last executing test programs: 14m19.166110846s ago: executing program 0 (id=198): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8d}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90) r3 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) futex(0x0, 0x5, 0x2, 0x0, 0x0, 0xc6fffffd) io_submit(0x0, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000001c00), 0xc) r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x75, 0x109301) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000003740)={0x2, 0x11, 0x5, 0x1, 0x0, 0x81, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000000000006901000000000000800500000000000095000000000000008028c2c6cf086746bd738ee6726074c65eada83b8d21bcc0e6fe316196342edb2e502c657ed6c3929005e5881e4542cbfa"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x48) r5 = accept4(r1, &(0x7f0000000340)=@hci, 0x0, 0x80000) bind$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x2711, @host}, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) 14m17.828508559s ago: executing program 0 (id=200): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$unix(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x40000000}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./cgroup.cpu/cgroup.procs\x00', 0x88080, 0x16) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x82) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)={0x14, 0x0, 0x1, 0x0, 0x25dfdbfc, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000200)=""/179, 0xb3) syz_clone3(0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000004000000080000000f0000000000000055c7c71aa48100f32a933dfbe4ea4780a3b0ae81ac05c338bd464bf2e681f2896117fbfd8534493f4b4fb7794d50525e054954827c7a6ad59da5d11123e86114242ced", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000140), 0xa283, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lld}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r5, r4}, 0xc) 14m17.452307786s ago: executing program 0 (id=203): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="061e0000031401000097b7c6a5eebcb44a0372130d99fd444be045ca7502485cde2b050000000908b68577a99188d0833e943e5b65f3aacd70b0c438bedf3f96a2fc34f99861987b65180afbadde5ea31ac9ad0409f506c23ed722d86a0d59924ed87016102a917465316facf8384971f9f65994dc3a1886b6725a150000000000", 0xffffffffffffff51) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}, 0x1, 0x0, 0x0, 0x4084}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) userfaultfd(0x80801) unshare(0x20000400) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r8, 0x11a, 0x2, 0x0, 0x0) 14m16.557609314s ago: executing program 0 (id=206): r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x40000) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000000)={0x300, 0x32314742, 0x280, 0x3, 0x3, @stepwise={{0x80000001, 0x8}, {0x1, 0x6}, {0x0, 0xfd34}}}) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) syz_ublk_setup_io_uring(0x1e, &(0x7f0000000580)={0x0, 0x9f03, 0x80, 0x6, 0x10001d8}, &(0x7f0000000100), &(0x7f0000000280), &(0x7f0000000140)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) syz_ublk_setup_queues(r3, 0x0, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r5, r5) setresgid(r5, 0xee01, 0x0) ioctl$TUNSETGROUP(r3, 0x400454ce, r5) r6 = socket(0x28, 0x5, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x20, 0x780, 0x80000001, 0x9, {{0x28, 0x4, 0x3, 0x31, 0xa0, 0x65, 0x0, 0x1, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x7, 0x21, [@local]}, @timestamp_addr={0x44, 0x44, 0x63, 0x1, 0x6, [{@local, 0x1}, {@private=0xa010102, 0x8001}, {@rand_addr=0x64010100, 0x2}, {@empty}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x9}, {@loopback, 0x9}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x5}, {@broadcast, 0x4}]}, @ssrr={0x89, 0x17, 0xcf, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, @private=0xa010102, @broadcast]}, @lsrr={0x83, 0x27, 0x14, [@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote, @multicast1, @private=0xa010102, @broadcast, @dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}]}}}}}) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="20010000000000000000000000000001000004d33c000000fc000000000000000000000000000000d0070000000000000100000000000000ffffffffffffff7f4d58000000000000000800000000000000010000000000000b0000000000000013090000000000000200000000000000ff070000000000000100000000000000080000000000000001000080890000000700000027bd7000000000000200053c300000000000000014000e00ac1414210000000000000000000000000c000f0006000000000000000600250002000000"], 0x118}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000e8001100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa0000000000000000f9ffffffffffffff0000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b000200043500000a000200"], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r10, 0x3b80, &(0x7f0000000280)={0x8, r11}) write$binfmt_elf64(r6, &(0x7f0000000140)=ANY=[], 0xde7c) 14m14.125637537s ago: executing program 0 (id=212): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f00000000c0)=0x10000000005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000340)="061e0000031401000097b7c6a5eebcb44a0372130d99fd444be045ca7502485cde2b050000000908b68577a99188d0833e943e5b65f3aacd70b0c438bedf3f96a2fc34f99861987b65180afbadde5ea31ac9ad0409f506c23ed722d86a0d59924ed87016102a917465316facf8384971f9f65994dc3a1886b6725a150000000000", 0xffffffffffffff51) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007"], 0x84}, 0x1, 0x0, 0x0, 0x4084}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) set_mempolicy(0x5, &(0x7f0000000000)=0x2, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r8 = userfaultfd(0x80801) unshare(0x20000400) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) 14m12.369073358s ago: executing program 0 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) 13m56.130984092s ago: executing program 32 (id=215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0xd}, 0x94) 4m21.746130506s ago: executing program 4 (id=1385): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x54, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7fffffff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="64000000090603000000000000000000020000003c0007800c000180080001407f0000010c001480080001400a0101000600044013880000060005403a9800000500070006000000080006400000000105000100060000000900020073797a31"], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x22004000) 4m21.155535441s ago: executing program 4 (id=1386): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 4m20.747543947s ago: executing program 4 (id=1389): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000240)={0x7, {{0xa, 0x0, 0x2, @mcast1}}, {{0xa, 0x4e21, 0x4, @empty, 0x3}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000000000000a00000000000000"], 0x190) 4m20.374902039s ago: executing program 4 (id=1392): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @mcast2}, {0xa, 0x0, 0xb, @loopback={0xffffffffffffff9d}, 0x8}, r4}}, 0x48) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @loopback}, {0xa, 0x4e23, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7fffffff}, r4, 0x80d}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) pipe2(0x0, 0x4080) lseek(0xffffffffffffffff, 0x80000000, 0x1) 4m19.295595164s ago: executing program 4 (id=1394): socket$netlink(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ftruncate(0xffffffffffffffff, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 4m18.696932843s ago: executing program 4 (id=1395): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000080)=""/47, 0x2f}], 0x5, 0x1fe, 0x12) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) close(0x3) 4m3.565300581s ago: executing program 33 (id=1395): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000880)=ANY=[@ANYBLOB="180000002f00090028bd70000000000004000000040010"], 0x18}, 0x1, 0x0, 0x0, 0x42804}, 0x20000004) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') preadv(r1, &(0x7f0000000580)=[{&(0x7f0000000100)=""/212, 0xd4}, {&(0x7f0000000200)=""/202, 0xca}, {&(0x7f0000000000)=""/19, 0x13}, {&(0x7f0000000040)=""/22, 0x16}, {&(0x7f0000000080)=""/47, 0x2f}], 0x5, 0x1fe, 0x12) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x11012, r2, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4), 0xc) close(0x3) 12.363451509s ago: executing program 2 (id=1856): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r0, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) pwritev(r1, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000380)="81000000", 0x4}], 0x2, 0x8, 0x4080000) close(0xffffffffffffffff) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000024000000080000000b"], 0x48) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x8008662c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYRES64=r5], &(0x7f0000000480)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00}, 0x94) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fchdir(r8) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x9100, &(0x7f0000000100)={0xb, 0x8, 0x100000}, 0x20) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000300), r7) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fcdbdf252e00000005002b000100000005002e00050000000c0005000202aaaaaaaaaaaa0a3c9fd8a737ba1183c60db92976bffc260001007770616e31000000f416c5a6bcd53ee1c426da"], 0x3c}}, 0x400488e4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4}, &(0x7f0000000340), &(0x7f0000000380)=r3}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r4, &(0x7f0000000080)="9b6058", &(0x7f0000000140)=""/209}, 0x20) 12.273927924s ago: executing program 1 (id=1857): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) timer_settime(r0, 0x1, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TCXONC(r1, 0x540a, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000600)={0xb, 0x29, 0x2}, 0xb) write$char_usb(r2, 0x0, 0x0) 11.974299628s ago: executing program 2 (id=1859): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x10}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000700850000002d"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(0xffffffffffffffff, 0x8002f515, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmsg$unix(r2, &(0x7f0000008780)={&(0x7f0000007400)=@abs, 0x6e, &(0x7f00000086c0)=[{&(0x7f0000007480)=""/246, 0xf6}, {&(0x7f0000007580)=""/121, 0x79}, {&(0x7f0000007600)=""/4096, 0x1000}, {&(0x7f0000008600)=""/55, 0x37}, {&(0x7f0000008640)=""/104, 0x68}], 0x5, &(0x7f0000008740)}, 0x10000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='slave-24c02 0x1', 0xf) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_FSETXATTR={0x29, 0x9, 0x0, 0xffffffffffffffff, &(0x7f0000000700)="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", 0x0, 0x660c, 0x1, 0x1}) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$IOC_PR_PREEMPT_ABORT(r3, 0x401870cc, &(0x7f0000000180)={0x1, 0x10001, 0x4, 0x1}) ioctl$KVM_RUN(r5, 0xae80, 0x0) rseq(&(0x7f0000000080), 0x20, 0x0, 0x0) r6 = memfd_create(&(0x7f00000002c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e22, 0x7fffffff, @mcast2, 0xffff}, {0xa, 0x4e23, 0x6f8, @loopback, 0x7fff}, 0x0, {[0x1, 0x0, 0x5, 0x1, 0xd, 0x7, 0xffffffff, 0x8]}}, 0x5c) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r5, &(0x7f0000000140)={0x1f, 0x0, @none, 0x4, 0x2}, 0x3e) write(0xffffffffffffffff, &(0x7f0000000180)='traceon', 0x7) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x169e41, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/191, 0xbf) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) 8.405013638s ago: executing program 1 (id=1861): add_key$fscrypt_v1(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0800886300000200b6e7140002004620021600680000030690780a010100e000000194", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x224) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000c0000004200000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 8.403266225s ago: executing program 2 (id=1862): syz_usb_connect(0x2, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12015002e746fd08ac05a812a8020102030109021200010340207c090830f6aa54fc5cb754070401000ffe140945f5f4bdafeb4d2d4b542905d860b1bb6fe210dcafd41d1adb244260c2bbf055ac9cfbc6d84bd45e9209f8004ad01856737820476e6dc113191d480900e3000000000000"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1809}}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000180)) syz_io_uring_setup(0x2d9, 0x0, 0x0, 0x0, 0x0) r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402505a8a4410001020b0109021b00010100c000090400000207010100090501020002"], 0x0) r1 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r1, 0x107, 0x6, 0x0, &(0x7f0000000280)) syz_usb_control_io$printer(r0, 0x0, &(0x7f00000011c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) ioctl$sock_SIOCDELRT(r1, 0x890c, &(0x7f0000000640)={0x0, @tipc=@name={0x1e, 0x2, 0x2, {{0x1, 0x1}, 0x1}}, @generic={0x38, "dcf3957edf44c4253cb911d48e38"}, @hci={0x1f, 0x2, 0x4}, 0x5da, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9, 0x4, 0x10}) syz_open_dev$char_usb(0xc, 0xb4, 0x1100020000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x143000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fsopen(0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x5, 0x7a0, &(0x7f0000001200)=ANY=[@ANYBLOB="12011001df382540cd0c990095bd0102030109028e0703020910000904"], 0x0) bind$bt_hci(r3, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000400)="08000100010001", 0x7) 8.33654013s ago: executing program 3 (id=1863): write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0800886300000200b6e71400020046200216", @ANYRES32=0x41424344, @ANYBLOB="a1100007907800081312570ae7f0b905a456f064db0300ffe61e0000ff09eb92334ce7bdbce1cc8ea7c31c4233f717f38859083e7244d871b6582e4b77453efb5c862f933cb39161906e8b6c78ab07fe1b3fe07565e76f2049a8f11350ffa159ce18eb0ce3712cc785657be76b1587f708924c9feb2e292ab97040cca863de23b3b516cc537105bb0404f84119e4260762c50671dc5aab1358ab653fbfb4bbcd3b4664ec16d8f9ec7829cd1af4a5450585bb1de8f968728adf5dec1de9e1e4a8ababf331c67b6c63551249f96344f4f4656e7cd6bf657857a8af5d2df76f377033b968501e40ed92b801d6efaaa61b"], 0x224) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000c0000004200000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.883178009s ago: executing program 1 (id=1864): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000240), 0x400) unshare(0x2040400) poll(&(0x7f0000000400)=[{r0, 0x40}], 0x1, 0x6) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) unshare(0x20000680) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r2, 0xff, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000540)="ad4c8390c20000000000000000001d6ca6e902b47717922edc31eb44f3135e2745", 0x21) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a"], 0x20}}, 0x0) accept$unix(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x6e) r4 = syz_open_dev$loop(&(0x7f0000000240), 0x75f, 0xa8182) r5 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000380)=ANY=[], 0x8) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x39, 0xffffffffffffffff, &(0x7f0000000000)) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) setrlimit(0x3, &(0x7f0000000040)={0x7fffffffffffffff, 0x80000000}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00001b0000)={0x0, 0x0, &(0x7f00001b0040)={&(0x7f00001b0080)=@getqdisc={0x24, 0x26, 0x301, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1}}, 0x24}}, 0x0) read(r3, &(0x7f0000000080)=""/22, 0x16) 6.915303383s ago: executing program 3 (id=1866): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) sendfile(r1, r0, 0x0, 0x7ffff000) 4.677105761s ago: executing program 2 (id=1867): ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000000)={0x300, 0x32314742, 0x280, 0x3, 0x3, @stepwise={{0x80000001, 0x8}, {0x1, 0x6}, {0x0, 