last executing test programs: 7m4.858227929s ago: executing program 4 (id=67): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f00000005c0)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="1201000000000040d90455a000000000000109022400010000100009040000c403000200092100105c0122070009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x3, "1b"}, @main=@item_4={0x3, 0x0, 0xa, "e811e23b"}]}}, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r4 = getpid() sched_setaffinity(0x0, 0xffffffffffffffe2, &(0x7f00000002c0)=0x20000002) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x4199831, 0xffffffffffffffff, 0x10000000) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x17, 0x0, 0x8400, 0x1}, 0x50) bpf$MAP_DELETE_ELEM(0x15, &(0x7f0000000500)={r7, 0x0, 0x20000000}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r2, 0x1, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r8, 0xc, 0x0, @val=@tracing={0x0, 0x2}}, 0x20) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x0, @val=@tracing={0x0, 0x2}}, 0x20) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff, 0xc, 0x0, @val=@tracing={0x0, 0x2}}, 0x20) ioctl$KVM_CREATE_DEVICE(r8, 0xc00caee0, &(0x7f0000000040)={0x3, 0xffffffffffffffff, 0x1}) close_range(r0, 0xffffffffffffffff, 0x0) 7m1.643841493s ago: executing program 4 (id=71): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000500)="5c0000001700010012aaaaaaaaaa0106000c00020004000000000064", 0x1c) 7m1.130339355s ago: executing program 4 (id=74): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="70000000420001000000000000000000030100000f0000004e00010000112233445566778899aabb86dd2c00001c00002c0001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e1bafaa4e97d65500797db92c726043d33d4036b5000004000280040003"], 0x70}, 0x1, 0x0, 0x0, 0x4400c005}, 0x80) 6m59.157604503s ago: executing program 4 (id=79): socket(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x20040, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000010)='proc\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./proc/net/afs/rootcell\x00', &(0x7f0000000140), 0x86031, &(0x7f00000003c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB="2ce2685533dfde8d631d93843d", @ANYRESHEX=r1, @ANYBLOB=',cache=fscache,access=client,\x00']) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000040)=0x200) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 6m53.45109922s ago: executing program 4 (id=84): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) creat(&(0x7f0000000140)='./file0/file0\x00', 0x66) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x3f0, 0x0, 0x168, 0x9, 0x230, 0xb, 0x320, 0x250, 0x250, 0x320, 0x250, 0x3, 0x0, {[{{@uncond, 0x6000000, 0x208, 0x230, 0x0, {0x0, 0x28e}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@rt={{0x138}, {0x0, [0x4, 0x8], 0x6, 0x17, 0x4, [@private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, @private2, @dev={0xfe, 0x80, '\x00', 0x38}, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, @private0, @private2, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, @mcast1, @loopback, @dev={0xfe, 0x80, '\x00', 0x26}], 0xe}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x2, 0x6, 0x4}, {0x3, 0x5, 0x1}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff000000], [0xffffff00, 0xffffff00, 0x0, 0xff000000], 'gretap0\x00', 'bridge_slave_0\x00', {}, {}, 0x2b, 0x2, 0x4, 0x3}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x3c2, 0x5fb8, 0x77, 'syz0\x00', {0x2b}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x450) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r6, 0x1, 0x21, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x6}, {0x66, 0x0, 0x0, 0x6}}, [@printk={@lu, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0x5, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x78}}}, &(0x7f0000000040)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x15) writev(r7, &(0x7f0000000640)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 6m51.38880061s ago: executing program 4 (id=86): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000050000000000000700000000000000000000000203000000000000000000000a0000000000000000002e"], 0x0, 0x43}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x2}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000440)={0x6, 0x1b4, 0x3, 0x8, 0xc0, "84f4a245df4684fa26343c888265f666f1acfe", 0x7, 0x1}) ptrace(0x10, r4) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) 6m34.053333727s ago: executing program 32 (id=86): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000300)=0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x16481, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000007000000050000000000000700000000000000000000000203000000000000000000000a0000000000000000002e"], 0x0, 0x43}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x0, 0x2}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000440)={0x6, 0x1b4, 0x3, 0x8, 0xc0, "84f4a245df4684fa26343c888265f666f1acfe", 0x7, 0x1}) ptrace(0x10, r4) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x38, 0x10, 0x801, 0x4000000, 0xfffffffc, {0x0, 0x0, 0x4c, 0x0, 0x204e9, 0x500}, [@IFLA_GROUP={0x8}, @IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x4529}]}, 0x38}, 0x1, 0xffffa888}, 0x20000880) 5m20.879864024s ago: executing program 3 (id=250): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', 0x0, &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './dev/sda1'}, 0xe) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0xc467) 5m20.544240609s ago: executing program 3 (id=252): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x7, 0x0) 5m20.28976499s ago: executing program 3 (id=253): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)='\b', 0x1}, {&(0x7f0000000140)="0000001e0000d15c", 0x8}], 0x2}, 0x24008004) 5m19.994896704s ago: executing program 3 (id=255): socket(0x40000000015, 0x5, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_SET_SREGS2(r1, 0x4140aecd, &(0x7f0000000440)={{0x70000, 0xffff1000, 0xf000, 0x1, 0x7f, 0x9, 0x81, 0xff, 0x0, 0x84, 0x0, 0xb}, {0x54000, 0xd000, 0x10, 0x3, 0x3, 0x7, 0x6, 0x6, 0x1, 0x0, 0xfe, 0xd}, {0x6000, 0x4000, 0x0, 0xc, 0x10, 0x81, 0x4, 0x13, 0x5, 0x1, 0x92, 0x80}, {0xdddd1000, 0xeeef0000, 0xb, 0x7, 0x1, 0x40, 0x2, 0x0, 0xfd, 0x29, 0x19, 0x9}, {0xeeeea000, 0x41000, 0xb, 0x4, 0x5, 0x2, 0x7, 0xf1, 0x2, 0x70, 0x4, 0x2}, {0x10000, 0xdddd1000, 0xe, 0x2, 0xad, 0x2, 0x3, 0x5, 0xf7, 0xe, 0x6, 0xa}, {0x54000, 0x60000, 0xb, 0x0, 0xcd, 0x5, 0x5, 0x26, 0x8, 0x6, 0xff, 0x6}, {0x2, 0x70000, 0xd, 0xe, 0x13, 0x7f, 0x3, 0x3, 0x7d, 0x1, 0xfc, 0x7b}, {0xd000, 0x5}, {0x80a0000, 0xff81}, 0x80000003, 0x0, 0x6000, 0x2021, 0x400000000005, 0xf800, 0x8000900, 0x0, [0x0, 0x100, 0x3, 0x10001]}) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read$FUSE(r5, &(0x7f00000006c0)={0x2020}, 0x2020) 5m16.69966578s ago: executing program 3 (id=260): syz_open_dev$evdev(&(0x7f0000000040), 0x3ff, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = socket$inet(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000000500)=""/102400, 0x19000) socket$kcm(0x11, 0x200000000000002, 0x300) preadv(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x14, 0x5) sched_setaffinity(r3, 0x8, &(0x7f0000000080)=0x7) syz_open_dev$dri(&(0x7f0000000180), 0x78, 0xa02) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000100)={0x7, 0x6776, 0x8}) socket$packet(0x11, 0x3, 0x300) r5 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x8100) ioctl$VIDIOC_S_FMT(r5, 0xc0d05640, &(0x7f0000000140)={0x1, @pix={0xffffffff, 0x0, 0x34565348, 0x7, 0xfffffffd, 0x0, 0x9, 0xfeedcafe, 0xe7, 0xffffff80, 0x0, 0x2}}) 5m14.379833158s ago: executing program 3 (id=265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000800)={0x0, 0x0}) 4m59.016438368s ago: executing program 33 (id=265): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000800)={0x0, 0x0}) 1m59.907937821s ago: executing program 0 (id=555): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setfsgid(0xee00) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x2200cd0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f00000047c0)={0x2020}, 0x2020) 1m55.189735319s ago: executing program 0 (id=563): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x28, 0x4}]}) 1m53.702302435s ago: executing program 0 (id=566): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x41, 0x0, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0xe, 0x7fff0001}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m46.010138231s ago: executing program 1 (id=573): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000900)=[{&(0x7f0000000740)=""/252, 0xfc}], 0x1, 0x3, 0x3) 1m45.079713975s ago: executing program 2 (id=574): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae03, 0x24) 1m44.996303984s ago: executing program 1 (id=575): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) open_tree(0xffffffffffffff9c, 0x0, 0x1900) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) 1m44.938444817s ago: executing program 0 (id=576): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x104) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}}) 1m44.79799047s ago: executing program 2 (id=577): syz_emit_ethernet(0x72, &(0x7f0000000300)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000080000000000000"], 0x48) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) write(r3, &(0x7f0000000000)="5a000300010003", 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='foo int x', 0x9) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r5, 0x1, &(0x7f000006b000)={{0x0, 0x989680}}, 0x0) syz_io_uring_setup(0x7daa, &(0x7f0000000480)={0x0, 0x0, 0x40, 0x0, 0x1d6}, &(0x7f0000000080), &(0x7f0000000040), 0x0) 1m43.733474269s ago: executing program 2 (id=578): r0 = syz_open_dev$media(0x0, 0x66, 0x180502) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000100)={{0x80000000, 0x0, 0x7, [0xffffffff, 0x5]}, {0x80000000, 0x0, 0x0, [0xa, 0xf7]}, 0x4, [0x3, 0xffffb4b5]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x47, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004051045f500001010203020902350001020080300904000005ff00000007058102000200070501020002000705820200020007050202000200070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r1, 0x0, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) rename(&(0x7f00000003c0)='./mnt/file0\x00', &(0x7f0000000280)='./dev\x00') mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 1m43.441879246s ago: executing program 0 (id=579): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './config/usb_gadget/g1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmsg$unix(r1, 0x0, 0x2020) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = fsopen(&(0x7f0000000080)='virtiofs\x00', 0x0) mkdir(&(0x7f0000000100)='./config\x00', 0x850e856b79c500b0) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x82) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000002c80)={0x2, 0x0, [{0xffffffff, 0x1000, &(0x7f0000001a00)=""/4096}, {0x1, 0x98, &(0x7f0000002ac0)=""/152}]}) close(0x3) symlink(&(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f00000001c0)='./file0\x00') r5 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r6 = dup(r5) listen(r6, 0x0) symlinkat(&(0x7f0000000000)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000040)='source', 0x0, r3) 1m42.888052299s ago: executing program 1 (id=580): creat(&(0x7f0000000080)='./file0\x00', 0xc7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x20}}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r5}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000c80)={&(0x7f0000000980)=@id, 0x10, 0x0}, 0x0) 1m40.179351486s ago: executing program 1 (id=581): gettid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x6001, 0x4, 0x3c8, 0x0, 0x1f8, 0x1f8, 0xe8, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x0, {}, {@empty, {[0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000001040)={r1, 0x1, 0x431}) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40000000000035d, 0x20000084) recvmmsg(r2, &(0x7f00000000c0), 0x191d1f8, 0x10042, 0x0) socket(0xa, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000940)=[{&(0x7f0000000180)=""/127, 0x7f}], 0x1, 0x6, 0xb7dc) 1m36.077427732s ago: executing program 2 (id=582): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x1, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/40, 0x28}], 0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001f80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r4, &(0x7f0000003fc0)='ns/pid_for_children\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000063000000bca30000000000002403000020fef6ff720af0fff8ffffff71a4f0ff000000001f030000000000002e100200000000002604f8ffffff000014010000630000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000093bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98dde20358d1148272abd23da767f8c549ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb46ffffffffffffff7f1569b33d21dae356e5c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d22891202d0f5ad94b081fcd507acc9b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb9439901fb39f1d78aa60ead1883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10880fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1b9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa2000000000000000906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0900000000fbff00ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554b15dca5f77a08a83431a87881fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f783e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bcb0addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43737a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab7493c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a44434600e64a6a274000000000088b3e63a000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e727bf10d6335332f45b8e87383930f1a4724434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc946acfb3d1a56e9ec13ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdce1f7ffffffffffffcf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b338a59c0c0247bc9412e19204caaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af11210200000000000000484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea170ab651a039d7102923e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b187ab8e0d179e6ad0dc758975e9cf77f703e742b77521149d8fdeae4b92d5edc232ca356fb86784b865adda7c921dc475276837b2619922de4d96850172602fac7d165e32419a622bdef7c91385c87c30b8a144d9b01784a8060670455f76b207517f66cf32fa0772975e0963b7373dba424beadf60d5bd08ea73e2b5620a5754455006934679b10e596821e2bd380d472c9096ca4c55d6106d0b88e38f6c54abc952c81617a06f93465241070fea3d9fc786e2625572ff2068ff84361b3883cc2c8b9a0a2f70119db13b47c924c73216bb12d1e68a03a08aa682ede113691db07b50f5e6fde6252f1520c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd00}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) open(&(0x7f0000000040)='.\x00', 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0, 0xb8}}, 0x0) 1m35.938956438s ago: executing program 1 (id=583): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/x86/pat_memtype_list\x00', 0x0, 0x0) preadv(r3, &(0x7f0000000900)=[{&(0x7f0000000740)=""/252, 0xfc}], 0x1, 0x3, 0x3) 1m35.929565439s ago: executing program 0 (id=584): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x44800}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f00005f7000/0x4000)=nil, 0x4000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0xbbe9b68db8b621d2) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) 1m32.292374003s ago: executing program 1 (id=585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x14881}, 0x800) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) fsopen(&(0x7f0000000980)='nfs\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu\x0e\x00\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) kexec_load(0x9, 0x6, &(0x7f0000000480)=[{&(0x7f0000000040)="2ccb980c25c56d", 0x7, 0x8, 0x1}, {&(0x7f0000000140)="022f59fa2d23e39ba7be6f89685a7cfa4bc4f7e509c84001ee42f558cef0ee6710b6b99e80d17aa0026207dabce7e19e8ee92d9d31cedd25a4e99092598c85ac04a396219acd23d792bf9083a9c2fc47c44ea2c72dd405eb818ac24fb253778e5302f790fe84aa4e25c2a0518957d948dd4a871f70c2ac1f20926e48f6a8ae98d73f89dedfcc320ff23115bc5fe480987da74c39accde40639afdb701fb0c551d207cd676acc7a25ce095da1195bb5a1c4b54059", 0xb4, 0x6c0918be, 0x4}, {&(0x7f0000000200)="5efd79190dc3e0c2900120ac44ee3e3ff8ba69c34619ae7453dd06a1e080e80bb1cea72b782e049ce704f21466d180956bd01d8c79e3a7c490f09909f275985c42b28485336a749bd53a192b67223e5103d1f11b563702f364ad1f", 0x5b, 0x1000, 0x4}, {&(0x7f0000000280)="f5614fc25d4297a08268e71959155921d497631a41a5c8c4f984c1ee31cdd9c3b3952ac09c7cd61e03a9b59bd1df497f91158ea8f42a", 0x36, 0x31, 0x9}, {&(0x7f0000000380)="eb118762307d706de5f87258fd1412c2cd5a182b7e9aa1515cc5cf6e0a0b7b", 0x1f, 0x17, 0xf20f}, {0x0, 0x0, 0x7, 0x9}], 0x2a0000) 1m32.254068145s ago: executing program 2 (id=586): syz_emit_ethernet(0x72, &(0x7f0000000300)=ANY=[@ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) r0 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(r0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000080000000000000"], 0x48) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) write(r3, &(0x7f0000000000)="5a000300010003", 0x7) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)='foo int x', 0x9) timer_create(0xfffffffc, 0x0, &(0x7f0000000040)=0x0) timer_settime(r5, 0x1, &(0x7f000006b000)={{0x0, 0x989680}}, 0x0) syz_io_uring_setup(0x7daa, &(0x7f0000000480)={0x0, 0x0, 0x40, 0x0, 0x1d6}, &(0x7f0000000080), &(0x7f0000000040), 0x0) 1m31.525533978s ago: executing program 2 (id=587): syz_kvm_add_vcpu$x86(0x0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}, @wrmsr={0x65, 0x20, {0x690, 0x31}}, @enable_nested={0x12c, 0x18}, @wr_crn={0x67, 0x20, {0x0, 0x3}}], 0x70}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x5, &(0x7f0000000540)=ANY=[], 0x0, 0x9, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 46.354162054s ago: executing program 34 (id=584): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2, 0x0, 0xa}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[], 0xf0}, 0x1, 0x0, 0x0, 0x44800}, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, 0x0) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f00005f7000/0x4000)=nil, 0x4000, 0x7, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x100) bind$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0xbbe9b68db8b621d2) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) 