last executing test programs: 11.916587148s ago: executing program 2 (id=183): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000001d40)=ANY=[@ANYBLOB="6000000002060500000000000000000000fdff04140007800800080000000089080006400000012505000100060000008b767346d082fa050005000200000005000400027fc50000000900020073797a310000000012000300686173683a00000000"], 0x60}}, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c40)=@newtclass={0xc48, 0x28, 0x400, 0x70bd28, 0x8, {0x0, 0x0, 0x0, 0x0, {0x8}, {0x2}, {0xfff2, 0xffff}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xa4b8, 0x3, 0x4, 0x10001, 0x8, 0x100, 0xd755, 0x7, 0x6, 0xffff, 0x4, 0x0, 0x6, 0x6, 0xb24, 0x80000001, 0xe00, 0x5, 0xfffffffe, 0x7, 0x3c, 0x3, 0x5, 0xfffff6cd, 0x4, 0xe5e, 0x1, 0x10000, 0xf, 0x6, 0xa929, 0xf, 0xf, 0x200000, 0x7ff, 0x4, 0xfffffffe, 0x41, 0x2, 0x100, 0x5c, 0x9, 0x4, 0x30, 0x1, 0x3, 0xffffffff, 0x1, 0x6, 0xfc29, 0x6, 0xfffffe3f, 0x7fffffff, 0x0, 0x3, 0x5, 0x9, 0xe18, 0x2, 0x8, 0x8, 0xb0a, 0x9, 0xff, 0x3, 0x7, 0xf, 0x7, 0x5, 0x6, 0x1, 0x101, 0x7, 0x7ff, 0xcd, 0x8, 0x3ee, 0x4b, 0x3, 0x8, 0xa4, 0x7, 0x6, 0x4, 0x89dc, 0x2, 0x76, 0x9, 0x81, 0x1ff, 0x5, 0x7f, 0x6, 0x6, 0x7, 0x3, 0x5, 0x10, 0xf, 0x1, 0xffff8001, 0xb6d, 0x4, 0x7ff, 0xf61, 0x5, 0x7, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x6, 0x6, 0x91, 0x1, 0x7, 0x8, 0x6, 0x1, 0x1800, 0x6, 0xe, 0x2, 0xd7d96f43, 0x3f, 0x800, 0x9, 0xfffffff7, 0x3, 0x637d, 0x1000, 0x54, 0x15512f96, 0x2, 0x1, 0x39, 0x0, 0x3, 0x10, 0x1, 0x10, 0x4, 0x43, 0x8, 0x8001, 0x6, 0x2, 0x0, 0x0, 0xe, 0x0, 0xfff, 0x2, 0x3, 0x80000001, 0x7, 0x2e, 0x9, 0x0, 0x800, 0x6, 0x31, 0x6, 0x6, 0x5, 0x2, 0x3, 0x260df0e7, 0x8, 0x1, 0xb6, 0x4, 0x5, 0x8, 0x8141, 0x20000000, 0x1ff, 0x6, 0x4, 0x7, 0x3, 0xff, 0xb688, 0x7ff, 0x5, 0xff, 0x39, 0x100, 0x8, 0xd, 0x1, 0x0, 0x9, 0x7, 0x401, 0x8, 0x7, 0x40, 0x1, 0x4, 0x5, 0x0, 0x2f45, 0x40, 0x723, 0x5, 0x7ff, 0x2, 0x8000, 0x46, 0x5, 0x1, 0xac, 0x8001, 0x6, 0xfffffff9, 0x1, 0x73, 0x6, 0x48fbc151, 0x3, 0x3, 0x80000000, 0xff, 0x4, 0xfffffc00, 0x9, 0x8000, 0x6cb, 0x0, 0x80000000, 0x6, 0x6, 0x2, 0x8000, 0x847, 0xfffffff4, 0x7, 0x7, 0x1, 0x0, 0x8, 0x4, 0xb39, 0x9, 0x8, 0x5, 0x3, 0x29b, 0x4, 0x4c4, 0xffffffff, 0x9, 0x3ff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0xffff, 0x3ff, 0x2, 0x800, 0x4, 0x6, 0x7ff, 0xfffffc00, 0x5, 0x6, 0x4, 0x4, 0x5, 0x5f6, 0x4, 0x1, 0x487a, 0x1b, 0x10000, 0xa, 0x4, 0x1, 0x5, 0x8c9, 0x10004, 0x400, 0x0, 0x6, 0x1538, 0x4, 0xff, 0x1000, 0x6, 0x0, 0x9, 0x542d, 0x9, 0xf, 0x4, 0x4, 0x1, 0x1, 0x7, 0x7, 0xd, 0x9, 0x81, 0x4, 0x130000, 0x252c000, 0x7, 0x1, 0x1, 0x4, 0x9f, 0x5, 0xe, 0xae7, 0x5, 0x7, 0x3, 0x8b, 0x0, 0x9, 0x0, 0x8, 0x10, 0x7, 0xfffffc01, 0x4c, 0x5, 0xfffffffb, 0xfffffffa, 0x8, 0x3, 0x2, 0xb42, 0x6, 0xfffffffb, 0x4, 0x9, 0x7f, 0x5, 0x379, 0x10000, 0xcca9, 0xcdd, 0x2, 0x0, 0x3, 0x1, 0x3a04, 0x7fffffff, 0x9, 0x1, 0x35, 0x3, 0xfffffffe, 0x1, 0x4, 0x8, 0x8, 0x1, 0x59be, 0xe5bd, 0xfffffffc, 0x5, 0x4, 0x6, 0x4, 0x1, 0x80, 0x31, 0xfff, 0x9, 0x2, 0x4, 0x9, 0x8, 0x3, 0x0, 0x8, 0xd, 0x7a31, 0x5, 0xffff590f, 0x1, 0x101, 0xc, 0x38, 0x3, 0x80000000, 0x5, 0x8b6, 0xb, 0x8, 0x80000001, 0xffff, 0x1, 0x87bb, 0x7, 0x7, 0x1, 0x40, 0x6, 0x4, 0x7, 0xa, 0x2, 0x2, 0x9, 0xffff, 0x5, 0x2, 0x9, 0x7fff, 0xc56e, 0x1, 0x8, 0x1000, 0x3790, 0x1, 0x3516, 0x1, 0x8, 0x6, 0x1, 0xfffff704, 0x0, 0xfffffbff, 0x5, 0x9, 0xd160, 0x7fffffff, 0x1, 0x2, 0xfffffffa, 0x3, 0x6, 0xe, 0xff, 0x4, 0x3, 0xfffffff9, 0x2, 0x46d, 0x4, 0xfffff957, 0x8, 0x1, 0x7, 0xeff, 0x5, 0xffffffff, 0x1, 0x0, 0xc27a, 0x4, 0x2, 0x1, 0xa, 0x0, 0x401, 0x588a, 0x7985, 0x0, 0x4, 0x3, 0x343e, 0xfffffffe, 0x400, 0x1, 0x0, 0xbd2, 0xfffffff4, 0x7fffffff, 0x1, 0xfffffb0c, 0x5, 0x3, 0xffff, 0x7a, 0x7, 0x8, 0x800, 0xf8000000, 0x3, 0x7, 0x8, 0x3, 0x3fc, 0x13, 0x7ff, 0x1ff, 0xe25e, 0x4648000, 0x3, 0xffff, 0x9ab, 0x5, 0x80, 0x7, 0x551cdd7, 0x1, 0x4, 0x8, 0x2, 0x4dd, 0x4384, 0x9, 0x2, 0x7, 0x80, 0x4e6, 0x5, 0x6]}]}}, @c_cbq={{0x8}, {0x408, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x8, 0x5, 0x80, 0x4af8, 0x5, 0x6, 0x1, 0x6, 0x7, 0x5, 0x9, 0x0, 0x9, 0x1, 0x5, 0xe, 0x3, 0xff, 0x8, 0x0, 0xfffffe00, 0x9, 0x3, 0x4, 0x9, 0x4, 0x4, 0xf, 0x6, 0x2, 0x4, 0x7, 0x4000, 0xfff, 0xf30a, 0x0, 0x4, 0xf, 0x9, 0x4, 0x7, 0x4961, 0xf, 0x1, 0x7, 0x4, 0x4, 0x0, 0x317, 0x2, 0x0, 0x6, 0x5, 0x40, 0x1, 0xffffffff, 0x847, 0x7d, 0x9, 0xffc00000, 0x613b, 0x7, 0xfffffffa, 0x0, 0x4a4, 0x200, 0xb44, 0x3, 0x9, 0x6, 0x3, 0x0, 0x6c5, 0x2, 0x7fffffff, 0x9, 0x8, 0x1, 0x401, 0x5, 0xfffffffa, 0x6, 0x479d, 0x7, 0xffffffff, 0xa, 0x5, 0x800, 0x8, 0x1, 0x7, 0x5e7b, 0x4, 0x10001, 0x6, 0x4, 0x16ab, 0xffff, 0x40, 0x9, 0x3, 0x6, 0x9, 0x3, 0xfffffff8, 0xfffffffe, 0xfffffff7, 0x8, 0x6, 0x1, 0x6, 0xc, 0x0, 0xa, 0x13b, 0x7fff, 0x9, 0x9132, 0x9, 0x1, 0x9, 0x9, 0xfffffffe, 0x0, 0x8, 0x5, 0x5, 0xe2dd, 0x3fd, 0x80a, 0x1, 0xb, 0xffff0000, 0x80, 0xe, 0x0, 0xa2, 0x3fd, 0x0, 0x48000000, 0x8, 0x0, 0x4, 0x6, 0x7, 0x80000001, 0x8, 0x97, 0x1, 0xb, 0x3, 0x9, 0x4, 0xb, 0x7fff, 0x100, 0x7ff, 0x100, 0x6, 0x5, 0x1, 0x5, 0x7, 0x400, 0xfd04, 0x3ff, 0xfffffff5, 0x3ff, 0xbfcb, 0x9, 0x1, 0xe329, 0x7, 0xfffffffc, 0x50000000, 0xec, 0x7, 0x1, 0x1000, 0x8000, 0x7, 0x7ffb, 0x7, 0xfffffff9, 0x2, 0x67, 0x1, 0x4, 0xd, 0xff, 0x6, 0x101, 0xcd1a, 0x8, 0x7, 0x5, 0x0, 0x80, 0x1ff, 0x1, 0x1, 0x7, 0xf, 0x1, 0x0, 0xe11, 0x3, 0x3, 0xfffffffc, 0x1ff, 0x1, 0x2, 0x2cae, 0xf3ff, 0x48d, 0x7fff, 0x9, 0x1000, 0xfffffe00, 0x37f4, 0x0, 0x9, 0x2000, 0x5, 0x2, 0xd, 0x6, 0x822, 0x8, 0x0, 0xbec9, 0x9, 0x5, 0x35, 0xc2a, 0x4b, 0xa, 0x80, 0x2000007, 0x1, 0x7, 0x0, 0x12, 0x1c, 0x2, 0x4, 0x8, 0x5704, 0xc975, 0x7, 0x1000, 0x365a8a29, 0x5624, 0x1e9019bc, 0x800, 0xfffffffa]}]}}]}, 0xc48}, 0x1, 0x0, 0x0, 0x40004}, 0x20008000) sendmmsg$alg(r1, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@assoc={0x18, 0x117, 0x4, 0x10}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r1) recvmsg$qrtr(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/59, 0x3b}, {0x0}], 0x2, 0x0, 0x0, 0x2}, 0x38, 0x100) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) 10.572346287s ago: executing program 2 (id=185): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_ifreq(r3, 0x8931, &(0x7f0000000000)={'dummy0\x00', @ifru_hwaddr}) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) 10.138288858s ago: executing program 1 (id=190): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x4000, 0x110003, 0x0, 0x9}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000160001f47efde4be701161000a00"], 0x1c}}, 0x0) 9.932308824s ago: executing program 1 (id=193): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x101000, 0x0) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000180)={0x1, 0x1, 0x2, 0x6dd, 0x10, 0x200, 0x10, 0x3, 0x20, 0x8001, 0x20, 0x7, &(0x7f00000000c0)=[0x4], 0x1, 0x0}) 9.804175809s ago: executing program 1 (id=195): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) preadv(r1, 0x0, 0x0, 0x8, 0x6a76) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) 8.164371463s ago: executing program 3 (id=202): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x3, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) sendmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="7f33d9a648c9d78dc643f26063966bd0ba55ad1a1c1e5868dd8a8377c6665333232f6ec490218597320147d11511e8f1b69f277d56ef449066452cb7dab19de1b32aca554e0179370af8bda92f24a284c3d8aac54a4505864360b9e24d2ce14a4480373415affb06347c321047f1a5b19cd663ea585f34909c9ac8bd", 