0xfd34}}}) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = syz_ublk_setup_io_uring(0x1e, &(0x7f0000000580)={0x0, 0x9f03, 0x80, 0x6, 0x10001d8}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresgid(0x0, 0x0, 0x0) setresgid(0x0, 0xee01, 0x0) ioctl$TUNSETGROUP(r7, 0x400454ce, 0x0) r9 = socket(0x28, 0x5, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x20, 0x780, 0x80000001, 0x9, {{0x5, 0x4, 0x3, 0x31, 0x14, 0x65, 0x0, 0x1, 0x0, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) stat(&(0x7f0000000700)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000a80)=ANY=[@ANYBLOB="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", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="20010000000000000000000000000001000004d33c000000fc000000000000000000000000000000d0070000000000000100000000000000ffffffffffffff7f4d58000000000000000800000000000000010000000000000b0000000000000013090000000000000200000000000000ff070000000000000100000000000000080000000000000001000080890000000700000027bd7000000000000200053c300000000000000014000e00ac1414210000000000000000000000000c000f0006000000000000000600250002000000"], 0x118}}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="380100002100010000000000fefffffffc020000000000000000000000000000fc020000000000000000000000000001fffc0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000e8001100fe80000000000000000000000000001164010102000000000000000000000000ac1414aa0000000000000000f9ffffffffffffff0000000000000000000000bb3c000000000000000a000a00fc020000000000000000000000000001e0000002000000000000000000000000fe880000000000000000000000000101200100000000000000000000000000022b000200043500000a000200"], 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) r13 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, 0x0, 0x0, 0x0}) ioctl$IOMMU_DESTROY$stdev(r13, 0x3b80, &(0x7f0000000280)={0x8, r14}) 4.62190053s ago: executing program 3 (id=1868): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd63"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x80040033, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 4.402627168s ago: executing program 3 (id=1869): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31"], 0x7c}, 0x1, 0x0, 0x0, 0x48811}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x104, 0x6, 0xa, 0x403, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0xd0, 0x4, 0x0, 0x1, [{0xcc, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xbc, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_MATCH_INFO={0xa0, 0x3, "06275c852770226714b06026799504d26462d0f7a66ead44d6899e1445d97832ad457d06138b69af69d529be95f1911eab1846eb51bda151a6b0736302fdfb9f2c903fa06bb26b5a1ce76b17878e8174d345499079f1da597f0326854d62b1f5d97f2de35a9cb60da0764d08dbaf74939de34af914a3ea3f02ca57df07e9ed10aecb90bdbabcfcdd62e3ef6913b29a63fd42d9276dc54b68f9bc26a0"}, @NFTA_MATCH_NAME={0xe, 0x1, 'conntrack\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'b'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x12c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x2, 0x0, &(0x7f00000001c0)=0xe) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r3, 0x0, 0x80) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 4.208714235s ago: executing program 1 (id=1870): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$vcsu(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0) timer_settime(r0, 0x1, 0x0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TCXONC(r1, 0x540a, 0x0) write$P9_RREADDIR(r2, &(0x7f0000000600)={0xb, 0x29, 0x2}, 0xb) write$char_usb(r2, 0x0, 0x0) 3.441532562s ago: executing program 2 (id=1871): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020600) setsockopt$MRT6_DEL_MFC(0xffffffffffffffff, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e22, 0x7fffffff, @mcast2, 0xffff}, {0xa, 0x4e23, 0x6f8, @loopback, 0x7fff}, 0x0, {[0x1, 0x0, 0x5, 0x1, 0xd, 0x7, 0xffffffff, 0x8]}}, 0x5c) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) connect$bt_l2cap(r5, &(0x7f0000000140)={0x1f, 0x0, @none, 0x4, 0x2}, 0x3e) write(0xffffffffffffffff, &(0x7f0000000180)='traceon', 0x7) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x169e41, 0x0) getdents64(0xffffffffffffffff, &(0x7f0000000300)=""/191, 0xbf) ioctl$UI_END_FF_ERASE(r0, 0x400c55cb, 0x0) 3.095540106s ago: executing program 1 (id=1872): fanotify_init(0x200, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0), 0x1e1802, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000500)={0x0, 0x30b5, 0x80, 0x0, 0x158, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, 0x0, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x2100, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0x2, 0x100ae}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x200, 0x0, 0x1f0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 2.118937322s ago: executing program 1 (id=1873): add_key$fscrypt_v1(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000240)=ANY=[@ANYBLOB="0800886300000200b6e7140002004620021600680000030690780a010100e000000194", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="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"], 0x224) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="050000000c0000004200000040000000c0"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000640), 0x16c5, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r2, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r3, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 2 (id=1874): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000001c0)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@fallback=r0, 0x26, 0x1, 0x80, &(0x7f0000000080)=[0x0], 0x1, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00'}) socket$netlink(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000001c0)=0x80000) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000002c0)='attr/keycreate\x00') preadv(r4, &(0x7f00000022c0)=[{&(0x7f00000000c0)=""/33, 0x21}], 0x1, 0x5, 0x8) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@CTA_EXPECT_MASK={0x2c, 0x3, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010100}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x377fa621}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x4000804) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r1) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r3, 0x7af, &(0x7f00000000c0)={@hyper, 0x2}) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r2, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 743.805865][ T6755] usb 3-1: Using ep0 maxpacket: 8 [ 743.806377][ T6755] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 743.807374][ T6755] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 743.807389][ T6755] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 743.807402][ T6755] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 743.807414][ T6755] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 743.807475][ T6755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.971954][T11104] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1243'. [ 744.056101][ T6755] usb 3-1: GET_CAPABILITIES returned 0 [ 744.056135][ T6755] usbtmc 3-1:16.0: can't read capabilities [ 744.360858][ T6755] usb 3-1: USB disconnect, device number 42 [ 744.531761][T11112] ieee80211 X»_7E̪=›: Selected rate control algorithm 'minstrel_ht' [ 745.124961][T11122] netlink: 144 bytes leftover after parsing attributes in process `syz.3.1247'. [ 745.265759][ T6755] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 745.418561][ T6755] usb 3-1: Using ep0 maxpacket: 16 [ 746.989401][T11141] netlink: 'syz.4.1255': attribute type 20 has an invalid length. [ 746.989488][T11141] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 747.381495][ T6755] usb 3-1: unable to get BOS descriptor or descriptor too short [ 747.381540][ T6755] usb 3-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 747.382276][ T6755] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 747.382297][ T6755] usb 3-1: can't read configurations, error -71 [ 747.392831][T11136] binder_alloc: 11135: binder_alloc_buf, no vma [ 752.340394][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.340442][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.435117][ T6755] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 754.588300][ T6755] usb 5-1: Using ep0 maxpacket: 16 [ 754.588946][ T6755] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 754.589875][ T6755] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 754.593978][ T6755] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 754.593994][ T6755] usb 5-1: Product: syz [ 754.594001][ T6755] usb 5-1: Manufacturer: syz [ 754.594009][ T6755] usb 5-1: SerialNumber: syz [ 754.615997][ T6755] usb 5-1: config 0 descriptor?? [ 754.632900][ T6755] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 754.632921][ T6755] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 756.423955][ T6755] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 759.234006][ T6755] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 759.234028][ T6755] em28xx 5-1:0.0: board has no eeprom [ 759.480919][T11202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1271'. [ 759.485845][ T6755] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 759.485864][ T6755] em28xx 5-1:0.0: dvb set to bulk mode. [ 759.495722][ T6073] em28xx 5-1:0.0: Binding DVB extension [ 759.561312][ T6755] usb 5-1: USB disconnect, device number 38 [ 759.562707][ T6755] em28xx 5-1:0.0: Disconnecting em28xx [ 759.690841][ T3362] bridge_slave_1: left allmulticast mode [ 759.690866][ T3362] bridge_slave_1: left promiscuous mode [ 759.691018][ T3362] bridge0: port 2(bridge_slave_1) entered disabled state [ 759.738667][ T3362] bridge_slave_0: left allmulticast mode [ 759.738699][ T3362] bridge_slave_0: left promiscuous mode [ 759.738893][ T3362] bridge0: port 1(bridge_slave_0) entered disabled state [ 760.182155][ T6073] em28xx 5-1:0.0: Registering input extension [ 760.188341][ T6755] em28xx 5-1:0.0: Closing input extension [ 760.562800][ T6755] em28xx: Freeing device [ 762.378167][ T3362] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.387696][ T3362] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.395611][ T3362] bond0 (unregistering): Released all slaves [ 762.415828][T10973] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.415896][T10973] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.416021][T10973] bridge_slave_0: entered allmulticast mode [ 762.424591][T10973] bridge_slave_0: entered promiscuous mode [ 762.440043][T10973] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.441341][T10973] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.479316][T10973] bridge_slave_1: entered allmulticast mode [ 762.521509][T10973] bridge_slave_1: entered promiscuous mode [ 762.724846][T10973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 762.820944][T10973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 763.008135][ T3362] hsr_slave_0: left promiscuous mode [ 763.030932][ T3362] hsr_slave_1: left promiscuous mode [ 763.031702][ T3362] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 763.129411][ T3362] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 764.210914][T11286] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 764.210932][T11286] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 764.210990][T11286] vhci_hcd vhci_hcd.0: Device attached [ 764.217252][T11286] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 764.217269][T11286] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 764.224989][T11286] vhci_hcd vhci_hcd.0: Device attached [ 764.255469][T11286] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(8) [ 764.255488][T11286] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 764.255516][T11286] vhci_hcd vhci_hcd.0: Device attached [ 764.263638][T11286] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(10) [ 764.263656][T11286] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 764.263686][T11286] vhci_hcd vhci_hcd.0: Device attached [ 764.285732][T11286] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(12) [ 764.285751][T11286] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 764.285782][T11286] vhci_hcd vhci_hcd.0: Device attached [ 764.287240][T11286] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(14) [ 764.287255][T11286] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 764.287283][T11286] vhci_hcd vhci_hcd.0: Device attached [ 764.288894][T11286] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(16) [ 764.288908][T11286] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 764.289848][T11286] vhci_hcd vhci_hcd.0: Device attached [ 764.341482][T11299] vhci_hcd: connection closed [ 764.342514][T11301] vhci_hcd: connection closed [ 764.343989][T11297] vhci_hcd: connection closed [ 764.346747][T11292] vhci_hcd: connection closed [ 764.347123][T11295] vhci_hcd: connection closed [ 764.347256][T11289] vhci_hcd: connection closed [ 764.353220][T11287] vhci_hcd: connection closed [ 764.357206][ T990] vhci_hcd vhci_hcd.2: stop threads [ 764.357224][ T990] vhci_hcd vhci_hcd.2: release socket [ 764.357265][ T990] vhci_hcd vhci_hcd.2: disconnect device [ 764.364481][ T990] vhci_hcd vhci_hcd.2: stop threads [ 764.364495][ T990] vhci_hcd vhci_hcd.2: release socket [ 764.364518][ T990] vhci_hcd vhci_hcd.2: disconnect device [ 764.364608][ T990] vhci_hcd vhci_hcd.2: stop threads [ 764.364615][ T990] vhci_hcd vhci_hcd.2: release socket [ 764.364652][ T990] vhci_hcd vhci_hcd.2: disconnect device [ 764.370334][ T990] vhci_hcd vhci_hcd.2: stop threads [ 764.370348][ T990] vhci_hcd vhci_hcd.2: release socket [ 764.469707][ T5582] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 764.481483][T11288] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 764.490435][ T990] vhci_hcd vhci_hcd.2: disconnect device [ 764.494138][ T990] vhci_hcd vhci_hcd.2: stop threads [ 764.494158][ T990] vhci_hcd vhci_hcd.2: release socket [ 764.510849][ T990] vhci_hcd vhci_hcd.2: disconnect device [ 764.555442][ T990] vhci_hcd vhci_hcd.2: stop threads [ 764.555464][ T990] vhci_hcd vhci_hcd.2: release socket [ 764.555521][ T990] vhci_hcd vhci_hcd.2: disconnect device [ 764.555565][ T990] vhci_hcd vhci_hcd.2: stop threads [ 764.555572][ T990] vhci_hcd vhci_hcd.2: release socket [ 764.555603][ T990] vhci_hcd vhci_hcd.2: disconnect device [ 764.877041][ T3362] team0 (unregistering): Port device team_slave_1 removed [ 765.323114][ T3362] team0 (unregistering): Port device team_slave_0 removed [ 767.476419][ T5254] 8021q: adding VLAN 0 to HW filter on device eth5 [ 767.590038][T10973] team0: Port device team_slave_0 added [ 767.604479][T10973] team0: Port device team_slave_1 added [ 768.202241][T10973] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.202253][T10973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.202267][T10973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.231087][T10973] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.231101][T10973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 768.231115][T10973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.494413][T10973] hsr_slave_0: entered promiscuous mode [ 768.811229][T10973] hsr_slave_1: entered promiscuous mode [ 768.812009][T10973] debugfs: 'hsr0' already exists in 'hsr' [ 768.812026][T10973] Cannot create hsr debugfs directory [ 769.606461][ T5582] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 772.817006][T11354] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1312'. [ 773.207957][ T5616] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 780.176458][ T5254] 8021q: adding VLAN 0 to HW filter on device eth6 [ 780.246735][T11402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1323'. [ 780.455360][T11406] FAULT_INJECTION: forcing a failure. [ 780.455360][T11406] name failslab, interval 