][ T5684] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 111.726708][ T5684] usb 2-1: Using ep0 maxpacket: 8 [ 111.731694][ T5684] usb 2-1: unable to get BOS descriptor or descriptor too short [ 111.731827][ T5684] usb 2-1: too many configurations: 30, using maximum allowed: 8 [ 111.736029][ T5684] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 111.736273][ T5684] usb 2-1: can't read configurations, error -61 [ 111.765606][ T58] ath6kl: Unsupported hardware version: 0x0 [ 111.783528][ T58] ath6kl: Failed to init ath6kl core: -22 [ 111.832506][ T58] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 111.886041][ T5684] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 111.993733][ T6068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 111.994297][ T6068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.008800][ T32] usb 1-1: USB disconnect, device number 7 [ 112.027027][ T5609] Bluetooth: hci1: command 0x0c1a tx timeout [ 112.043211][ T5684] usb 2-1: Using ep0 maxpacket: 8 [ 112.046006][ T5684] usb 2-1: unable to get BOS descriptor or descriptor too short [ 112.046086][ T5684] usb 2-1: too many configurations: 30, using maximum allowed: 8 [ 112.052117][ T5684] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 112.052153][ T5684] usb 2-1: can't read configurations, error -61 [ 112.052683][ T5684] usb usb2-port1: attempt power cycle [ 112.186057][ T5609] Bluetooth: hci2: command 0x0c1a tx timeout [ 112.347805][ T5609] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.386555][ T5684] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 112.418572][ T5684] usb 2-1: Using ep0 maxpacket: 8 [ 112.439517][ T5684] usb 2-1: unable to get BOS descriptor or descriptor too short [ 112.439597][ T5684] usb 2-1: too many configurations: 30, using maximum allowed: 8 [ 112.445536][ T5684] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 112.445574][ T5684] usb 2-1: can't read configurations, error -61 [ 112.577863][ T5684] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 112.600216][ T5684] usb 2-1: Using ep0 maxpacket: 8 [ 112.605086][ T5684] usb 2-1: unable to get BOS descriptor or descriptor too short [ 112.605169][ T5684] usb 2-1: too many configurations: 30, using maximum allowed: 8 [ 112.656973][ T5684] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 112.657009][ T5684] usb 2-1: can't read configurations, error -61 [ 112.657512][ T5684] usb usb2-port1: unable to enumerate USB device [ 112.776080][ T32] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 112.864105][ T6123] syz.0.111(6123): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 112.872761][ T6123] use of bytesused == 0 is deprecated and will be removed in the future, [ 112.872777][ T6123] use the actual size instead. [ 112.936143][ T32] usb 4-1: Using ep0 maxpacket: 16 [ 112.940125][ T32] usb 4-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 112.940154][ T32] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.940166][ T32] usb 4-1: Product: syz [ 112.940174][ T32] usb 4-1: Manufacturer: syz [ 112.940183][ T32] usb 4-1: SerialNumber: syz [ 112.943824][ T32] usb 4-1: config 0 descriptor?? [ 113.002519][ T32] ssu100 4-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 113.419778][ T6113] capability: warning: `syz.3.109' uses 32-bit capabilities (legacy support in use) [ 113.643034][ T32] ssu100 4-1:0.0: probe with driver ssu100 failed with error -71 [ 113.693933][ T32] usb 4-1: USB disconnect, device number 7 [ 113.995961][ T5684] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 114.106042][ T4926] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.125952][ T5684] usb 1-1: device descriptor read/64, error -71 [ 114.266039][ T4926] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.366545][ T5684] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 114.425964][ T4926] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.516078][ T5684] usb 1-1: device descriptor read/64, error -71 [ 114.556021][ T5712] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 114.626667][ T5684] usb usb1-port1: attempt power cycle [ 114.666365][ T4926] Bluetooth: hci4: command 0x1003 tx timeout [ 114.685111][ T5609] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 114.746606][ T5712] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.746662][ T5712] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 114.746684][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.791739][ T5712] usb 4-1: config 0 descriptor?? [ 114.820358][ T5712] pwc: Askey VC010 type 2 USB webcam detected. [ 114.973757][ T5609] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 115.006495][ T5684] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 115.028877][ T5684] usb 1-1: device descriptor read/8, error -71 [ 115.059488][ T6143] warning: `syz.1.120' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 115.285982][ T5684] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 115.307041][ T5712] pwc: recv_control_msg error -32 req 02 val 2b00 [ 115.318775][ T5684] usb 1-1: device descriptor read/8, error -71 [ 115.323711][ T5712] pwc: recv_control_msg error -32 req 02 val 2700 [ 115.338378][ T5712] pwc: recv_control_msg error -32 req 02 val 2c00 [ 115.341840][ T5712] pwc: recv_control_msg error -32 req 04 val 1000 [ 115.342502][ T5712] pwc: recv_control_msg error -32 req 04 val 1300 [ 115.351008][ T5712] pwc: recv_control_msg error -32 req 04 val 1400 [ 115.372097][ T5712] pwc: recv_control_msg error -32 req 02 val 2000 [ 115.373093][ T5712] pwc: recv_control_msg error -32 req 02 val 2100 [ 115.426513][ T5684] usb usb1-port1: unable to enumerate USB device [ 115.574344][ T5712] pwc: recv_control_msg error -32 req 02 val 2500 [ 115.575047][ T5712] pwc: recv_control_msg error -32 req 02 val 2400 [ 115.588961][ T5712] pwc: recv_control_msg error -32 req 02 val 2600 [ 115.589692][ T5712] pwc: recv_control_msg error -32 req 02 val 2900 [ 115.591484][ T5712] pwc: recv_control_msg error -32 req 02 val 2800 [ 115.753858][ T5609] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 116.101634][ T5609] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 116.436021][ T5619] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 116.576070][ T5619] usb 3-1: device descriptor read/64, error -71 [ 116.817815][ T5619] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 116.996241][ T5619] usb 3-1: device descriptor read/64, error -71 [ 117.116628][ T5619] usb usb3-port1: attempt power cycle [ 117.252078][ T5684] IPVS: starting estimator thread 0... [ 117.348442][ T6181] IPVS: using max 15 ests per chain, 36000 per kthread [ 117.486050][ T5619] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 117.506552][ T5619] usb 3-1: device descriptor read/8, error -71 [ 117.666840][ T5712] pwc: recv_control_msg error -71 req 04 val 1100 [ 117.668944][ T5712] pwc: recv_control_msg error -71 req 04 val 1200 [ 117.767925][ T5712] pwc: Registered as video103. [ 117.776960][ T5712] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 117.803639][ T6192] overlayfs: overlapping lowerdir path [ 117.814146][ T5619] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 117.827189][ T6190] FAULT_INJECTION: forcing a failure. [ 117.827189][ T6190] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.827247][ T6190] CPU: 0 UID: 0 PID: 6190 Comm: syz.1.135 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 117.827269][ T6190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 117.827280][ T6190] Call Trace: [ 117.827288][ T6190] [ 117.827296][ T6190] dump_stack_lvl+0xe8/0x150 [ 117.827325][ T6190] should_fail_ex+0x46b/0x600 [ 117.827354][ T6190] strncpy_from_user+0x36/0x2b0 [ 117.827381][ T6190] __x64_sys_getxattr+0x19c/0x2b0 [ 117.827417][ T6190] ? __pfx___x64_sys_getxattr+0x10/0x10 [ 117.827460][ T6190] ? __pfx_ksys_write+0x10/0x10 [ 117.827495][ T6190] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.827516][ T6190] do_syscall_64+0x15f/0xf80 [ 117.827532][ T6190] ? trace_irq_disable+0x3b/0x140 [ 117.827558][ T6190] ? clear_bhb_loop+0x40/0x90 [ 117.827580][ T6190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.827599][ T6190] RIP: 0033:0x7f321516cdd9 [ 117.827624][ T6190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 117.827639][ T6190] RSP: 002b:00007f32133c6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bf [ 117.827667][ T6190] RAX: ffffffffffffffda RBX: 00007f32153e5fa0 RCX: 00007f321516cdd9 [ 117.827681][ T6190] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000280 [ 117.827693][ T6190] RBP: 00007f32133c6090 R08: 0000000000000000 R09: 0000000000000000 [ 117.827704][ T6190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.827714][ T6190] R13: 00007f32153e6038 R14: 00007f32153e5fa0 R15: 00007fff9b7a83e8 [ 117.827743][ T6190] [ 117.828178][ T5619] usb 3-1: device descriptor read/8, error -71 [ 117.936360][ T5619] usb usb3-port1: unable to enumerate USB device [ 118.013055][ T5712] usb 4-1: USB disconnect, device number 8 [ 118.067757][ T6197] overlayfs: failed to resolve 'workdir=./file1': -2 [ 118.147899][ T6200] netlink: 5740 bytes leftover after parsing attributes in process `syz.1.138'. [ 118.446025][ T5619] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 118.575953][ T5619] usb 2-1: device descriptor read/64, error -71 [ 118.593819][ T5684] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 118.657158][ T5712] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 118.735957][ T5684] usb 1-1: Using ep0 maxpacket: 8 [ 118.737834][ T5684] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 118.739941][ T5684] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 118.739966][ T5684] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.739977][ T5684] usb 1-1: Product: ʾ궋த翴攁∁莇䐇僚摴蕸羰䘐멆쏅緔욥姪끘跂镍櫾迋匿㺱뇜遂盕융⒧⮪띕ᗂ胋볿쪰핥Ĭ뫘枃က텲ﹿ珎詮퓸䓵첥脬暸䶸棥볹暳飤᧹ꗜ㞃વᔚ랮෼쩢䗑祥僓䅴׿̥ﷁ復쟝牏烠סּ㉚냿镶궳鉁ち쏨貴벰ᴔ蜙䌣ꍪ엉枢 [ 118.739993][ T5684] usb 1-1: Manufacturer: ✲욗꣖蟗⯛湖碃쟨昛蕈팒㵡ꄗዥ閡郵䒬Ⱶ녬咢ﳄⱐꅽ瞭דּ䔦汁⃾櫯ꁷદ穾䃨䧨Ƕ⤬ᩆ [ 118.740004][ T5684] usb 1-1: SerialNumber: ф [ 118.834612][ T5619] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 118.848304][ T5712] usb 4-1: config 0 has an invalid interface number: 84 but max is 0 [ 118.848333][ T5712] usb 4-1: config 0 has no interface number 0 [ 118.848378][ T5712] usb 4-1: config 0 interface 84 altsetting 253 endpoint 0x7 has invalid maxpacket 1279, setting to 64 [ 118.848407][ T5712] usb 4-1: config 0 interface 84 altsetting 253 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 118.848432][ T5712] usb 4-1: config 0 interface 84 altsetting 253 endpoint 0x87 has invalid wMaxPacketSize 0 [ 118.848456][ T5712] usb 4-1: config 0 interface 84 has no altsetting 0 [ 118.848490][ T5712] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0191, bcdDevice= f.05 [ 118.848513][ T5712] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.853524][ T5712] usb 4-1: config 0 descriptor?? [ 118.854757][ T6194] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 118.863736][ T5712] option 4-1:0.84: GSM modem (1-port) converter detected [ 118.960632][ T5684] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 118.960698][ T5684] usb 1-1: MIDIStreaming interface descriptor not found [ 118.966498][ T5619] usb 2-1: device descriptor read/64, error -71 [ 119.079922][ T5619] usb usb2-port1: attempt power cycle [ 119.177882][ T5684] usb 1-1: USB disconnect, device number 12 [ 119.239407][ T58] usb 4-1: USB disconnect, device number 9 [ 119.267884][ T5609] Bluetooth: hci3: ACL packet too small [ 119.333090][ T58] option 4-1:0.84: device disconnected [ 119.445960][ T5619] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 119.472014][ T5619] usb 2-1: device descriptor read/8, error -71 [ 119.510772][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.716050][ T5619] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 119.746906][ T5619] usb 2-1: device descriptor read/8, error -71 [ 119.859944][ T5619] usb usb2-port1: unable to enumerate USB device [ 119.940941][ T5684] IPVS: starting estimator thread 0... [ 120.034469][ T6224] IPVS: using max 9 ests per chain, 21600 per kthread [ 120.196011][ T5684] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 120.363519][ T5684] usb 3-1: config 10 has an invalid interface number: 101 but max is 1 [ 120.363549][ T5684] usb 3-1: config 10 has an invalid interface number: 202 but max is 1 [ 120.363576][ T5684] usb 3-1: config 10 contains an unexpected descriptor of type 0x1, skipping [ 120.363594][ T5684] usb 3-1: config 10 has no interface number 0 [ 120.363609][ T5684] usb 3-1: config 10 has no interface number 1 [ 120.363659][ T5684] usb 3-1: config 10 interface 101 altsetting 21 endpoint 0x5 has invalid maxpacket 33285, setting to 1024 [ 120.363698][ T5684] usb 3-1: config 10 interface 202 altsetting 2 endpoint 0xD has an invalid bInterval 250, changing to 11 [ 120.363724][ T5684] usb 3-1: config 10 interface 202 altsetting 2 bulk endpoint 0x8C has invalid maxpacket 64 [ 120.363747][ T5684] usb 3-1: config 10 interface 202 altsetting 2 bulk endpoint 0xF has invalid maxpacket 64 [ 120.363770][ T5684] usb 3-1: config 10 interface 202 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 120.363790][ T5684] usb 3-1: config 10 interface 202 altsetting 2 has a duplicate endpoint with address 0x8, skipping [ 120.363812][ T5684] usb 3-1: config 10 interface 202 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 120.363833][ T5684] usb 3-1: config 10 interface 101 has no altsetting 0 [ 120.363849][ T5684] usb 3-1: config 10 interface 202 has no altsetting 0 [ 120.390417][ T5684] usb 3-1: New USB device found, idVendor=22b8, idProduct=4244, bcdDevice=f2.da [ 120.390449][ T5684] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.390469][ T5684] usb 3-1: Product: syz [ 120.390484][ T5684] usb 3-1: Manufacturer: syz [ 120.390498][ T5684] usb 3-1: SerialNumber: syz [ 120.880441][ T5684] ipaq 3-1:10.202: PocketPC PDA converter detected [ 120.880759][ T5684] usb 3-1: active config #10 != 1 ?? [ 120.900039][ T5684] usb 3-1: USB disconnect, device number 17 [ 121.619196][ T5619] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 121.777424][ T5619] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 121.777459][ T5619] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.777479][ T5619] usb 2-1: Product: syz [ 121.777493][ T5619] usb 2-1: Manufacturer: syz [ 121.777508][ T5619] usb 2-1: SerialNumber: syz [ 121.796059][ T58] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 121.931683][ T58] usb 1-1: device descriptor read/64, error -71 [ 122.167244][ T58] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 122.258624][ T5619] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 122.258692][ T5619] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 122.306408][ T58] usb 1-1: device descriptor read/64, error -71 [ 122.416270][ T58] usb usb1-port1: attempt power cycle [ 122.755986][ T58] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 122.776668][ T58] usb 1-1: device descriptor read/8, error -71 [ 123.019542][ T58] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 123.036655][ T58] usb 1-1: device descriptor read/8, error -71 [ 123.146385][ T58] usb usb1-port1: unable to enumerate USB device [ 123.495539][ T6264] ptrace attach of "ci-upstream-rust-kasan-gce/syz-executor exec"[6265] was attempted by "ci-upstream-rust-kasan-gce/syz-executor exec"[6264] [ 123.537325][ T58] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 123.666013][ T58] usb 3-1: device descriptor read/64, error -71 [ 123.905996][ T58] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 124.056361][ T58] usb 3-1: device descriptor read/64, error -71 [ 124.173844][ T58] usb usb3-port1: attempt power cycle [ 124.527218][ T58] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 124.548627][ T58] usb 3-1: device descriptor read/8, error -71 [ 124.806011][ T58] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 124.832365][ T58] usb 3-1: device descriptor read/8, error -71 [ 124.926588][ T5712] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 124.944340][ T58] usb usb3-port1: unable to enumerate USB device [ 125.106029][ T5712] usb 1-1: Using ep0 maxpacket: 16 [ 125.122746][ T5712] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 125.122778][ T5712] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 125.122861][ T5712] usb 1-1: config 1 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping [ 125.125406][ T5712] usb 1-1: New USB device found, idVendor=041e, idProduct=4064, bcdDevice= 0.40 [ 125.125437][ T5712] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.125515][ T5712] usb 1-1: Product: syz [ 125.125531][ T5712] usb 1-1: Manufacturer: syz [ 125.125546][ T5712] usb 1-1: SerialNumber: syz [ 125.343658][ T5619] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO [ 125.344280][ T5619] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 125.345066][ T5619] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x000000e0. ret = -EPROTO [ 125.345119][ T5619] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to init LTM with error -EPROTO [ 125.345240][ T5619] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 125.425015][ T5619] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 125.467765][ T5619] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71 [ 125.521401][ T5619] usb 2-1: USB disconnect, device number 17 [ 125.662565][ T5712] gspca_main: ov519-2.14.0 probing 041e:4064 [ 125.721591][ T37] audit: type=1326 audit(1778338319.417:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6283 comm="syz.3.162" exe="/root/ci-upstream-rust-kasan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc8fdbfcdd9 code=0x0 [ 126.667330][ T5712] ov519 1-1:1.0: reg_w 49 failed -71 [ 132.910692][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.910767][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.636042][ T5712] ov519 1-1:1.0: Can't determine sensor slave IDs [ 134.636061][ T5712] ov519 1-1:1.0: OV519 Config failed [ 134.636167][ T5712] ov519 1-1:1.0: probe with driver ov519 failed with error -22 [ 134.669950][ T5712] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 134.670009][ T5712] usb 1-1: MIDIStreaming interface descriptor not found [ 134.747912][ T5712] usb 1-1: USB disconnect, device number 17 [ 134.801735][ T5763] udevd[5763]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 143.704641][ T6297] : renamed from virt_wifi0 [ 143.833233][ T6297] netlink: 'syz.0.167': attribute type 3 has an invalid length. [ 143.856177][ T58] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 143.879984][ T5609] Bluetooth: hci2: unexpected event for opcode 0x2006 [ 143.936024][ T5697] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 144.008233][ T58] usb 4-1: not running at top speed; connect to a high speed hub [ 144.009305][ T58] usb 4-1: config 1 has an invalid interface number: 58 but max is 1 [ 144.009331][ T58] usb 4-1: config 1 has an invalid interface number: 90 but max is 1 [ 144.009351][ T58] usb 4-1: config 1 has no interface number 0 [ 144.009414][ T58] usb 4-1: config 1 has no interface number 1 [ 144.009448][ T58] usb 4-1: config 1 interface 58 altsetting 3 endpoint 0xB has invalid maxpacket 1023, setting to 64 [ 144.009463][ T58] usb 4-1: config 1 interface 58 altsetting 3 has a duplicate endpoint with address 0x7, skipping [ 144.009475][ T58] usb 4-1: config 1 interface 58 altsetting 3 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 144.009489][ T58] usb 4-1: config 1 interface 58 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 144.009501][ T58] usb 4-1: config 1 interface 58 altsetting 3 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 144.009515][ T58] usb 4-1: config 1 interface 58 altsetting 3 has a duplicate endpoint with address 0xB, skipping [ 144.009536][ T58] usb 4-1: config 1 interface 58 has no altsetting 0 [ 144.009546][ T58] usb 4-1: config 1 interface 90 has no altsetting 0 [ 144.011633][ T58] usb 4-1: New USB device found, idVendor=045e, idProduct=0467, bcdDevice=f8.6e [ 