0x7c}, {&(0x7f0000001740)="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", 0x225}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8000) 8.062413362s ago: executing program 3 (id=203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x400000000000afc}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8910, &(0x7f0000000900)={'bridge0\x00', @local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) dup(r7) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000040000000030a0102000000000000000001000000090003"], 0xc4}}, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x4005}) close_range(r8, 0xffffffffffffffff, 0x0) 6.179759111s ago: executing program 2 (id=205): socket$inet6(0xa, 0x800, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0x22, 0x3, 0x50000}]}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) 6.093898529s ago: executing program 3 (id=207): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x8, 0x8, 0x801c, 0x6246, 0x46, 0xfffffff7, 0x3, 0x1, r2}, &(0x7f00000000c0)=0x20) 5.934108282s ago: executing program 1 (id=208): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x4ff, 0x97) 5.571960732s ago: executing program 2 (id=209): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x200}]}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, 0x0) r1 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000240)={0x27800000000, 0x0, 0x1, r1, 0x1}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)={0x68, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x3, 0x62}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xe2}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4b12d8c0}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x81}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x68a289cc}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x15}, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x52, 0x1, 0x0, 0x25dfdbfc, {0x2}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x1}]}, 0x20}}, 0x0) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text32={0x20, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.362524103s ago: executing program 2 (id=213): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x57e, 0x200e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x5, 0x2, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) 3.748418373s ago: executing program 1 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000080)={0x79, 0x0, 0x400000000000afc}) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8910, &(0x7f0000000900)={'bridge0\x00', @local}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) r4 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) dup(r7) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000040000000030a0102000000000000000001000000090003"], 0xc4}}, 0x0) r9 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r9, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x0, 0x2, 0xffffffff, 0x3, 0x22}, 0x4005}) close_range(r8, 0xffffffffffffffff, 0x0) 2.085822598s ago: executing program 3 (id=216): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) preadv(r1, &(0x7f0000001200), 0x0, 0x8, 0x6a76) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, 0x0, 0x90) 2.028632202s ago: executing program 1 (id=217): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040d90455a005000000000109022400010000100009040000c40300020009210010000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\x00\"\a'], 0x0}, 0x0) 543.695293ms ago: executing program 2 (id=225): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a44000010400010902"], 0x0) syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c40000000000109022472510000000009040000120701030009050102000000"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100005a52cf40cd063501a4a80000000109021b0001000040000904a800012d250c02"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000693f0c104410017020050102030109022400010400aa0309042c0002"], 0x0) syz_usb_control_io(r2, &(0x7f0000000a00)={0x2c, 0x0, &(0x7f0000000840)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000001a80)={0x84, &(0x7f0000001640)={0x0, 0x15, 0x1, "f3"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000040)={0x0, 0x7, 0x9, "c41d21447228b20bbf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 400.025926ms ago: executing program 3 (id=226): sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000040)={0x1c, 0x0, 0x10, 0x70bd2a, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x8081}, 0x4000) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f00000010c0)=""/4111, &(0x7f0000000000)=0x100f) 393.492149ms ago: executing program 0 (id=227): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x20000040) 346.787258ms ago: executing program 3 (id=228): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_connect$hid(0x5, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x3d, &(0x7f0000000bc0)=@string={0x3d, 0x3, "b9aa5bf0bb14508e61bc234dfa096b1b8638648c575ce1dc5c6adc512d99bb44a71c9981c70b5131f88ade1a16c3b4ecd32be727937bc0ba825c07"}}]}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000580)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0xc, "f50a5159"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffff75, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f54d5d1f0cc752cf246a5d2da34a5aa97dc14a469c3dd3e26b41c356484e46fd66e3f2c7807e8773eed7b94fa099ab84feadec2ea95f65bba452eae5b0900f98a979a88c517a2dc360a00237723e2f467af706ea17226296b3a10a351cb47aba2c6b836c90679b4dd859ddc9e4800448aab0000000000000d75f34bb50d8d7084") 238.029425ms ago: executing program 0 (id=229): openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[], 0x3c}}, 0x10) 220.057332ms ago: executing program 0 (id=230): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x3, 0x80, 0x6, 0x0, 0x8, 0x80, 0x7}, 0xc) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r0, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)="7f33d9a648c9d78dc643f26063966bd0ba55ad1a1c1e5868dd8a8377c6665333232f6ec490218597320147d11511e8f1b69f277d56ef449066452cb7dab19de1b32aca554e0179370af8bda92f24a284c3d8aac54a4505864360b9e24d2ce14a4480373415affb06347c321047f1a5b19cd663ea585f34909c9ac8bd", 0x7c}, {&(0x7f0000001740)="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", 0x225}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x8000) 166.222407ms ago: executing program 0 (id=231): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) 59.873407ms ago: executing program 0 (id=232): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=233): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000180)={0xee95f83cbc28e64b, 0x15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts. [ 82.498675][ T5818] cgroup: Unknown subsys name 'net' [ 82.613603][ T5818] cgroup: Unknown subsys name 'cpuset' [ 82.622793][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.312988][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.588335][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.599244][ T5834] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.621537][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.630734][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.648671][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.656591][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.664287][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.665717][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.680332][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.688740][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.689975][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.703091][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.706826][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.718321][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.721520][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.727183][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.738170][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.744518][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.753592][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.763736][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.345370][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 87.384528][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 87.502120][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 87.553412][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 87.651910][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.659809][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.667018][ T5830] bridge_slave_0: entered allmulticast mode [ 87.674822][ T5830] bridge_slave_0: entered promiscuous mode [ 87.690299][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.697569][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.705502][ T5832] bridge_slave_0: entered allmulticast mode [ 87.713051][ T5832] bridge_slave_0: entered promiscuous mode [ 87.739889][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.747111][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.754470][ T5830] bridge_slave_1: entered allmulticast mode [ 87.761992][ T5830] bridge_slave_1: entered promiscuous mode [ 87.776268][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.783607][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.790917][ T5832] bridge_slave_1: entered allmulticast mode [ 87.798612][ T5832] bridge_slave_1: entered promiscuous mode [ 87.886890][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.899988][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.924433][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.938024][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.995114][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.002652][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.010020][ T5829] bridge_slave_0: entered allmulticast mode [ 88.017453][ T5829] bridge_slave_0: entered promiscuous mode [ 88.036516][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.043828][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.051587][ T5831] bridge_slave_0: entered allmulticast mode [ 88.059579][ T5831] bridge_slave_0: entered promiscuous mode [ 88.082566][ T5830] team0: Port device team_slave_0 added [ 88.088573][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.095872][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.103406][ T5829] bridge_slave_1: entered allmulticast mode [ 88.111069][ T5829] bridge_slave_1: entered promiscuous mode [ 88.120589][ T5832] team0: Port device team_slave_0 added [ 88.126439][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.133925][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.141316][ T5831] bridge_slave_1: entered allmulticast mode [ 88.149172][ T5831] bridge_slave_1: entered promiscuous mode [ 88.171315][ T5830] team0: Port device team_slave_1 added [ 88.202320][ T5832] team0: Port device team_slave_1 added [ 88.228364][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.251743][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.289535][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.323871][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.331016][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.357052][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.371918][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.394082][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.401288][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.427416][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.439576][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.446565][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.473276][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.498376][ T5831] team0: Port device team_slave_0 added [ 88.516387][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.523524][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.550048][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.579182][ T5831] team0: Port device team_slave_1 added [ 88.587776][ T5829] team0: Port device team_slave_0 added [ 88.596913][ T5829] team0: Port device team_slave_1 added [ 88.666708][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.673992][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.700209][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.724150][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.731542][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.757702][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.769061][ T5838] Bluetooth: hci3: command tx timeout [ 88.772693][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.781578][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.807585][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.831505][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.839287][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 88.865802][ T5838] Bluetooth: hci0: command tx timeout [ 88.865946][ T5838] Bluetooth: hci1: command tx timeout [ 88.868091][ T5838] Bluetooth: hci2: command tx timeout [ 88.882549][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.920134][ T5832] hsr_slave_0: entered promiscuous mode [ 88.926798][ T5832] hsr_slave_1: entered promiscuous mode [ 88.950586][ T5830] hsr_slave_0: entered promiscuous mode [ 88.957194][ T5830] hsr_slave_1: entered promiscuous mode [ 88.964000][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 88.969967][ T5830] Cannot create hsr debugfs directory [ 89.056138][ T5829] hsr_slave_0: entered promiscuous mode [ 89.062861][ T5829] hsr_slave_1: entered promiscuous mode [ 89.069754][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 89.075634][ T5829] Cannot create hsr debugfs directory [ 89.169359][ T5831] hsr_slave_0: entered promiscuous mode [ 89.176144][ T5831] hsr_slave_1: entered promiscuous mode [ 89.182805][ T5831] debugfs: 'hsr0' already exists in 'hsr' [ 89.189033][ T5831] Cannot create hsr debugfs directory [ 