1, probability 0, space 0, times 0 [ 780.455387][T11406] CPU: 0 UID: 0 PID: 11406 Comm: syz.2.1324 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 780.455412][T11406] Tainted: [L]=SOFTLOCKUP [ 780.455416][T11406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 780.455424][T11406] Call Trace: [ 780.455428][T11406] [ 780.455434][T11406] dump_stack_lvl+0xe8/0x150 [ 780.455458][T11406] should_fail_ex+0x46b/0x600 [ 780.455476][T11406] should_failslab+0xa8/0x100 [ 780.455493][T11406] ? prepare_creds+0x30/0x820 [ 780.455530][T11406] kmem_cache_alloc_noprof+0x9e/0x690 [ 780.455546][T11406] ? prepare_creds+0x30/0x820 [ 780.455560][T11406] prepare_creds+0x30/0x820 [ 780.455573][T11406] lookup_user_key+0x38a/0x1150 [ 780.455593][T11406] ? __pfx_lookup_user_key+0x10/0x10 [ 780.455608][T11406] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 780.455624][T11406] ? futex_wait+0x2a2/0x390 [ 780.455638][T11406] ? __pfx_futex_wait+0x10/0x10 [ 780.455655][T11406] keyctl_session_to_parent+0x28/0xa30 [ 780.455672][T11406] __se_sys_keyctl+0x780/0x9d0 [ 780.455687][T11406] ? __pfx___se_sys_keyctl+0x10/0x10 [ 780.455701][T11406] ? __pfx_do_futex+0x10/0x10 [ 780.455710][T11406] ? do_fanotify_mark+0x96c/0x1020 [ 780.455736][T11406] ? __se_sys_futex+0x3a8/0x450 [ 780.455750][T11406] ? rcu_is_watching+0x16/0xb0 [ 780.455769][T11406] ? __x64_sys_keyctl+0x20/0xc0 [ 780.455783][T11406] do_syscall_64+0x166/0x520 [ 780.455800][T11406] ? trace_irq_disable+0x3b/0x140 [ 780.455813][T11406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.455825][T11406] ? clear_bhb_loop+0x70/0xc0 [ 780.455838][T11406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 780.455849][T11406] RIP: 0033:0x7f6675c9e159 [ 780.455860][T11406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 780.455869][T11406] RSP: 002b:00007f6673ef6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 780.455882][T11406] RAX: ffffffffffffffda RBX: 00007f6675f25fa0 RCX: 00007f6675c9e159 [ 780.455889][T11406] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 780.455896][T11406] RBP: 00007f6675d3506b R08: 0000000000000000 R09: 0000000000000000 [ 780.455902][T11406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 780.455908][T11406] R13: 00007f6675f26038 R14: 00007f6675f25fa0 R15: 00007ffe110870a8 [ 780.455925][T11406] [ 782.482958][T11443] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1334'. [ 783.958813][T11451] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 783.958830][T11451] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 783.958888][T11451] vhci_hcd vhci_hcd.0: Device attached [ 783.971126][T11451] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 783.971145][T11451] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 783.971176][T11451] vhci_hcd vhci_hcd.0: Device attached [ 783.977504][T11451] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 783.977521][T11451] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 783.977549][T11451] vhci_hcd vhci_hcd.0: Device attached [ 783.992087][T11451] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10) [ 783.992106][T11451] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 783.992135][T11451] vhci_hcd vhci_hcd.0: Device attached [ 784.945960][T11451] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 784.945979][T11451] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 784.946014][T11451] vhci_hcd vhci_hcd.0: Device attached [ 784.950352][T11451] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(14) [ 784.950370][T11451] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 784.950398][T11451] vhci_hcd vhci_hcd.0: Device attached [ 784.956217][T11451] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(16) [ 784.956234][T11451] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 784.956297][T11451] vhci_hcd vhci_hcd.0: Device attached [ 784.985641][T11462] vhci_hcd: connection closed [ 784.985906][T11454] vhci_hcd: connection closed [ 784.987479][T11457] vhci_hcd: connection closed [ 784.987651][T11464] vhci_hcd: connection closed [ 784.987785][T11460] vhci_hcd: connection closed [ 784.988035][ T3348] vhci_hcd vhci_hcd.1: stop threads [ 784.988051][ T3348] vhci_hcd vhci_hcd.1: release socket [ 784.988073][ T3348] vhci_hcd vhci_hcd.1: disconnect device [ 784.988229][ T3348] vhci_hcd vhci_hcd.1: stop threads [ 784.988237][ T3348] vhci_hcd vhci_hcd.1: release socket [ 784.988254][ T3348] vhci_hcd vhci_hcd.1: disconnect device [ 784.988303][T11469] vhci_hcd: connection closed [ 784.988431][T11467] vhci_hcd: connection closed [ 784.988657][ T3348] vhci_hcd vhci_hcd.1: stop threads [ 784.988666][ T3348] vhci_hcd vhci_hcd.1: release socket [ 784.988684][ T3348] vhci_hcd vhci_hcd.1: disconnect device [ 784.990294][ T3348] vhci_hcd vhci_hcd.1: stop threads [ 784.990303][ T3348] vhci_hcd vhci_hcd.1: release socket [ 784.990322][ T3348] vhci_hcd vhci_hcd.1: disconnect device [ 784.990482][ T3348] vhci_hcd vhci_hcd.1: stop threads [ 784.990490][ T3348] vhci_hcd vhci_hcd.1: release socket [ 784.990507][ T3348] vhci_hcd vhci_hcd.1: disconnect device [ 784.990668][ T3348] vhci_hcd vhci_hcd.1: stop threads [ 784.990675][ T3348] vhci_hcd vhci_hcd.1: release socket [ 784.990692][ T3348] vhci_hcd vhci_hcd.1: disconnect device [ 784.990836][ T3348] vhci_hcd vhci_hcd.1: stop threads [ 784.990843][ T3348] vhci_hcd vhci_hcd.1: release socket [ 784.990860][ T3348] vhci_hcd vhci_hcd.1: disconnect device [ 786.454606][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 787.328934][ T9327] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 787.364576][ T9327] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 787.376928][ T9327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 787.383203][ T9327] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 787.385235][ T9327] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 787.745134][T11415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.789081][T11415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.869069][T11492] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1345'. [ 788.789801][ T5254] 8021q: adding VLAN 0 to HW filter on device eth7 [ 788.795857][ T3418] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.795896][ T3418] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.795916][ T3418] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.795934][ T3418] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.856618][ T6755] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 789.041371][ T6755] usb 2-1: unable to get BOS descriptor or descriptor too short [ 789.041416][ T6755] usb 2-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40 [ 789.043375][ T6755] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.043397][ T6755] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 789.048151][ T6755] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.048168][ T6755] usb 2-1: Product: syz [ 789.048175][ T6755] usb 2-1: Manufacturer: syz [ 789.048183][ T6755] usb 2-1: SerialNumber: syz [ 789.438531][ T5616] Bluetooth: hci0: command tx timeout [ 790.780153][ T6755] usb 2-1: USB disconnect, device number 44 [ 791.200644][T11516] udevd[11516]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 791.515765][ T9327] Bluetooth: hci0: command tx timeout [ 792.486038][ T6755] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 792.770080][ T6755] usb 3-1: not running at top speed; connect to a high speed hub [ 792.770116][ T6755] usb 3-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 1.00 [ 792.879410][ T6755] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 792.879445][ T6755] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 792.879474][ T6755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.595730][ T9327] Bluetooth: hci0: command tx timeout [ 795.676669][ T9327] Bluetooth: hci0: command tx timeout [ 796.591074][ T6755] ums-onetouch 3-1:1.0: USB Mass Storage device detected [ 797.841888][ T6755] usb 3-1: USB disconnect, device number 45 [ 801.960537][ T9] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 807.055742][ T6073] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 807.307604][ T6073] usb 3-1: not running at top speed; connect to a high speed hub [ 807.307686][ T6073] usb 3-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 1.00 [ 807.308628][ T6073] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 807.308656][ T6073] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 807.308678][ T6073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.326033][ T6073] ums-onetouch 3-1:1.0: USB Mass Storage device detected [ 807.752011][ T6073] usb 3-1: USB disconnect, device number 47 [ 808.093867][ T92] bridge_slave_1: left allmulticast mode [ 808.093894][ T92] bridge_slave_1: left promiscuous mode [ 808.094060][ T92] bridge0: port 2(bridge_slave_1) entered disabled state [ 808.096124][ T92] bridge_slave_0: left allmulticast mode [ 808.096145][ T92] bridge_slave_0: left promiscuous mode [ 808.096291][ T92] bridge0: port 1(bridge_slave_0) entered disabled state [ 808.266010][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1397'. [ 808.379388][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1398'. [ 808.381638][ T92] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 808.385448][ T92] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.389495][ T92] bond0 (unregistering): Released all slaves [ 808.661475][T11674] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 808.808733][T11690] bond1: Removing last arp target with arp_interval on [ 812.827671][ T92] hsr_slave_0: left promiscuous mode [ 812.847427][ T92] hsr_slave_1: left promiscuous mode [ 812.848117][ T92] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 812.881074][ T92] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 813.205814][ T6073] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 813.357179][ T6073] usb 4-1: not running at top speed; connect to a high speed hub [ 813.357205][ T6073] usb 4-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice= 1.00 [ 813.358238][ T6073] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.358267][ T6073] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 813.358281][ T6073] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 813.358303][ T6073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.430166][T11719] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 813.449090][ T6073] ums-onetouch 4-1:1.0: USB Mass Storage device detected [ 813.456938][ T6755] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 813.627022][ T6755] usb 2-1: Using ep0 maxpacket: 16 [ 813.652941][ T6755] usb 2-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40 [ 813.653972][ T6755] usb 2-1: config 1 has an invalid interface descriptor of length 8, skipping [ 813.653986][ T6755] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 813.653995][ T6755] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 813.655943][ T6755] usb 2-1: New USB device strings: Mfr=1, Product=16, SerialNumber=3 [ 813.655956][ T6755] usb 2-1: Product: syz [ 813.655964][ T6755] usb 2-1: Manufacturer: syz [ 813.655971][ T6755] usb 2-1: SerialNumber: syz [ 813.728658][ T9] usb 4-1: USB disconnect, device number 34 [ 813.796476][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 813.796519][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 814.376283][ T92] team0 (unregistering): Port device team_slave_1 removed [ 814.466666][ T92] team0 (unregistering): Port device team_slave_0 removed [ 816.666455][T11747] TCP: TCP_TX_DELAY enabled [ 818.079776][ T6755] usb 2-1: Audio class v2/v3 interfaces need an interface association [ 818.802241][ T6755] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 818.811912][ T6755] usb 2-1: USB disconnect, device number 45 [ 818.861433][T11722] udevd[11722]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 819.580525][T11144] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 819.696568][T11757] warning: `syz.3.1410' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 819.738574][T11479] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.738643][T11479] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.738768][T11479] bridge_slave_0: entered allmulticast mode [ 819.740222][T11479] bridge_slave_0: entered promiscuous mode [ 819.766253][T11144] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 819.768868][T11144] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.768884][T11144] usb 3-1: Product: syz [ 819.768891][T11144] usb 3-1: Manufacturer: syz [ 819.768898][T11144] usb 3-1: SerialNumber: syz [ 819.772637][T11144] usb 3-1: config 0 descriptor?? [ 819.861054][T11479] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.861173][T11479] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.861332][T11479] bridge_slave_1: entered allmulticast mode [ 819.869450][T11479] bridge_slave_1: entered promiscuous mode [ 820.045841][T11144] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 821.168621][T11479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 821.196110][T11479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.398592][T11144] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 821.490733][T11479] team0: Port device team_slave_0 added [ 821.494711][T11479] team0: Port device team_slave_1 added [ 821.495784][ T5710] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 821.569893][T11479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 821.569905][T11479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.569919][T11479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 821.618057][T11479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 821.618069][T11479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 821.618083][T11479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 821.646209][ T5710] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 821.647092][ T5710] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.647109][ T5710] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 821.647123][ T5710] usb 2-1: config 0 interface 0 has no altsetting 0 [ 821.647150][ T5710] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.692933][ T5710] usb 2-1: config 0 descriptor?? [ 821.730607][ T6073] usb 3-1: USB disconnect, device number 48 [ 821.993770][T11479] hsr_slave_0: entered promiscuous mode [ 822.000322][T11479] hsr_slave_1: entered promiscuous mode [ 822.001013][T11479] debugfs: 'hsr0' already exists in 'hsr' [ 822.001028][T11479] Cannot create hsr debugfs directory [ 822.595051][ T5710] sony 0003:054C:0268.0002: can't set operational mode: step 1 [ 822.595154][ T5710] sony 0003:054C:0268.0002: Failed to set controller into operational mode [ 822.870816][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 822.903062][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 822.908985][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 822.921060][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 822.934954][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 823.426058][ T5710] sony 0003:054C:0268.0002: hiddev0,hidraw0: USB HID v80.00 Joystick [HID 054c:0268] on usb-dummy_hcd.1-1/input0 [ 823.426081][ T5710] sony 0003:054C:0268.0002: failed to claim input [ 824.115282][ T5710] usb 2-1: USB disconnect, device number 46 [ 825.450862][ T5616] Bluetooth: hci5: command tx timeout [ 827.365302][T11828] netlink: 'syz.3.1429': attribute type 20 has an invalid length. [ 827.672432][ T5616] Bluetooth: hci5: command tx timeout [ 828.501114][ T48] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 828.501138][ T48] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.675739][ T5616] Bluetooth: hci5: command tx timeout [ 831.755738][ T5616] Bluetooth: hci5: command tx timeout [ 834.453082][T11868] netlink: 