144.011658][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.011669][ T58] usb 4-1: Product: ‹맡띐埿䱾厾뱮✺ﵔ梹ଘ杗⽪ꗎ㖁냼뢷抳ᭉ냞襬次﹩哿⸙ꦭ [ 144.011679][ T58] usb 4-1: Manufacturer: 㐣츻劙뵈隃遰훀蠨駪﯏̳㎘ꗑ僳篴紛ʒ⚅ [ 144.011689][ T58] usb 4-1: SerialNumber: ӿ [ 144.183204][ T6291] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 144.210863][ T5697] usb 3-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=da.64 [ 144.210884][ T5697] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.210896][ T5697] usb 3-1: Product: syz [ 144.210904][ T5697] usb 3-1: Manufacturer: syz [ 144.210912][ T5697] usb 3-1: SerialNumber: syz [ 144.265317][ T5697] usb 3-1: config 0 descriptor?? [ 144.297593][ T5697] hub 3-1:0.0: bad descriptor, ignoring hub [ 144.297631][ T5697] hub 3-1:0.0: probe with driver hub failed with error -5 [ 144.298520][ T5697] f81232 3-1:0.0: f81534a converter detected [ 144.392386][ T6291] netlink: 'syz.3.166': attribute type 2 has an invalid length. [ 144.521921][ T58] usb 4-1: USB disconnect, device number 10 [ 144.554291][ T6298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.555580][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.168'. [ 144.563913][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 144.615189][ T6298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.641176][ T5697] f81534a ttyUSB0: f81232_set_register failed status: -71 [ 144.641204][ T5697] f81534a ttyUSB0: probe with driver f81534a failed with error -5 [ 144.710843][ T5697] usb 3-1: USB disconnect, device number 22 [ 144.732925][ T5697] f81232 3-1:0.0: device disconnected [ 144.819172][ T6309] netlink: 28 bytes leftover after parsing attributes in process `syz.1.169'. [ 144.897864][ T6311] zonefs (nullb0) ERROR: Not a zoned block device [ 145.362102][ T6324] FAULT_INJECTION: forcing a failure. [ 145.362102][ T6324] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 145.362137][ T6324] CPU: 1 UID: 0 PID: 6324 Comm: syz.1.176 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 145.362162][ T6324] Tainted: [L]=SOFTLOCKUP [ 145.362168][ T6324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 145.362179][ T6324] Call Trace: [ 145.362187][ T6324] [ 145.362195][ T6324] dump_stack_lvl+0xe8/0x150 [ 145.362223][ T6324] should_fail_ex+0x46b/0x600 [ 145.362250][ T6324] _copy_from_iter+0x1d3/0x1670 [ 145.362284][ T6324] ? trace_kmem_cache_alloc+0x29/0xe0 [ 145.362309][ T6324] ? __alloc_skb+0x27d/0x7d0 [ 145.362334][ T6324] ? __pfx__copy_from_iter+0x10/0x10 [ 145.362359][ T6324] ? kmem_cache_alloc_node_noprof+0x27c/0x6e0 [ 145.362395][ T6324] ? __alloc_skb+0x27d/0x7d0 [ 145.362439][ T6324] ? netlink_sendmsg+0x650/0xb40 [ 145.362464][ T6324] ? skb_put+0x11b/0x210 [ 145.362493][ T6324] netlink_sendmsg+0x6c0/0xb40 [ 145.362528][ T6324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.362558][ T6324] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 145.362593][ T6324] ? aa_sock_msg_perm+0x122/0x200 [ 145.362622][ T6324] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.362648][ T6324] sock_sendmsg_nosec+0x112/0x150 [ 145.362673][ T6324] ____sys_sendmsg+0x55c/0x870 [ 145.362705][ T6324] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.362739][ T6324] ? import_iovec+0x73/0xa0 [ 145.362771][ T6324] ___sys_sendmsg+0x2a5/0x360 [ 145.362797][ T6324] ? __lock_acquire+0x6b5/0x2d10 [ 145.362821][ T6324] ? __pfx____sys_sendmsg+0x10/0x10 [ 145.362879][ T6324] ? __fget_files+0x2a/0x420 [ 145.362900][ T6324] ? __fget_files+0x3a6/0x420 [ 145.362929][ T6324] __x64_sys_sendmsg+0x1c3/0x2a0 [ 145.362959][ T6324] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 145.362994][ T6324] ? __pfx_ksys_write+0x10/0x10 [ 145.363029][ T6324] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.363050][ T6324] do_syscall_64+0x15f/0xf80 [ 145.363069][ T6324] ? trace_irq_disable+0x3b/0x140 [ 145.363096][ T6324] ? clear_bhb_loop+0x40/0x90 [ 145.363120][ T6324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.363140][ T6324] RIP: 0033:0x7f321516cdd9 [ 145.363158][ T6324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 145.363174][ T6324] RSP: 002b:00007f32133c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.363195][ T6324] RAX: ffffffffffffffda RBX: 00007f32153e5fa0 RCX: 00007f321516cdd9 [ 145.363210][ T6324] RDX: 000000000004c040 RSI: 0000200000000040 RDI: 0000000000000003 [ 145.363223][ T6324] RBP: 00007f32133c6090 R08: 0000000000000000 R09: 0000000000000000 [ 145.363235][ T6324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.363247][ T6324] R13: 00007f32153e6038 R14: 00007f32153e5fa0 R15: 00007fff9b7a83e8 [ 145.363277][ T6324] [ 145.408773][ T6322] netlink: 16 bytes leftover after parsing attributes in process `syz.3.175'. [ 145.455931][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 145.587716][ T9] usb 1-1: device descriptor read/64, error -71 [ 145.681422][ T6329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.178'. [ 145.829134][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 145.834788][ T6335] netlink: 'syz.1.181': attribute type 2 has an invalid length. [ 145.997723][ T9] usb 1-1: device descriptor read/64, error -71 [ 146.000978][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.183'. [ 146.109366][ T9] usb usb1-port1: attempt power cycle [ 146.247628][ T6348] netlink: 40 bytes leftover after parsing attributes in process `syz.3.187'. [ 146.319858][ T5609] Bluetooth: hci1: unexpected event for opcode 0x1009 [ 146.475988][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 146.495993][ T58] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 146.507929][ T9] usb 1-1: device descriptor read/8, error -71 [ 146.648173][ T58] usb 2-1: unable to get BOS descriptor or descriptor too short [ 146.648871][ T58] usb 2-1: not running at top speed; connect to a high speed hub [ 146.652862][ T58] usb 2-1: New USB device found, idVendor=1235, idProduct=8014, bcdDevice= 0.40 [ 146.652892][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.652911][ T58] usb 2-1: Product: syz [ 146.652922][ T58] usb 2-1: Manufacturer: syz [ 146.652930][ T58] usb 2-1: SerialNumber: syz [ 146.756079][ T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 146.779356][ T9] usb 1-1: device descriptor read/8, error -71 [ 146.887450][ T9] usb usb1-port1: unable to enumerate USB device [ 147.032062][ T6355] ucma_write: process 135 (syz.2.189) changed security contexts after opening file descriptor, this is not allowed. [ 147.481268][ T6361] FAT-fs (nbd3): unable to read boot sector [ 147.755981][ T5699] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 147.906363][ T5699] usb 4-1: Using ep0 maxpacket: 8 [ 147.908458][ T5699] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.908522][ T5699] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 147.908759][ T5699] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 147.908785][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 147.908807][ T5699] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 147.930300][ T5699] usb 4-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 147.930332][ T5699] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.930352][ T5699] usb 4-1: Product: syz [ 147.930579][ T5699] usb 4-1: Manufacturer: syz [ 147.930595][ T5699] usb 4-1: SerialNumber: syz [ 147.999897][ T5699] usb 4-1: config 0 descriptor?? [ 148.061832][ T5699] iowarrior 4-1:0.0: no interrupt-out endpoint found [ 148.233394][ T6318] syz.0.173 (6318) used greatest stack depth: 18720 bytes left [ 148.261812][ T5619] usb 4-1: USB disconnect, device number 11 [ 148.464881][ T6369] tmpfs: Bad value for 'mpol' [ 149.247568][ T58] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 149.307161][ T58] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 149.317952][ T5697] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 149.365614][ T6387] netlink: 'syz.2.203': attribute type 28 has an invalid length. [ 149.426332][ T5699] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 149.472126][ T58] usb 2-1: USB disconnect, device number 18 [ 149.479363][ T5697] usb 4-1: Using ep0 maxpacket: 16 [ 149.483417][ T5697] usb 4-1: config index 0 descriptor too short (expected 52, got 36) [ 149.483445][ T5697] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 149.483466][ T5697] usb 4-1: config 0 has no interface number 0 [ 149.483508][ T5697] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 149.483532][ T5697] usb 4-1: config 0 interface 251 altsetting 0 endpoint 0x82 has invalid maxpacket 12352, setting to 1024 [ 149.483559][ T5697] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 149.493716][ T5697] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 149.493748][ T5697] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.493767][ T5697] usb 4-1: Product: syz [ 149.493782][ T5697] usb 4-1: Manufacturer: syz [ 149.493797][ T5697] usb 4-1: SerialNumber: syz [ 149.578856][ T5699] usb 1-1: not running at top speed; connect to a high speed hub [ 149.580298][ T5699] usb 1-1: config 0 has an invalid interface number: 89 but max is 0 [ 149.580323][ T5699] usb 1-1: config 0 has no interface number 0 [ 149.580352][ T5699] usb 1-1: config 0 interface 89 has no altsetting 0 [ 149.602520][ T5699] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0108, bcdDevice=e8.38 [ 149.602551][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.602570][ T5699] usb 1-1: Product: syz [ 149.602584][ T5699] usb 1-1: Manufacturer: syz [ 149.602599][ T5699] usb 1-1: SerialNumber: syz [ 149.610882][ T5697] usb 4-1: config 0 descriptor?? [ 149.612504][ T6381] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 149.612696][ T6381] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 149.638848][ T32] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 149.800408][ T32] usb 3-1: config 0 has an invalid interface number: 81 but max is 0 [ 149.800427][ T32] usb 3-1: config 0 has no interface number 0 [ 149.800455][ T32] usb 3-1: too many endpoints for config 0 interface 81 altsetting 143: 84, using maximum allowed: 30 [ 149.800477][ T32] usb 3-1: config 0 interface 81 altsetting 143 has 0 endpoint descriptors, different from the interface descriptor's value: 84 [ 149.800491][ T32] usb 3-1: config 0 interface 81 has no altsetting 0 [ 149.861564][ T6378] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 149.863461][ T32] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 149.863488][ T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.863508][ T32] usb 3-1: Product: syz [ 149.863523][ T32] usb 3-1: Manufacturer: syz [ 149.863588][ T32] usb 3-1: SerialNumber: syz [ 149.865048][ T6378] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 149.886098][ T5699] usb 1-1: config 0 descriptor?? [ 149.944408][ T32] usb 3-1: config 0 descriptor?? [ 150.073555][ T5697] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 150.073650][ T5697] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 150.074012][ T5697] asix 4-1:0.251: probe with driver asix failed with error -5 [ 150.128864][ T6383] netlink: 'syz.0.201': attribute type 11 has an invalid length. [ 150.313473][ T5697] usb 4-1: USB disconnect, device number 12 [ 150.328700][ T6387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.365461][ T6387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.430329][ T6294] udevd[6294]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.453344][ T6383] Invalid source name [ 150.489957][ T32] peak_usb 3-1:0.81: probe with driver peak_usb failed with error 81 [ 150.506552][ T5609] Bluetooth: hci0: unexpected event for opcode 0x1009 [ 150.648491][ T5699] usb_ehset_test 1-1:0.89: probe with driver usb_ehset_test failed with error -32 [ 150.650813][ T32] usb 3-1: USB disconnect, device number 23 [ 150.685579][ T5699] usb 1-1: USB disconnect, device number 22 [ 151.296098][ T5619] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 151.326898][ T5609] Bluetooth: hci3: unexpected event for opcode 0x1009 [ 151.455980][ T5619] usb 4-1: Using ep0 maxpacket: 32 [ 151.474714][ T5619] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.474742][ T5619] usb 4-1: config 0 has no interfaces? [ 151.474773][ T5619] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 151.474796][ T5619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.523121][ T5619] usb 4-1: config 0 descriptor?? [ 151.687018][ T6425] nbd0: detected capacity change from 0 to 33554432 [ 151.701966][ T6432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.215'. [ 151.714542][ T5609] block nbd0: Receive control failed (result -104) [ 151.760954][ T6410] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 152.033929][ T9] usb 4-1: USB disconnect, device number 13 [ 152.126130][ T5619] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 152.291513][ T5619] usb 1-1: Using ep0 maxpacket: 32 [ 152.293433][ T5619] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 152.293462][ T5619] usb 1-1: config 0 has no interface number 0 [ 152.295641][ T5619] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 152.295670][ T5619] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.295691][ T5619] usb 1-1: Product: syz [ 152.295705][ T5619] usb 1-1: Manufacturer: syz [ 152.295720][ T5619] usb 1-1: SerialNumber: syz [ 152.301860][ T5619] usb 1-1: config 0 descriptor?? [ 152.342400][ T5619] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 152.538728][ T5619] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 152.559230][ T5619] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 152.723348][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 8 [ 152.855753][ T6444] netlink: 'syz.3.220': attribute type 5 has an invalid length. [ 152.855778][ T6444] netlink: 176 bytes leftover after parsing attributes in process `syz.3.220'. [ 152.884653][ T6444] binder: 6443:6444 ioctl c0306201 200000000680 returned -14 [ 152.924643][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 152.938050][ T5699] usb 1-1: USB disconnect, device number 23 [ 152.960492][ T5699] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 152.993805][ T5699] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 152.994951][ T5699] quatech2 1-1:0.51: device disconnected [ 153.466066][ T5619] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 153.626775][ T5619] usb 3-1: Using ep0 maxpacket: 32 [ 153.631553][ T5619] usb 3-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 153.631583][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.631595][ T5619] usb 3-1: Product: syz [ 153.631603][ T5619] usb 3-1: Manufacturer: syz [ 153.631611][ T5619] usb 3-1: SerialNumber: syz [ 153.635178][ T5619] usb 3-1: config 0 descriptor?? [ 154.275648][ T5619] peak_usb 3-1:0.0 can0: unable to request usb[type=2 value=5] err=-71 [ 154.427493][ T5619] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -71 [ 154.438395][ T5619] usb 3-1: USB disconnect, device number 24 [ 154.555961][ T824] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 154.726010][ T824] usb 1-1: Using ep0 maxpacket: 32 [ 154.729268][ T824] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 154.729288][ T824] usb 1-1: config 0 has no interface number 0 [ 154.729316][ T824] usb 1-1: config 0 interface 184 has no altsetting 0 [ 154.731871][ T824] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 154.731902][ T824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.731914][ T824] usb 1-1: Product: syz [ 154.731922][ T824] usb 1-1: Manufacturer: syz [ 154.731931][ T824] usb 1-1: SerialNumber: syz [ 154.749608][ T824] usb 1-1: config 0 descriptor?? [ 155.165982][ T5619] usb 3-1: new full-speed USB device number 25 using dummy_hcd [ 155.326429][ T5619] usb 3-1: config 150 has an invalid interface number: 204 but max is 2 [ 155.326465][ T5619] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3 [ 155.326608][ T5619] usb 3-1: config 150 has no interface number 0 [ 155.335090][ T5619] usb 3-1: config 150 interface 204 has no altsetting 0 [ 155.356416][ T824] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 155.356449][ T824] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 155.390688][ T5619] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb [ 155.390721][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.390741][ T5619] usb 3-1: Product: syz [ 155.390756][ T5619] usb 3-1: Manufacturer: syz [ 155.390770][ T5619] usb 3-1: SerialNumber: syz [ 155.562709][ T824] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 155.562741][ T824] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 155.562753][ T824] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 155.563006][ T824] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 155.617182][ T824] usb 1-1: USB disconnect, device number 24 [ 155.640950][ T5619] xr_serial 3-1:150.204: skipping garbage [ 155.640987][ T5619] xr_serial 3-1:150.204: xr_serial converter detected [ 156.041829][ T6459] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 160.912664][ T5619] xr_serial ttyUSB0: Failed to set reg 0x0c: -110 [ 160.912707][ T5619] xr_serial ttyUSB0: probe with driver xr_serial failed with error -110 [ 167.762407][ T4926] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 167.777816][ T4926] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 167.781099][ T4926] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 167.782167][ T4926] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 167.782843][ T4926] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 168.402834][ T6470] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.403058][ T6470] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.403219][ T6470] bridge_slave_0: entered allmulticast mode [ 168.405031][ T6470] bridge_slave_0: entered promiscuous mode [ 168.426560][ T6470] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.426842][ T6470] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.427454][ T6470] bridge_slave_1: entered allmulticast mode [ 168.434549][ T6470] bridge_slave_1: entered promiscuous mode [ 168.490275][ T6470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.495688][ T6470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.551426][ T6470] team0: Port device team_slave_0 added [ 168.554529][ T6470] team0: Port device team_slave_1 added [ 168.592047][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.592060][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.592076][ T6470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.594278][ T6470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.594288][ T6470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 168.594303][ T6470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.794263][ T6470] hsr_slave_0: entered promiscuous mode [ 168.805417][ T6470] hsr_slave_1: entered promiscuous mode [ 168.808847][ T6470] debugfs: 'hsr0' already exists in 'hsr' [ 168.808875][ T6470] Cannot create hsr debugfs directory [ 168.979846][ T4926] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.031577][ T4926] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.032819][ T4926] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.035106][ T4926] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.048938][ T4926] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 169.868324][ T5609] Bluetooth: hci4: command tx timeout [ 169.981209][ T6488] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.981450][ T6488] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.981605][ T6488] bridge_slave_0: entered allmulticast mode [ 169.983475][ T6488] bridge_slave_0: entered promiscuous mode [ 169.995612][ T6488] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.996397][ T6488] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.997020][ T6488] bridge_slave_1: entered allmulticast mode [ 170.000417][ T6488] bridge_slave_1: entered promiscuous mode [ 170.064033][ T6488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.071633][ T6488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.112488][ T6488] team0: Port device team_slave_0 added [ 170.115463][ T6488] team0: Port device team_slave_1 added [ 170.149392][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 170.149404][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.149419][ T6488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.151309][ T6488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.151319][ T6488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 170.151334][ T6488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.258350][ T6488] hsr_slave_0: entered promiscuous mode [ 170.259776][ T6488] hsr_slave_1: entered promiscuous mode [ 170.260798][ T6488] debugfs: 'hsr0' already exists in 'hsr' [ 170.260820][ T6488] Cannot create hsr debugfs directory [ 170.873947][ T4926] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 170.902935][ T4926] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 170.903982][ T4926] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 170.905169][ T4926] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 170.910422][ T4926] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 171.146485][ T5609] Bluetooth: hci5: command tx timeout [ 171.544286][ T6506] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.544512][ T6506] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.544667][ T6506] bridge_slave_0: entered allmulticast mode [ 171.567098][ T6506] bridge_slave_0: entered promiscuous mode [ 171.571731][ T6506] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.572088][ T6506] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.572365][ T6506] bridge_slave_1: entered allmulticast mode [ 171.578797][ T6506] bridge_slave_1: entered promiscuous mode [ 171.627163][ T6506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.632297][ T6506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.669444][ T6506] team0: Port device team_slave_0 added [ 171.673206][ T6506] team0: Port device team_slave_1 added [ 171.705611][ T6506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.705623][ T6506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.705638][ T6506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.712465][ T6506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.712482][ T6506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 171.712507][ T6506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.860779][ T6506] hsr_slave_0: entered promiscuous mode [ 171.862681][ T6506] hsr_slave_1: entered promiscuous mode [ 171.864451][ T6506] debugfs: 'hsr0' already exists in 'hsr' [ 171.864476][ T6506] Cannot create hsr debugfs directory [ 171.946349][ T5609] Bluetooth: hci4: command tx timeout [ 172.049655][ T4926] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 172.053699][ T4926] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 172.087360][ T4926] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 172.091733][ T4926] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 172.093306][ T4926] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 172.986257][ T5609] Bluetooth: hci6: command tx timeout [ 173.082533][ T6524] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.082756][ T6524] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.082925][ T6524] bridge_slave_0: entered allmulticast mode [ 173.084757][ T6524] bridge_slave_0: entered promiscuous mode [ 173.088983][ T6524] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.089335][ T6524] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.089972][ T6524] bridge_slave_1: entered allmulticast mode [ 173.093194][ T6524] bridge_slave_1: entered promiscuous mode [ 173.154945][ T6524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.171148][ T6524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.215695][ T6524] team0: Port device team_slave_0 added [ 173.221140][ T6524] team0: Port device team_slave_1 added [ 173.225968][ T5609] Bluetooth: hci5: command tx timeout [ 173.262775][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.262787][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.262802][ T6524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.281459][ T6524] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.281476][ T6524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 173.281502][ T6524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.369754][ T6524] hsr_slave_0: entered promiscuous mode [ 173.371054][ T6524] hsr_slave_1: entered promiscuous mode [ 173.372076][ T6524] debugfs: 'hsr0' already exists in 'hsr' [ 173.372098][ T6524] Cannot create hsr debugfs directory [ 174.026018][ T5609] Bluetooth: hci4: command tx timeout [ 174.186459][ T5609] Bluetooth: hci7: command tx timeout [ 175.066132][ T5609] Bluetooth: hci6: command tx timeout [ 175.306174][ T5609] Bluetooth: hci5: command tx timeout [ 176.106039][ T5609] Bluetooth: hci4: command tx timeout [ 176.266111][ T5609] Bluetooth: hci7: command tx timeout [ 177.146126][ T5609] Bluetooth: hci6: command tx timeout [ 177.386061][ T5609] Bluetooth: hci5: command tx timeout [ 178.346205][ T5609] Bluetooth: hci7: command tx timeout [ 179.226038][ T5609] Bluetooth: hci6: command tx timeout [ 180.425956][ T5609] Bluetooth: hci7: command tx timeout [ 182.226148][ T57] block nbd0: Possible stuck request ffff888027ba7000: control (read@0,4096B). Runtime 30 seconds [ 194.351229][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.352796][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.306015][ T57] block nbd0: Possible stuck request ffff888027ba7000: control (read@0,4096B). Runtime 60 seconds [ 212.991285][ T4977] udevd[4977]: worker [6402] /devices/virtual/block/nbd0 is taking a long time [ 228.307103][ T4926] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 228.313377][ T4926] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 228.314403][ T4926] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 228.315510][ T4926] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 228.380146][ T4926] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 228.954224][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.954453][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.954624][ T6548] bridge_slave_0: entered allmulticast mode [ 228.968445][ T6548] bridge_slave_0: entered promiscuous mode [ 228.972722][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.973120][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.973388][ T6548] bridge_slave_1: entered allmulticast mode [ 228.978745][ T6548] bridge_slave_1: entered promiscuous mode [ 229.027938][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.033095][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.073386][ T6548] team0: Port device team_slave_0 added [ 229.084510][ T6548] team0: Port device team_slave_1 added [ 229.114249][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 229.114262][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.114276][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 229.117229][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 229.117244][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 229.117268][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.224293][ T6548] hsr_slave_0: entered promiscuous mode [ 229.228814][ T6548] hsr_slave_1: entered promiscuous mode [ 229.230718][ T6548] debugfs: 'hsr0' already exists in 'hsr' [ 229.230743][ T6548] Cannot create hsr debugfs directory [ 229.464245][ T4926] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 229.521632][ T4926] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 229.523773][ T4926] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 229.558968][ T4926] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 229.559804][ T4926] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 230.506054][ T5609] Bluetooth: hci8: command tx timeout [ 230.712847][ T6566] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.713201][ T6566] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.713388][ T6566] bridge_slave_0: entered allmulticast mode [ 230.715329][ T6566] bridge_slave_0: entered promiscuous mode [ 230.727467][ T6566] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.727757][ T6566] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.728097][ T6566] bridge_slave_1: entered allmulticast mode [ 230.731897][ T6566] bridge_slave_1: entered promiscuous mode [ 230.833056][ T6566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.848431][ T6566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.958957][ T6566] team0: Port device team_slave_0 added [ 230.982756][ T6566] team0: Port device team_slave_1 added [ 231.058684][ T6566] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.058700][ T6566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.058728][ T6566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.062933][ T6566] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.062949][ T6566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 231.062973][ T6566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.198136][ T6566] hsr_slave_0: entered promiscuous mode [ 231.201209][ T6566] hsr_slave_1: entered promiscuous mode [ 231.203030][ T6566] debugfs: 'hsr0' already exists in 'hsr' [ 231.203048][ T6566] Cannot create hsr debugfs directory [ 231.451300][ T4926] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 231.484687][ T4926] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 231.527403][ T4926] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 231.556458][ T4926] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 231.558602][ T4926] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 231.708213][ T5609] Bluetooth: hci9: command tx timeout [ 232.347927][ T4926] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 232.352289][ T4926] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 232.353307][ T4926] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 232.354381][ T4926] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 232.355051][ T4926] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 