89.668548][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.683331][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.714791][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.725882][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.832177][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.845669][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.856360][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.875433][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.012903][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.025765][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.077664][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.095516][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.222616][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.239539][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.252302][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.265031][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.276679][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.309909][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.355136][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.362489][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.412788][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.420037][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.437115][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.517464][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.550959][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.584930][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.592170][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.613130][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.656148][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.663436][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.677463][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.684754][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.696746][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.704031][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.845130][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.852428][ T5838] Bluetooth: hci3: command tx timeout [ 90.893961][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.928161][ T5838] Bluetooth: hci2: command tx timeout [ 90.929442][ T5840] Bluetooth: hci1: command tx timeout [ 90.933875][ T5834] Bluetooth: hci0: command tx timeout [ 90.960807][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.014871][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.071695][ T3436] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.078994][ T3436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.104152][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.111448][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.323240][ T5832] veth0_vlan: entered promiscuous mode [ 91.366683][ T5832] veth1_vlan: entered promiscuous mode [ 91.380717][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.412576][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.494636][ T5832] veth0_macvtap: entered promiscuous mode [ 91.517060][ T5832] veth1_macvtap: entered promiscuous mode [ 91.574061][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.605588][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.632609][ T5829] veth0_vlan: entered promiscuous mode [ 91.664093][ T5830] veth0_vlan: entered promiscuous mode [ 91.678997][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.693472][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.713908][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.723530][ T5830] veth1_vlan: entered promiscuous mode [ 91.745578][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.760125][ T5829] veth1_vlan: entered promiscuous mode [ 91.833053][ T5830] veth0_macvtap: entered promiscuous mode [ 91.846846][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.863388][ T5830] veth1_macvtap: entered promiscuous mode [ 91.915796][ T5829] veth0_macvtap: entered promiscuous mode [ 91.940235][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.954399][ T5829] veth1_macvtap: entered promiscuous mode [ 91.961872][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.976058][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.031847][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.041769][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.064729][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.072734][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.081729][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.093840][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.117044][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.127088][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.161530][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.200471][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.225875][ T5831] veth0_vlan: entered promiscuous mode [ 92.253126][ T59] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.291638][ T59] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.309704][ T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.344959][ T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.399922][ T5831] veth1_vlan: entered promiscuous mode [ 92.575493][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.584129][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.623249][ T5831] veth0_macvtap: entered promiscuous mode [ 92.704955][ T5831] veth1_macvtap: entered promiscuous mode [ 92.711524][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.720867][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.742287][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.758310][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.841712][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.873287][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.882521][ T3436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.904325][ T3436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.920736][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.930809][ T5834] Bluetooth: hci3: command tx timeout [ 92.941715][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.953171][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.966853][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.008322][ T5834] Bluetooth: hci1: command tx timeout [ 93.013811][ T5834] Bluetooth: hci0: command tx timeout [ 93.020514][ T5838] Bluetooth: hci2: command tx timeout [ 93.034796][ T5928] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.272106][ T3436] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.312235][ T3436] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.583641][ T3436] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.594140][ T3436] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.088241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.020861][ T5834] Bluetooth: hci3: command tx timeout [ 95.088930][ T5838] Bluetooth: hci1: command tx timeout [ 95.095143][ T5834] Bluetooth: hci2: command tx timeout [ 96.112146][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 96.238045][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.340412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.442877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.768197][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 