'syz.2.1440': attribute type 20 has an invalid length. [ 834.453166][T11868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 834.455804][ T6755] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 834.599024][T11871] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 834.628875][ T6755] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 834.632204][ T6755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 834.632221][ T6755] usb 4-1: Product: syz [ 834.632228][ T6755] usb 4-1: Manufacturer: syz [ 834.632236][ T6755] usb 4-1: SerialNumber: syz [ 834.635068][ T6755] usb 4-1: config 0 descriptor?? [ 834.859750][ T6755] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 835.470014][ T48] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 835.470037][ T48] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 835.959902][ T6755] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 835.966114][ T6755] usb 4-1: USB disconnect, device number 35 [ 836.515014][ T48] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.515037][ T48] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 839.352620][T11905] wireguard0: entered promiscuous mode [ 839.352637][T11905] wireguard0: entered allmulticast mode [ 839.674260][ T48] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 839.674283][ T48] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.317459][T11479] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 846.396936][T11479] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 846.469720][ T6755] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 846.616787][ T6755] usb 4-1: Using ep0 maxpacket: 32 [ 846.617358][ T6755] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 846.623203][ T6755] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 846.623219][ T6755] usb 4-1: config 0 has no interface number 0 [ 846.624925][ T6755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 846.624938][ T6755] usb 4-1: Product: syz [ 846.624946][ T6755] usb 4-1: Manufacturer: syz [ 846.624953][ T6755] usb 4-1: SerialNumber: syz [ 846.646812][ T6755] usb 4-1: config 0 descriptor?? [ 846.745794][ T6755] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 847.109144][ T6755] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 847.312016][ T6755] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 847.322902][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 847.374274][ T6755] usb 4-1: USB disconnect, device number 36 [ 847.431004][ T6755] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 847.512707][ T6755] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 847.513192][ T6755] quatech2 4-1:0.51: device disconnected [ 849.753474][ T9327] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 849.792489][ T9327] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 849.800909][ T9327] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 849.801930][ T9327] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 849.810120][ T9327] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 850.322526][T12000] Bluetooth: MGMT ver 1.23 [ 852.318381][T11792] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.318449][T11792] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.318583][T11792] bridge_slave_0: entered allmulticast mode [ 852.321438][T11792] bridge_slave_0: entered promiscuous mode [ 853.270873][ T5616] Bluetooth: hci0: command tx timeout [ 853.288783][T12000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1478'. [ 853.291581][T12000] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 853.291627][T12000] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 853.301884][T11792] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.301950][T11792] bridge0: port 2(bridge_slave_1) entered disabled state [ 853.302092][T11792] bridge_slave_1: entered allmulticast mode [ 853.319840][T11792] bridge_slave_1: entered promiscuous mode [ 854.676691][ T48] bridge_slave_1: left allmulticast mode [ 854.676716][ T48] bridge_slave_1: left promiscuous mode [ 854.676874][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.130351][ T48] bridge_slave_0: left allmulticast mode [ 855.130378][ T48] bridge_slave_0: left promiscuous mode [ 855.130524][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.500242][ T9327] Bluetooth: hci0: command tx timeout [ 857.218537][T12055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1489'. [ 857.221251][T12055] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 857.221284][T12055] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 857.260154][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 857.262811][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 857.264857][ T48] bond0 (unregistering): Released all slaves [ 857.440316][T12031] sch_tbf: burst 6 is lower than device ip6tnl0 mtu (1452) ! [ 857.443892][ T5254] 8021q: adding VLAN 0 to HW filter on device eth5 [ 857.477101][T11792] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 857.579331][ T9327] Bluetooth: hci0: command tx timeout [ 857.587383][T11792] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 858.812548][T11792] team0: Port device team_slave_0 added [ 858.868146][T11792] team0: Port device team_slave_1 added [ 859.562022][T12083] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1491'. [ 859.562920][T11792] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.562930][T11792] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.562944][T11792] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.591198][T11792] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.591211][T11792] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 859.591225][T11792] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.601603][ T9327] Bluetooth: hci0: command tx timeout [ 860.375066][T11792] hsr_slave_0: entered promiscuous mode [ 860.380218][T11792] hsr_slave_1: entered promiscuous mode [ 860.380685][T11792] debugfs: 'hsr0' already exists in 'hsr' [ 860.380699][T11792] Cannot create hsr debugfs directory [ 860.951133][ T48] hsr_slave_0: left promiscuous mode [ 860.951727][ T48] hsr_slave_1: left promiscuous mode [ 860.952401][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 860.952417][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 860.954906][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 860.954923][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 861.202134][ T48] veth1_macvtap: left promiscuous mode [ 861.202200][ T48] veth0_macvtap: left promiscuous mode [ 861.202601][ T48] veth1_vlan: left promiscuous mode [ 861.202714][ T48] veth0_vlan: left promiscuous mode [ 863.714661][ T9] hid_parser_main: 30 callbacks suppressed [ 863.714748][ T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 863.899762][ T48] team0 (unregistering): Port device team_slave_1 removed [ 863.993824][ T48] team0 (unregistering): Port device team_slave_0 removed [ 864.261815][T12143] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1506'. [ 864.471635][ T9] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 864.703502][T12146] fido_id[12146]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 864.912682][ T5254] 8021q: adding VLAN 0 to HW filter on device eth6 [ 865.870666][ T9] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 865.870900][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 866.126665][ T9] usb 3-1: device descriptor read/64, error -32 [ 866.367638][ T9] usb 3-1: new full-speed USB device number 50 using dummy_hcd [ 866.516492][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 866.520052][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 866.520069][ T9] usb 3-1: Product: syz [ 866.520076][ T9] usb 3-1: Manufacturer: syz [ 866.520083][ T9] usb 3-1: SerialNumber: syz [ 866.523315][ T9] usb 3-1: config 0 descriptor?? [ 866.735978][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 867.424205][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 871.551529][ T6073] usb 3-1: USB disconnect, device number 50 [ 873.626919][T12209] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1517'. [ 873.703284][ T5254] 8021q: adding VLAN 0 to HW filter on device eth7 [ 873.704668][T11981] bridge0: port 1(bridge_slave_0) entered blocking state [ 873.704739][T11981] bridge0: port 1(bridge_slave_0) entered disabled state [ 873.704840][T11981] bridge_slave_0: entered allmulticast mode [ 873.711906][T11981] bridge_slave_0: entered promiscuous mode [ 873.725127][T11981] bridge0: port 2(bridge_slave_1) entered blocking state [ 873.725194][T11981] bridge0: port 2(bridge_slave_1) entered disabled state [ 873.725320][T11981] bridge_slave_1: entered allmulticast mode [ 873.737246][T11981] bridge_slave_1: entered promiscuous mode [ 874.090012][T12216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1520'. [ 874.752727][T11981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 874.841627][T11981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 875.019457][T11144] usb 4-1: new full-speed USB device number 37 using dummy_hcd [ 875.166808][T11144] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 875.169909][T11144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.169925][T11144] usb 4-1: Product: syz [ 875.169932][T11144] usb 4-1: Manufacturer: syz [ 875.169940][T11144] usb 4-1: SerialNumber: syz [ 875.200196][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.200237][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.247687][T11144] usb 4-1: config 0 descriptor?? [ 875.487687][T11144] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 876.176606][T11144] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 876.236326][T11981] team0: Port device team_slave_0 added [ 877.575591][ T6073] usb 4-1: USB disconnect, device number 37 [ 877.743573][T11981] team0: Port device team_slave_1 added [ 877.745110][T11792] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 877.772856][T11792] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 877.774575][ T5254] 8021q: adding VLAN 0 to HW filter on device eth8 [ 877.828573][T11792] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 877.850761][T11792] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 877.933682][T11792] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 877.972082][T12261] FAULT_INJECTION: forcing a failure. [ 877.972082][T12261] name failslab, interval 1, probability 0, space 0, times 0 [ 877.972108][T12261] CPU: 0 UID: 0 PID: 12261 Comm: syz.2.1531 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 877.972127][T12261] Tainted: [L]=SOFTLOCKUP [ 877.972132][T12261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 877.972139][T12261] Call Trace: [ 877.972144][T12261] [ 877.972150][T12261] dump_stack_lvl+0xe8/0x150 [ 877.972172][T12261] should_fail_ex+0x46b/0x600 [ 877.972190][T12261] should_failslab+0xa8/0x100 [ 877.972208][T12261] kmem_cache_alloc_node_noprof+0xac/0x660 [ 877.972223][T12261] ? dup_task_struct+0x52/0xa00 [ 877.972237][T12261] ? dup_task_struct+0x52/0xa00 [ 877.972255][T12261] dup_task_struct+0x52/0xa00 [ 877.972268][T12261] ? rt_spin_unlock+0x165/0x200 [ 877.972285][T12261] copy_process+0x820/0x43f0 [ 877.972313][T12261] ? __pfx_copy_process+0x10/0x10 [ 877.972333][T12261] vhost_task_create+0x1f9/0x380 [ 877.972344][T12261] ? __pfx_vhost_run_work_list+0x10/0x10 [ 877.972442][T12261] ? __pfx_vhost_worker_killed+0x10/0x10 [ 877.972463][T12261] ? __pfx_vhost_task_create+0x10/0x10 [ 877.972478][T12261] ? __pfx_vhost_task_fn+0x10/0x10 [ 877.972495][T12261] ? snprintf+0xe8/0x140 [ 877.972511][T12261] vhost_task_worker_create+0x94/0x290 [ 877.972524][T12261] ? __pfx_snprintf+0x10/0x10 [ 877.972537][T12261] ? __pfx_vhost_task_worker_create+0x10/0x10 [ 877.972554][T12261] vhost_worker_create+0x245/0x310 [ 877.972565][T12261] ? trace_kmalloc+0x2a/0xf0 [ 877.972578][T12261] ? __pfx_vhost_worker_create+0x10/0x10 [ 877.972589][T12261] ? vhost_dev_set_owner+0x316/0xb00 [ 877.972602][T12261] vhost_dev_set_owner+0x716/0xb00 [ 877.972619][T12261] vhost_dev_ioctl+0xcf/0x11f0 [ 877.972636][T12261] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 877.972646][T12261] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 877.972663][T12261] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 877.972678][T12261] ? mutex_lock_nested+0x152/0x1d0 [ 877.972690][T12261] ? vhost_vsock_dev_ioctl+0x223/0xee0 [ 877.972727][T12261] vhost_vsock_dev_ioctl+0x231/0xee0 [ 877.972743][T12261] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 877.972756][T12261] ? __fget_files+0x2a/0x420 [ 877.972767][T12261] ? __fget_files+0x3a8/0x420 [ 877.972777][T12261] ? __fget_files+0x2a/0x420 [ 877.972790][T12261] ? bpf_lsm_file_ioctl+0x9/0x20 [ 877.972803][T12261] ? __pfx_vhost_vsock_dev_ioctl+0x10/0x10 [ 877.972815][T12261] __se_sys_ioctl+0xff/0x170 [ 877.972829][T12261] do_syscall_64+0x166/0x520 [ 877.972844][T12261] ? trace_irq_disable+0x3b/0x140 [ 877.972857][T12261] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.972868][T12261] ? clear_bhb_loop+0x70/0xc0 [ 877.972880][T12261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 877.972891][T12261] RIP: 0033:0x7f6675c9e159 [ 877.972903][T12261] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 877.972912][T12261] RSP: 002b:00007f6673ef6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 877.972925][T12261] RAX: ffffffffffffffda RBX: 00007f6675f25fa0 RCX: 00007f6675c9e159 [ 877.972933][T12261] RDX: 0000000000000000 RSI: 000000000000af01 RDI: 0000000000000004 [ 877.972939][T12261] RBP: 00007f6675d3506b R08: 0000000000000000 R09: 0000000000000000 [ 877.972946][T12261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 877.972953][T12261] R13: 00007f6675f26038 R14: 00007f6675f25fa0 R15: 00007ffe110870a8 [ 877.972978][T12261] [ 877.987967][T11792] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 878.595839][T11144] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 878.748763][T11144] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 878.749736][T11144] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.749750][T11144] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 878.751486][T11144] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 878.751500][T11144] usb 2-1: Product: syz [ 878.751508][T11144] usb 2-1: Manufacturer: syz [ 878.751515][T11144] usb 2-1: SerialNumber: syz [ 878.834265][T11981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 878.834278][T11981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.834292][T11981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 878.841138][T11144] usb 2-1: config 0 descriptor?? [ 878.850562][T11792] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 878.911071][T11792] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 878.919255][T11981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 878.919267][T11981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 878.919281][T11981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.275083][T11981] hsr_slave_0: entered promiscuous mode [ 879.282586][T11981] hsr_slave_1: entered promiscuous mode [ 879.283939][T11981] debugfs: 'hsr0' already exists in 'hsr' [ 879.283955][T11981] Cannot create hsr debugfs directory [ 881.165727][ T9] usb 4-1: new full-speed USB device number 38 using dummy_hcd [ 881.245796][ T6073] usb 2-1: USB disconnect, device number 47 [ 881.317809][ T9] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 881.321690][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.321706][ T9] usb 4-1: Product: syz [ 881.321714][ T9] usb 4-1: Manufacturer: syz [ 881.321721][ T9] usb 4-1: SerialNumber: syz [ 881.385379][ T9] usb 4-1: config 0 descriptor?? [ 881.653281][ T9] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 882.275385][ T9] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 