0s ago: executing program 35 (id=585): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x14881}, 0x800) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000000), 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) fsopen(&(0x7f0000000980)='nfs\x00', 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) memfd_create(&(0x7f0000000b00)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'\b\x00\x00\x00\x00\x00\x00\x00\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef\x03Ga\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xac\xb7$\xdb\xbc\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x94\xca\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu\x0e\x00\x9e\xa2\xd0\x92\xd1\xbc\xb8\tJ\xa1\aN\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p', 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(0xffffffffffffffff, 0x404c4701, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001480)) kexec_load(0x9, 0x6, &(0x7f0000000480)=[{&(0x7f0000000040)="2ccb980c25c56d", 0x7, 0x8, 0x1}, {&(0x7f0000000140)="022f59fa2d23e39ba7be6f89685a7cfa4bc4f7e509c84001ee42f558cef0ee6710b6b99e80d17aa0026207dabce7e19e8ee92d9d31cedd25a4e99092598c85ac04a396219acd23d792bf9083a9c2fc47c44ea2c72dd405eb818ac24fb253778e5302f790fe84aa4e25c2a0518957d948dd4a871f70c2ac1f20926e48f6a8ae98d73f89dedfcc320ff23115bc5fe480987da74c39accde40639afdb701fb0c551d207cd676acc7a25ce095da1195bb5a1c4b54059", 0xb4, 0x6c0918be, 0x4}, {&(0x7f0000000200)="5efd79190dc3e0c2900120ac44ee3e3ff8ba69c34619ae7453dd06a1e080e80bb1cea72b782e049ce704f21466d180956bd01d8c79e3a7c490f09909f275985c42b28485336a749bd53a192b67223e5103d1f11b563702f364ad1f", 0x5b, 0x1000, 0x4}, {&(0x7f0000000280)="f5614fc25d4297a08268e71959155921d497631a41a5c8c4f984c1ee31cdd9c3b3952ac09c7cd61e03a9b59bd1df497f91158ea8f42a", 0x36, 0x31, 0x9}, {&(0x7f0000000380)="eb118762307d706de5f87258fd1412c2cd5a182b7e9aa1515cc5cf6e0a0b7b", 0x1f, 0x17, 0xf20f}, {0x0, 0x0, 0x7, 0x9}], 0x2a0000) kernel console output (not intermixed with test programs): : hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.181706][ T4917] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.185472][ T4917] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.196844][ T4917] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.202054][ T4917] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.204296][ T4917] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.224565][ T59] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.227847][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.339972][ T4917] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.369025][ T4917] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.371646][ T4917] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.376237][ T4917] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.401341][ T4917] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 94.949083][ T59] Bluetooth: hci1: command tx timeout [ 95.027163][ T59] Bluetooth: hci0: command tx timeout [ 95.266555][ T59] Bluetooth: hci3: command tx timeout [ 95.426555][ T59] Bluetooth: hci2: command tx timeout [ 95.506548][ T59] Bluetooth: hci4: command tx timeout [ 95.937592][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.938587][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.938735][ T5600] bridge_slave_0: entered allmulticast mode [ 95.940332][ T5600] bridge_slave_0: entered promiscuous mode [ 95.986337][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.986885][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.987406][ T5603] bridge_slave_0: entered allmulticast mode [ 95.990437][ T5603] bridge_slave_0: entered promiscuous mode [ 96.017706][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.017812][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.018867][ T5600] bridge_slave_1: entered allmulticast mode [ 96.020330][ T5600] bridge_slave_1: entered promiscuous mode [ 96.057447][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.057573][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.057878][ T5603] bridge_slave_1: entered allmulticast mode [ 96.059361][ T5603] bridge_slave_1: entered promiscuous mode [ 96.163129][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.163336][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.163504][ T5609] bridge_slave_0: entered allmulticast mode [ 96.187262][ T5609] bridge_slave_0: entered promiscuous mode [ 96.188760][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.188948][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.189514][ T5610] bridge_slave_0: entered allmulticast mode [ 96.190948][ T5610] bridge_slave_0: entered promiscuous mode [ 96.242137][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.242391][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.242527][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.242690][ T5609] bridge_slave_1: entered allmulticast mode [ 96.244438][ T5609] bridge_slave_1: entered promiscuous mode [ 96.245436][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.245522][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.245626][ T5610] bridge_slave_1: entered allmulticast mode [ 96.251096][ T5610] bridge_slave_1: entered promiscuous mode [ 96.262305][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.295873][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.339922][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.340191][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.340299][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.340413][ T5614] bridge_slave_0: entered allmulticast mode [ 96.341929][ T5614] bridge_slave_0: entered promiscuous mode [ 96.411914][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.412008][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.412106][ T5614] bridge_slave_1: entered allmulticast mode [ 96.415232][ T5614] bridge_slave_1: entered promiscuous mode [ 96.466210][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.495047][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.550871][ T5600] team0: Port device team_slave_0 added [ 96.554475][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.560342][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.563655][ T5603] team0: Port device team_slave_0 added [ 96.587655][ T5600] team0: Port device team_slave_1 added [ 96.617304][ T5603] team0: Port device team_slave_1 added [ 96.620056][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.692034][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.715808][ T5609] team0: Port device team_slave_0 added [ 96.728257][ T5610] team0: Port device team_slave_0 added [ 96.760489][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.760504][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.760517][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.764718][ T5609] team0: Port device team_slave_1 added [ 96.766368][ T5610] team0: Port device team_slave_1 added [ 96.768245][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.768258][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.768281][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.792680][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.792699][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.792724][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.840194][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.840214][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.840238][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.843919][ T5614] team0: Port device team_slave_0 added [ 96.977712][ T5614] team0: Port device team_slave_1 added [ 96.980236][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.980252][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.980264][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.982194][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.982206][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 96.982219][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.026525][ T59] Bluetooth: hci1: command tx timeout [ 97.055574][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.055657][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.055682][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.065100][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.065119][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.065152][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.109555][ T59] Bluetooth: hci0: command tx timeout [ 97.195303][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.195321][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.195337][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.356725][ T59] Bluetooth: hci3: command tx timeout [ 97.506718][ T59] Bluetooth: hci2: command tx timeout [ 97.586991][ T59] Bluetooth: hci4: command tx timeout [ 97.611255][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.611270][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.611284][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.621447][ T5600] hsr_slave_0: entered promiscuous mode [ 97.623057][ T5600] hsr_slave_1: entered promiscuous mode [ 97.640031][ T5603] hsr_slave_0: entered promiscuous mode [ 97.641274][ T5603] hsr_slave_1: entered promiscuous mode [ 97.642463][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 97.642773][ T5603] Cannot create hsr debugfs directory [ 97.785018][ T5609] hsr_slave_0: entered promiscuous mode [ 97.785825][ T5609] hsr_slave_1: entered promiscuous mode [ 97.787173][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 97.787199][ T5609] Cannot create hsr debugfs directory [ 97.846298][ T5610] hsr_slave_0: entered promiscuous mode [ 97.852630][ T5610] hsr_slave_1: entered promiscuous mode [ 97.853229][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 97.853253][ T5610] Cannot create hsr debugfs directory [ 97.935878][ T5614] hsr_slave_0: entered promiscuous mode [ 97.938478][ T5614] hsr_slave_1: entered promiscuous mode [ 97.939460][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 97.939485][ T5614] Cannot create hsr debugfs directory [ 98.732449][ T5600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 98.790281][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 98.807833][ T5600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 98.843980][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 98.859647][ T5600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 98.901073][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 98.924712][ T5600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 98.965432][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.094052][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.106658][ T59] Bluetooth: hci1: command tx timeout [ 99.132449][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.138328][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.161048][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.178922][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.187652][ T59] Bluetooth: hci0: command tx timeout [ 99.221330][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.245890][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.281042][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.427853][ T59] Bluetooth: hci3: command tx timeout [ 99.434116][ T5603] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 99.481120][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.495510][ T5603] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 99.533409][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.555308][ T5603] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 99.583220][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 99.586662][ T59] Bluetooth: hci2: command tx timeout [ 99.622935][ T5603] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 99.649112][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 99.678037][ T59] Bluetooth: hci4: command tx timeout [ 99.814337][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.850115][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 99.870801][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.910566][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 99.928437][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.970421][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.003660][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.032584][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.218011][ T5614] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.259553][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.264229][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.280594][ T5614] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.310689][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.313944][ T5614] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.363297][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.379798][ T5614] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.413044][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.499135][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.555659][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.584940][ T1386] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.585119][ T1386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.700756][ T1411] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.700916][ T1411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.764882][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.802311][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.846828][ T1411] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.846941][ T1411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.914708][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.914902][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.971692][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.024799][ T1386] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.024938][ T1386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.052435][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.079356][ T1386] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.079456][ T1386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.186631][ T59] Bluetooth: hci1: command tx timeout [ 101.211867][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.277083][ T59] Bluetooth: hci0: command tx timeout [ 101.282072][ T1386] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.284965][ T1386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.319177][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.375337][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.375484][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.507343][ T59] Bluetooth: hci3: command tx timeout [ 101.545185][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.652986][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.655076][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.671651][ T59] Bluetooth: hci2: command tx timeout [ 101.746917][ T59] Bluetooth: hci4: command tx timeout [ 101.757614][ T1411] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.757811][ T1411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.090693][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.684371][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.723501][ T5600] veth0_vlan: entered promiscuous mode [ 102.805654][ T5600] veth1_vlan: entered promiscuous mode [ 103.005927][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.097859][ T5609] veth0_vlan: entered promiscuous mode [ 103.222092][ T5600] veth0_macvtap: entered promiscuous mode [ 103.253765][ T5609] veth1_vlan: entered promiscuous mode [ 103.260674][ T5600] veth1_macvtap: entered promiscuous mode [ 103.342333][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.388476][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.449417][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.559052][ T5609] veth0_macvtap: entered promiscuous mode [ 103.653140][ T5609] veth1_macvtap: entered promiscuous mode [ 103.682141][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.988096][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.988349][ T5610] veth0_vlan: entered promiscuous mode [ 104.031586][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.064642][ T5610] veth1_vlan: entered promiscuous mode [ 104.190694][ T5603] veth0_vlan: entered promiscuous mode [ 104.218697][ T1397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.218728][ T1397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.300577][ T5603] veth1_vlan: entered promiscuous mode [ 104.563981][ T5614] veth0_vlan: entered promiscuous mode [ 104.590700][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.590723][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.795366][ T5614] veth1_vlan: entered promiscuous mode [ 104.804131][ T5610] veth0_macvtap: entered promiscuous mode [ 104.813296][ T1397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.813316][ T1397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.905549][ T5610] veth1_macvtap: entered promiscuous mode [ 105.015870][ T5603] veth0_macvtap: entered promiscuous mode [ 105.029067][ T1411] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.029087][ T1411] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.034043][ T5600] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.072993][ T5603] veth1_macvtap: entered promiscuous mode [ 105.132135][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.214966][ T5614] veth0_macvtap: entered promiscuous mode [ 105.236791][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.318217][ T5614] veth1_macvtap: entered promiscuous mode [ 105.323645][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.384629][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.387200][ T5792] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.619128][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.890916][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.221851][ T1393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.221886][ T1393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.754917][ T1397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.754939][ T1397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.368727][ T101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.368823][ T101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.582906][ T1393] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.582931][ T1393] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.979434][ T1393] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.979458][ T1393] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.276307][ T1397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.276329][ T1397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.452850][ T1386] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.967279][ T1387] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.006878][ T1386] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.007168][ T1386] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.007207][ T1386] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.007242][ T1386] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.007276][ T1386] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.007310][ T1386] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.007343][ T1386] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.007377][ T1386] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.007423][ T1386] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.007455][ T1386] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.007487][ T1386] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.007520][ T1386] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.007553][ T1386] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.007586][ T1386] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.007618][ T1386] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.007651][ T1386] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.007685][ T1386] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.007718][ T1386] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.598093][ T5733] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 112.837319][ T5733] usb 1-1: Using ep0 maxpacket: 16 [ 112.953102][ T5733] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 113.009838][ T5733] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 113.009881][ T5733] usb 1-1: config 0 has no interface number 0 [ 113.009936][ T5733] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 113.009970][ T5733] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 113.010002][ T5733] usb 1-1: config 0 interface 41 has no altsetting 0 [ 113.069378][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.069422][ T5733] usb 1-1: Product: syz [ 113.069441][ T5733] usb 1-1: Manufacturer: syz [ 113.069464][ T5733] usb 1-1: SerialNumber: syz [ 113.143098][ T5733] usb 1-1: config 0 descriptor?? [ 113.171537][ T5824] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 113.171999][ T5824] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 113.468152][ T5824] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 113.507399][ T5824] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 114.756215][ T5733] sr9700 1-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.0-1, CoreChip SR9700 USB Ethernet, e6:39:7b:32:03:29 [ 114.764703][ T5854] process 'syz.4.19' launched '/dev/fd/4' with NULL argv: empty string added [ 115.006472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.026455][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.036449][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.046450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.056443][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.066450][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.076440][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.086452][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 115.195064][ T5733] usb 1-1: USB disconnect, device number 2 [ 116.186466][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 116.206472][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 117.035820][ T5733] sr9700 1-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.0-1, CoreChip SR9700 USB Ethernet [ 117.427856][ T5772] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 117.659742][ T5772] usb 5-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 117.666301][ T5772] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 117.715000][ T5772] usb 5-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 117.740480][ T5772] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.740510][ T5772] usb 5-1: Product: syz [ 117.740564][ T5772] usb 5-1: Manufacturer: syz [ 117.740579][ T5772] usb 5-1: SerialNumber: syz [ 117.902547][ T5874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 118.094522][ T5772] ti_usb_3410_5052 5-1:2.0: TI USB 5052 2 port adapter converter detected [ 118.895878][ T5772] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 119.125464][ T5772] usb 5-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 119.510332][ T5889] Zero length message leads to an empty skb [ 119.510639][ T5889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.29'. [ 122.019579][ T5697] usb 5-1: USB disconnect, device number 2 [ 122.408649][ T5697] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 122.749933][ T5697] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 122.775147][ T5697] ti_usb_3410_5052 5-1:2.0: device disconnected [ 125.845624][ T5937] syzkaller0: entered promiscuous mode [ 125.845654][ T5937] syzkaller0: entered allmulticast mode [ 125.981390][ T5946] tipc: Started in network mode [ 125.981427][ T5946] tipc: Node identity 12a4c4077d43, cluster identity 4711 [ 125.981940][ T5946] tipc: Enabled bearer , priority 0 [ 126.382379][ T5936] tipc: Resetting bearer [ 127.539633][ T5720] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 127.772735][ T5720] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 127.775402][ T5720] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.778712][ T5720] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 127.782548][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.782574][ T5720] usb 1-1: Product: syz [ 127.782588][ T5720] usb 1-1: Manufacturer: syz [ 127.782602][ T5720] usb 1-1: SerialNumber: syz [ 127.993154][ T5720] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 128.021110][ T5720] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 128.040168][ T5720] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 128.068930][ T5936] tipc: Disabling bearer [ 128.623344][ T5697] tipc: Node number set to 1877459975 [ 129.315092][ T5955] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 129.345771][ T5955] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 129.346348][ T5955] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 129.574267][ T5705] usb 1-1: USB disconnect, device number 3 [ 129.805752][ T5705] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 130.926075][ T5705] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 130.954242][ T5705] ti_usb_3410_5052 1-1:2.0: device disconnected [ 134.107554][ T6013] netlink: 'syz.0.63': attribute type 2 has an invalid length. [ 137.376568][ T2085] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 137.561818][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.69'. [ 137.605422][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.605544][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 145.365881][ T6070] netlink: 'syz.3.83': attribute type 2 has an invalid length. [ 154.360707][ T6110] netlink: 52 bytes leftover after parsing attributes in process `syz.0.95'. [ 157.636582][ T5697] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 158.969239][ T6128] netlink: 'syz.3.98': attribute type 2 has an invalid length. [ 159.521079][ T6133] syz.2.101 uses obsolete (PF_INET,SOCK_PACKET) [ 168.481988][ T4917] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 168.529950][ T4917] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 168.533101][ T4917] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 168.557513][ T4917] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 168.562398][ T4917] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 168.830681][ T6180] netlink: 'syz.0.113': attribute type 2 has an invalid length. [ 169.010355][ T6189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.110'. [ 169.017403][ T6189] netlink: 12 bytes leftover after parsing attributes in process `syz.1.110'. [ 169.393136][ T5697] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 169.463196][ T6189] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.465379][ T6189] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.731138][ T5697] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 169.779482][ T6189] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.783681][ T6189] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.246235][ T6192] fido_id[6192]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 170.627752][ T59] Bluetooth: hci5: command tx timeout [ 173.848801][ T59] Bluetooth: hci5: command tx timeout [ 174.597906][ T1397] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.598932][ T33] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.598980][ T33] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.599015][ T33] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.995341][ T6227] netlink: 'syz.1.123': attribute type 2 has an invalid length. [ 175.907044][ T4917] Bluetooth: hci5: command tx timeout [ 177.987614][ T4917] Bluetooth: hci5: command tx timeout [ 178.487718][ T37] audit: type=1326 audit(1789116620.315:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6236 comm="syz.3.125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be374e159 code=0x7ffc0000 [ 178.487772][ T37] audit: type=1326 audit(1789116620.325:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6236 comm="syz.3.125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8be370aebb code=0x7ffc0000 [ 178.487819][ T37] audit: type=1326 audit(1789116620.345:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6236 comm="syz.3.125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f8be370a5ac code=0x7ffc0000 [ 178.487858][ T37] audit: type=1326 audit(1789116620.395:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6236 comm="syz.3.125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be374e159 code=0x7ffc0000 [ 178.487898][ T37] audit: type=1326 audit(1789116620.405:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6236 comm="syz.3.125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be374e159 code=0x7ffc0000 [ 178.487943][ T37] audit: type=1326 audit(1789116620.405:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6236 comm="syz.3.125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be374e159 code=0x7ffc0000 [ 178.538844][ T37] audit: type=1326 audit(1789116620.455:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6236 comm="syz.3.125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f8be370a60e code=0x7ffc0000 [ 178.538955][ T37] audit: type=1326 audit(1789116620.455:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6236 comm="syz.3.125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8be374ddeb code=0x7ffc0000 [ 178.538995][ T37] audit: type=1326 audit(1789116620.455:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6236 comm="syz.3.125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8be370e98e code=0x7ffc0000 [ 178.541182][ T37] audit: type=1326 audit(1789116620.455:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6236 comm="syz.3.125" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8be374e159 code=0x7ffc0000 [ 180.021106][ T1397] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.342151][ T1397] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.662155][ T1397] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.319218][ T1397] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.502963][ T6319] netlink: 'syz.2.149': attribute type 2 has an invalid length. [ 188.751043][ T6326] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 189.069756][ T6169] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.069903][ T6169] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.070116][ T6169] bridge_slave_0: entered allmulticast mode [ 189.072642][ T6169] bridge_slave_0: entered promiscuous mode [ 189.114870][ T6169] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.114968][ T6169] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.115165][ T6169] bridge_slave_1: entered allmulticast mode [ 189.150842][ T6169] bridge_slave_1: entered promiscuous mode [ 189.210014][ T6334] netlink: 604 bytes leftover after parsing attributes in process `syz.3.153'. [ 191.918906][ T1397] bridge_slave_1: left allmulticast mode [ 191.957475][ T1397] bridge_slave_1: left promiscuous mode [ 192.081769][ T1397] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.418124][ T1397] bridge_slave_0: left allmulticast mode [ 192.418165][ T1397] bridge_slave_0: left promiscuous mode [ 192.418537][ T1397] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.177213][ T1397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 195.237200][ T1397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 195.282750][ T1397] bond0 (unregistering): Released all slaves [ 195.337226][ T6169] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.512253][ T6169] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.415830][ T5705] kernel read not supported for file inotify (pid: 5705 comm: kworker/1:4) [ 199.435606][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.435682][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.570707][ T6433] netlink: 16 bytes leftover after parsing attributes in process `syz.1.185'. [ 200.571323][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.185'. [ 200.571360][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz.1.185'. [ 201.163128][ T6169] team0: Port device team_slave_0 added [ 201.189734][ T6169] team0: Port device team_slave_1 added [ 201.854625][ T37] kauditd_printk_skb: 15 callbacks suppressed [ 201.854661][ T37] audit: type=1326 audit(1789116643.765:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6440 comm="syz.1.188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b884e159 code=0x7ffc0000 [ 201.854710][ T37] audit: type=1326 audit(1789116643.765:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6440 comm="syz.1.188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b884e159 code=0x7ffc0000 [ 201.857509][ T37] audit: type=1326 audit(1789116643.775:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6440 comm="syz.1.188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f00b884e159 code=0x7ffc0000 [ 201.857619][ T37] audit: type=1326 audit(1789116643.775:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6440 comm="syz.1.188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b884e159 code=0x7ffc0000 [ 201.857657][ T37] audit: type=1326 audit(1789116643.775:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6440 comm="syz.1.188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f00b884e159 code=0x7ffc0000 [ 201.875570][ T37] audit: type=1326 audit(1789116643.775:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6440 comm="syz.1.188" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f00b884e159 code=0x7ffc0000 [ 202.053587][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.053606][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.053638][ T6169] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.089896][ T6169] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.089916][ T6169] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.089941][ T6169] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.597453][ T6169] hsr_slave_0: entered promiscuous mode [ 202.601508][ T6169] hsr_slave_1: entered promiscuous mode [ 202.602442][ T6169] debugfs: 'hsr0' already exists in 'hsr' [ 202.602467][ T6169] Cannot create hsr debugfs directory [ 207.154145][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 207.597899][ T1397] hsr_slave_0: left promiscuous mode [ 207.636629][ T1397] hsr_slave_1: left promiscuous mode [ 207.639698][ T1397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.639908][ T1397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.725488][ T1397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.725517][ T1397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.335398][ T1397] veth1_macvtap: left promiscuous mode [ 208.335676][ T1397] veth0_macvtap: left promiscuous mode [ 208.335893][ T1397] veth1_vlan: left promiscuous mode [ 208.336205][ T1397] veth0_vlan: left promiscuous mode [ 210.696723][ T5697] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 210.930323][ T5697] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 210.931253][ T5697] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 210.933546][ T5697] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 210.938280][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.938307][ T5697] usb 2-1: Product: syz [ 210.938321][ T5697] usb 2-1: Manufacturer: syz [ 210.938335][ T5697] usb 2-1: SerialNumber: syz [ 210.995941][ T1397] team0 (unregistering): Port device team_slave_1 removed [ 211.057113][ T1397] team0 (unregistering): Port device team_slave_0 removed [ 211.301222][ T5697] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 211.345307][ T5697] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 211.442708][ T5697] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 212.721538][ T6516] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 212.721589][ T6516] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 212.721948][ T6516] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 212.845776][ T5697] usb 2-1: USB disconnect, device number 2 [ 212.964719][ T5697] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 213.202979][ T5697] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 213.249207][ T5697] ti_usb_3410_5052 2-1:2.0: device disconnected [ 216.330895][ T6169] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 217.437709][ T6556] Bluetooth: hci3: command 0x0406 tx timeout [ 217.537668][ T6556] Bluetooth: hci2: command 0x0406 tx timeout [ 217.537711][ T6556] Bluetooth: hci0: command 0x0406 tx timeout [ 217.537737][ T6556] Bluetooth: hci4: command 0x0406 tx timeout [ 217.738582][ T6169] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 