232.587274][ T4926] Bluetooth: hci8: command tx timeout [ 233.147730][ T6584] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.149527][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.149817][ T6584] bridge_slave_0: entered allmulticast mode [ 233.152661][ T6584] bridge_slave_0: entered promiscuous mode [ 233.191225][ T6584] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.191444][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.191678][ T6584] bridge_slave_1: entered allmulticast mode [ 233.193689][ T6584] bridge_slave_1: entered promiscuous mode [ 233.286107][ T6584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.304360][ T6584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.375962][ T6584] team0: Port device team_slave_0 added [ 233.380277][ T6584] team0: Port device team_slave_1 added [ 233.450028][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.450040][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.450055][ T6584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.454261][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.454272][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.454287][ T6584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.609765][ T6584] hsr_slave_0: entered promiscuous mode [ 233.611166][ T6584] hsr_slave_1: entered promiscuous mode [ 233.612211][ T6584] debugfs: 'hsr0' already exists in 'hsr' [ 233.612233][ T6584] Cannot create hsr debugfs directory [ 233.707361][ T4926] Bluetooth: hci10: command tx timeout [ 233.785950][ T4926] Bluetooth: hci9: command tx timeout [ 234.011450][ T6596] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.011844][ T6596] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.012349][ T6596] bridge_slave_0: entered allmulticast mode [ 234.044110][ T6596] bridge_slave_0: entered promiscuous mode [ 234.063083][ T6596] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.063395][ T6596] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.064054][ T6596] bridge_slave_1: entered allmulticast mode [ 234.067012][ T6596] bridge_slave_1: entered promiscuous mode [ 234.411530][ T6596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.421583][ T6596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.535254][ T6596] team0: Port device team_slave_0 added [ 234.546720][ T6596] team0: Port device team_slave_1 added [ 234.586636][ T4926] Bluetooth: hci11: command tx timeout [ 234.591450][ T6596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.591463][ T6596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.591478][ T6596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.593578][ T6596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.593588][ T6596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.593603][ T6596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.668914][ T4926] Bluetooth: hci8: command tx timeout [ 234.702901][ T6596] hsr_slave_0: entered promiscuous mode [ 234.704248][ T6596] hsr_slave_1: entered promiscuous mode [ 234.716193][ T6596] debugfs: 'hsr0' already exists in 'hsr' [ 234.716221][ T6596] Cannot create hsr debugfs directory [ 235.786428][ T5609] Bluetooth: hci10: command tx timeout [ 235.866070][ T5609] Bluetooth: hci9: command tx timeout [ 236.666001][ T5609] Bluetooth: hci11: command tx timeout [ 236.746061][ T5609] Bluetooth: hci8: command tx timeout [ 237.866176][ T5609] Bluetooth: hci10: command tx timeout [ 237.946172][ T5609] Bluetooth: hci9: command tx timeout [ 238.746052][ T5609] Bluetooth: hci11: command tx timeout [ 239.946177][ T5609] Bluetooth: hci10: command tx timeout [ 240.827101][ T5609] Bluetooth: hci11: command tx timeout [ 242.386179][ T57] block nbd0: Possible stuck request ffff888027ba7000: control (read@0,4096B). Runtime 90 seconds [ 255.797502][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.797559][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 272.465939][ T57] block nbd0: Possible stuck request ffff888027ba7000: control (read@0,4096B). Runtime 120 seconds [ 288.873681][ T4926] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 288.883489][ T4926] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 288.888744][ T4926] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 288.893876][ T4926] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 288.894821][ T4926] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 289.456867][ T6626] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.457275][ T6626] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.457580][ T6626] bridge_slave_0: entered allmulticast mode [ 289.459971][ T6626] bridge_slave_0: entered promiscuous mode [ 289.464016][ T6626] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.464392][ T6626] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.464993][ T6626] bridge_slave_1: entered allmulticast mode [ 289.469636][ T6626] bridge_slave_1: entered promiscuous mode [ 289.523984][ T6626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.530433][ T6626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.571999][ T6626] team0: Port device team_slave_0 added [ 289.575243][ T6626] team0: Port device team_slave_1 added [ 289.609719][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.609731][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.609746][ T6626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.612148][ T6626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.612158][ T6626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.612172][ T6626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.698990][ T6626] hsr_slave_0: entered promiscuous mode [ 289.701294][ T6626] hsr_slave_1: entered promiscuous mode [ 289.704162][ T6626] debugfs: 'hsr0' already exists in 'hsr' [ 289.704186][ T6626] Cannot create hsr debugfs directory [ 289.973930][ T4926] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 290.027500][ T4926] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 290.029891][ T4926] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 290.030833][ T4926] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 290.031639][ T4926] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 290.986950][ T5609] Bluetooth: hci12: command tx timeout [ 291.091621][ T6644] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.091906][ T6644] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.092145][ T6644] bridge_slave_0: entered allmulticast mode [ 291.099115][ T6644] bridge_slave_0: entered promiscuous mode [ 291.103582][ T6644] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.103934][ T6644] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.105535][ T6644] bridge_slave_1: entered allmulticast mode [ 291.109787][ T6644] bridge_slave_1: entered promiscuous mode [ 291.248968][ T6644] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.255653][ T6644] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.351983][ T6644] team0: Port device team_slave_0 added [ 291.358603][ T6644] team0: Port device team_slave_1 added [ 291.503747][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.503765][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.503789][ T6644] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.549074][ T6644] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.549092][ T6644] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 291.549117][ T6644] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.697865][ T6644] hsr_slave_0: entered promiscuous mode [ 291.699780][ T6644] hsr_slave_1: entered promiscuous mode [ 291.701281][ T6644] debugfs: 'hsr0' already exists in 'hsr' [ 291.701303][ T6644] Cannot create hsr debugfs directory [ 292.027775][ T6663] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 292.071206][ T6663] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 292.073172][ T6663] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 292.075406][ T6663] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 292.080346][ T6663] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 292.117851][ T5623] Bluetooth: hci13: command tx timeout [ 293.068320][ T6663] Bluetooth: hci12: command tx timeout [ 293.193065][ T5623] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 293.206708][ T5623] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 293.211205][ T6662] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.211567][ T6662] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.211924][ T6662] bridge_slave_0: entered allmulticast mode [ 293.235196][ T5623] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 293.240213][ T5623] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 293.240925][ T5623] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 293.278264][ T6662] bridge_slave_0: entered promiscuous mode [ 293.426599][ T6662] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.426969][ T6662] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.427283][ T6662] bridge_slave_1: entered allmulticast mode [ 293.429683][ T6662] bridge_slave_1: entered promiscuous mode [ 293.554905][ T6662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.604592][ T6662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.716635][ T5623] Bluetooth: hci4: command 0x0406 tx timeout [ 293.716673][ T5623] Bluetooth: hci6: command 0x0406 tx timeout [ 293.716801][ T6663] Bluetooth: hci5: command 0x0406 tx timeout [ 293.786834][ T6662] team0: Port device team_slave_0 added [ 293.804860][ T6662] team0: Port device team_slave_1 added [ 294.014232][ T6662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.014250][ T6662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.014274][ T6662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.062068][ T6662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.062083][ T6662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.062105][ T6662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.180746][ T6662] hsr_slave_0: entered promiscuous mode [ 294.182203][ T6662] hsr_slave_1: entered promiscuous mode [ 294.183277][ T6662] debugfs: 'hsr0' already exists in 'hsr' [ 294.183292][ T6662] Cannot create hsr debugfs directory [ 294.187763][ T5609] Bluetooth: hci13: command tx timeout [ 294.266118][ T5609] Bluetooth: hci14: command tx timeout [ 294.920236][ T6680] bridge0: port 1(bridge_slave_0) entered blocking state [ 294.920457][ T6680] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.920842][ T6680] bridge_slave_0: entered allmulticast mode [ 294.922790][ T6680] bridge_slave_0: entered promiscuous mode [ 294.927898][ T6680] bridge0: port 2(bridge_slave_1) entered blocking state [ 294.928276][ T6680] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.928610][ T6680] bridge_slave_1: entered allmulticast mode [ 294.931903][ T6680] bridge_slave_1: entered promiscuous mode [ 294.992523][ T6680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.080027][ T6680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 295.119886][ T6680] team0: Port device team_slave_0 added [ 295.124666][ T6680] team0: Port device team_slave_1 added [ 295.146030][ T5609] Bluetooth: hci12: command tx timeout [ 295.167957][ T6680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.167969][ T6680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.167985][ T6680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.170021][ T6680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.170031][ T6680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.170047][ T6680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.306098][ T5609] Bluetooth: hci15: command tx timeout [ 295.321921][ T6680] hsr_slave_0: entered promiscuous mode [ 295.324366][ T6680] hsr_slave_1: entered promiscuous mode [ 295.327047][ T6680] debugfs: 'hsr0' already exists in 'hsr' [ 295.327071][ T6680] Cannot create hsr debugfs directory [ 296.265987][ T5609] Bluetooth: hci13: command tx timeout [ 296.346025][ T5609] Bluetooth: hci14: command tx timeout [ 297.226084][ T60] Bluetooth: hci12: command tx timeout [ 297.386255][ T60] Bluetooth: hci15: command tx timeout [ 297.387444][ T38] INFO: task syz.1.215:6432 blocked for more than 143 seconds. [ 297.387487][ T38] Tainted: G L syzkaller #0 [ 297.387499][ T38] "echo 0 >[ 297.387499][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 297.387581][ T38] task:syz.1.215 state:D stack:25328 pid:6432 tgid:6431 ppid:5607 task_flags:0x480140 flags:0x00080002 [ 297.387647][ T38] Call Trace: [ 297.387655][ T38] [ 297.387676][ T38] __schedule+0x16f9/0x5500 [ 297.387739][ T38] ? __pfx___schedule+0x10/0x10 [ 297.387776][ T38] ? schedule+0x90/0x360 [ 297.387806][ T38] schedule+0x164/0x360 [ 297.387836][ T38] blk_mq_freeze_queue_wait+0x101/0x180 [ 297.387869][ T38] ? __pfx_blk_mq_freeze_queue_wait+0x10/0x10 [ 297.387899][ T38] ? queue_limits_commit_update_frozen+0x55/0xd0 [ 297.387922][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 297.387965][ T38] queue_limits_commit_update_frozen+0x55/0xd0 [ 297.387995][ T38] nbd_set_size+0x44b/0x670 [ 297.388029][ T38] ? __pfx_nbd_set_size+0x10/0x10 [ 297.388073][ T38] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 297.388105][ T38] ? nla_memcpy+0x5b/0xc0 [ 297.388142][ T38] nbd_genl_reconfigure+0x7f5/0x1ec0 [ 297.388186][ T38] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 297.388213][ T38] ? rcu_is_watching+0x15/0xb0 [ 297.388235][ T38] ? trace_kmalloc+0x2a/0xf0 [ 297.388265][ T38] ? __nla_parse+0x40/0x60 [ 297.388294][ T38] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 297.388315][ T38] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 297.388343][ T38] genl_family_rcv_msg_doit+0x22a/0x330 [ 297.388372][ T38] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 297.388401][ T38] ? lockdep_hardirqs_on+0x7a/0x110 [ 297.388429][ T38] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 297.394000][ T38] genl_rcv_msg+0x61c/0x7a0 [ 297.394035][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.394057][ T38] ? __pfx_nbd_genl_reconfigure+0x10/0x10 [ 297.394097][ T38] netlink_rcv_skb+0x232/0x4b0 [ 297.394126][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.394148][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.394186][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.394212][ T38] ? netlink_deliver_tap+0x2e/0x1b0 [ 297.394243][ T38] genl_rcv+0x28/0x40 [ 297.394262][ T38] netlink_unicast+0x780/0x920 [ 297.394297][ T38] netlink_sendmsg+0x813/0xb40 [ 297.394333][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.394362][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 297.394398][ T38] ? aa_sock_msg_perm+0x122/0x200 [ 297.394435][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.394461][ T38] sock_sendmsg_nosec+0x112/0x150 [ 297.394487][ T38] ____sys_sendmsg+0x55c/0x870 [ 297.394521][ T38] ? __pfx_____sys_sendmsg+0x10/0x10 [ 297.394558][ T38] ? import_iovec+0x73/0xa0 [ 297.394590][ T38] ___sys_sendmsg+0x2a5/0x360 [ 297.394617][ T38] ? __lock_acquire+0x6b5/0x2d10 [ 297.394642][ T38] ? __pfx____sys_sendmsg+0x10/0x10 [ 297.394676][ T38] ? futex_wait+0x2a2/0x390 [ 297.394726][ T38] ? __fget_files+0x2a/0x420 [ 297.394749][ T38] ? __fget_files+0x3a6/0x420 [ 297.394782][ T38] __x64_sys_sendmsg+0x1c3/0x2a0 [ 297.394813][ T38] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 297.394849][ T38] ? rcu_is_watching+0x15/0xb0 [ 297.394882][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.394904][ T38] do_syscall_64+0x15f/0xf80 [ 297.394923][ T38] ? trace_irq_disable+0x3b/0x140 [ 297.394950][ T38] ? clear_bhb_loop+0x40/0x90 [ 297.394974][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.394995][ T38] RIP: 0033:0x7f321516cdd9 [ 297.395014][ T38] RSP: 002b:00007f32133c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 297.395050][ T38] RAX: ffffffffffffffda RBX: 00007f32153e5fa0 RCX: 00007f321516cdd9 [ 297.395065][ T38] RDX: 0000000020000804 RSI: 0000200000001900 RDI: 0000000000000004 [ 297.395079][ T38] RBP: 00007f3215202d69 R08: 0000000000000000 R09: 0000000000000000 [ 297.395092][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 297.395104][ T38] R13: 00007f32153e6038 R14: 00007f32153e5fa0 R15: 00007fff9b7a83e8 [ 297.395136][ T38] [ 297.395146][ T38] INFO: task syz.3.220:6444 blocked for more than 143 seconds. [ 297.395164][ T38] Tainted: G L syzkaller #0 [ 297.395195][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 297.395204][ T38] task:syz.3.220 state:D stack:24536 pid:6444 tgid:6443 ppid:5611 task_flags:0x400140 flags:0x00080002 [ 297.395258][ T38] Call Trace: [ 297.395265][ T38] [ 297.395276][ T38] __schedule+0x16f9/0x5500 [ 297.395315][ T38] ? __lock_acquire+0x6b5/0x2d10 [ 297.395350][ T38] ? __pfx___schedule+0x10/0x10 [ 297.395375][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 297.395419][ T38] rt_mutex_schedule+0x76/0xf0 [ 297.395444][ T38] rt_mutex_slowlock_block+0x508/0x680 [ 297.395479][ T38] ? rt_mutex_slowlock_block+0x2e9/0x680 [ 297.395505][ T38] rt_mutex_slowlock+0x2dc/0x780 [ 297.395533][ T38] ? rt_mutex_slowlock+0x1fd/0x780 [ 297.395558][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 297.395592][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 297.395617][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 297.395643][ T38] ? genl_rcv_msg+0x10b/0x7a0 [ 297.395662][ T38] mutex_lock_nested+0x168/0x1d0 [ 297.395684][ T38] ? __lock_acquire+0x6b5/0x2d10 [ 297.395703][ T38] ? radix_tree_lookup+0x243/0x290 [ 297.395832][ T38] genl_rcv_msg+0x10b/0x7a0 [ 297.395858][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.395876][ T38] ? ref_tracker_free+0x673/0x820 [ 297.395901][ T38] ? __netlink_deliver_tap+0x636/0x8b0 [ 297.395925][ T38] ? netlink_deliver_tap+0x19c/0x1b0 [ 297.395950][ T38] ? netlink_unicast+0x754/0x920 [ 297.395971][ T38] ? netlink_sendmsg+0x813/0xb40 [ 297.395994][ T38] ? sock_sendmsg_nosec+0x112/0x150 [ 297.396014][ T38] ? __sys_sendto+0x402/0x590 [ 297.396036][ T38] ? __x64_sys_sendto+0xde/0x100 [ 297.396072][ T38] netlink_rcv_skb+0x232/0x4b0 [ 297.396100][ T38] ? __pfx_genl_rcv_msg+0x10/0x10 [ 297.396123][ T38] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 297.396169][ T38] genl_rcv+0x28/0x40 [ 297.396206][ T38] netlink_unicast+0x780/0x920 [ 297.396241][ T38] netlink_sendmsg+0x813/0xb40 [ 297.396276][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.396305][ T38] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 297.396340][ T38] ? aa_sock_msg_perm+0x122/0x200 [ 297.396369][ T38] ? __pfx_netlink_sendmsg+0x10/0x10 [ 297.396395][ T38] sock_sendmsg_nosec+0x112/0x150 [ 297.396426][ T38] __sys_sendto+0x402/0x590 [ 297.396457][ T38] ? __pfx___sys_sendto+0x10/0x10 [ 297.396506][ T38] ? exc_page_fault+0x6a/0xc0 [ 297.396545][ T38] __x64_sys_sendto+0xde/0x100 [ 297.396571][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.396592][ T38] do_syscall_64+0x15f/0xf80 [ 297.396610][ T38] ? trace_irq_disable+0x3b/0x140 [ 297.396651][ T38] ? clear_bhb_loop+0x40/0x90 [ 297.396674][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.398915][ T38] RIP: 0033:0x7fc8fdbbd60e [ 297.398937][ T38] RSP: 002b:00007fc8fbe54e88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 297.398958][ T38] RAX: ffffffffffffffda RBX: 00007fc8fbe566c0 RCX: 00007fc8fdbbd60e [ 297.398973][ T38] RDX: 0000000000000020 RSI: 00007fc8fbe55000 RDI: 000000000000000a [ 297.398985][ T38] RBP: 0000000000000000 R08: 00007fc8fbe54f04 R09: 000000000000000c [ 297.398998][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000a [ 297.399010][ T38] R13: 00007fc8fbe54f58 R14: 00007fc8fbe55000 R15: 0000000000000000 [ 297.399040][ T38] [ 297.399101][ T38] [ 297.399101][ T38] Showing all locks held in the system: [ 297.399111][ T38] 4 locks held by pr/legacy/17: [ 297.399123][ T38] #0: ffffffff8e1ba4e0 (console_lock){+.+.}-{0:0}, at: legacy_kthread_func+0x1a3/0x250 [ 297.399180][ T38] #1: ffffffff8e0a1dd8 (console_srcu){....}-{0:0}, at: console_flush_one_record+0xfa/0xb90 [ 297.399233][ T38] #2: ffffffff99dc6bf8 (&port_lock_key){+.+.