883.006924][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 883.043760][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 883.055478][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 883.073374][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 883.095223][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 883.965251][ T6073] usb 4-1: USB disconnect, device number 38 [ 885.195875][ T9327] Bluetooth: hci1: command tx timeout [ 887.280189][ T9327] Bluetooth: hci1: command tx timeout [ 887.989632][ T48] bridge_slave_1: left allmulticast mode [ 887.989697][ T48] bridge_slave_1: left promiscuous mode [ 887.989892][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 888.078815][ T48] bridge_slave_0: left allmulticast mode [ 888.078840][ T48] bridge_slave_0: left promiscuous mode [ 888.079080][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 888.440653][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 888.443803][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 888.467146][ T48] bond0 (unregistering): Released all slaves [ 888.611190][ T5582] usb 4-1: new full-speed USB device number 39 using dummy_hcd [ 888.705046][ T9] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 888.776240][ T5582] usb 4-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 888.777155][ T5582] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 888.777169][ T5582] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 888.782058][ T5582] usb 4-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 888.782074][ T5582] usb 4-1: Product: syz [ 888.782081][ T5582] usb 4-1: Manufacturer: syz [ 888.782089][ T5582] usb 4-1: SerialNumber: syz [ 888.787686][ T5582] usb 4-1: config 0 descriptor?? [ 888.891259][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 888.904239][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.904259][ T9] usb 2-1: Product: syz [ 888.904266][ T9] usb 2-1: Manufacturer: syz [ 888.904274][ T9] usb 2-1: SerialNumber: syz [ 888.920786][ T9] usb 2-1: config 0 descriptor?? [ 889.165193][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 889.373415][ T9327] Bluetooth: hci1: command tx timeout [ 889.777779][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 891.445127][ T9327] Bluetooth: hci1: command tx timeout [ 891.462580][ T5582] usb 4-1: USB disconnect, device number 39 [ 891.464307][ T5710] usb 2-1: USB disconnect, device number 48 [ 891.586865][ T48] hsr_slave_0: left promiscuous mode [ 891.594151][ T48] hsr_slave_1: left promiscuous mode [ 891.594841][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 891.622927][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 892.155091][ T48] team0 (unregistering): Port device team_slave_1 removed [ 892.172172][ T48] team0 (unregistering): Port device team_slave_0 removed [ 895.308352][T12404] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1569'. [ 895.365827][ T5582] usb 4-1: new full-speed USB device number 40 using dummy_hcd [ 895.518108][ T5582] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 895.520703][ T5582] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.520718][ T5582] usb 4-1: Product: syz [ 895.520726][ T5582] usb 4-1: Manufacturer: syz [ 895.520733][ T5582] usb 4-1: SerialNumber: syz [ 895.541771][ T5582] usb 4-1: config 0 descriptor?? [ 895.767333][ T5582] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 895.972773][ T5582] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 900.335367][T12313] bridge0: port 1(bridge_slave_0) entered blocking state [ 900.335488][T12313] bridge0: port 1(bridge_slave_0) entered disabled state [ 900.335664][T12313] bridge_slave_0: entered allmulticast mode [ 900.339005][T12313] bridge_slave_0: entered promiscuous mode [ 900.343503][T12313] bridge0: port 2(bridge_slave_1) entered blocking state [ 900.344447][T12313] bridge0: port 2(bridge_slave_1) entered disabled state [ 900.344549][T12313] bridge_slave_1: entered allmulticast mode [ 900.348871][T12313] bridge_slave_1: entered promiscuous mode [ 900.515382][T11144] usb 4-1: USB disconnect, device number 40 [ 902.066512][T12313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.477015][ T5582] usb 4-1: new full-speed USB device number 41 using dummy_hcd [ 902.519990][T12313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.627962][ T5582] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 902.662903][ T5582] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 902.662920][ T5582] usb 4-1: Product: syz [ 902.662927][ T5582] usb 4-1: Manufacturer: syz [ 902.662935][ T5582] usb 4-1: SerialNumber: syz [ 902.674687][ T5582] usb 4-1: config 0 descriptor?? [ 903.716596][T12313] team0: Port device team_slave_0 added [ 903.733487][T12313] team0: Port device team_slave_1 added [ 904.719553][T11981] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 904.723191][T11981] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 904.724809][T12313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 904.724819][T12313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 904.724832][T12313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 905.741882][T11981] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 905.744713][T11981] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 905.745409][T12313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 905.745418][T12313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 905.745432][T12313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 905.753974][T11981] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 905.759987][T11981] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 905.766390][T11981] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 905.770121][T11981] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 905.837360][ T5582] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 905.837422][ T5582] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 905.995941][ T5582] usb 4-1: USB disconnect, device number 41 [ 906.336461][T12313] hsr_slave_0: entered promiscuous mode [ 906.342847][T12313] hsr_slave_1: entered promiscuous mode [ 906.344567][T12313] debugfs: 'hsr0' already exists in 'hsr' [ 906.344585][T12313] Cannot create hsr debugfs directory [ 906.523291][T12532] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 906.523309][T12532] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 906.524538][T12532] vhci_hcd vhci_hcd.0: Device attached [ 906.532371][T12532] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 906.532388][T12532] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 906.532420][T12532] vhci_hcd vhci_hcd.0: Device attached [ 906.545781][T12532] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 906.545799][T12532] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 906.545827][T12532] vhci_hcd vhci_hcd.0: Device attached [ 906.574776][T12532] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10) [ 906.574795][T12532] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 906.574826][T12532] vhci_hcd vhci_hcd.0: Device attached [ 906.588554][T12532] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 906.588572][T12532] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 906.588601][T12532] vhci_hcd vhci_hcd.0: Device attached [ 906.597674][T12532] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(14) [ 906.597692][T12532] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 906.597722][T12532] vhci_hcd vhci_hcd.0: Device attached [ 906.611556][T12532] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(16) [ 906.611574][T12532] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 906.611630][T12532] vhci_hcd vhci_hcd.0: Device attached [ 906.657164][T12550] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x01 (-16) [ 906.670788][T12543] vhci_hcd: connection closed [ 906.671112][ T1010] vhci_hcd vhci_hcd.1: stop threads [ 906.671128][ T1010] vhci_hcd vhci_hcd.1: release socket [ 906.671174][ T1010] vhci_hcd vhci_hcd.1: disconnect device [ 906.671253][T12548] vhci_hcd: connection closed [ 906.671524][ T1010] vhci_hcd vhci_hcd.1: stop threads [ 906.671533][ T1010] vhci_hcd vhci_hcd.1: release socket [ 906.671551][ T1010] vhci_hcd vhci_hcd.1: disconnect device [ 906.671622][T12535] vhci_hcd: connection closed [ 906.671887][ T1010] vhci_hcd vhci_hcd.1: stop threads [ 906.671895][ T1010] vhci_hcd vhci_hcd.1: release socket [ 906.671933][ T1010] vhci_hcd vhci_hcd.1: disconnect device [ 906.672332][T12537] vhci_hcd: connection closed [ 906.672513][T12546] vhci_hcd: connection closed [ 906.672746][ T1010] vhci_hcd vhci_hcd.1: stop threads [ 906.672754][ T1010] vhci_hcd vhci_hcd.1: release socket [ 906.672793][ T1010] vhci_hcd vhci_hcd.1: disconnect device [ 906.672996][ T1010] vhci_hcd vhci_hcd.1: stop threads [ 906.673004][ T1010] vhci_hcd vhci_hcd.1: release socket [ 906.673048][ T1010] vhci_hcd vhci_hcd.1: disconnect device [ 906.673117][T12539] vhci_hcd: connection closed [ 906.673259][T12541] vhci_hcd: connection closed [ 906.674411][ T1010] vhci_hcd vhci_hcd.1: stop threads [ 906.674421][ T1010] vhci_hcd vhci_hcd.1: release socket [ 906.674461][ T1010] vhci_hcd vhci_hcd.1: disconnect device [ 906.680234][ T1010] vhci_hcd vhci_hcd.1: stop threads [ 906.680246][ T1010] vhci_hcd vhci_hcd.1: release socket [ 906.680289][ T1010] vhci_hcd vhci_hcd.1: disconnect device [ 906.872015][ T6073] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 907.642749][T12573] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x01 (-16) [ 907.735718][ T9] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 907.903207][ T9] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 907.906721][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.906737][ T9] usb 3-1: Product: syz [ 907.906745][ T9] usb 3-1: Manufacturer: syz [ 907.906753][ T9] usb 3-1: SerialNumber: syz [ 907.930024][ T9] usb 3-1: config 0 descriptor?? [ 908.207403][ T9] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 908.404605][ T9] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 912.029533][ T9] usb 3-1: USB disconnect, device number 51 [ 912.120728][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 912.162414][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 912.172003][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 912.202487][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 912.202960][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 912.390913][T12604] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 912.390932][T12604] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 912.390994][T12604] vhci_hcd vhci_hcd.0: Device attached [ 912.410479][T12604] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 912.410497][T12604] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 912.410525][T12604] vhci_hcd vhci_hcd.0: Device attached [ 912.453784][T12604] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(8) [ 912.453802][T12604] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 912.453839][T12604] vhci_hcd vhci_hcd.0: Device attached [ 912.462689][T12604] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(10) [ 912.462706][T12604] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 912.462737][T12604] vhci_hcd vhci_hcd.0: Device attached [ 912.479212][T12604] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(12) [ 912.479234][T12604] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 912.479261][T12604] vhci_hcd vhci_hcd.0: Device attached [ 912.485313][T12604] vhci_hcd vhci_hcd.0: pdev(2) rhport(5) sockfd(14) [ 912.485329][T12604] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 912.485360][T12604] vhci_hcd vhci_hcd.0: Device attached [ 912.527420][T12604] vhci_hcd vhci_hcd.0: pdev(2) rhport(6) sockfd(16) [ 912.527439][T12604] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 912.527505][T12604] vhci_hcd vhci_hcd.0: Device attached [ 912.554614][T12613] vhci_hcd: connection closed [ 912.557482][ T1035] vhci_hcd vhci_hcd.2: stop threads [ 912.557500][ T1035] vhci_hcd vhci_hcd.2: release socket [ 912.557538][ T1035] vhci_hcd vhci_hcd.2: disconnect device [ 912.620007][T12611] vhci_hcd: connection closed [ 912.622829][T12618] vhci_hcd: connection closed [ 912.626614][T12624] vhci_hcd: connection closed [ 912.627833][T12616] vhci_hcd: connection closed [ 912.630186][T12620] vhci_hcd: connection closed [ 912.630334][ T12] vhci_hcd vhci_hcd.2: stop threads [ 912.630350][ T12] vhci_hcd vhci_hcd.2: release socket [ 912.630397][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 912.632263][ T12] vhci_hcd vhci_hcd.2: stop threads [ 912.632274][ T12] vhci_hcd vhci_hcd.2: release socket [ 912.632318][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 912.633502][ T12] vhci_hcd vhci_hcd.2: stop threads [ 912.633513][ T12] vhci_hcd vhci_hcd.2: release socket [ 912.633533][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 912.634295][T12608] vhci_hcd: connection closed [ 912.636941][ T12] vhci_hcd vhci_hcd.2: stop threads [ 912.636952][ T12] vhci_hcd vhci_hcd.2: release socket [ 912.636994][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 912.640685][ T12] vhci_hcd vhci_hcd.2: stop threads [ 912.640696][ T12] vhci_hcd vhci_hcd.2: release socket [ 912.640737][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 912.644307][ T12] vhci_hcd vhci_hcd.2: stop threads [ 912.644318][ T12] vhci_hcd vhci_hcd.2: release socket [ 912.644352][ T12] vhci_hcd vhci_hcd.2: disconnect device [ 912.675794][ T5582] usb 37-1: new high-speed USB device number 5 using vhci_hcd [ 912.675862][ T5582] usb 37-1: enqueue for inactive port 0 [ 912.688768][ T48] bridge_slave_1: left allmulticast mode [ 912.688792][ T48] bridge_slave_1: left promiscuous mode [ 912.688953][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 912.747913][ T5582] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 912.930234][ T48] bridge_slave_0: left allmulticast mode [ 912.930260][ T48] bridge_slave_0: left promiscuous mode [ 912.930426][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 913.030719][T12633] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x01 (-16) [ 913.100820][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 913.106153][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 913.107785][ T48] bond0 (unregistering): Released all slaves [ 913.685020][T12641] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x01 (-16) [ 916.885555][ T48] hsr_slave_0: left promiscuous mode [ 916.886655][ T48] hsr_slave_1: left promiscuous mode [ 916.887264][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 916.887756][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 916.938533][ T5616] Bluetooth: hci0: command tx timeout [ 919.259520][T12662] netlink: 'syz.3.1619': attribute type 1 has an invalid length. [ 920.724758][ T9327] Bluetooth: hci0: command tx timeout [ 920.760421][T12667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1621'. [ 920.933651][ T48] team0 (unregistering): Port device team_slave_1 removed [ 920.945406][ T48] team0 (unregistering): Port device team_slave_0 removed [ 921.116940][T12662] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 921.902942][T12688] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x01 (-16) [ 925.232109][ T9327] Bluetooth: hci0: command tx timeout [ 926.056362][T12709] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1630'. [ 927.280055][ T5616] Bluetooth: hci0: command tx timeout [ 931.221950][T12752] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1640'. [ 931.246490][T12756] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x01 (-16) [ 931.270281][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1641'. [ 931.270307][T12755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1641'. [ 933.764439][T12809] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1650'. [ 