217.803055][ T6169] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 218.631683][ T6169] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 218.633681][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 218.653893][ T6169] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 218.882815][ T6569] netlink: 64 bytes leftover after parsing attributes in process `syz.1.215'. [ 218.926876][ T6169] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 218.966084][ T6169] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 219.138823][ T6169] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.070603][ T6169] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.169475][ T6169] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.238128][ T1397] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.238269][ T1397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.676316][ T1387] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.681197][ T1387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.866664][ T5263] 8021q: adding VLAN 0 to HW filter on device eth3 [ 226.815778][ T4917] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 226.857210][ T4917] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 226.876720][ T4917] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 226.911098][ T4917] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 226.914405][ T4917] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 229.762453][ T5605] Bluetooth: hci1: command tx timeout [ 229.854920][ T5263] 8021q: adding VLAN 0 to HW filter on device eth4 [ 230.135653][ T6692] capability: warning: `syz.2.235' uses deprecated v2 capabilities in a way that may be insecure [ 231.827012][ T5605] Bluetooth: hci1: command tx timeout [ 233.915963][ T5605] Bluetooth: hci1: command tx timeout [ 236.427257][ T5605] Bluetooth: hci1: command tx timeout [ 239.070842][ T6762] tipc: Can't bind to reserved service type 1 [ 239.500369][ T6771] Bluetooth: MGMT ver 1.23 [ 240.226708][ T996] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 240.227016][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 240.366586][ T996] usb 3-1: device descriptor read/64, error -32 [ 240.696658][ T996] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 240.884294][ T996] usb 3-1: unable to get BOS descriptor or descriptor too short [ 240.884357][ T996] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 240.909374][ T996] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 240.909405][ T996] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 241.006086][ T996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.006119][ T996] usb 3-1: Product: syz [ 241.006134][ T996] usb 3-1: Manufacturer: syz [ 241.006149][ T996] usb 3-1: SerialNumber: syz [ 241.314191][ T996] usb 3-1: selecting invalid altsetting 1 [ 242.322978][ T996] usb 3-1: unit 6 not found! [ 242.712685][ T996] usb 3-1: 2:0: failed to get current value for ch 0 (-71) [ 245.196276][ T996] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 245.318244][ T996] usb 3-1: USB disconnect, device number 3 [ 246.407371][ T6145] udevd[6145]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 248.271046][ T1502] bridge_slave_1: left allmulticast mode [ 248.271089][ T1502] bridge_slave_1: left promiscuous mode [ 248.271473][ T1502] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.982169][ T1502] bridge_slave_0: left allmulticast mode [ 249.982206][ T1502] bridge_slave_0: left promiscuous mode [ 249.982445][ T1502] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.588884][ T1502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.680484][ T1502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.739372][ T1502] bond0 (unregistering): Released all slaves [ 260.343007][ T1502] hsr_slave_0: left promiscuous mode [ 260.385178][ T1502] hsr_slave_1: left promiscuous mode [ 260.390566][ T1502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.433619][ T1502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.485870][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.485950][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.205998][ T4917] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 261.889440][ T4917] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 261.946921][ T4917] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 261.948087][ T4917] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 262.013453][ T4917] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 264.730398][ T5605] Bluetooth: hci5: command tx timeout [ 265.456969][ T5705] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 265.727437][ T5705] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 265.732125][ T5705] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 265.732246][ T5705] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.732268][ T5705] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 265.732311][ T5705] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.048017][ T5705] usb 3-1: config 0 descriptor?? [ 266.141732][ T5705] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 266.171065][ T1502] team0 (unregistering): Port device team_slave_1 removed [ 266.249778][ T1502] team0 (unregistering): Port device team_slave_0 removed [ 266.633053][ T6655] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.633216][ T6655] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.633548][ T6655] bridge_slave_0: entered allmulticast mode [ 266.639093][ T6655] bridge_slave_0: entered promiscuous mode [ 266.787086][ T4917] Bluetooth: hci5: command tx timeout [ 267.021149][ T6655] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.021373][ T6655] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.021600][ T6655] bridge_slave_1: entered allmulticast mode [ 267.024763][ T6655] bridge_slave_1: entered promiscuous mode [ 267.195876][ T6655] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.211108][ T6655] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.494076][ T6655] team0: Port device team_slave_0 added [ 267.521709][ T6655] team0: Port device team_slave_1 added [ 267.722220][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.722241][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 267.722267][ T6655] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.027428][ T6655] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.027447][ T6655] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 268.027473][ T6655] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.790883][ T6655] hsr_slave_0: entered promiscuous mode [ 268.792342][ T6655] hsr_slave_1: entered promiscuous mode [ 268.793363][ T6655] debugfs: 'hsr0' already exists in 'hsr' [ 268.800733][ T6655] Cannot create hsr debugfs directory [ 268.877119][ T4917] Bluetooth: hci5: command tx timeout [ 269.222672][ T5705] usb 3-1: USB disconnect, device number 4 [ 270.947198][ T4917] Bluetooth: hci5: command tx timeout [ 271.809168][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 271.916086][ T1502] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.977414][ T9] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 271.979012][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 271.979058][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.979101][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.979123][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 271.979165][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.059762][ T9] usb 2-1: config 0 descriptor?? [ 273.084668][ T9] holtek_kbd 0003:04D9:A055.0002: unbalanced collection at end of report description [ 273.085828][ T9] holtek_kbd 0003:04D9:A055.0002: probe with driver holtek_kbd failed with error -22 [ 274.167433][ T996] usb 2-1: USB disconnect, device number 3 [ 274.270264][ T1502] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 274.996484][ T7054] FAULT_INJECTION: forcing a failure. [ 274.996484][ T7054] name failslab, interval 1, probability 0, space 0, times 1 [ 274.996555][ T7054] CPU: 1 UID: 0 PID: 7054 Comm: syz.2.315 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 274.996577][ T7054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 274.996594][ T7054] Call Trace: [ 274.996614][ T7054] [ 274.996627][ T7054] dump_stack_lvl+0xe8/0x150 [ 274.996743][ T7054] should_fail_ex+0x46b/0x600 [ 274.996771][ T7054] should_failslab+0xa8/0x100 [ 274.996802][ T7054] ? taskstats_exit+0x19e/0xe10 [ 274.996831][ T7054] kmem_cache_alloc_noprof+0x9e/0x690 [ 274.996854][ T7054] ? taskstats_exit+0x19e/0xe10 [ 274.996877][ T7054] taskstats_exit+0x19e/0xe10 [ 274.996896][ T7054] ? acct_update_integrals+0x342/0x410 [ 274.996919][ T7054] ? acct_update_integrals+0x38a/0x410 [ 274.996941][ T7054] ? __pfx_taskstats_exit+0x10/0x10 [ 274.996967][ T7054] ? seccomp_filter_release+0x18a/0x2d0 [ 274.996993][ T7054] do_exit+0x6ad/0x2360 [ 274.997013][ T7054] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 274.997043][ T7054] ? __pfx_do_exit+0x10/0x10 [ 274.997059][ T7054] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 274.997086][ T7054] ? rt_spin_unlock+0x159/0x200 [ 274.997108][ T7054] do_group_exit+0x22d/0x2f0 [ 274.997125][ T7054] ? rt_spin_unlock+0x165/0x200 [ 274.997145][ T7054] get_signal+0x121b/0x12c0 [ 274.997195][ T7054] arch_do_signal_or_restart+0xbb/0x860 [ 274.997223][ T7054] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 274.997256][ T7054] ? ksys_write+0x248/0x270 [ 274.997286][ T7054] exit_to_user_mode_loop+0x10e/0x770 [ 274.997311][ T7054] ? rcu_is_watching+0x16/0xb0 [ 274.997341][ T7054] do_syscall_64+0x328/0x520 [ 274.997368][ T7054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.997388][ T7054] ? clear_bhb_loop+0x70/0xc0 [ 274.997411][ T7054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.997430][ T7054] RIP: 0033:0x7f7fa725e159 [ 274.997460][ T7054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 274.997480][ T7054] RSP: 002b:00007f7fa54b60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 274.997556][ T7054] RAX: fffffffffffffe00 RBX: 00007f7fa74e5fa8 RCX: 00007f7fa725e159 [ 274.997569][ T7054] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7fa74e5fa8 [ 274.997581][ T7054] RBP: 00007f7fa74e5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 274.997598][ T7054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 274.997608][ T7054] R13: 00007f7fa74e6038 R14: 00007ffe16402430 R15: 00007ffe16402518 [ 274.997637][ T7054] [ 276.670454][ T1502] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.653581][ T1502] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.113578][ T7112] netlink: 'syz.2.326': attribute type 2 has an invalid length. [ 284.023917][ T5263] 8021q: adding VLAN 0 to HW filter on device eth5 [ 284.694577][ T6933] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.694702][ T6933] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.694919][ T6933] bridge_slave_0: entered allmulticast mode [ 284.728831][ T6933] bridge_slave_0: entered promiscuous mode [ 284.845837][ T6933] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.847698][ T6933] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.847916][ T6933] bridge_slave_1: entered allmulticast mode [ 284.928480][ T6933] bridge_slave_1: entered promiscuous mode [ 287.405194][ T5605] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 287.457248][ T5605] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 287.459268][ T5605] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 287.529897][ T5605] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 287.543302][ T5605] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.605620][ T6933] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.647978][ T6933] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.195379][ T6933] team0: Port device team_slave_0 added [ 289.208130][ T6933] team0: Port device team_slave_1 added [ 289.666738][ T4917] Bluetooth: hci4: command tx timeout [ 289.707991][ T1502] bridge_slave_1: left allmulticast mode [ 289.708029][ T1502] bridge_slave_1: left promiscuous mode [ 289.708320][ T1502] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.818644][ T7170] netlink: 'syz.2.338': attribute type 2 has an invalid length. [ 290.113412][ T1502] bridge_slave_0: left allmulticast mode [ 290.113452][ T1502] bridge_slave_0: left promiscuous mode [ 290.193957][ T1502] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.864501][ T4917] Bluetooth: hci4: command tx timeout [ 293.524814][ T1502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.598961][ T1502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.639613][ T1502] bond0 (unregistering): Released all slaves [ 293.929199][ T4917] Bluetooth: hci4: command tx timeout [ 295.291435][ T6933] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 295.291449][ T6933] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.291463][ T6933] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.801371][ T6933] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.801392][ T6933] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.801418][ T6933] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 295.989084][ T4917] Bluetooth: hci4: command tx timeout [ 297.736570][ T996] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 297.866075][ T6933] hsr_slave_0: entered promiscuous mode [ 297.869573][ T6933] hsr_slave_1: entered promiscuous mode [ 297.870434][ T6933] debugfs: 'hsr0' already exists in 'hsr' [ 297.870458][ T6933] Cannot create hsr debugfs directory [ 297.897960][ T996] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 297.899916][ T996] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 297.920333][ T996] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 297.945046][ T996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.945067][ T996] usb 3-1: Product: syz [ 297.945075][ T996] usb 3-1: Manufacturer: syz [ 297.945083][ T996] usb 3-1: SerialNumber: syz [ 298.001246][ T996] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 298.159100][ T996] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 298.190094][ T996] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 298.698979][ T1502] hsr_slave_0: left promiscuous mode [ 298.738426][ T1502] hsr_slave_1: left promiscuous mode [ 298.740790][ T1502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.740828][ T1502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.801016][ T1502] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.801110][ T1502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.056655][ T996] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 299.243611][ T1502] veth1_macvtap: left promiscuous mode [ 299.243679][ T1502] veth0_macvtap: left promiscuous mode [ 299.243843][ T1502] veth1_vlan: left promiscuous mode [ 299.243971][ T1502] veth0_vlan: left promiscuous mode [ 300.030823][ T996] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 300.034320][ T996] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 300.034371][ T996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 300.034398][ T996] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 300.034420][ T996] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 300.034463][ T996] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.092249][ T5705] usb 3-1: USB disconnect, device number 5 [ 300.255189][ T996] usb 2-1: config 0 descriptor?? [ 300.296223][ T5705] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 300.372132][ T5705] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 300.376337][ T5705] ti_usb_3410_5052 3-1:2.0: device disconnected [ 300.965419][ T996] holtek_kbd 0003:04D9:A055.0003: unbalanced collection at end of report description [ 300.966256][ T996] holtek_kbd 0003:04D9:A055.0003: probe with driver holtek_kbd failed with error -22 [ 302.130472][ T9] usb 2-1: USB disconnect, device number 4 [ 302.427249][ T1502] team0 (unregistering): Port device team_slave_1 removed [ 302.480924][ T1502] team0 (unregistering): Port device team_slave_0 removed [ 302.559979][ T7269] syz.0.359(7269): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 304.423688][ T5263] 8021q: adding VLAN 0 to HW filter on device eth6 [ 304.435694][ T7271] ip6tnl1: entered allmulticast mode [ 306.516772][ T7280] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 310.806957][ T7304] autofs: Bad value for 'fd' [ 312.066934][ T1502] bridge_slave_1: left allmulticast mode [ 312.066972][ T1502] bridge_slave_1: left promiscuous mode [ 312.067266][ T1502] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.156142][ T1502] bridge_slave_0: left allmulticast mode [ 314.156177][ T1502] bridge_slave_0: left promiscuous mode [ 314.168883][ T1502] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.086106][ T7346] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 316.953170][ T5705] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 317.156844][ T5705] usb 1-1: Using ep0 maxpacket: 32 [ 317.160155][ T5705] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 317.290471][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.290587][ T5705] usb 1-1: Product: syz [ 317.290604][ T5705] usb 1-1: Manufacturer: syz [ 317.290649][ T5705] usb 1-1: SerialNumber: syz [ 317.520651][ T5705] usb 1-1: config 0 descriptor?? [ 317.615518][ T1502] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.662521][ T7352] autofs: Bad value for 'fd' [ 317.858714][ T1502] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.867666][ T5697] usb 1-1: USB disconnect, device number 5 [ 319.238728][ T1502] bond0 (unregistering): Released all slaves [ 319.275322][ T5263] 8021q: adding VLAN 0 to HW filter on device eth7 [ 319.275903][ T7141] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.276012][ T7141] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.276177][ T7141] bridge_slave_0: entered allmulticast mode [ 319.290188][ T7141] bridge_slave_0: entered promiscuous mode [ 319.308506][ T7141] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.308632][ T7141] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.308841][ T7141] bridge_slave_1: entered allmulticast mode [ 319.324203][ T7141] bridge_slave_1: entered promiscuous mode [ 319.714550][ T6933] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 319.933425][ T6933] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 320.870870][ T6933] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 320.910347][ T7369] syz.2.381 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 320.961075][ T6933] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.035193][ T7141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.052777][ T7141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.309057][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 321.410700][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.412130][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 321.415291][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 321.462676][ T7384] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.481248][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 321.714466][ T7141] team0: Port device team_slave_0 added [ 321.876717][ T1502] hsr_slave_0: left promiscuous mode [ 321.988375][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 322.261105][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.264019][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.281823][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 322.346010][ T9] usb 3-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 322.433369][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 322.532235][ T1502] hsr_slave_1: left promiscuous mode [ 322.664377][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.664448][ T9] usb 3-1: Product: syz [ 322.664503][ T9] usb 3-1: Manufacturer: 㥸駤뙯흓⮺␺ᓐ牷붛陇쓓䫚硤ɠគ荁뺒㣥⢡僉掕ᕗ奪疽㒃澭囵镬ꂥ꠿鑖罹歐ظ掭카⋽饩뮸੒㸥瀫巠먨∜㓬♙榫羯뭮钠䓻濝鳠펖㧻鐴蹈ᰠ㐭ﭪ㏱⺴웤ﴳ￣͂኎獱㚀쐋ည⧥␰盱癃堻冻ᆀ哒社享융쁱걐꺍ۚ [ 322.664577][ T9] usb 3-1: SerialNumber: syz [ 323.028536][ T1502] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.100656][ T1502] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.240488][ T9] usb 3-1: Unsupported UAC3 BADD profile [ 323.306600][ T5705] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 323.444606][ T9] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 323.460699][ T5705] usb 1-1: Using ep0 maxpacket: 32 [ 323.465012][ T5705] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 323.466633][ T5705] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 323.466654][ T5705] usb 1-1: config 0 has no interface number 0 [ 323.471790][ T5705] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.471816][ T5705] usb 1-1: Product: syz [ 323.471831][ T5705] usb 1-1: Manufacturer: syz [ 323.471845][ T5705] usb 1-1: SerialNumber: syz [ 323.536775][ T5705] usb 1-1: config 0 descriptor?? [ 323.540030][ T9] usb 3-1: USB disconnect, device number 6 [ 323.576954][ T5705] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 323.577102][ T5705] usb 1-1: selecting invalid altsetting 1 [ 323.577120][ T5705] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 323.666601][ T4917] Bluetooth: hci1: command tx timeout [ 323.705352][ T7300] udevd[7300]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 323.892241][ T5705] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 323.892918][ T5705] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 323.893051][ T5705] usb 1-1: media controller created [ 324.107138][ T5705] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 324.400261][ T5705] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 324.400417][ T5705] zl10353_read_register: readreg error (reg=127, ret==-71) [ 324.441618][ T5705] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 324.479297][ T1502] team0 (unregistering): Port device team_slave_1 removed [ 324.688664][ T1502] team0 (unregistering): Port device team_slave_0 removed [ 324.966135][ T5705] usb 1-1: USB disconnect, device number 6 [ 325.324019][ T7141] team0: Port device team_slave_1 added [ 325.890651][ T4917] Bluetooth: hci1: command tx timeout [ 326.856544][ T9] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 326.994387][ T7141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.994474][ T7141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 326.994498][ T7141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.010372][ T7141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.010389][ T7141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 327.010414][ T7141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.041160][ T9] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 327.087998][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 327.088049][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 327.088075][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.088095][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 327.088138][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.195055][ T9] usb 2-1: config 0 descriptor?? [ 327.438701][ T7423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 327.615529][ T7141] hsr_slave_0: entered promiscuous mode [ 327.624170][ T7141] hsr_slave_1: entered promiscuous mode [ 327.628735][ T7141] debugfs: 'hsr0' already exists in 'hsr' [ 327.628790][ T7141] Cannot create hsr debugfs directory [ 327.895407][ T9] holtek_kbd 0003:04D9:A055.0004: unbalanced collection at end of report description [ 327.896039][ T9] holtek_kbd 0003:04D9:A055.0004: probe with driver holtek_kbd failed with error -22 [ 327.907183][ T4917] Bluetooth: hci1: command tx timeout [ 329.217579][ T9] usb 2-1: USB disconnect, device number 5 [ 329.506496][ T7443] netlink: 60 bytes leftover after parsing attributes in process `syz.2.397'. [ 330.029687][ T4917] Bluetooth: hci1: command tx timeout [ 330.690281][ T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 330.846652][ T5705] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 330.876492][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 330.882511][ T9] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 330.900069][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 330.900100][ T9] usb 2-1: config 0 has no interface number 0 [ 330.936020][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.936050][ T9] usb 2-1: Product: syz [ 330.936065][ T9] usb 2-1: Manufacturer: syz [ 330.936079][ T9] usb 2-1: SerialNumber: syz [ 330.965728][ T9] usb 2-1: config 0 descriptor?? [ 330.980551][ T9] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 330.980582][ T9] usb 2-1: selecting invalid altsetting 1 [ 330.980597][ T9] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 331.029243][ T5705] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 331.029699][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 331.030041][ T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 331.030093][ T9] usb 2-1: media controller created [ 331.031007][ T5705] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 331.032248][ T5705] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 331.034299][ T5705] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.034322][ T5705] usb 3-1: Product: syz [ 331.034333][ T5705] usb 3-1: Manufacturer: syz [ 331.034345][ T5705] usb 3-1: SerialNumber: syz [ 331.108918][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 331.202747][ T5705] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 331.265641][ T5705] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 331.319689][ T5705] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 331.340148][ T9] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 331.340223][ T9] zl10353_read_register: readreg error (reg=127, ret==-71) [ 331.340680][ T9] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 331.603361][ T9] usb 2-1: USB disconnect, device number 6 [ 331.773475][ T5263] 8021q: adding VLAN 0 to HW filter on device eth8 [ 333.620247][ T9] usb 3-1: USB disconnect, device number 7 [ 333.843160][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 333.860304][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 333.861616][ T9] ti_usb_3410_5052 3-1:2.0: device disconnected [ 335.572236][ T7502] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 336.099666][ T5869] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 336.308305][ T5869] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 336.387481][ T5869] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 336.387575][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 336.387636][ T5869] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 336.387659][ T5869] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 336.387767][ T5869] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.601288][ T5869] usb 2-1: config 0 descriptor?? [ 338.209506][ T5869] holtek_kbd 0003:04D9:A055.0005: unbalanced collection at end of report description [ 338.210350][ T5869] holtek_kbd 0003:04D9:A055.0005: probe with driver holtek_kbd failed with error -22 [ 339.676912][ T5869] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 339.827525][ T5869] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 339.829390][ T5869] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 339.830455][ T5869] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 339.868621][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.868640][ T5869] usb 1-1: Product: syz [ 339.868648][ T5869] usb 1-1: Manufacturer: syz [ 339.868655][ T5869] usb 1-1: SerialNumber: syz [ 339.952987][ T5869] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 339.983775][ T5869] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 340.054142][ T5869] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 340.437314][ T9] usb 2-1: USB disconnect, device number 7 [ 342.059251][ T7141] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 342.115050][ T7561] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 342.138622][ T7141] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 342.174592][ T7141] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 342.341804][ T7141] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 343.119998][ T996] usb 1-1: USB disconnect, device number 7 [ 343.256315][ T7141] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 343.332479][ T996] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 343.406607][ T5858] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 343.452186][ T996] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 343.475113][ T996] ti_usb_3410_5052 1-1:2.0: device disconnected [ 343.573380][ T5858] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 343.587304][ T5858] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 343.587354][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.587382][ T5858] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.587404][ T5858] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 343.587473][ T5858] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.658304][ T7141] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 343.759203][ T5858] usb 2-1: config 0 descriptor?? [ 344.444155][ T7582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 345.306765][ T5858] holtek_kbd 0003:04D9:A055.0006: unbalanced collection at end of report description [ 345.307537][ T5858] holtek_kbd 0003:04D9:A055.0006: probe with driver holtek_kbd failed with error -22 [ 345.444699][ T7582] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.445495][ T7582] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.795297][ T7582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.834842][ T7582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.014348][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 347.061737][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 347.079413][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 347.096263][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 347.130120][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.423763][ T7596] input: syz1 as /devices/virtual/input/input6 [ 347.718528][ T5720] usb 2-1: USB disconnect, device number 8 [ 347.776646][ T7141] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 348.039709][ T7141] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 349.186887][ T4917] Bluetooth: hci5: command tx timeout [ 349.541435][ T7607] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 352.187597][ T4917] Bluetooth: hci5: command tx timeout [ 352.602161][ T7379] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.602287][ T7379] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.602486][ T7379] bridge_slave_0: entered allmulticast mode [ 352.694401][ T7379] bridge_slave_0: entered promiscuous mode [ 352.794181][ T7379] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.794326][ T7379] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.794542][ T7379] bridge_slave_1: entered allmulticast mode [ 352.829668][ T7379] bridge_slave_1: entered promiscuous mode [ 353.432535][ T1397] bridge_slave_1: left allmulticast mode [ 353.432572][ T1397] bridge_slave_1: left promiscuous mode [ 353.432846][ T1397] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.633028][ T1397] bridge_slave_0: left allmulticast mode [ 353.633067][ T1397] bridge_slave_0: left promiscuous mode [ 353.633454][ T1397] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.737480][ T7632] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 354.136603][ T5869] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 354.226543][ T4917] Bluetooth: hci5: command tx timeout [ 354.372291][ T5869] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 354.393603][ T5869] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 354.490562][ T1397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.554174][ T5869] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 354.606490][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.606547][ T5869] usb 3-1: Product: syz [ 354.606562][ T5869] usb 3-1: Manufacturer: syz [ 354.606596][ T5869] usb 3-1: SerialNumber: syz [ 355.189142][ T1397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.697570][ T5869] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 355.731016][ T1397] bond0 (unregistering): Released all slaves [ 355.755549][ T5869] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 355.793682][ T7379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.848069][ T5869] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 356.046639][ T5697] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 356.256657][ T5697] usb 2-1: Using ep0 maxpacket: 16 [ 356.257545][ T5697] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 356.259034][ T5697] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.259057][ T5697] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 356.262698][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.262723][ T5697] usb 2-1: Product: syz [ 356.262810][ T5697] usb 2-1: Manufacturer: syz [ 356.262825][ T5697] usb 2-1: SerialNumber: syz [ 356.322971][ T4917] Bluetooth: hci5: command tx timeout [ 356.517155][ T5697] usb 2-1: 0:2 : does not exist [ 356.719847][ T5697] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 356.742974][ T7379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.907109][ T5697] usb 2-1: USB disconnect, device number 9 [ 357.047025][ T1397] hsr_slave_0: left promiscuous mode [ 357.086691][ T1397] hsr_slave_1: left promiscuous mode [ 357.089795][ T1397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.109939][ T1397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.373034][ T5858] usb 3-1: USB disconnect, device number 8 [ 357.422051][ T7663] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 357.597869][ T5858] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 358.179837][ T5858] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 358.186045][ T5858] ti_usb_3410_5052 3-1:2.0: device disconnected [ 358.536718][ T5858] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 358.698264][ T5858] usb 3-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 358.700307][ T5858] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 358.700343][ T5858] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 358.700371][ T5858] usb 3-1: config 0 interface 0 has no altsetting 0 [ 358.700406][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.773579][ T5858] usb 3-1: config 0 descriptor?? [ 359.141495][ T1397] team0 (unregistering): Port device team_slave_1 removed [ 359.169705][ T5858] usbhid 3-1:0.0: can't add hid device: -71 [ 359.169829][ T5858] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 359.195771][ T5858] usb 3-1: USB disconnect, device number 9 [ 359.230600][ T1397] team0 (unregistering): Port device team_slave_0 removed [ 359.481244][ T7379] team0: Port device team_slave_0 added [ 359.545975][ T7379] team0: Port device team_slave_1 added [ 359.864370][ T7379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.864389][ T7379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.864410][ T7379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.994005][ T7379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.994024][ T7379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 359.994050][ T7379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.464988][ T7379] hsr_slave_0: entered promiscuous mode [ 360.467407][ T7379] hsr_slave_1: entered promiscuous mode [ 360.472186][ T7379] debugfs: 'hsr0' already exists in 'hsr' [ 360.472220][ T7379] Cannot create hsr debugfs directory [ 360.858979][ T1306] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.528071][ T7705] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 361.643590][ T5697] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 361.797528][ T5697] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 361.799076][ T5697] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 361.800510][ T5697] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 361.805220][ T5697] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.805251][ T5697] usb 2-1: Product: syz [ 361.805266][ T5697] usb 2-1: Manufacturer: syz [ 361.805281][ T5697] usb 2-1: SerialNumber: syz [ 361.896255][ T37] audit: type=1326 audit(1789116803.805:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7715 comm="syz.0.457" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a29e159 code=0x7ffc0000 [ 361.896456][ T37] audit: type=1326 audit(1789116803.805:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7715 comm="syz.0.457" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a29e159 code=0x7ffc0000 [ 361.901996][ T37] audit: type=1326 audit(1789116803.815:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7715 