97.572434][ T5834] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 97.582272][ T5834] Bluetooth: hci0: Injecting HCI hardware error event [ 97.594381][ T5838] Bluetooth: hci0: hardware error 0x00 [ 97.713923][ T29] cfg80211: failed to load regulatory.db [ 98.248799][ T87] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.421467][ T87] usb 1-1: Using ep0 maxpacket: 32 [ 98.465160][ T87] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 98.474608][ T87] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.507983][ T87] usb 1-1: Product: syz [ 98.512240][ T87] usb 1-1: Manufacturer: syz [ 98.541412][ T87] usb 1-1: SerialNumber: syz [ 98.579602][ T87] usb 1-1: config 0 descriptor?? [ 98.877867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 98.986245][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 99.002777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.002820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.588842][ T5989] input: syz0 as /devices/virtual/input/input5 [ 100.511375][ T5838] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 100.721803][ T87] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 002 [ 101.047470][ T5997] ======================================================= [ 101.047470][ T5997] WARNING: The mand mount option has been deprecated and [ 101.047470][ T5997] and is ignored by this kernel. Remove the mand [ 101.047470][ T5997] option from the mount to silence this warning. [ 101.047470][ T5997] ======================================================= [ 101.658302][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 101.838002][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 101.861069][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 101.890056][ T9] usb 3-1: config 17 has an invalid interface number: 8 but max is 1 [ 101.916549][ T9] usb 3-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 101.948104][ T9] usb 3-1: config 17 has no interface number 0 [ 101.954385][ T9] usb 3-1: config 17 interface 8 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 101.978285][ T10] usb 1-1: USB disconnect, device number 2 [ 101.999327][ T9] usb 3-1: config 17 interface 8 has no altsetting 0 [ 102.035799][ T9] usb 3-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 102.045210][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.081081][ T9] usb 3-1: Product: syz [ 102.085326][ T9] usb 3-1: Manufacturer: syz [ 102.104695][ T9] usb 3-1: SerialNumber: syz [ 104.590391][ T9] usb 3-1: selecting invalid altsetting 0 [ 104.680437][ T9] usb 3-1: USB disconnect, device number 2 [ 104.699201][ T6022] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 106.028206][ T5951] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 106.306240][ T5951] usb 4-1: config 0 has no interfaces? [ 106.315395][ T5951] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 106.334890][ T5951] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 106.358914][ T5951] usb 4-1: Product: syz [ 106.363187][ T5951] usb 4-1: Manufacturer: syz [ 106.399525][ T5951] usb 4-1: config 0 descriptor?? [ 106.621572][ T6048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 106.661061][ T6048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.696020][ T87] usb 4-1: USB disconnect, device number 2 [ 107.148035][ T87] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 107.240994][ T6072] input: syz1 as /devices/virtual/input/input6 [ 107.938415][ T87] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 107.946704][ T87] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 107.973632][ T87] usb 4-1: config 0 has no interface number 0 [ 107.979949][ T87] usb 4-1: config 0 interface 168 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.993240][ T87] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 108.011742][ T87] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.026038][ T5838] Bluetooth: hci2: unexpected event 0x06 length: 4 > 3 [ 108.052114][ T87] usb 4-1: config 0 descriptor?? [ 108.310982][ T87] usb 4-1: string descriptor 0 read error: -71 [ 108.320323][ T87] keyspan 4-1:0.168: Keyspan 2 port adapter converter detected [ 108.343108][ T87] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 81 [ 108.364284][ T87] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 1 [ 108.402736][ T87] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 84 [ 108.421495][ T87] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 2 [ 108.484032][ T87] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 108.516350][ T87] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 88 [ 108.539168][ T87] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 6 [ 108.558974][ T87] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 108.597896][ T87] usb 4-1: USB disconnect, device number 3 [ 108.639324][ T87] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 108.648154][ T6095] binder: 6094:6095 ioctl c00c620f 200000000240 returned -22 [ 108.666230][ T87] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 108.680318][ T87] keyspan 4-1:0.168: device disconnected [ 109.607853][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 109.615582][ T87] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 109.797947][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 109.816667][ T9] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 109.844092][ T9] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 109.863518][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.882887][ T9] usb 1-1: Product: syz [ 109.893039][ T9] usb 1-1: Manufacturer: syz [ 109.903196][ T9] usb 1-1: SerialNumber: syz [ 109.948937][ T9] usb 1-1: config 0 descriptor?? [ 109.958820][ T6099] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 109.971173][ T9] hub 1-1:0.0: bad descriptor, ignoring hub [ 109.986220][ T9] hub 1-1:0.0: probe with driver hub failed with error -5 [ 110.022608][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 110.254205][ T5951] usb 1-1: USB disconnect, device number 3 [ 110.254381][ C0] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 113.390951][ T6148] netlink: 'syz.0.85': attribute type 29 has an invalid length. [ 113.400571][ T6153] warning: `syz.2.86' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.415910][ T6151] netlink: 'syz.0.85': attribute type 29 has an invalid length. [ 117.190711][ T6192] netlink: 60 bytes leftover after parsing attributes in process `syz.2.95'. [ 118.352678][ T6194] netlink: 60 bytes leftover after parsing attributes in process `syz.2.95'. [ 118.485026][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 118.666443][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 118.677097][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.730036][ T9] usb 2-1: config 0 descriptor?? [ 118.755471][ T9] cp210x 2-1:0.0: cp210x converter detected [ 119.164575][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 119.597398][ T6254] netlink: 60 bytes leftover after parsing attributes in process `syz.3.119'. [ 119.619528][ T6251] netlink: 60 bytes leftover after parsing attributes in process `syz.3.119'. [ 119.643152][ T6254] netlink: 60 bytes leftover after parsing attributes in process `syz.3.119'. [ 119.801662][ T5942] usb 2-1: USB disconnect, device number 2 [ 119.816823][ T5942] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 119.845208][ T6260] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 119.904638][ T5942] cp210x 2-1:0.0: device disconnected [ 120.749028][ T6286] netlink: 'syz.1.134': attribute type 29 has an invalid length. [ 120.757002][ T6286] netlink: 'syz.1.134': attribute type 3 has an invalid length. [ 120.779534][ T6286] netlink: 132 bytes leftover after parsing attributes in process `syz.1.134'. [ 122.581142][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 122.756727][ T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 122.777887][ T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 122.879430][ T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 122.891371][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.908027][ T6313] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 122.929286][ T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 122.968139][ T5879] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 123.181117][ T5879] usb 4-1: config 0 has no interfaces? [ 123.248629][ T5879] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 123.285149][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 123.311291][ T5879] usb 4-1: Product: syz [ 123.323746][ T5879] usb 4-1: Manufacturer: syz [ 123.353664][ T5879] usb 4-1: config 0 descriptor?? [ 123.405789][ T9] usb 2-1: USB disconnect, device number 3 [ 123.573689][ T6326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.603586][ T6326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.625777][ T5879] usb 4-1: USB disconnect, device number 5 [ 124.091665][ T29] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 124.130604][ T5834] Bluetooth: hci2: command 0x0405 tx timeout [ 124.260114][ T29] usb 4-1: config 0 has an invalid interface number: 168 but max is 0 [ 124.282342][ T29] usb 4-1: config 0 has no interface number 0 [ 124.308040][ T29] usb 4-1: config 0 interface 168 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 124.328029][ T5942] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.363596][ T29] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4 [ 124.373877][ T29] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.389332][ T29] usb 4-1: config 0 descriptor?? [ 124.537970][ T5942] usb 3-1: Using ep0 maxpacket: 16 [ 124.685991][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 124.740461][ T29] usb 4-1: string descriptor 0 read error: -71 [ 125.048282][ T29] keyspan 4-1:0.168: Keyspan 2 port adapter converter detected [ 125.056092][ T29] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 81 [ 125.066521][ T5942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.079806][ T5942] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 125.089775][ T29] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 1 [ 125.099581][ T29] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 84 [ 125.107551][ T29] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 2 [ 125.117196][ T5942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.133075][ T5942] usb 3-1: config 0 descriptor?? [ 125.145450][ T29] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 125.186445][ T29] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 88 [ 125.290562][ T29] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 6 [ 125.329660][ T29] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 125.377395][ T29] usb 4-1: USB disconnect, device number 6 [ 125.406028][ T29] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 125.435971][ T29] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 125.469478][ T29] keyspan 4-1:0.168: device disconnected [ 125.575259][ T5942] corsair 0003:1B1C:1B02.0001: unknown main item tag 0x0 [ 125.597991][ T5942] corsair 0003:1B1C:1B02.0001: unknown main item tag 0x0 [ 125.605191][ T5942] corsair 0003:1B1C:1B02.0001: unknown main item tag 0x0 [ 125.633505][ T5942] corsair 0003:1B1C:1B02.0001: unknown main item tag 0x0 [ 125.654149][ T5942] corsair 0003:1B1C:1B02.0001: unknown main item tag 0x0 [ 125.677784][ T5942] corsair 0003:1B1C:1B02.0001: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0 [ 125.776320][ T5942] corsair 0003:1B1C:1B02.0001: Read invalid backlight brightness: 61. [ 125.838013][ T29] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 125.976386][ T9] usb 3-1: USB disconnect, device number 3 [ 126.201603][ T6365] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 126.825907][ T29] usb 4-1: device descriptor read/all, error -71 [ 127.127929][ T5879] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 127.331012][ T5879] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 127.356913][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.369972][ T5879] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.380391][ T5879] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 127.393854][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 127.413628][ T5879] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.05 [ 127.430431][ T5879] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.452067][ T5879] usb 2-1: config 0 descriptor?? [ 127.597291][ T9] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 127.634303][ T9] usb 3-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 127.651887][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.663371][ T9] usb 3-1: Product: syz [ 127.668679][ T9] usb 3-1: Manufacturer: syz [ 127.673833][ T9] usb 3-1: SerialNumber: syz [ 127.714531][ T9] usb 3-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 127.905466][ T5879] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0 [ 127.946609][ T5879] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0 [ 127.964277][ T5879] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0 [ 127.986062][ T5879] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0 [ 127.994043][ T5879] holtek_kbd 0003:04D9:A055.0002: unknown main item tag 0x0 [ 128.001836][ T5879] holtek_kbd 0003:04D9:A055.0002: item fetching failed at offset 6/7 [ 128.011252][ T5879] holtek_kbd 0003:04D9:A055.0002: probe with driver holtek_kbd failed with error -22 [ 128.102893][ T29] usb 2-1: USB disconnect, device number 4 [ 128.178167][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 128.192241][ T9] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 128.203433][ T9] usb 3-1: media controller created [ 128.248430][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.625504][ T29] usb 3-1: USB disconnect, device number 4 [ 129.218101][ T5879] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 129.388300][ T5879] usb 4-1: Using ep0 maxpacket: 32 [ 129.478079][ T5879] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 129.881683][ T5879] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 129.893536][ T5879] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.934424][ T5879] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 129.957185][ T5879] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 129.975545][ T5879] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.995938][ T5879] usb 4-1: Product: syz [ 130.006111][ T5879] usb 4-1: Manufacturer: syz [ 130.117781][ T5879] usb 4-1: SerialNumber: syz [ 130.150603][ C0] imon 4-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 130.161306][ T5879] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/input/input8 [ 130.408007][ T5879] imon 4-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 130.456213][ T5879] (id 0x00) [ 130.888043][ T5879] rc_core: IR keymap rc-imon-pad not found [ 130.904202][ T5879] Registered IR keymap rc-empty [ 130.914439][ T5879] imon 4-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 130.927748][ T5879] imon 4-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 131.293045][ T5879] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0 [ 131.411429][ T5879] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:155.0/rc/rc0/input9 [ 131.466664][ T5879] imon 4-1:155.0: iMON device (15c2:ffdc, intf0) on usb<4:9> initialized [ 131.518115][ T5879] usb 4-1: USB disconnect, device number 9 [ 131.680711][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 131.858268][ T24] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 131.874134][ T24] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 131.888696][ T6442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.190'. [ 131.897926][ T24] usb 3-1: config 0 interface 0 has no altsetting 0 [ 131.910613][ T24] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 131.928237][ T24] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 131.946942][ T24] usb 3-1: Product: syz [ 131.955733][ T24] usb 3-1: Manufacturer: syz [ 131.961003][ T24] usb 3-1: SerialNumber: syz [ 131.978725][ T24] usb 3-1: config 0 descriptor?? [ 131.992894][ T24] hub 3-1:0.0: bad descriptor, ignoring hub [ 132.005034][ T24] hub 3-1:0.0: probe with driver hub failed with error -5 [ 132.021875][ T24] usb 3-1: selecting invalid altsetting 0 [ 135.604198][ T24] usb 3-1: USB disconnect, device number 5 [ 136.366313][ T30] audit: type=1326 audit(1769517348.637:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6493 comm="syz.2.209" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fceb719aeb9 code=0x0 [ 137.803129][ T6509] loop2: detected capacity change from 0 to 7 [ 137.818374][ T5843] Dev loop2: unable to read RDB block 7 [ 137.824358][ T5843] loop2: AHDI p1 p2 p3 p4 [ 137.830002][ T5843] loop2: partition table partially beyond EOD, truncated [ 137.839484][ T5843] loop2: p1 start 1601398130 is beyond EOD, truncated [ 137.846419][ T5843] loop2: p2 start 1702059890 is beyond EOD, truncated [ 137.854518][ T5843] loop2: p3 start 16777215 is beyond EOD, truncated [ 138.137076][ T6509] Dev loop2: unable to read RDB block 7 [ 138.157477][ T6509] loop2: AHDI p1 p2 p3 p4 [ 138.171812][ T6509] loop2: partition table partially beyond EOD, truncated [ 139.663411][ T5879] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 139.673396][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 139.680376][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.714113][ T6509] loop2: p1 start 1601398130 is beyond EOD, truncated [ 139.740357][ T6509] loop2: p2 start 1702059890 is beyond EOD, truncated [ 139.749953][ T6509] loop2: p3 start 16777215 is beyond EOD, truncated [ 139.917924][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 139.943165][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 139.978108][ T5879] usb 3-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 140.005267][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.039121][ T5879] usb 3-1: config 0 descriptor?? [ 140.057370][ T6523] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 140.427491][ T6529] netlink: 12 bytes leftover after parsing attributes in process `syz.0.220'. [ 140.612223][ T5879] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 140.628039][ T5879] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 140.640966][ T5879] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 140.651492][ T5879] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 140.663053][ T5879] nintendo 0003:057E:200E.0003: unknown main item tag 0x0 [ 140.708563][ T5879] nintendo 0003:057E:200E.0003: hidraw0: USB HID v80.05 Device [HID 057e:200e] on usb-dummy_hcd.2-1/input0 [ 140.788781][ T5879] nintendo 0003:057E:200E.0003: Failed charging grip handshake [ 140.809179][ T5879] nintendo 0003:057E:200E.0003: Failed to initialize controller; ret=-110 [ 140.852058][ T5879] nintendo 0003:057E:200E.0003: probe - fail = -110 [ 140.861372][ T5879] nintendo 0003:057E:200E.0003: probe with driver nintendo failed with error -110 [ 140.919016][ T5879] usb 3-1: USB disconnect, device number 6 [ 140.974599][ T6532] fido_id[6532]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 141.688304][ T29] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 141.728196][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 141.839860][ T29] usb 3-1: config 0 has no interfaces? [ 141.859441][ T29] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.868835][ T5942] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 141.877380][ T29] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.888449][ T29] usb 3-1: Product: syz [ 141.893020][ T29] usb 3-1: Manufacturer: syz [ 141.899243][ T24] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 141.913897][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 141.926175][ T29] usb 3-1: config 0 descriptor?? [ 141.945796][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.965624][ T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 141.979648][ T24] usb 2-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.05 [ 141.990469][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.001715][ T24] usb 2-1: config 0 descriptor?? [ 142.041831][ T5942] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.053083][ T5942] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 142.062256][ T5942] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.072904][ T5942] usb 4-1: config 0 descriptor?? [ 142.146122][ T6542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.155127][ T6542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.180124][ T5879] usb 3-1: USB disconnect, device number 7 [ 142.218475][ T29] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 142.383755][ T29] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 142.392957][ T29] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.401309][ T29] usb 1-1: Product: syz [ 142.405535][ T29] usb 1-1: Manufacturer: syz [ 142.410230][ T29] usb 1-1: SerialNumber: syz [ 142.417537][ T29] usb 1-1: config 0 descriptor?? [ 142.433738][ T24] holtek_kbd 0003:04D9:A055.0004: unknown main item tag 0x0 [ 142.442291][ T24] holtek_kbd 0003:04D9:A055.0004: unknown main item tag 0x0 [ 142.451576][ T24] holtek_kbd 0003:04D9:A055.0004: unknown main item tag 0x0 [ 142.459297][ T24] holtek_kbd 0003:04D9:A055.0004: unknown main item tag 0x0 [ 142.467235][ T24] holtek_kbd 0003:04D9:A055.0004: unknown main item tag 0x0 [ 142.478138][ T24] holtek_kbd 0003:04D9:A055.0004: hidraw0: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.1-1/input0 [ 142.509675][ T5942] keytouch 0003:0926:3333.0005: fixing up Keytouch