934.155112][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1653'. [ 934.155137][T12815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1653'. [ 934.468895][T12597] bridge0: port 1(bridge_slave_0) entered blocking state [ 934.469385][T12597] bridge0: port 1(bridge_slave_0) entered disabled state [ 934.469534][T12597] bridge_slave_0: entered allmulticast mode [ 934.485024][T12597] bridge_slave_0: entered promiscuous mode [ 934.491461][T12597] bridge0: port 2(bridge_slave_1) entered blocking state [ 934.491528][T12597] bridge0: port 2(bridge_slave_1) entered disabled state [ 934.491634][T12597] bridge_slave_1: entered allmulticast mode [ 934.493674][T12597] bridge_slave_1: entered promiscuous mode [ 934.560616][ T9] usb 2-1: new full-speed USB device number 49 using dummy_hcd [ 934.718637][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 934.719657][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 934.719671][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 934.724074][ T9] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 934.724089][ T9] usb 2-1: Product: syz [ 934.724097][ T9] usb 2-1: Manufacturer: syz [ 934.724104][ T9] usb 2-1: SerialNumber: syz [ 934.730592][ T9] usb 2-1: config 0 descriptor?? [ 934.813385][T12597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 934.947877][T12597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 936.742776][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.745572][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.341675][ T5710] usb 2-1: USB disconnect, device number 49 [ 938.994822][T12848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1661'. [ 939.225706][ T5710] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 939.376307][ T5710] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 939.377191][ T5710] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 939.378898][ T5710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 939.378912][ T5710] usb 4-1: Product: syz [ 939.378919][ T5710] usb 4-1: Manufacturer: syz [ 939.378927][ T5710] usb 4-1: SerialNumber: syz [ 939.611005][ T5710] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 939.708723][T12597] team0: Port device team_slave_0 added [ 939.758462][T12597] team0: Port device team_slave_1 added [ 939.800683][T12846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 939.801002][T12846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 940.007489][T12597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 940.007502][T12597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.007517][T12597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 940.098757][T12313] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 940.314641][ T5710] usb 4-1: USB disconnect, device number 42 [ 940.621163][ T5710] usblp0: removed [ 940.629706][T12313] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 940.642176][T12597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 940.642190][T12597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 940.642393][T12597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 940.674405][T12313] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 940.757497][T12313] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 940.776829][T12313] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 940.844658][T12313] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 940.860598][T12313] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 940.863762][T12313] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 941.075222][T12597] hsr_slave_0: entered promiscuous mode [ 941.090590][T12597] hsr_slave_1: entered promiscuous mode [ 941.091100][T12597] debugfs: 'hsr0' already exists in 'hsr' [ 941.091116][T12597] Cannot create hsr debugfs directory [ 941.259065][T12878] FAULT_INJECTION: forcing a failure. [ 941.259065][T12878] name failslab, interval 1, probability 0, space 0, times 0 [ 941.259091][T12878] CPU: 0 UID: 60928 PID: 12878 Comm: syz.3.1667 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 941.259107][T12878] Tainted: [L]=SOFTLOCKUP [ 941.259110][T12878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 941.259117][T12878] Call Trace: [ 941.259122][T12878] [ 941.259127][T12878] dump_stack_lvl+0xe8/0x150 [ 941.259149][T12878] should_fail_ex+0x46b/0x600 [ 941.259167][T12878] should_failslab+0xa8/0x100 [ 941.259185][T12878] __kmalloc_noprof+0xfb/0x790 [ 941.259199][T12878] ? security_key_alloc+0x51/0x390 [ 941.259213][T12878] ? security_key_alloc+0x51/0x390 [ 941.259229][T12878] security_key_alloc+0x51/0x390 [ 941.259247][T12878] key_alloc+0x7fd/0xfe0 [ 941.259270][T12878] keyring_alloc+0x45/0xb0 [ 941.259283][T12878] join_session_keyring+0x13b/0x440 [ 941.259300][T12878] lookup_user_key+0x2b5/0x1150 [ 941.259314][T12878] ? __futex_wait+0x35a/0x410 [ 941.259329][T12878] ? __pfx_lookup_user_key+0x10/0x10 [ 941.259344][T12878] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 941.259364][T12878] ? try_to_wake_up+0x84b/0x1430 [ 941.259377][T12878] keyctl_get_persistent+0x24e/0x7a0 [ 941.259391][T12878] ? __pfx_keyctl_get_persistent+0x10/0x10 [ 941.259400][T12878] ? futex_wait+0x2a2/0x390 [ 941.259413][T12878] ? __pfx_futex_wait+0x10/0x10 [ 941.259432][T12878] __se_sys_keyctl+0x797/0x9d0 [ 941.259446][T12878] ? __pfx___se_sys_keyctl+0x10/0x10 [ 941.259460][T12878] ? __pfx_do_futex+0x10/0x10 [ 941.259470][T12878] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 941.259488][T12878] ? __se_sys_futex+0x3a8/0x450 [ 941.259502][T12878] ? rcu_is_watching+0x16/0xb0 [ 941.259522][T12878] ? __x64_sys_keyctl+0x20/0xc0 [ 941.259536][T12878] do_syscall_64+0x166/0x520 [ 941.259551][T12878] ? trace_irq_disable+0x3b/0x140 [ 941.259565][T12878] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.259576][T12878] ? clear_bhb_loop+0x70/0xc0 [ 941.259588][T12878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.259599][T12878] RIP: 0033:0x7ff6764fe159 [ 941.259610][T12878] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 941.259619][T12878] RSP: 002b:00007ff674756028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 941.259631][T12878] RAX: ffffffffffffffda RBX: 00007ff676785fa0 RCX: 00007ff6764fe159 [ 941.259639][T12878] RDX: fffffffffffffffd RSI: ffffffffffffffff RDI: 0000000000000016 [ 941.259645][T12878] RBP: 00007ff67659506b R08: 0000000000000000 R09: 0000000000000000 [ 941.259652][T12878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 941.259658][T12878] R13: 00007ff676786038 R14: 00007ff676785fa0 R15: 00007ffe93f2c628 [ 941.259674][T12878] [ 941.535711][ T6073] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 941.689148][ T6073] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 941.696378][ T6073] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 941.696395][ T6073] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 941.698930][ T6073] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 941.698945][ T6073] usb 3-1: Product: syz [ 941.698953][ T6073] usb 3-1: Manufacturer: syz [ 941.698961][ T6073] usb 3-1: SerialNumber: syz [ 941.710011][ T6073] usb 3-1: config 0 descriptor?? [ 944.971996][ T5582] usb 3-1: USB disconnect, device number 52 [ 946.075750][ T5710] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 946.110849][ T9327] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 946.157576][ T9327] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 946.168310][ T9327] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 946.182356][ T9327] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 946.190192][ T9327] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 946.437541][ T5710] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 946.438533][ T5710] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 946.442284][ T5710] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 946.442299][ T5710] usb 2-1: Product: syz [ 946.442307][ T5710] usb 2-1: Manufacturer: syz [ 946.442314][ T5710] usb 2-1: SerialNumber: syz [ 946.909146][ T5710] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 947.072243][T12902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 947.072581][T12902] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 947.492366][ T6073] usb 2-1: USB disconnect, device number 50 [ 947.510406][ T6073] usblp0: removed [ 947.907563][ T48] bridge_slave_1: left allmulticast mode [ 947.907589][ T48] bridge_slave_1: left promiscuous mode [ 947.907742][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 947.932081][ T48] bridge_slave_0: left allmulticast mode [ 947.932108][ T48] bridge_slave_0: left promiscuous mode [ 947.932282][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 951.231084][ T9327] Bluetooth: hci5: command tx timeout [ 954.785530][ T5616] Bluetooth: hci5: command tx timeout [ 954.863651][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 954.868457][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 954.871101][ T48] bond0 (unregistering): Released all slaves [ 954.941870][ T5254] 8021q: adding VLAN 0 to HW filter on device eth9 [ 955.705692][ T9] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 955.870809][ T9] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 955.871695][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 955.871709][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 955.873645][ T9] usb 3-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 955.873659][ T9] usb 3-1: Product: syz [ 955.873667][ T9] usb 3-1: Manufacturer: syz [ 955.873674][ T9] usb 3-1: SerialNumber: syz [ 955.878434][ T9] usb 3-1: config 0 descriptor?? [ 956.066384][ T48] hsr_slave_0: left promiscuous mode [ 956.067586][ T48] hsr_slave_1: left promiscuous mode [ 956.068365][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 956.068867][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 956.674556][ T48] team0 (unregistering): Port device team_slave_1 removed [ 956.687379][ T48] team0 (unregistering): Port device team_slave_0 removed [ 956.796146][ T5616] Bluetooth: hci5: command tx timeout [ 956.889150][ T6073] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 957.046150][ T6073] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 957.048919][ T6073] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 957.048935][ T6073] usb 4-1: Product: syz [ 957.048943][ T6073] usb 4-1: Manufacturer: syz [ 957.048951][ T6073] usb 4-1: SerialNumber: syz [ 957.215566][ T6073] usb 4-1: config 0 descriptor?? [ 960.157818][ T5616] Bluetooth: hci5: command tx timeout [ 960.159904][ T6073] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 960.159972][ T6073] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 960.380248][ T9] usb 3-1: USB disconnect, device number 53 [ 960.475355][T11144] usb 4-1: USB disconnect, device number 43 [ 966.026934][T13021] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 966.026956][T13021] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 966.027023][T13021] vhci_hcd vhci_hcd.0: Device attached [ 966.082040][T13024] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 966.082059][T13024] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 966.082089][T13024] vhci_hcd vhci_hcd.0: Device attached [ 966.093693][T13021] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 966.093712][T13021] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 966.093744][T13021] vhci_hcd vhci_hcd.0: Device attached [ 966.143176][T13021] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(8) [ 966.143196][T13021] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 966.143251][T13021] vhci_hcd vhci_hcd.0: Device attached [ 966.164243][T13021] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 966.164261][T13021] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 966.164318][T13021] vhci_hcd vhci_hcd.0: Device attached [ 966.189411][T13021] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(14) [ 966.189429][T13021] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 966.189489][T13021] vhci_hcd vhci_hcd.0: Device attached [ 966.213428][T13021] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(16) [ 966.213446][T13021] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 966.213497][T13021] vhci_hcd vhci_hcd.0: Device attached [ 966.236537][T13030] vhci_hcd: connection closed [ 966.236883][ T1035] vhci_hcd vhci_hcd.1: stop threads [ 966.236899][ T1035] vhci_hcd vhci_hcd.1: release socket [ 966.236946][ T1035] vhci_hcd vhci_hcd.1: disconnect device [ 966.237026][T13033] vhci_hcd: connection closed [ 966.237307][ T1035] vhci_hcd vhci_hcd.1: stop threads [ 966.237316][ T1035] vhci_hcd vhci_hcd.1: release socket [ 966.237352][ T1035] vhci_hcd vhci_hcd.1: disconnect device [ 966.237568][T13027] vhci_hcd: connection closed [ 966.237862][ T1035] vhci_hcd vhci_hcd.1: stop threads [ 966.237872][ T1035] vhci_hcd vhci_hcd.1: release socket [ 966.237909][ T1035] vhci_hcd vhci_hcd.1: disconnect device [ 966.238205][T13026] vhci_hcd: connection closed [ 966.238500][ T1035] vhci_hcd vhci_hcd.1: stop threads [ 966.238509][ T1035] vhci_hcd vhci_hcd.1: release socket [ 966.238547][ T1035] vhci_hcd vhci_hcd.1: disconnect device [ 966.238643][T13023] vhci_hcd: connection closed [ 966.238916][ T1035] vhci_hcd vhci_hcd.1: stop threads [ 966.238925][ T1035] vhci_hcd vhci_hcd.1: release socket [ 966.238960][ T1035] vhci_hcd vhci_hcd.1: disconnect device [ 966.239349][T13035] vhci_hcd: connection closed [ 966.239649][ T1035] vhci_hcd vhci_hcd.1: stop threads [ 966.239658][ T1035] vhci_hcd vhci_hcd.1: release socket [ 966.239703][ T1035] vhci_hcd vhci_hcd.1: disconnect device [ 966.241233][T13037] vhci_hcd: connection closed [ 966.241541][ T1035] vhci_hcd vhci_hcd.1: stop threads [ 966.241552][ T1035] vhci_hcd vhci_hcd.1: release socket [ 966.241571][ T1035] vhci_hcd vhci_hcd.1: disconnect device [ 966.267270][ T9] usb 35-1: new high-speed USB device number 3 using vhci_hcd [ 966.267317][ T9] usb 35-1: enqueue for inactive port 0 [ 966.336242][ T9] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 972.418304][T13080] i2c i2c-0: Failed to register i2c client slave-24c02 at 0x01 (-16) [ 973.781140][ T9327] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 973.820243][ T9327] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 973.828686][ T9327] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 973.881036][ T9327] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 973.881525][ T9327] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 977.887712][ T5616] Bluetooth: hci1: command tx timeout [ 978.347938][T13132] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1713'. [ 978.347955][T13132] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1713'. [ 978.680661][T13137] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 978.680679][T13137] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 978.682080][T13137] vhci_hcd vhci_hcd.0: Device attached [ 978.684766][T13141] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(7) [ 978.684781][T13141] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 978.684811][T13141] vhci_hcd vhci_hcd.0: Device attached [ 978.706502][T13137] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(6) [ 978.706521][T13137] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 978.706550][T13137] vhci_hcd vhci_hcd.0: Device attached [ 978.709378][T13137] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(10) [ 978.709394][T13137] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 978.709422][T13137] vhci_hcd vhci_hcd.0: Device attached [ 978.716847][T13137] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(12) [ 978.716865][T13137] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 978.716893][T13137] vhci_hcd vhci_hcd.0: Device attached [ 978.720845][T13137] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(14) [ 