comm="syz.0.457" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=179 compat=0 ip=0x7f404a29e159 code=0x7ffc0000 [ 361.902047][ T37] audit: type=1326 audit(1789116803.815:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7715 comm="syz.0.457" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a29e159 code=0x7ffc0000 [ 361.902137][ T37] audit: type=1326 audit(1789116803.815:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7715 comm="syz.0.457" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f404a29e159 code=0x7ffc0000 [ 361.955712][ T5697] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 361.996594][ T5869] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 362.112941][ T5697] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 362.167771][ T5869] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 362.174944][ T5869] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 362.174995][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.175019][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.175040][ T5869] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 362.175082][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.231212][ T5697] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 362.354567][ T5869] usb 3-1: config 0 descriptor?? [ 362.874824][ T5869] holtek_kbd 0003:04D9:A055.0007: unbalanced collection at end of report description [ 362.875631][ T5869] holtek_kbd 0003:04D9:A055.0007: probe with driver holtek_kbd failed with error -22 [ 363.997133][ T7698] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 363.997241][ T7698] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 363.997662][ T7698] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 364.115859][ T5869] usb 2-1: USB disconnect, device number 10 [ 364.152597][ T5869] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 364.196794][ T5869] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 364.197958][ T5869] ti_usb_3410_5052 2-1:2.0: device disconnected [ 364.416863][ T5697] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 364.580975][ T5697] usb 1-1: not running at top speed; connect to a high speed hub [ 364.581021][ T5697] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 364.589325][ T5697] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 364.589400][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.648123][ T5697] uvcvideo 1-1:1.0: Found UVC 1.00 device (046d:0825) [ 365.155127][ T5697] uvcvideo 1-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 365.424603][ T2085] usb 3-1: USB disconnect, device number 10 [ 365.641740][ T7748] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.773432][ T5697] videodev: could not get a free minor [ 365.773456][ T5697] uvcvideo 1-1:1.1: Failed to register meta-cap device (-23). [ 365.893702][ T5697] usb 1-1: USB disconnect, device number 8 [ 365.927723][ T2085] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 366.090441][ T2085] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 366.091581][ T2085] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 366.092913][ T2085] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 366.093007][ T2085] usb 3-1: SerialNumber: syz [ 367.754035][ T2085] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 367.766529][ T5697] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 367.805170][ T2085] usb 3-1: USB disconnect, device number 11 [ 367.834050][ T2085] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 367.936673][ T5697] usb 1-1: Using ep0 maxpacket: 32 [ 367.937329][ T5697] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 367.939862][ T5697] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 367.939888][ T5697] usb 1-1: config 0 has no interface number 0 [ 367.942303][ T5697] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.942327][ T5697] usb 1-1: Product: syz [ 367.942341][ T5697] usb 1-1: Manufacturer: syz [ 367.942353][ T5697] usb 1-1: SerialNumber: syz [ 368.019356][ T5697] usb 1-1: config 0 descriptor?? [ 368.028198][ T5697] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 368.028230][ T5697] usb 1-1: selecting invalid altsetting 1 [ 368.028239][ T5697] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 368.094097][ T5697] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 368.109896][ T5697] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 368.109953][ T5697] usb 1-1: media controller created [ 368.146561][ T5733] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 368.214992][ T5697] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 368.292658][ T5697] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 368.292707][ T5697] zl10353_read_register: readreg error (reg=127, ret==-71) [ 368.295485][ T5697] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 368.342015][ T5733] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 368.345055][ T5733] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 368.345103][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.345234][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.345259][ T5733] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 368.345302][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.426042][ T5733] usb 2-1: config 0 descriptor?? [ 368.549952][ T5697] usb 1-1: USB disconnect, device number 9 [ 368.907089][ T5733] holtek_kbd 0003:04D9:A055.0008: unbalanced collection at end of report description [ 368.912061][ T5733] holtek_kbd 0003:04D9:A055.0008: probe with driver holtek_kbd failed with error -22 [ 369.418598][ T7589] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.418717][ T7589] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.418942][ T7589] bridge_slave_0: entered allmulticast mode [ 369.421560][ T7589] bridge_slave_0: entered promiscuous mode [ 369.638965][ T5263] 8021q: adding VLAN 0 to HW filter on device eth5 [ 369.696899][ T7589] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.716228][ T7589] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.076203][ T7589] bridge_slave_1: entered allmulticast mode [ 370.233937][ T7589] bridge_slave_1: entered promiscuous mode [ 370.344765][ T5733] usb 2-1: USB disconnect, device number 11 [ 370.405554][ T7589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.417091][ T1366] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.438956][ T7589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.608751][ T7798] netlink: 'syz.0.474': attribute type 2 has an invalid length. [ 370.665521][ T7589] team0: Port device team_slave_0 added [ 370.666744][ T1306] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.684885][ T7589] team0: Port device team_slave_1 added [ 370.789414][ T7589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.789432][ T7589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.789525][ T7589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.817494][ T7589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.817513][ T7589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.817688][ T7589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.966181][ T7589] hsr_slave_0: entered promiscuous mode [ 370.976160][ T7589] hsr_slave_1: entered promiscuous mode [ 370.988949][ T7589] debugfs: 'hsr0' already exists in 'hsr' [ 370.988979][ T7589] Cannot create hsr debugfs directory [ 371.020769][ T7803] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.918525][ T7805] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 371.923946][ T7805] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 372.055145][ T7805] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 372.055257][ T7805] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 372.097157][ T1397] bridge_slave_1: left allmulticast mode [ 372.097194][ T1397] bridge_slave_1: left promiscuous mode [ 372.097418][ T1397] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.130129][ T7805] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 372.130243][ T7805] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 372.192628][ T7805] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 372.192723][ T7805] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 372.209649][ T1397] bridge_slave_0: left allmulticast mode [ 372.209672][ T1397] bridge_slave_0: left promiscuous mode [ 372.209860][ T1397] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.267758][ T7805] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 372.355641][ T7805] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 372.355738][ T7805] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 372.443690][ T7805] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 372.787225][ T1397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.976843][ T996] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 373.017850][ T1397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 373.115735][ T1397] bond0 (unregistering): Released all slaves [ 373.126524][ T996] usb 1-1: Using ep0 maxpacket: 32 [ 373.127975][ T996] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 373.132511][ T996] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 373.132538][ T996] usb 1-1: config 0 has no interface number 0 [ 373.155737][ T996] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.155767][ T996] usb 1-1: Product: syz [ 373.155781][ T996] usb 1-1: Manufacturer: syz [ 373.155796][ T996] usb 1-1: SerialNumber: syz [ 373.200495][ T7831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 373.219420][ T996] usb 1-1: config 0 descriptor?? [ 373.231932][ T996] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 373.231961][ T996] usb 1-1: selecting invalid altsetting 1 [ 373.231976][ T996] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 373.269519][ T996] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 373.270064][ T996] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 373.270119][ T996] usb 1-1: media controller created [ 373.362988][ T4917] Bluetooth: hci0: command 0x0406 tx timeout [ 373.393557][ T996] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 373.459706][ T996] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 373.459780][ T996] zl10353_read_register: readreg error (reg=127, ret==-71) [ 373.460229][ T996] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 374.683055][ T4917] Bluetooth: hci2: command 0x0406 tx timeout [ 374.683122][ T5605] Bluetooth: hci3: command 0x0406 tx timeout [ 374.683161][ T5605] Bluetooth: hci1: command 0x0c1a tx timeout [ 374.683348][ T4917] Bluetooth: hci5: command 0x0c1a tx timeout [ 374.856101][ T996] usb 1-1: USB disconnect, device number 10 [ 375.982175][ T5604] Bluetooth: hci0: command 0x0406 tx timeout [ 376.356427][ T7840] IPv6: NLM_F_CREATE should be specified when creating new route [ 376.357228][ T1397] hsr_slave_0: left promiscuous mode [ 376.463541][ T1397] hsr_slave_1: left promiscuous mode [ 376.464298][ T1397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.531622][ T1397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.706574][ T5604] Bluetooth: hci5: command 0x0c1a tx timeout [ 376.706613][ T5604] Bluetooth: hci2: command 0x0406 tx timeout [ 376.706636][ T5604] Bluetooth: hci1: command 0x0c1a tx timeout [ 376.706660][ T5604] Bluetooth: hci3: command 0x0406 tx timeout [ 378.786512][ T5605] Bluetooth: hci1: command 0x0c1a tx timeout [ 378.786554][ T5605] Bluetooth: hci5: command 0x0c1a tx timeout [ 381.281372][ T1397] team0 (unregistering): Port device team_slave_1 removed [ 381.319481][ T1397] team0 (unregistering): Port device team_slave_0 removed [ 381.553250][ T5604] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 381.616890][ T5604] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 381.658353][ T5604] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 381.761503][ T5604] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 381.766464][ T5604] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 381.899190][ T7858] autofs: Unknown parameter 'fd0x0000000000000000' [ 382.016699][ T1366] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.357247][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.357320][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.396577][ T996] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 383.566621][ T996] usb 2-1: device descriptor read/64, error -71 [ 384.566087][ T5604] Bluetooth: hci4: command tx timeout [ 384.626318][ T996] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 384.760284][ T996] usb 2-1: device descriptor read/64, error -71 [ 384.866885][ T996] usb usb2-port1: attempt power cycle [ 385.206675][ T996] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 385.228240][ T996] usb 2-1: device descriptor read/8, error -71 [ 386.230442][ T996] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 386.322661][ T996] usb 2-1: device descriptor read/8, error -71 [ 386.390624][ T5263] 8021q: adding VLAN 0 to HW filter on device eth9 [ 386.426918][ T996] usb usb2-port1: unable to enumerate USB device [ 386.626485][ T5604] Bluetooth: hci4: command tx timeout [ 386.851217][ T7908] autofs: Unknown parameter 'fd0x0000000000000000' [ 387.376492][ T5733] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 387.537684][ T5733] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 387.539295][ T5733] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 387.539352][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.539379][ T5733] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.539400][ T5733] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 387.539442][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.692007][ T5733] usb 2-1: config 0 descriptor?? [ 388.938770][ T7853] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.939344][ T7853] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.939513][ T7853] bridge_slave_0: entered allmulticast mode [ 388.942266][ T7853] bridge_slave_0: entered promiscuous mode [ 388.945872][ T7853] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.946096][ T7853] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.946261][ T7853] bridge_slave_1: entered allmulticast mode [ 388.951817][ T7853] bridge_slave_1: entered promiscuous mode [ 389.010109][ T7853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.018066][ T7853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.133130][ T7853] team0: Port device team_slave_0 added [ 389.144066][ T7853] team0: Port device team_slave_1 added [ 389.192518][ T7853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.192538][ T7853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.192633][ T7853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.196195][ T7853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.196212][ T7853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.196238][ T7853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.374047][ T7853] hsr_slave_0: entered promiscuous mode [ 389.375634][ T7853] hsr_slave_1: entered promiscuous mode [ 389.388373][ T7853] debugfs: 'hsr0' already exists in 'hsr' [ 389.388402][ T7853] Cannot create hsr debugfs directory [ 389.649917][ T5604] Bluetooth: hci4: command tx timeout [ 389.660444][ T5733] holtek_kbd 0003:04D9:A055.0009: item fetching failed at offset 5/7 [ 389.661247][ T5733] holtek_kbd 0003:04D9:A055.0009: probe with driver holtek_kbd failed with error -22 [ 390.004163][ T7932] FAULT_INJECTION: forcing a failure. [ 390.004163][ T7932] name failslab, interval 1, probability 0, space 0, times 0 [ 390.004252][ T7932] CPU: 1 UID: 0 PID: 7932 Comm: syz.0.502 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 390.004278][ T7932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 390.004307][ T7932] Call Trace: [ 390.004316][ T7932] [ 390.004326][ T7932] dump_stack_lvl+0xe8/0x150 [ 390.004372][ T7932] should_fail_ex+0x46b/0x600 [ 390.004398][ T7932] ? __d_alloc+0x37/0x6f0 [ 390.004420][ T7932] should_failslab+0xa8/0x100 [ 390.004449][ T7932] kmem_cache_alloc_lru_noprof+0xa2/0x680 [ 390.004474][ T7932] ? __d_alloc+0x37/0x6f0 [ 390.004497][ T7932] __d_alloc+0x37/0x6f0 [ 390.004520][ T7932] d_alloc_pseudo+0x21/0xc0 [ 390.004540][ T7932] alloc_path_pseudo+0x107/0x220 [ 390.004568][ T7932] ? __pfx_alloc_path_pseudo+0x10/0x10 [ 390.004592][ T7932] ? rt_spin_lock+0x1e2/0x400 [ 390.004619][ T7932] alloc_file_pseudo+0xa8/0x1e0 [ 390.004645][ T7932] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 390.004672][ T7932] ? alloc_fd+0x654/0x6d0 [ 390.004691][ T7932] sock_alloc_file+0xb8/0x2f0 [ 390.004712][ T7932] ? __sys_socket+0x12b/0x1b0 [ 390.004735][ T7932] __sys_socket+0x13f/0x1b0 [ 390.004758][ T7932] __x64_sys_socket+0x7a/0x90 [ 390.004780][ T7932] do_syscall_64+0x166/0x520 [ 390.004803][ T7932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.004820][ T7932] ? clear_bhb_loop+0x70/0xc0 [ 390.004840][ T7932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.004857][ T7932] RIP: 0033:0x7f404a29e159 [ 390.004874][ T7932] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.004889][ T7932] RSP: 002b:00007f40484b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 390.004908][ T7932] RAX: ffffffffffffffda RBX: 00007f404a526180 RCX: 00007f404a29e159 [ 390.004921][ T7932] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000000a [ 390.004931][ T7932] RBP: 00007f404a33503b R08: 0000000000000000 R09: 0000000000000000 [ 390.004942][ T7932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 390.004952][ T7932] R13: 00007f404a526218 R14: 00007f404a526180 R15: 00007ffc0149b908 [ 390.004977][ T7932] [ 390.655774][ T2085] usb 2-1: USB disconnect, device number 16 [ 391.771770][ T5604] Bluetooth: hci4: command tx timeout [ 393.537268][ T5733] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 393.705987][ T5733] usb 1-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 393.761900][ T5733] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 393.767812][ T5733] usb 1-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 393.772380][ T5733] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.772408][ T5733] usb 1-1: Product: syz [ 393.772422][ T5733] usb 1-1: Manufacturer: syz [ 393.772437][ T5733] usb 1-1: SerialNumber: syz [ 393.845567][ T5733] ti_usb_3410_5052 1-1:2.0: TI USB 5052 2 port adapter converter detected [ 395.309716][ T5733] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 395.369177][ T5733] usb 1-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 