IEC report descriptor [ 142.538661][ T5942] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0005/input/input10 [ 142.617969][ T5951] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 142.652130][ T5879] usb 2-1: USB disconnect, device number 5 [ 142.690523][ T5942] keytouch 0003:0926:3333.0005: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 142.707739][ C1] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000038: 0000 [#1] SMP KASAN PTI [ 142.719900][ C1] KASAN: null-ptr-deref in range [0x00000000000001c0-0x00000000000001c7] [ 142.728392][ C1] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 142.739225][ C1] Tainted: [L]=SOFTLOCKUP [ 142.743599][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 142.753716][ C1] Workqueue: events console_callback [ 142.759110][ C1] RIP: 0010:__queue_work+0xa2/0xf90 [ 142.764369][ C1] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 142.784024][ C1] RSP: 0018:ffffc90000a07fb8 EFLAGS: 00010002 [ 142.790128][ C1] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 142.798117][ C1] RDX: ffffc90002382000 RSI: 00000000000007ba RDI: 00000000000007bb [ 142.806106][ C1] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 142.814099][ C1] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 142.822095][ C1] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 142.830094][ C1] FS: 0000000000000000(0000) GS:ffff888125163000(0000) knlGS:0000000000000000 [ 142.839054][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 142.845660][ C1] CR2: 00007f7e21bf37b0 CR3: 0000000077ca8000 CR4: 00000000003526f0 [ 142.853667][ C1] Call Trace: [ 142.856964][ C1] [ 142.859832][ C1] ? __asan_memcpy+0x40/0x70 [ 142.864453][ C1] ? __tty_insert_flip_string_flags+0x3e9/0x430 [ 142.870721][ C1] queue_work_on+0x106/0x1d0 [ 142.875348][ C1] puts_queue+0xa3/0xe0 [ 142.879552][ C1] ? __pfx_puts_queue+0x10/0x10 [ 142.884432][ C1] k_fn+0x7c/0xd0 [ 142.888092][ C1] kbd_event+0x2ec1/0x40d0 [ 142.892531][ C1] ? kernel_fpu_end+0x4f/0x80 [ 142.897235][ C1] ? blake2s_compress+0x1e17/0x1eb0 [ 142.902461][ C1] ? queue_work_on+0x143/0x1d0 [ 142.907249][ C1] ? __pfx_kbd_event+0x10/0x10 [ 142.912034][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 142.917096][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 142.922063][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 142.927207][ C1] ? __pfx_blake2s_compress+0x10/0x10 [ 142.932628][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 142.938466][ C1] ? try_to_wake_up+0x7fc/0x1390 [ 142.943454][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 142.948418][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 142.953474][ C1] ? input_pass_values+0x8d/0x890 [ 142.958515][ C1] ? lock_acquire+0x106/0x330 [ 142.963215][ C1] ? input_pass_values+0x8d/0x890 [ 142.968257][ C1] input_handle_events_default+0xd4/0x1a0 [ 142.974000][ C1] ? input_pass_values+0x8d/0x890 [ 142.979046][ C1] input_pass_values+0x288/0x890 [ 142.984004][ C1] ? input_handle_event+0xc35/0xf30 [ 142.989236][ C1] input_event_dispose+0x3e5/0x6b0 [ 142.994385][ C1] input_event+0x89/0xe0 [ 142.998655][ C1] hidinput_hid_event+0x1487/0x1e60 [ 143.003881][ C1] ? __pfx_hidinput_hid_event+0x10/0x10 [ 143.009464][ C1] ? hidinput_hid_event+0x1339/0x1e60 [ 143.014861][ C1] hid_process_event+0x4be/0x620 [ 143.019854][ C1] hid_input_array_field+0x297/0x5f0 [ 143.025166][ C1] hid_report_raw_event+0xdd7/0x1720 [ 143.030497][ C1] hid_input_report+0x44b/0x580 [ 143.035404][ C1] hid_irq_in+0x47e/0x6d0 [ 143.039790][ C1] __usb_hcd_giveback_urb+0x376/0x540 [ 143.045192][ C1] dummy_timer+0xbbd/0x45d0 [ 143.049746][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 143.054708][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 143.060537][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 143.065499][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 143.070486][ C1] __hrtimer_run_queues+0x529/0xc30 [ 143.075723][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 143.081474][ C1] ? read_tsc+0x9/0x20 [ 143.085572][ C1] hrtimer_run_softirq+0x182/0x5a0 [ 143.090714][ C1] handle_softirqs+0x22a/0x7c0 [ 143.095509][ C1] ? __irq_exit_rcu+0x5f/0x150 [ 143.100296][ C1] __irq_exit_rcu+0x5f/0x150 [ 143.104913][ C1] irq_exit_rcu+0x9/0x30 [ 143.109181][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 143.114842][ C1] [ 143.117790][ C1] [ 143.120745][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 143.126752][ C1] RIP: 0010:lock_acquire+0x221/0x330 [ 143.132064][ C1] Code: ff ff ff e8 e1 5d 08 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 fb 8d 9a 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc 48 8d 3d 08 24 94 [ 143.151707][ C1] RSP: 0018:ffffc900001e7b00 EFLAGS: 00000286 [ 143.157812][ C1] RAX: fb05b1da3fbe7800 RBX: 0000000000000000 RCX: 0000000000000046 [ 143.165807][ C1] RDX: 0000000000000001 RSI: ffffffff8e269265 RDI: ffffffff8c294900 [ 143.173798][ C1] RBP: ffffffff818e8cdc R08: 0000000000000008 R09: ffffffff96458c20 [ 143.181794][ C1] R10: 000000005ff3c451 R11: 0000000070c62cce R12: 0000000000000000 [ 143.189789][ C1] R13: ffffc900001e7c40 R14: 0000000000000001 R15: 0000000000000246 [ 143.197799][ C1] ? process_one_work+0x87c/0x15a0 [ 143.202950][ C1] ? process_one_work+0x87c/0x15a0 [ 143.208104][ C1] process_one_work+0x895/0x15a0 [ 143.213067][ C1] ? process_one_work+0x87c/0x15a0 [ 143.218212][ C1] ? __pfx_process_one_work+0x10/0x10 [ 143.223606][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 143.228677][ C1] worker_thread+0xb46/0x1140 [ 143.233390][ C1] kthread+0x388/0x470 [ 143.237509][ C1] ? __pfx_worker_thread+0x10/0x10 [ 143.242680][ C1] ? __pfx_kthread+0x10/0x10 [ 143.247337][ C1] ret_from_fork+0x51b/0xa40 [ 143.251981][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 143.257151][ C1] ? __switch_to+0xc7d/0x1400 [ 143.261868][ C1] ? __pfx_kthread+0x10/0x10 [ 143.266495][ C1] ret_from_fork_asm+0x1a/0x30 [ 143.271296][ C1] [ 143.274336][ C1] Modules linked in: [ 143.278280][ C1] ---[ end trace 0000000000000000 ]--- [ 143.283770][ C1] RIP: 0010:__queue_work+0xa2/0xf90 [ 143.289014][ C1] Code: 11 31 ff 89 ee e8 4e f4 37 00 85 ed 0f 85 ef 0c 00 00 e8 01 f0 37 00 4d 8d b7 c0 01 00 00 4c 89 f0 48 c1 e8 03 48 89 44 24 28 <42> 0f b6 04 20 84 c0 0f 85 22 0d 00 00 4c 89 34 24 41 8b 2e 89 ee [ 143.308666][ C1] RSP: 0018:ffffc90000a07fb8 EFLAGS: 00010002 [ 143.314773][ C1] RAX: 0000000000000038 RBX: 0000000000000008 RCX: 0000000000040000 [ 143.322767][ C1] RDX: ffffc90002382000 RSI: 00000000000007ba RDI: 00000000000007bb [ 143.330764][ C1] RBP: 0000000000000000 R08: ffff88813fe32017 R09: 1ffff11027fc6402 [ 143.338754][ C1] R10: dffffc0000000000 R11: ffffed1027fc6403 R12: dffffc0000000000 [ 143.346752][ C1] R13: ffff88813fe32010 R14: 00000000000001c0 R15: 0000000000000000 [ 143.354753][ C1] FS: 0000000000000000(0000) GS:ffff888125163000(0000) knlGS:0000000000000000 [ 143.363791][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 143.370397][ C1] CR2: 00007f7e21bf37b0 CR3: 0000000077ca8000 CR4: 00000000003526f0 [ 143.378406][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 143.385771][ C1] Kernel Offset: disabled [ 143.390107][ C1] Rebooting in 86400 seconds..