978.720864][T13137] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 978.720895][T13137] vhci_hcd vhci_hcd.0: Device attached [ 978.722153][T13137] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(16) [ 978.722166][T13137] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 978.722368][T13137] vhci_hcd vhci_hcd.0: Device attached [ 978.793090][T13140] vhci_hcd: connection closed [ 978.793313][T13147] vhci_hcd: connection closed [ 978.793455][T13145] vhci_hcd: connection closed [ 978.793583][T13149] vhci_hcd: connection closed [ 978.793814][ T3347] vhci_hcd vhci_hcd.3: stop threads [ 978.793830][ T3347] vhci_hcd vhci_hcd.3: release socket [ 978.793879][ T3347] vhci_hcd vhci_hcd.3: disconnect device [ 978.794035][ T3347] vhci_hcd vhci_hcd.3: stop threads [ 978.794043][ T3347] vhci_hcd vhci_hcd.3: release socket [ 978.794061][ T3347] vhci_hcd vhci_hcd.3: disconnect device [ 978.794271][T13143] vhci_hcd: connection closed [ 978.794519][ T3347] vhci_hcd vhci_hcd.3: stop threads [ 978.794527][ T3347] vhci_hcd vhci_hcd.3: release socket [ 978.794560][ T3347] vhci_hcd vhci_hcd.3: disconnect device [ 978.794611][T13151] vhci_hcd: connection closed [ 978.794849][ T3347] vhci_hcd vhci_hcd.3: stop threads [ 978.794865][ T3347] vhci_hcd vhci_hcd.3: release socket [ 978.794883][ T3347] vhci_hcd vhci_hcd.3: disconnect device [ 978.794932][T13153] vhci_hcd: connection closed [ 978.795162][ T3347] vhci_hcd vhci_hcd.3: stop threads [ 978.795170][ T3347] vhci_hcd vhci_hcd.3: release socket [ 978.795188][ T3347] vhci_hcd vhci_hcd.3: disconnect device [ 978.795397][ T3347] vhci_hcd vhci_hcd.3: stop threads [ 978.795406][ T3347] vhci_hcd vhci_hcd.3: release socket [ 978.795442][ T3347] vhci_hcd vhci_hcd.3: disconnect device [ 978.797269][ T3347] vhci_hcd vhci_hcd.3: stop threads [ 978.797280][ T3347] vhci_hcd vhci_hcd.3: release socket [ 978.797301][ T3347] vhci_hcd vhci_hcd.3: disconnect device [ 978.855771][ T6073] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 981.593576][ T5616] Bluetooth: hci1: command tx timeout [ 981.655402][T12905] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.655479][T12905] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.657114][T12905] bridge_slave_0: entered allmulticast mode [ 981.662466][T12905] bridge_slave_0: entered promiscuous mode [ 981.751365][T12905] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.751433][T12905] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.751569][T12905] bridge_slave_1: entered allmulticast mode [ 981.768492][T12905] bridge_slave_1: entered promiscuous mode [ 983.172964][T12905] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 984.405299][T12905] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 986.423025][ T5616] Bluetooth: hci1: command tx timeout [ 986.825493][T13185] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1722'. [ 986.825513][T13185] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1722'. [ 986.991631][T12905] team0: Port device team_slave_0 added [ 986.993971][T12905] team0: Port device team_slave_1 added [ 987.399236][T12905] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 987.399249][T12905] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.399266][T12905] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 987.418756][T12905] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 987.418769][T12905] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 987.418783][T12905] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 987.844278][T13194] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 987.844296][T13194] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 987.848994][T13194] vhci_hcd vhci_hcd.0: Device attached [ 987.860684][T13194] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(6) [ 987.860702][T13194] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 987.860730][T13194] vhci_hcd vhci_hcd.0: Device attached [ 987.864956][T13194] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(8) [ 987.864971][T13194] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 987.864998][T13194] vhci_hcd vhci_hcd.0: Device attached [ 987.922313][T13194] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(10) [ 987.922330][T13194] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 987.922358][T13194] vhci_hcd vhci_hcd.0: Device attached [ 987.940625][T13202] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(13) [ 987.940646][T13202] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 987.940694][T13202] vhci_hcd vhci_hcd.0: Device attached [ 987.960932][T13194] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(12) [ 987.960951][T13194] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 987.961015][T13194] vhci_hcd vhci_hcd.0: Device attached [ 987.962939][T13194] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(16) [ 987.962954][T13194] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 987.964567][T13194] vhci_hcd vhci_hcd.0: Device attached [ 987.996751][T13201] vhci_hcd: connection closed [ 987.997105][ T1035] vhci_hcd vhci_hcd.3: stop threads [ 987.997122][ T1035] vhci_hcd vhci_hcd.3: release socket [ 987.997169][ T1035] vhci_hcd vhci_hcd.3: disconnect device [ 987.997251][T13195] vhci_hcd: connection closed [ 987.997651][ T1035] vhci_hcd vhci_hcd.3: stop threads [ 987.997660][ T1035] vhci_hcd vhci_hcd.3: release socket [ 987.997697][ T1035] vhci_hcd vhci_hcd.3: disconnect device [ 987.997764][T13197] vhci_hcd: connection closed [ 987.998044][ T1035] vhci_hcd vhci_hcd.3: stop threads [ 987.998053][ T1035] vhci_hcd vhci_hcd.3: release socket [ 987.998098][ T1035] vhci_hcd vhci_hcd.3: disconnect device [ 987.998164][T13199] vhci_hcd: connection closed [ 987.998569][ T1035] vhci_hcd vhci_hcd.3: stop threads [ 987.998577][ T1035] vhci_hcd vhci_hcd.3: release socket [ 987.998613][ T1035] vhci_hcd vhci_hcd.3: disconnect device [ 987.998689][T13203] vhci_hcd: connection closed [ 987.998858][T13206] vhci_hcd: connection closed [ 987.999100][ T3347] vhci_hcd vhci_hcd.3: stop threads [ 987.999109][ T3347] vhci_hcd vhci_hcd.3: release socket [ 987.999146][ T3347] vhci_hcd vhci_hcd.3: disconnect device [ 988.001692][T13208] vhci_hcd: connection closed [ 988.003249][ T3347] vhci_hcd vhci_hcd.3: stop threads [ 988.003261][ T3347] vhci_hcd vhci_hcd.3: release socket [ 988.003300][ T3347] vhci_hcd vhci_hcd.3: disconnect device [ 988.003387][ T3347] vhci_hcd vhci_hcd.3: stop threads [ 988.003394][ T3347] vhci_hcd vhci_hcd.3: release socket [ 988.003412][ T3347] vhci_hcd vhci_hcd.3: disconnect device [ 988.020953][ T5710] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 988.691601][ T9327] Bluetooth: hci1: command tx timeout [ 989.065273][T12905] hsr_slave_0: entered promiscuous mode [ 989.088326][T12905] hsr_slave_1: entered promiscuous mode [ 989.088937][T12905] debugfs: 'hsr0' already exists in 'hsr' [ 989.088953][T12905] Cannot create hsr debugfs directory [ 991.213634][ T48] bridge_slave_1: left allmulticast mode [ 991.213658][ T48] bridge_slave_1: left promiscuous mode [ 991.213822][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.224504][ T48] bridge_slave_0: left allmulticast mode [ 991.224528][ T48] bridge_slave_0: left promiscuous mode [ 991.227828][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.443087][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1734'. [ 991.813015][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 992.092659][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 992.099628][ T48] bond0 (unregistering): Released all slaves [ 992.794759][T13266] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 992.794777][T13266] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 992.794838][T13266] vhci_hcd vhci_hcd.0: Device attached [ 992.826908][T13266] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 992.826927][T13266] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 992.826956][T13266] vhci_hcd vhci_hcd.0: Device attached [ 992.833922][T13266] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 992.833939][T13266] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 992.833968][T13266] vhci_hcd vhci_hcd.0: Device attached [ 992.835170][T13266] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10) [ 992.835184][T13266] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 992.835210][T13266] vhci_hcd vhci_hcd.0: Device attached [ 992.841679][T13266] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 992.841694][T13266] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 992.841723][T13266] vhci_hcd vhci_hcd.0: Device attached [ 992.849741][T13266] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(14) [ 992.849758][T13266] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 992.849784][T13266] vhci_hcd vhci_hcd.0: Device attached [ 992.854058][T13266] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(16) [ 992.854074][T13266] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 992.854238][T13266] vhci_hcd vhci_hcd.0: Device attached [ 992.865554][T13276] vhci_hcd: connection closed [ 992.866013][ T13] vhci_hcd vhci_hcd.1: stop threads [ 992.866029][ T13] vhci_hcd vhci_hcd.1: release socket [ 992.866050][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 992.866111][T13270] vhci_hcd: connection closed [ 992.866378][ T13] vhci_hcd vhci_hcd.1: stop threads [ 992.866387][ T13] vhci_hcd vhci_hcd.1: release socket [ 992.866405][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 992.866436][T13272] vhci_hcd: connection closed [ 992.866784][ T13] vhci_hcd vhci_hcd.1: stop threads [ 992.866793][ T13] vhci_hcd vhci_hcd.1: release socket [ 992.866811][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 992.866946][T13274] vhci_hcd: connection closed [ 992.873707][T13268] vhci_hcd: connection closed [ 992.873739][T13278] vhci_hcd: connection closed [ 992.873762][T13280] vhci_hcd: connection closed [ 992.874484][ T13] vhci_hcd vhci_hcd.1: stop threads [ 992.874496][ T13] vhci_hcd vhci_hcd.1: release socket [ 992.874517][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 992.874666][ T13] vhci_hcd vhci_hcd.1: stop threads [ 992.874674][ T13] vhci_hcd vhci_hcd.1: release socket [ 992.874691][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 992.874835][ T13] vhci_hcd vhci_hcd.1: stop threads [ 992.874843][ T13] vhci_hcd vhci_hcd.1: release socket [ 992.874867][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 992.874935][ T13] vhci_hcd vhci_hcd.1: stop threads [ 992.874942][ T13] vhci_hcd vhci_hcd.1: release socket [ 992.874959][ T13] vhci_hcd vhci_hcd.1: disconnect device [ 994.975704][T13288] usb usb7: check_ctrlrecip: process 13288 (syz.2.1739) requesting ep 01 but needs 81 [ 994.975725][T13288] usb usb7: usbfs: process 13288 (syz.2.1739) did not claim interface 0 before use [ 996.165122][ T48] hsr_slave_0: left promiscuous mode [ 996.168228][ T48] hsr_slave_1: left promiscuous mode [ 996.169753][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 996.172690][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 997.303105][ T48] team0 (unregistering): Port device team_slave_1 removed [ 997.354710][ T48] team0 (unregistering): Port device team_slave_0 removed [ 998.067394][ T5254] 8021q: adding VLAN 0 to HW filter on device eth9 [ 998.078207][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.078246][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1002.226538][T13332] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1747'. [ 1003.467348][T13085] bridge0: port 1(bridge_slave_0) entered blocking state [ 1003.467417][T13085] bridge0: port 1(bridge_slave_0) entered disabled state [ 1003.467546][T13085] bridge_slave_0: entered allmulticast mode [ 1003.469127][T13085] bridge_slave_0: entered promiscuous mode [ 1003.481375][T13085] bridge0: port 2(bridge_slave_1) entered blocking state [ 1003.481450][T13085] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.481574][T13085] bridge_slave_1: entered allmulticast mode [ 1003.485185][T13085] bridge_slave_1: entered promiscuous mode [ 1003.599557][ T5254] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1003.728510][T13085] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1003.737874][T13353] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 1003.737891][T13353] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1003.737950][T13353] vhci_hcd vhci_hcd.0: Device attached [ 1003.745226][T13353] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(6) [ 1003.745242][T13353] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1003.745270][T13353] vhci_hcd vhci_hcd.0: Device attached [ 1003.788310][T13085] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1003.789942][T13353] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(8) [ 1003.789957][T13353] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1003.789988][T13353] vhci_hcd vhci_hcd.0: Device attached [ 1003.797765][T13353] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(10) [ 1003.797781][T13353] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1003.797811][T13353] vhci_hcd vhci_hcd.0: Device attached [ 1003.809667][T13353] vhci_hcd vhci_hcd.0: pdev(1) rhport(4) sockfd(12) [ 1003.809683][T13353] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1003.809712][T13353] vhci_hcd vhci_hcd.0: Device attached [ 1003.835254][T13353] vhci_hcd vhci_hcd.0: pdev(1) rhport(5) sockfd(14) [ 1003.835273][T13353] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1003.835302][T13353] vhci_hcd vhci_hcd.0: Device attached [ 1003.855765][ T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1003.868355][T13353] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(16) [ 1003.868374][T13353] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1003.868425][T13353] vhci_hcd vhci_hcd.0: Device attached [ 1003.922308][T13358] vhci_hcd: connection closed [ 1003.922632][ T3362] vhci_hcd vhci_hcd.1: stop threads [ 1003.927627][T13363] vhci_hcd: connection closed [ 1003.928828][T13360] vhci_hcd: connection closed [ 1003.935918][T13369] vhci_hcd: connection closed [ 1003.936110][T13371] vhci_hcd: connection closed [ 1003.938461][T13356] vhci_hcd: connection closed [ 1003.940188][T13365] vhci_hcd: connection closed [ 1003.996408][ T3362] vhci_hcd vhci_hcd.1: release socket [ 1003.996462][ T3362] vhci_hcd vhci_hcd.1: disconnect device [ 1003.997102][ T3362] vhci_hcd vhci_hcd.1: stop threads [ 1003.997112][ T3362] vhci_hcd vhci_hcd.1: release socket [ 1003.997149][ T3362] vhci_hcd vhci_hcd.1: disconnect device [ 1003.999059][ T3362] vhci_hcd vhci_hcd.1: stop threads [ 1003.999070][ T3362] vhci_hcd vhci_hcd.1: release socket [ 1003.999115][ T3362] vhci_hcd vhci_hcd.1: disconnect device [ 1004.002225][ T3362] vhci_hcd vhci_hcd.1: stop threads [ 1004.002236][ T3362] vhci_hcd vhci_hcd.1: release socket [ 1004.002278][ T3362] vhci_hcd vhci_hcd.1: disconnect device [ 1004.002760][ T3362] vhci_hcd vhci_hcd.1: stop threads [ 1004.002770][ T3362] vhci_hcd vhci_hcd.1: release socket [ 1004.002788][ T3362] vhci_hcd vhci_hcd.1: disconnect device [ 1004.004234][T13085] team0: Port device team_slave_0 added [ 1004.005870][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 1004.008516][ T9] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1004.014909][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.019636][ T3362] vhci_hcd vhci_hcd.1: stop threads [ 1004.019648][ T3362] vhci_hcd vhci_hcd.1: release socket [ 1004.019689][ T3362] vhci_hcd vhci_hcd.1: disconnect device [ 1004.020210][ T3362] vhci_hcd vhci_hcd.1: stop threads [ 1004.020219][ T3362] vhci_hcd vhci_hcd.1: release socket [ 1004.020252][ T3362] vhci_hcd vhci_hcd.1: disconnect device [ 1004.031083][ T6073] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 1004.186979][ T9] usb 3-1: config 0 descriptor?? [ 