395.587150][ T5733] usb 1-1: USB disconnect, device number 11 [ 395.640936][ T5733] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 395.673700][ T5733] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 395.681025][ T5733] ti_usb_3410_5052 1-1:2.0: device disconnected [ 396.324854][ T7964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.513'. [ 396.893275][ T7964] syz.0.513 (7964) used greatest stack depth: 16688 bytes left [ 406.756566][ T5720] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 406.906929][ T5720] usb 1-1: Using ep0 maxpacket: 8 [ 406.913545][ T5720] usb 1-1: unable to get BOS descriptor or descriptor too short [ 406.913606][ T5720] usb 1-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 406.915130][ T5720] usb 1-1: config 4 has an invalid interface number: 147 but max is 0 [ 406.915155][ T5720] usb 1-1: config 4 has an invalid descriptor of length 255, skipping remainder of the config [ 406.915175][ T5720] usb 1-1: config 4 has no interface number 0 [ 406.982528][ T5720] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.982559][ T5720] usb 1-1: Product: syz [ 406.982574][ T5720] usb 1-1: Manufacturer: syz [ 406.982589][ T5720] usb 1-1: SerialNumber: syz [ 409.394267][ T5605] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 409.441292][ T5605] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 409.448687][ T5605] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 409.486148][ T5605] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 409.487816][ T5605] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 410.208638][ T5720] uvcvideo 1-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 410.208798][ T5720] uvcvideo 1-1:4.147: No valid video chain found. [ 410.235174][ T5720] usb 1-1: USB disconnect, device number 12 [ 410.746665][ T37] audit: type=1326 audit(1789116852.595:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8031 comm="syz.0.521" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f404a29e159 code=0x0 [ 412.077789][ T5604] Bluetooth: hci1: command tx timeout [ 412.518697][ T8051] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 414.791028][ T5604] Bluetooth: hci1: command tx timeout [ 416.866651][ T5604] Bluetooth: hci1: command tx timeout [ 417.867284][ T1397] bridge_slave_1: left allmulticast mode [ 417.867323][ T1397] bridge_slave_1: left promiscuous mode [ 417.867594][ T1397] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.197605][ T5605] Bluetooth: hci1: command tx timeout [ 419.307780][ T1397] bridge_slave_0: left allmulticast mode [ 419.307809][ T1397] bridge_slave_0: left promiscuous mode [ 419.308000][ T1397] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.777280][ T1397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 420.837336][ T1397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 420.878867][ T1397] bond0 (unregistering): Released all slaves [ 425.126822][ T1397] hsr_slave_0: left promiscuous mode [ 425.172192][ T1397] hsr_slave_1: left promiscuous mode [ 425.173436][ T1397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 425.217458][ T1397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.617795][ T37] audit: type=1326 audit(1789116868.535:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8120 comm="syz.1.530" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00b884e159 code=0x0 [ 426.999834][ T8133] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 427.186513][ T5733] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 427.337434][ T5733] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 427.339025][ T5733] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 427.340471][ T5733] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 427.345088][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 427.345116][ T5733] usb 3-1: Product: syz [ 427.345130][ T5733] usb 3-1: Manufacturer: syz [ 427.345145][ T5733] usb 3-1: SerialNumber: syz [ 428.205648][ T5733] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 428.303458][ T1397] team0 (unregistering): Port device team_slave_1 removed [ 428.350644][ T5733] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 428.375714][ T5733] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 428.386285][ T1397] team0 (unregistering): Port device team_slave_0 removed [ 428.724107][ T8142] ip6tnl1: left allmulticast mode [ 429.909736][ T8132] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 429.963490][ T8132] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 429.963861][ T8132] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 429.974105][ T9] usb 3-1: USB disconnect, device number 12 [ 430.022209][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 430.050865][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 430.063415][ T9] ti_usb_3410_5052 3-1:2.0: device disconnected [ 432.917377][ T37] audit: type=1326 audit(1789116874.835:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8182 comm="syz.2.543" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fa725e159 code=0x0 [ 434.328666][ T8021] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.328844][ T8021] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.328993][ T8021] bridge_slave_0: entered allmulticast mode [ 434.331022][ T8021] bridge_slave_0: entered promiscuous mode [ 434.334138][ T8021] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.334280][ T8021] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.334897][ T8021] bridge_slave_1: entered allmulticast mode [ 434.340849][ T8021] bridge_slave_1: entered promiscuous mode [ 434.751690][ T8021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.781789][ T8021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.878454][ T8021] team0: Port device team_slave_0 added [ 434.881883][ T8021] team0: Port device team_slave_1 added [ 434.955552][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.955568][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.955586][ T8021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.017346][ T8021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.017383][ T8021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 435.017409][ T8021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 436.156536][ T5720] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 436.727400][ T5720] usb 2-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 436.728979][ T5720] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 436.730473][ T5720] usb 2-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 436.733404][ T5720] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.733435][ T5720] usb 2-1: Product: syz [ 436.733451][ T5720] usb 2-1: Manufacturer: syz [ 436.733466][ T5720] usb 2-1: SerialNumber: syz [ 436.756070][ T5720] ti_usb_3410_5052 2-1:2.0: TI USB 5052 2 port adapter converter detected [ 436.762423][ T5720] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 436.772704][ T5720] usb 2-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 437.087336][ T8225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 437.200524][ T8021] hsr_slave_0: entered promiscuous mode [ 437.202056][ T8021] hsr_slave_1: entered promiscuous mode [ 437.203193][ T8021] debugfs: 'hsr0' already exists in 'hsr' [ 437.203220][ T8021] Cannot create hsr debugfs directory [ 439.049052][ T37] audit: type=1326 audit(1789116880.965:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8237 comm="syz.0.553" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f404a29e159 code=0x0 [ 439.079927][ T8221] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 439.080049][ T8221] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 439.305230][ T8221] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 439.748515][ T5869] usb 2-1: USB disconnect, device number 17 [ 440.734163][ T5869] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 440.811598][ T5869] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 440.812793][ T5869] ti_usb_3410_5052 2-1:2.0: device disconnected [ 441.700861][ T8265] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 441.901971][ T5605] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 441.949978][ T5605] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 441.954844][ T5605] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 441.972091][ T5605] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 441.973523][ T5605] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 443.238330][ T8284] ======================================================= [ 443.238330][ T8284] WARNING: The mand mount option has been deprecated and [ 443.238330][ T8284] and is ignored by this kernel. Remove the mand [ 443.238330][ T8284] option from the mount to silence this warning. [ 443.238330][ T8284] ======================================================= [ 444.169549][ T5604] Bluetooth: hci5: command tx timeout [ 445.253648][ T37] audit: type=1326 audit(1789116887.095:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8288 comm="syz.0.563" exe="/root/ci-upstream-kasan-gce-smack-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f404a29e159 code=0x0 [ 445.411067][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.411138][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.064520][ T8303] netlink: 28 bytes leftover after parsing attributes in process `syz.1.565'. [ 446.551508][ T5704] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 446.664796][ T5604] Bluetooth: hci5: command tx timeout [ 446.707363][ T5704] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 446.710697][ T5704] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 446.740741][ T5704] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 446.765551][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.765581][ T5704] usb 3-1: Product: syz [ 446.765596][ T5704] usb 3-1: Manufacturer: syz [ 446.765611][ T5704] usb 3-1: SerialNumber: syz [ 446.916813][ T5704] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 446.946310][ T5704] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 446.993471][ T5704] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 448.561709][ T8296] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -110 [ 448.561760][ T8296] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -110 [ 448.562899][ T8296] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 451.571534][ T2085] usb 3-1: USB disconnect, device number 13 [ 452.509436][ T5604] Bluetooth: hci5: command tx timeout [ 452.782635][ T2085] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 452.809964][ T2085] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 452.814602][ T2085] ti_usb_3410_5052 3-1:2.0: device disconnected [ 455.087686][ T8369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.575'. [ 455.242788][ T5604] Bluetooth: hci5: command tx timeout [ 455.796556][ T5704] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 455.947753][ T5704] usb 3-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 455.949583][ T5704] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 455.951293][ T5704] usb 3-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 455.954802][ T5704] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 455.954830][ T5704] usb 3-1: Product: syz [ 455.954845][ T5704] usb 3-1: Manufacturer: syz [ 455.954860][ T5704] usb 3-1: SerialNumber: syz [ 456.261985][ T5704] ti_usb_3410_5052 3-1:2.0: TI USB 5052 2 port adapter converter detected [ 456.507534][ T5704] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 457.277675][ T5704] usb 3-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 457.420511][ T8266] bridge0: port 1(bridge_slave_0) entered blocking state [ 457.420641][ T8266] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.420963][ T8266] bridge_slave_0: entered allmulticast mode [ 457.423893][ T8266] bridge_slave_0: entered promiscuous mode [ 457.456749][ T8266] bridge0: port 2(bridge_slave_1) entered blocking state [ 457.457569][ T8266] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.457803][ T8266] bridge_slave_1: entered allmulticast mode [ 457.524963][ T8266] bridge_slave_1: entered promiscuous mode [ 457.885594][ T8266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 457.930519][ T8266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 458.082158][ T8266] team0: Port device team_slave_0 added [ 458.098838][ T8266] team0: Port device team_slave_1 added [ 458.195625][ T8266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 458.195645][ T8266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.195672][ T8266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 458.246663][ T8266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 458.246687][ T8266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 458.246725][ T8266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 458.482134][ T8266] hsr_slave_0: entered promiscuous mode [ 458.484785][ T8266] hsr_slave_1: entered promiscuous mode [ 458.498657][ T8266] debugfs: 'hsr0' already exists in 'hsr' [ 458.498688][ T8266] Cannot create hsr debugfs directory [ 460.348380][ T8373] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 460.348920][ T8373] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 460.348964][ T8373] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 460.349303][ T8373] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command, -32 [ 463.002987][ T5704] usb 3-1: USB disconnect, device number 14 [ 464.934176][ T5704] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 466.839240][ T5704] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 466.844206][ T5704] ti_usb_3410_5052 3-1:2.0: device disconnected [ 469.509961][ T6055] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 469.509992][ T6055] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 506.664855][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.715872][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 533.910119][ T5605] Bluetooth: hci1: command 0x0406 tx timeout [ 564.721858][ T5605] Bluetooth: hci5: command 0x0406 tx timeout [ 568.020774][ T1327] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.023627][ T1327] ieee802154 phy1 wpan1: encryption failed: -22 [ 600.984423][ T38] INFO: task syz-executor:8021 blocked for more than 143 seconds. [ 600.984588][ T38] Not tainted syzkaller #0 [ 600.984721][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 600.984871][ T38] task:syz-executor state:D stack:22472 pid:8021 tgid:8021 ppid:1 task_flags:0x400140 flags:0x00080002 [ 600.985314][ T38] Call Trace: [ 600.985493][ T38] [ 601.037927][ T38] __schedule+0x16d9/0x5700 [ 601.135256][ T38] ? __pfx___schedule+0x10/0x10 [ 601.173108][ T38] rt_mutex_schedule+0x76/0xf0 [ 601.173645][ T38] rt_mutex_slowlock_block+0x55e/0x690 [ 601.232407][ T38] ? rt_mutex_slowlock_block+0x33c/0x690 [ 601.284908][ T38] rt_mutex_slowlock+0x2d4/0x780 [ 601.285611][ T38] ? rt_mutex_slowlock+0x1f2/0x780 [ 601.334823][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 601.392911][ T38] ? device_del+0xa9/0x8f0 [ 601.394078][ T38] ? device_del+0xa9/0x8f0 [ 601.394181][ T38] mutex_lock_nested+0x168/0x1d0 [ 601.448846][ T38] device_del+0xa9/0x8f0 [ 601.449164][ T38] ? ida_free+0x2ac/0x310 [ 601.495278][ T38] ? __pfx_ida_free+0x10/0x10 [ 601.495884][ T38] ? __pfx_device_del+0x10/0x10 [ 601.575811][ T38] device_unregister+0x21/0xf0 [ 601.582179][ T38] del_device_store+0x2b5/0x370 [ 601.583448][ T38] ? __pfx_del_device_store+0x10/0x10 [ 601.583681][ T38] ? sysfs_file_kobj+0x1e4/0x230 [ 601.584107][ T38] ? sysfs_kf_write+0x166/0x260 [ 601.585054][ T38] ? __pfx_sysfs_kf_write+0x10/0x10 [ 601.585160][ T38] kernfs_fop_write_iter+0x3a5/0x540 [ 601.586035][ T38] vfs_write+0x61e/0xbb0 [ 601.674911][ T38] ? __pfx_vfs_write+0x10/0x10 [ 601.675519][ T38] ? do_sys_openat2+0x14e/0x200 [ 601.764562][ T38] ? kmem_cache_free+0x187/0x6d0 [ 601.875248][ T38] ksys_write+0x156/0x270 [ 601.875637][ T38] ? __pfx_ksys_write+0x10/0x10 [ 601.914025][ T38] do_syscall_64+0x166/0x520 [ 601.914537][ T38] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.914746][ T38] ? clear_bhb_loop+0x70/0xc0 [ 601.915123][ T38] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.984361][ T38] RIP: 0033:0x7f380c61e98e [ 601.984574][ T38] RSP: 002b:00007ffe26e7da48 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 601.984747][ T38] RAX: ffffffffffffffda RBX: 00005555738c4500 RCX: 00007f380c61e98e [ 601.984847][ T38] RDX: 0000000000000001 RSI: 00007ffe26e7dad0 RDI: 0000000000000005 [ 601.984954][ T38] RBP: 00007f380c6f58be R08: 0000000000000000 R09: 0000000000000000 [ 601.985068][ T38] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.985189][ T38] R13: 00007ffe26e7dad0 R14: 00007f380d414620 R15: 0000000000000003 [ 602.105247][ T38] [ 602.105581][ T38] [ 602.105581][ T38] Showing all locks held in the system: [ 602.105754][ T38] locks held by ksoftirqd/1/30: 9, last CPU#1: [ 602.106002][ T38] #0: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 602.222047][ T38] #1: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 602.222477][ T38] #2: ffff8880b87241a0 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x600 [ 602.223147][ T38] #3: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 602.224188][ T38] #4: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: ieee80211_rx_napi+0xd1/0x3d0 [ 602.225290][ T38] #5: ffffffff8e0594c0 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 602.225722][ T38] #6: ffff888060750228 (&rdev->bss_lock){+...}-{3:3}, at: cfg80211_inform_single_bss_data+0xc22/0x1bf0 [ 602.494309][ T38] #7: ffff8880b8728558 (hrtimer_bases.lock){-...}-{2:2}, at: rt_spin_lock+0x1e2/0x400 [ 602.495336][ T38] #8: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 602.661740][ T38] locks held by kworker/u8:2/33: 5, last CPU#0: [ 602.661782][ T38] #0: ffff888032cfe138 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 602.662282][ T38] #1: ffffc90000a87c40 ((work_completion)(&(&bat_priv->tt.