}-{3:3}, at: serial8250_console_write+0x179/0x1b90 [ 297.399288][ T38] #3: ffffffff8e1c8240 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e0/0x400 [ 297.399341][ T38] 1 lock held by khungtaskd/38: [ 297.399352][ T38] #0: ffffffff8e1c8240 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 297.399436][ T38] 2 locks held by getty/5363: [ 297.399448][ T38] #0: ffff8880365590a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 297.399500][ T38] #1: ffffc90003cbe2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x462/0x13a0 [ 297.399548][ T38] 3 locks held by kworker/u9:2/5609: [ 297.399559][ T38] #0: ffff8880584fd938 ((wq_completion)hci7){+.+.}-{0:0}, at: process_one_work+0x897/0x1630 [ 297.399623][ T38] #1: ffffc90004d27c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_one_work+0x8be/0x1630 [ 297.399675][ T38] #2: ffff888060268f80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 297.399738][ T38] 1 lock held by udevd/6402: [ 297.399749][ T38] #0: ffff888027b6b4c8 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xcc0 [ 297.399798][ T38] 6 locks held by syz.1.215/6432: [ 297.399810][ T38] #0: ffffffff8f6024c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.399854][ T38] #1: ffffffff8f6022d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 297.399900][ T38] #2: ffff888027a94248 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_reconfigure+0x4c1/0x1ec0 [ 297.399951][ T38] #3: ffff8880278e86f0 (&q->limits_lock){+.+.}-{4:4}, at: nbd_set_size+0x262/0x670 [ 297.400001][ T38] #4: ffff8880278e8060 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 297.400057][ T38] #5: ffff8880278e8098 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: queue_limits_commit_update_frozen+0x55/0xd0 [ 297.400111][ T38] 2 locks held by syz.3.220/6444: [ 297.400122][ T38] #0: ffffffff8f6024c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.400166][ T38] #1: ffffffff8f6022d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 297.400211][ T38] 2 locks held by syz.2.227/6459: [ 297.400221][ T38] #0: ffffffff8f6024c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.400265][ T38] #1: ffffffff8f6022d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 297.400310][ T38] 2 locks held by syz.0.228/6464: [ 297.400321][ T38] #0: ffffffff8f6024c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.402501][ T38] #1: ffffffff8f6022d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 297.402551][ T38] 2 locks held by syz-executor/6470: [ 297.402562][ T38] #0: ffffffff8f6024c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.402606][ T38] #1: ffffffff8f6022d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 297.402653][ T38] 2 locks held by syz-executor/6488: [ 297.402664][ T38] #0: ffffffff8f6024c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.402708][ T38] #1: ffffffff8f6022d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 297.402753][ T38] 2 locks held by syz-executor/6506: [ 297.402765][ T38] #0: ffffffff8f6024c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.402808][ T38] #1: ffffffff8f6022d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 297.402854][ T38] 2 locks held by syz-executor/6524: [ 297.402878][ T38] #0: ffffffff8f6024c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.402921][ T38] #1: ffffffff8f6022d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 297.402967][ T38] 2 locks held by syz-executor/6548: [ 297.402978][ T38] #0: ffffffff8f6024c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.403022][ T38] #1: ffffffff8f6022d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 297.403068][ T38] 2 locks held by syz-executor/6566: [ 297.403079][ T38] #0: ffffffff8f6024c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.403122][ T38] #1: ffffffff8f6022d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 297.403168][ T38] 2 locks held by syz-executor/6584: [ 297.403179][ T38] #0: ffffffff8f6024c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.403222][ T38] #1: ffffffff8f6022d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 297.403267][ T38] 2 locks held by syz-executor/6596: [ 297.403278][ T38] #0: ffffffff8f6024c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.403322][ T38] #1: ffffffff8f6022d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 297.403369][ T38] 2 locks held by syz-executor/6626: [ 297.403381][ T38] #0: ffffffff8f6024c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.403431][ T38] #1: ffffffff8f6022d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 297.403477][ T38] 2 locks held by syz-executor/6644: [ 297.403489][ T38] #0: ffffffff8f6024c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.403533][ T38] #1: ffffffff8f6022d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 297.403579][ T38] 2 locks held by syz-executor/6662: [ 297.403590][ T38] #0: ffffffff8f6024c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.403633][ T38] #1: ffffffff8f6022d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 297.403677][ T38] 2 locks held by syz-executor/6680: [ 297.403689][ T38] #0: ffffffff8f6024c0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 297.403732][ T38] #1: ffffffff8f6022d8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 297.403779][ T38] [ 297.403784][ T38] ============================================= [ 297.403784][ T38] [ 297.403805][ T38] NMI backtrace for cpu 1 [ 297.403822][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 297.403853][ T38] Tainted: [L]=SOFTLOCKUP [ 297.403860][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.403871][ T38] Call Trace: [ 297.403879][ T38] [ 297.403887][ T38] dump_stack_lvl+0xe8/0x150 [ 297.403916][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 297.403942][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 297.403966][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 297.403994][ T38] sys_info+0x135/0x170 [ 297.404015][ T38] watchdog+0xfd3/0x1030 [ 297.404049][ T38] ? watchdog+0x1c9/0x1030 [ 297.404079][ T38] kthread+0x388/0x470 [ 297.404099][ T38] ? __pfx_watchdog+0x10/0x10 [ 297.404123][ T38] ? __pfx_kthread+0x10/0x10 [ 297.404144][ T38] ret_from_fork+0x514/0xb70 [ 297.404169][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 297.404191][ T38] ? __switch_to+0xc79/0x1410 [ 297.404222][ T38] ? __pfx_kthread+0x10/0x10 [ 297.404243][ T38] ret_from_fork_asm+0x1a/0x30 [ 297.404282][ T38] [ 297.404304][ T38] Sending NMI from CPU 1 to CPUs 0: [ 297.404333][ C0] NMI backtrace for cpu 0 [ 297.404347][ C0] CPU: 0 UID: 0 PID: 17 Comm: pr/legacy Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 297.404369][ C0] Tainted: [L]=SOFTLOCKUP [ 297.404375][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.404384][ C0] RIP: 0010:wait_for_lsr+0x1aa/0x2f0 [ 297.404410][ C0] Code: 44 24 28 80 3c 18 00 74 0a 48 8b 7c 24 18 e8 cd d4 e6 fc 48 8b 7c 24 10 4c 8b 9f 90 00 00 00 be 05 00 00 00 2e 2e 2e 41 ff d3 <48> 8b 4c 24 20 0f b6 0c 19 84 c9 49 89 de 75 4a 0f b7 c0 41 09 c5 [ 297.404426][ C0] RSP: 0018:ffffc900001679f8 EFLAGS: 00000202 [ 297.404440][ C0] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 297.404452][ C0] RDX: 00000000000003fd RSI: 0000000000000000 RDI: 0000000000000000 [ 297.404462][ C0] RBP: ffffffff99dc6eb0 R08: 0000000000000000 R09: 0000000000000000 [ 297.404472][ C0] R10: dffffc0000000000 R11: ffffffff85482090 R12: 1ffffffff33b8dd6 [ 297.404484][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000764 [ 297.404496][ C0] FS: 0000000000000000(0000) GS:ffff888125cc7000(0000) knlGS:0000000000000000 [ 297.404509][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 297.404521][ C0] CR2: 00007ffd0d634ea0 CR3: 000000000dfb6000 CR4: 00000000003526f0 [ 297.404536][ C0] Call Trace: [ 297.404542][ C0] [ 297.404552][ C0] serial8250_console_write+0x120d/0x1b90 [ 297.404582][ C0] ? __pfx_serial8250_console_write+0x10/0x10 [ 297.404605][ C0] ? console_flush_one_record+0xfa/0xb90 [ 297.404631][ C0] ? console_flush_one_record+0x48f/0xb90 [ 297.404655][ C0] console_flush_one_record+0x68b/0xb90 [ 297.404687][ C0] ? console_flush_one_record+0xfa/0xb90 [ 297.404711][ C0] ? __pfx_console_flush_one_record+0x10/0x10 [ 297.404735][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 297.404760][ C0] legacy_kthread_func+0x1b6/0x250 [ 297.404783][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 297.404805][ C0] ? __pfx_autoremove_wake_function+0x10/0x10 [ 297.404829][ C0] ? __kthread_parkme+0x7a/0x1f0 [ 297.404854][ C0] kthread+0x388/0x470 [ 297.404870][ C0] ? __pfx_legacy_kthread_func+0x10/0x10 [ 297.404891][ C0] ? __pfx_kthread+0x10/0x10 [ 297.404907][ C0] ret_from_fork+0x514/0xb70 [ 297.404925][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 297.404942][ C0] ? __switch_to+0xc79/0x1410 [ 297.404965][ C0] ? __pfx_kthread+0x10/0x10 [ 297.404980][ C0] ret_from_fork_asm+0x1a/0x30 [ 297.405006][ C0] [ 297.409798][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 297.409820][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 297.409846][ T38] Tainted: [L]=SOFTLOCKUP [ 297.409853][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 297.409865][ T38] Call Trace: [ 297.409873][ T38] [ 297.409881][ T38] vpanic+0x56c/0xa60 [ 297.409912][ T38] ? __pfx___schedule+0x10/0x10 [ 297.409940][ T38] ? __pfx_vpanic+0x10/0x10 [ 297.409975][ T38] panic+0xc5/0xd0 [ 297.410000][ T38] ? __pfx_panic+0x10/0x10 [ 297.410028][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 297.410063][ T38] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 297.410093][ T38] watchdog+0x102c/0x1030 [ 297.410127][ T38] ? watchdog+0x1c9/0x1030 [ 297.410158][ T38] kthread+0x388/0x470 [ 297.410182][ T38] ? __pfx_watchdog+0x10/0x10 [ 297.410206][ T38] ? __pfx_kthread+0x10/0x10 [ 297.410227][ T38] ret_from_fork+0x514/0xb70 [ 297.410251][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 297.410273][ T38] ? __switch_to+0xc79/0x1410 [ 297.410304][ T38] ? __pfx_kthread+0x10/0x10 [ 297.410324][ T38] ret_from_fork_asm+0x1a/0x30 [ 297.410363][ T38] [ 297.410529][ T38] Kernel Offset: disabled