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 602.663061][ T38] #2: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 602.663899][ T38] #3: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 602.664453][ T38] #4: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 602.665383][ T38] locks held by khungtaskd/38: 1, last CPU#1: [ 602.665563][ T38] #0: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 602.668626][ T38] locks held by kworker/u8:5/101: 3, last CPU#0: [ 602.668662][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 602.669077][ T38] #1: ffffc9000373fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 602.669888][ T38] #2: ffff8880609f08d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 602.771951][ T38] locks held by kworker/1:2/996: 3, last CPU#1: [ 602.772042][ T38] #0: ffff88813ff26538 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 602.772834][ T38] #1: ffffc9000644fc40 ((gc_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 602.844864][ T38] #2: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 602.845872][ T38] locks held by kworker/u8:9/1306: 8, on CPU#0: [ 602.846060][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 602.935182][ T38] #1: ffffc90006d0fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 602.936085][ T38] #2: ffff888021bc8310 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 603.003741][ T38] #3: ffff88803bd08120 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 603.005065][ T38] #4: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 603.074614][ T38] #5: ffff88813fffc2d8 (&zone->lock){+.+.}-{3:3}, at: get_page_from_freelist+0xc5f/0x2600 [ 603.075426][ T38] #6: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 603.172697][ T38] #7: ffff8880b8624548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790 [ 603.173342][ T38] locks held by kworker/u8:12/1386: 3, last CPU#0: [ 603.173472][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 603.232252][ T38] #1: ffffc9000702fc40 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 603.232647][ T38] #2: ffff8880607508d8 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xb4/0x420 [ 603.331999][ T38] locks held by kworker/u8:13/1387: 6, on CPU#0: [ 603.332063][ T38] #0: ffff88801aeb0938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 603.332590][ T38] #1: ffffc9000704fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 603.333487][ T38] #2: ffffffff8f5c4c60 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 603.447505][ T38] #3: ffff888020efa160 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 603.523169][ T38] #4: ffff888062c60310 (&devlink->lock_key#6){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 603.524030][ T38] #5: ffffffff8f5d34b8 (rtnl_mutex){+.+.}-{4:4}, at: nsim_create+0x87f/0x1160 [ 603.592945][ T38] locks held by kworker/u8:16/1390: 5, last CPU#0: [ 603.592997][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 603.593457][ T38] #1: ffffc900070afc40 ((work_completion)(&(&kfence_timer)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 603.594288][ T38] #2: ffffffff8e051e70 (cpu_hotplug_lock){++++}-{0:0}, at: static_key_enable+0x12/0x20 [ 603.691779][ T38] #3: ffffffff8e2a1878 (jump_label_mutex){+.+.}-{4:4}, at: static_key_enable_cpuslocked+0xcb/0x240 [ 603.692723][ T38] #4: ffffffff8e068798 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_queue+0x5f/0x110 [ 603.761754][ T38] locks held by kworker/u8:19/1393: 6, last CPU#0: [ 603.761822][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 603.762453][ T38] #1: ffffc9000711fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 603.865955][ T38] #2: ffff88801e6d4310 (&devlink->lock_key#2){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 603.940895][ T38] #3: ffff88805eb01d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 604.001964][ T38] #4: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 604.002745][ T38] #5: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: rt_spin_trylock+0x10c/0x2b0 [ 604.004082][ T38] locks held by kworker/u8:23/1397: 3, on CPU#1: [ 604.004259][ T38] #0: ffff888032aed938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 604.005392][ T38] #1: ffffc9000719fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 604.005796][ T38] #2: ffffffff8f5d34b8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 604.178437][ T38] locks held by kworker/u8:28/1411: 8, on CPU#0: [ 604.178561][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 604.179522][ T38] #1: ffffc9000725fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 604.261046][ T38] #2: ffff888025800310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 604.354796][ T38] #3: ffff88803e099520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 604.355947][ T38] #4: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 604.453481][ T38] #5: ffff8880b863c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 604.454023][ T38] #6: ffff8880b8624548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790 [ 604.552671][ T38] #7: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 604.553084][ T38] locks held by syslogd/4950: 1, last CPU#0: [ 604.553185][ T38] #0: ffff8880370e1df0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e3/0xd70 [ 604.554065][ T38] locks held by udevd/4968: 1, last CPU#0: [ 604.554232][ T38] #0: ffffffff8e3116b0 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 604.685181][ T38] locks held by dhcpcd/5263: 2, on CPU#0: [ 604.685340][ T38] #0: ffff888033734928 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xe7/0xee0 [ 604.688648][ T38] #1: ffffffff8f5d34b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dump_ifinfo+0xa74/0x14b0 [ 604.689283][ T38] locks held by getty/5353: 2, on CPU#0: [ 604.689355][ T38] #0: ffff88802914e0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 604.690045][ T38] #1: ffffc900044cb2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x460/0x1360 [ 604.742890][ T38] locks held by syz-executor/5588: 1, last CPU#0: [ 604.742980][ T38] #0: ffff888029ae2a00 (&p->alloc_lock){+.+.}-{3:3}, at: do_prlimit+0x199/0x3f0 [ 604.743826][ T38] locks held by kworker/u9:3/5604: 6, on CPU#0: [ 604.743975][ T38] #0: ffff888060f98138 ((wq_completion)hci5){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 604.869480][ T38] #1: ffffc90004b07c40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 604.870293][ T38] #2: ffff888036c9cf80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1cb/0x3f0 [ 604.969457][ T38] #3: ffff888036c9c0b0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 604.970362][ T38] #4: ffffffff8f756898 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x17f/0x370 [ 604.971475][ T38] #5: ffff888060f9c370 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x9f/0x550 [ 604.989386][ T38] locks held by syz-executor/5610: 5, last CPU#0: [ 604.989510][ T38] #0: ffff88803684f030 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0 [ 604.990560][ T38] #1: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x200 [ 605.063450][ T38] #2: ffff888058766598 (ptlock_ptr(ptdesc)#2){+.+.}-{3:3}, at: pte_offset_map_lock+0x13d/0x210 [ 605.064458][ T38] #3: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 605.065657][ T38] #4: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: lruvec_stat_mod_folio+0x6e/0x3e0 [ 605.066967][ T38] locks held by kworker/1:5/5720: 4, on CPU#1: [ 605.067098][ T38] #0: ffff8880375c8538 ((wq_completion)wg-crypt-wg0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 605.068512][ T38] #1: ffffc90005b07c40 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 605.069074][ T38] #2: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0x3d/0x420 [ 605.069703][ T38] #3: ffff8880b87241a0 (tasklet_sync_callback.cb_lock){+...}-{3:3}, at: tasklet_action_common+0xc5/0x600 [ 605.070724][ T38] locks held by syz-executor/8021: 5, on CPU#1: [ 605.070912][ T38] #0: ffff88803585c510 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 605.071566][ T38] #1: ffff88802c874878 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1d9/0x540 [ 605.072312][ T38] #2: ffff88802934e008 (kn->active#51){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x22c/0x540 [ 605.073521][ T38] #3: ffffffff8ee43e18 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd6/0x370 [ 605.074605][ T38] #4: ffff888020efa160 (&dev->mutex){....}-{4:4}, at: device_del+0xa9/0x8f0 [ 605.075055][ T38] locks held by syz-executor/8266: 2, last CPU#1: [ 605.075164][ T38] #0: ffffffff8fb21e28 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 605.076182][ T38] #1: ffffffff8f5d34b8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 605.385929][ T38] locks held by syz.0.584/8422: 9, last CPU#0: [ 605.386149][ T38] #0: ffff888036837128 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x252/0x320 [ 605.447178][ T38] #1: ffff88801abb8510 (sb_writers#17){.+.+}-{0:0}, at: vfs_write+0x231/0xbb0 [ 605.503958][ T38] #2: ffffffff8e237ad8 (event_mutex){+.+.}-{4:4}, at: system_enable_write+0x25b/0x360 [ 605.504556][ T38] #3: ffffffff8e226678 (tracepoints_mutex){+.+.}-{4:4}, at: tracepoint_probe_register+0x3f/0x90 [ 605.505230][ T38] #4: ffffffff8e051e70 (cpu_hotplug_lock){++++}-{0:0}, at: __static_call_update+0x9b/0x620 [ 605.506196][ T38] #5: ffffffff8e296ab8 (static_call_mutex){+.+.}-{4:4}, at: __static_call_update+0xa9/0x620 [ 605.532701][ T38] #6: ffffffff8e068798 (text_mutex){+.+.}-{4:4}, at: arch_static_call_transform+0x2d/0xc0 [ 605.581442][ T38] #7: ffff8880b873c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 605.582417][ T38] #8: ffff8880b8724548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790 [ 605.642564][ T38] locks held by kworker/u8:0/8438: 8, last CPU#1: [ 605.642720][ T38] #0: ffff88813ff64138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 605.643744][ T38] #1: ffffc90004967c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 605.644181][ T38] #2: ffff888025800310 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xcb0 [ 605.645158][ T38] #3: ffff88803e099520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1e0/0xcb0 [ 605.808259][ T38] #4: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1e2/0x400 [ 605.809020][ T38] #5: ffff8880b8737350 ((crngs.lock)){+.+.}-{3:3}, at: crng_make_state+0x15b/0x5d0 [ 605.873915][ T38] #6: ffff8880b873c320 (&rq->__lock){-...}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 605.874782][ T38] #7: ffff8880b8724548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790 [ 605.983875][ T38] locks held by syz-executor/8443: 1, last CPU#1: [ 605.983915][ T38] #0: ffffffff8e1c3c40 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 605.984356][ T38] locks held by syz-executor/8444: 3, last CPU#1: [ 605.984457][ T38] #0: ffff88803666e510 (sb_writers#4){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 606.115784][ T38] #1: ffff888040158f70 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x200/0x370 [ 606.164520][ T38] #2: ffffffff8e9504b8 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_path_number_perm+0x219/0x5f0 [ 606.166125][ T38] locks held by udevd/8445: 5, last CPU#1: [ 606.166264][ T38] #0: ffff8880399c4a88 (vm_lock){++++}-{0:0}, at: raw_spin_rq_lock_nested+0x2d/0x160 [ 606.275526][ T38] #1: ffff8880b8724548 (psi_seq){-...}-{0:0}, at: psi_task_switch+0x57/0x790 [ 606.276170][ T38] #2: ffff888038104a38 (&____s->seqcount#8){+.+.}-{0:0}, at: do_epoll_wait+0x5b4/0xa60 [ 606.307636][ T38] #3: ffff88803e706e58 (_T->lock){....}-{2:2}, at: rt_mutex_slowunlock+0xbf/0xa30 [ 606.308121][ T38] #4: ffff8880b8728558 (hrtimer_bases.lock){-...}-{2:2}, at: hrtimer_start_range_ns+0x8c/0x3f0 [ 606.309429][ T38] [ 606.309474][ T38] ============================================= [ 606.309474][ T38] [ 606.309522][ T38] NMI backtrace for cpu 0 [ 606.309573][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 606.309625][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 606.309668][ T38] Call Trace: [ 606.309754][ T38] [ 606.309836][ T38] dump_stack_lvl+0xe8/0x150 [ 606.310270][ T38] nmi_cpu_backtrace+0x274/0x2d0 [ 606.310769][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 606.311270][ T38] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 606.311648][ T38] sys_info+0x135/0x170 [ 606.311922][ T38] watchdog+0xfd7/0x1030 [ 606.313016][ T38] ? watchdog+0x1c7/0x1030 [ 606.314131][ T38] kthread+0x38b/0x470 [ 606.314633][ T38] ? __pfx_watchdog+0x10/0x10 [ 606.314698][ T38] ? __pfx_kthread+0x10/0x10 [ 606.315044][ T38] ret_from_fork+0x514/0xb70 [ 606.315791][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 606.316347][ T38] ? __switch_to+0xc89/0x1420 [ 606.316687][ T38] ? __pfx_kthread+0x10/0x10 [ 606.317221][ T38] ret_from_fork_asm+0x1a/0x30 [ 606.319128][ T38] [ 606.319965][ T38] Sending NMI from CPU 0 to CPUs 1: [ 606.320099][ C1] NMI backtrace for cpu 1 [ 606.320121][ C1] CPU: 1 UID: 0 PID: 29 Comm: ktimers/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 606.320148][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 606.320165][ C1] RIP: 0010:__sanitizer_cov_trace_switch+0x64/0x120 [ 606.320249][ C1] Code: 55 41 57 41 56 41 55 41 54 53 48 8d 0c 4d 01 00 00 00 48 8b 54 24 30 65 4c 8b 05 8f 85 de 10 45 31 c9 41 ba 00 01 00 00 eb 0c <49> ff c1 4c 39 c8 0f 84 98 00 00 00 4e 8b 5c ce 10 65 48 8b 1d 73 [ 606.320276][ C1] RSP: 0018:ffffc90000a3efe0 EFLAGS: 00000046 [ 606.320304][ C1] RAX: 0000000000000020 RBX: 0000000000000000 RCX: 0000000000000005 [ 606.320321][ C1] RDX: ffffffff81c88435 RSI: ffffffff8e2272c0 RDI: 000000000000000a [ 606.320340][ C1] RBP: 0000000000000100 R08: ffff88801d683e80 R09: 0000000000000017 [ 606.320358][ C1] R10: 0000000000000100 R11: 0000000000000017 R12: dffffc0000000000 [ 606.320376][ C1] R13: 0000000000000078 R14: 0000000000000100 R15: 000000000001aaea [ 606.320394][ C1] FS: 0000000000000000(0000) GS:ffff888125cce000(0000) knlGS:0000000000000000 [ 606.320415][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 606.320433][ C1] CR2: 000056440c9dffa0 CR3: 000000003e60e000 CR4: 00000000003526f0 [ 606.320455][ C1] Call Trace: [ 606.320472][ C1] [ 606.320526][ C1] rb_event_length+0x45/0x400 [ 606.320601][ C1] rb_read_data_buffer+0xe2/0x5b0 [ 606.320769][ C1] check_buffer+0x288/0x860 [ 606.320827][ C1] ? __pfx_trace_clock_local+0x10/0x10 [ 606.320939][ C1] __rb_reserve_next+0x549/0xdd0 [ 606.321163][ C1] ring_buffer_lock_reserve+0xc0d/0x10c0 [ 606.321235][ C1] ? ring_buffer_unlock_commit+0x51d/0x6c0 [ 606.321352][ C1] ? trace_buffer_unlock_commit_regs+0x156/0x520 [ 606.321491][ C1] trace_event_buffer_lock_reserve+0x1d4/0x700 [ 606.321605][ C1] trace_event_buffer_reserve+0x1ef/0x2d0 [ 606.321690][ C1] trace_event_raw_event_lock+0x127/0x280 [ 606.321777][ C1] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 606.321817][ ** replaying previous printk message ** [ 606.321817][ C1] ? lock_acquire+0x115/0x350 [ 606.321953][ C1] ? lock_acquire+0x115/0x350 [ 606.322035][ C1] ? unwind_next_frame+0x8f/0x2550 [ 606.322077][ C1] ? unwind_next_frame+0x8f/0x2550 [ 606.322117][ C1] lock_release+0x396/0x3c0 [ 606.322162][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 606.322202][ C1] ? deref_stack_reg+0x18e/0x220 [ 606.322263][ C1] ? unwind_next_frame+0x8f/0x2550 [ 606.322318][ C1] unwind_next_frame+0x1baa/0x2550 [ 606.322411][ C1] ? stack_trace_save+0xa9/0x100 [ 606.322479][ C1] ? unwind_next_frame+0x8f/0x2550 [ 606.322559][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 606.322609][ C1] arch_stack_walk+0x11b/0x150 [ 606.322738][ C1] ? kasan_save_stack+0x3e/0x60 [ 606.322861][ C1] stack_trace_save+0xa9/0x100 [ 606.322911][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 606.323019][ C1] ? trace_buffer_unlock_commit_regs+0x156/0x520 [ 606.323061][ C1] ? ring_buffer_event_data+0x94/0x100 [ 606.323122][ C1] kasan_save_stack+0x3e/0x60 [ 606.323661][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 606.323711][ C1] insert_work+0x3d/0x330 [ 606.323797][ C1] __queue_work+0xd4b/0x1120 [ 606.323887][ C1] ? __queue_work+0x225/0x1120 [ 606.324062][ C1] call_timer_fn+0x18d/0x5f0 [ 606.324121][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 606.324160][ C1] ? call_timer_fn+0xd5/0x5f0 [ 606.324212][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 606.324250][ C1] ? pv_queued_spin_unlock_traced+0x5a/0x1b0 [ 606.324353][ C1] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 606.324453][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 606.324511][ C1] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 606.324577][ C1] __run_timer_base+0x73c/0x9b0 [ 606.324616][ C1] ? ring_buffer_event_data+0x94/0x100 [ 606.324799][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 606.324835][ C1] ? trace_event_raw_event_softirq+0x106/0x1b0 [ 606.324942][ C1] ? lock_acquire+0x115/0x350 [ 606.325064][ C1] run_timer_softirq+0xb7/0x170 [ 606.325126][ C1] handle_softirqs+0x1da/0x6d0 [ 606.325268][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 606.325337][ C1] run_ktimerd+0x6a/0x100 [ 606.325393][ C1] smpboot_thread_fn+0x565/0xa70 [ 606.325470][ C1] ? smpboot_thread_fn+0x4e/0xa70 [ 606.325609][ C1] kthread+0x38b/0x470 [ 606.325661][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 606.325700][ C1] ? __pfx_kthread+0x10/0x10 [ 606.325764][ C1] ret_from_fork+0x514/0xb70 [ 606.325838][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 606.325888][ C1] ? __switch_to+0xc89/0x1420 [ 606.325993][ C1] ? __pfx_kthread+0x10/0x10 [ 606.326057][ C1] ret_from_fork_asm+0x1a/0x30 [ 606.326249][ C1] [ 606.975020][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 607.243438][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 607.253144][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 607.263277][ T38] Call Trace: [ 607.266712][ T38] [ 607.269811][ T38] vpanic+0x56d/0xa60 [ 607.274301][ T38] ? __pfx___schedule+0x10/0x10 [ 607.279541][ T38] ? __pfx_vpanic+0x10/0x10 [ 607.285291][ T38] panic+0xc5/0xd0 [ 607.289546][ T38] ? __pfx_panic+0x10/0x10 [ 607.294015][ T38] ? preempt_schedule_common+0x7f/0xd0 [ 607.299673][ T38] ? preempt_schedule_thunk+0x16/0x40 [ 607.305441][ T38] ? nmi_trigger_cpumask_backtrace+0x31a/0x390 [ 607.312272][ T38] ? nmi_trigger_cpumask_backtrace+0x31f/0x390 [ 607.318928][ T38] watchdog+0x1030/0x1030 [ 607.324332][ T38] ? watchdog+0x1c7/0x1030 [ 607.329533][ T38] kthread+0x38b/0x470 [ 607.334056][ T38] ? __pfx_watchdog+0x10/0x10 [ 607.339064][ T38] ? __pfx_kthread+0x10/0x10 [ 607.344251][ T38] ret_from_fork+0x514/0xb70 [ 607.349210][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 607.354693][ T38] ? __switch_to+0xc89/0x1420 [ 607.360361][ T38] ? __pfx_kthread+0x10/0x10 [ 607.365179][ T38] ret_from_fork_asm+0x1a/0x30 [ 607.371758][ T38] [ 607.375284][ T38] Kernel Offset: disabled [ 607.379833][ T38] Rebooting in 86400 seconds..