1004.214524][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1005.451078][ T9] gspca_vc032x: reg_w err -110 [ 1005.451094][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1005.451100][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1005.451105][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1005.451110][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1005.451114][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1005.451119][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1005.451124][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1005.451128][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1005.451133][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1005.451138][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1005.451142][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1005.451147][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1005.451151][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1005.451156][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1005.451161][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1005.451165][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1005.451170][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1005.451175][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 1005.451180][ T9] gspca_vc032x: Unknown sensor... [ 1005.451227][ T9] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 1005.468960][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1005.493354][ T5616] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1005.498682][ T5616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1005.545209][ T5616] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1005.546648][ T5616] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1005.785302][T13392] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.804410][T13392] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1006.024795][T13085] team0: Port device team_slave_1 added [ 1007.915774][ T9327] Bluetooth: hci0: command tx timeout [ 1007.982874][T13085] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1007.982887][T13085] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.982901][T13085] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1007.997963][T13085] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1007.997976][T13085] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1007.997990][T13085] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1008.891507][ T9] usb 3-1: USB disconnect, device number 54 [ 1009.137371][T13429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1759'. [ 1009.311668][T13085] hsr_slave_0: entered promiscuous mode [ 1009.312371][T13085] hsr_slave_1: entered promiscuous mode [ 1009.314458][T13085] debugfs: 'hsr0' already exists in 'hsr' [ 1009.314475][T13085] Cannot create hsr debugfs directory [ 1009.360615][ T6073] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1009.516744][ T6073] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1009.517658][ T6073] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1009.520609][ T6073] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1009.520624][ T6073] usb 2-1: Product: syz [ 1009.520631][ T6073] usb 2-1: Manufacturer: syz [ 1009.520638][ T6073] usb 2-1: SerialNumber: syz [ 1009.812854][ T6073] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1010.097609][ T9327] Bluetooth: hci0: command tx timeout [ 1010.121992][T13439] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 1010.122009][T13439] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1010.122069][T13439] vhci_hcd vhci_hcd.0: Device attached [ 1010.403682][T13439] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(6) [ 1010.403708][T13439] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1010.403765][T13439] vhci_hcd vhci_hcd.0: Device attached [ 1010.525712][ T6073] usb 39-1: new high-speed USB device number 4 using vhci_hcd [ 1011.272382][T13439] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 1011.272481][T13439] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1011.272548][T13439] vhci_hcd vhci_hcd.0: Device attached [ 1011.893375][T13453] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(14) [ 1011.897841][T13453] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1012.155825][ T9327] Bluetooth: hci0: command tx timeout [ 1012.282550][T13453] vhci_hcd vhci_hcd.0: Device attached [ 1012.353846][T13457] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(13) [ 1012.353863][T13457] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1012.353917][T13457] vhci_hcd vhci_hcd.0: Device attached [ 1012.364886][T13439] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(17) [ 1012.364904][T13439] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 1012.364960][T13439] vhci_hcd vhci_hcd.0: Device attached [ 1012.659189][T11144] usb 2-1: USB disconnect, device number 51 [ 1012.661409][T13443] vhci_hcd: connection reset by peer [ 1012.661764][ T92] vhci_hcd vhci_hcd.3: stop threads [ 1012.661790][ T92] vhci_hcd vhci_hcd.3: release socket [ 1012.661838][ T92] vhci_hcd vhci_hcd.3: disconnect device [ 1012.661917][T13450] vhci_hcd: connection closed [ 1012.662188][ T92] vhci_hcd vhci_hcd.3: stop threads [ 1012.662197][ T92] vhci_hcd vhci_hcd.3: release socket [ 1012.662232][ T92] vhci_hcd vhci_hcd.3: disconnect device [ 1012.664056][T13452] vhci_hcd: connection closed [ 1012.664300][T13458] vhci_hcd: connection closed [ 1012.674322][ T92] vhci_hcd vhci_hcd.3: stop threads [ 1012.674336][ T92] vhci_hcd vhci_hcd.3: release socket [ 1012.674384][ T92] vhci_hcd vhci_hcd.3: disconnect device [ 1012.675144][T13460] vhci_hcd: connection closed [ 1012.675170][T13455] vhci_hcd: connection closed [ 1012.676986][T13442] vhci_hcd vhci_hcd.0: failed to lookup sock [ 1012.682260][T11144] usblp0: removed [ 1012.868327][ T92] vhci_hcd vhci_hcd.3: stop threads [ 1012.868346][ T92] vhci_hcd vhci_hcd.3: release socket [ 1012.868393][ T92] vhci_hcd vhci_hcd.3: disconnect device [ 1012.870049][ T92] vhci_hcd vhci_hcd.3: stop threads [ 1012.870059][ T92] vhci_hcd vhci_hcd.3: release socket [ 1012.870102][ T92] vhci_hcd vhci_hcd.3: disconnect device [ 1012.870342][ T92] vhci_hcd vhci_hcd.3: stop threads [ 1012.870351][ T92] vhci_hcd vhci_hcd.3: release socket [ 1012.870387][ T92] vhci_hcd vhci_hcd.3: disconnect device [ 1014.236228][ T9327] Bluetooth: hci0: command tx timeout [ 1014.815724][ T9] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1014.868579][T13493] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1770'. [ 1014.967179][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1014.968256][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1014.968270][ T9] usb 4-1: config 0 has no interfaces? [ 1014.968287][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.979417][ T9] usb 4-1: config 0 descriptor?? [ 1015.202479][T11144] usb 4-1: USB disconnect, device number 44 [ 1015.668202][ T6073] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 1017.057487][ T5582] usb usb40-port7: attempt power cycle [ 1017.881397][ T5582] usb usb40-port7: unable to enumerate USB device [ 1017.989686][T13544] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1779'. [ 1018.195692][ T9] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1018.212286][T13387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1018.212353][T13387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.212482][T13387] bridge_slave_0: entered allmulticast mode [ 1018.215668][T13387] bridge_slave_0: entered promiscuous mode [ 1018.231937][T13387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.232219][T13387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.232345][T13387] bridge_slave_1: entered allmulticast mode [ 1018.283377][T13387] bridge_slave_1: entered promiscuous mode [ 1018.342435][ T48] bridge_slave_1: left allmulticast mode [ 1018.342461][ T48] bridge_slave_1: left promiscuous mode [ 1018.342648][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.349660][ T48] bridge_slave_0: left allmulticast mode [ 1018.349685][ T48] bridge_slave_0: left promiscuous mode [ 1018.354319][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1018.354465][ T9] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1018.355330][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1018.355343][ T9] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1018.355362][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1018.776054][ T9] usb 4-1: USB disconnect, device number 45 [ 1021.157308][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1021.163228][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1021.174653][ T48] bond0 (unregistering): Released all slaves [ 1022.205774][ T9] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1022.358553][ T9] usb 4-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 1022.360747][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1022.360762][ T9] usb 4-1: Product: syz [ 1022.360770][ T9] usb 4-1: Manufacturer: syz [ 1022.697943][ T9] scsi host1: uas [ 1022.919465][ C0] usb 4-1: stat urb: status -71 [ 1022.919519][ C0] usb 4-1: cmd cmplt err -71 [ 1022.920122][ T9] usb 4-1: USB disconnect, device number 46 [ 1022.931453][ T9] scsi 1:0:0:0: tag#24 uas_zap_pending 0 uas-tag 1 inflight: CMD [ 1022.931488][ T9] scsi 1:0:0:0: tag#24 CDB: Inquiry 12 00 00 00 24 00 [ 1023.152997][T13387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1023.206123][ T48] hsr_slave_0: left promiscuous mode [ 1023.209804][ T48] hsr_slave_1: left promiscuous mode [ 1023.210440][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.210896][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.945757][T11144] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1023.999717][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1024.033202][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1024.095771][T11144] usb 3-1: Using ep0 maxpacket: 16 [ 1024.096511][T11144] usb 3-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 1024.097520][T11144] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1024.097549][T11144] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1024.097562][T11144] usb 3-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1024.097573][T11144] usb 3-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1024.097587][T11144] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1024.097605][T11144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1024.108665][T11144] usb 3-1: config 0 descriptor?? [ 1024.521949][T13591] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1024.522819][T13591] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1024.665315][T11144] usbhid 3-1:0.0: can't add hid device: -71 [ 1024.665387][T11144] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1024.692030][T11144] usb 3-1: USB disconnect, device number 55 [ 1024.971315][T13387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.033688][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1025.163948][T13387] team0: Port device team_slave_0 added [ 1025.168722][T13387] team0: Port device team_slave_1 added [ 1025.257666][ T9] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1025.264334][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1025.264351][ T9] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1025.264372][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1025.275112][T13387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1025.275123][T13387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.275136][T13387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1025.309341][T13387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1025.309358][T13387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1025.309373][T13387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1026.463002][T11144] usb 2-1: USB disconnect, device number 52 [ 1027.516151][T13387] hsr_slave_0: entered promiscuous mode [ 1027.518346][T13387] hsr_slave_1: entered promiscuous mode [ 1027.518852][T13387] debugfs: 'hsr0' already exists in 'hsr' [ 1027.518867][T13387] Cannot create hsr debugfs directory [ 1030.320064][ T48] bridge_slave_1: left allmulticast mode [ 1030.320089][ T48] bridge_slave_1: left promiscuous mode [ 1030.320251][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.337763][ T48] bridge_slave_0: left allmulticast mode [ 1030.337785][ T48] bridge_slave_0: left promiscuous mode [ 1030.337931][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.152181][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1034.297681][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1034.304070][ T48] bond0 (unregistering): Released all slaves [ 1034.738645][T13659] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1808'. [ 1034.776720][ T48] hsr_slave_0: left promiscuous mode [ 1034.789525][ T5616] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1034.848921][T11144] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1034.858996][ T5616] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1034.860281][ T5616] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1034.862513][ T5616] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1034.862968][ T5616] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1034.865526][ T48] hsr_slave_1: left promiscuous mode [ 1034.866681][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1034.988914][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1034.996189][T11144] usb 2-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1034.997070][T11144] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.997083][T11144] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1034.997102][T11144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.015748][ T6073] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1035.298447][ T6073] usb 3-1: Using ep0 maxpacket: 32 [ 1035.299414][ T6073] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 1035.309323][ T6073] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1035.309339][ T6073] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1035.309365][ T6073] usb 3-1: too many endpoints for config 1 interface 1 altsetting 239: 255, using maximum allowed: 30 [ 1035.309385][ T6073] usb 3-1: config 1 interface 1 altsetting 239 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1035.309406][ T6073] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1035.309418][ T6073] usb 3-1: config 1 interface 1 has no altsetting 0 [ 1035.327229][ T6073] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1035.327246][ T6073] usb 3-1: Product: syz [ 1035.327253][ T6073] usb 3-1: Manufacturer: syz [ 1035.327261][ T6073] usb 3-1: SerialNumber: syz [ 1035.361582][T11144] usb 2-1: USB disconnect, device number 53 [ 1035.565054][T13661] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1035.566453][T13661] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1035.653331][T13661] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1809'. [ 1035.653692][T13661] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1809'. [ 1036.656868][ T48] team0 (unregistering): Port device team_slave_1 removed [ 1036.722697][ T48] team0 (unregistering): Port device team_slave_0 removed [ 1037.040824][ T9327] Bluetooth: hci5: command tx timeout [ 1039.115678][ T9327] Bluetooth: hci5: command tx timeout [ 1040.556941][ T6073] usb 3-1: selecting invalid altsetting 0 [ 1040.562871][ T6073] usb 3-1: 1:1: cannot get freq (v2/v3): err -32 [ 1040.563274][ T6073] usb 3-1: 1:1: cannot set freq 44100 (v2/v3): err -32 [ 1040.631993][T13717] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1823'. [ 1040.632012][T13717] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1823'. [ 1041.277184][ T9327] Bluetooth: hci5: command tx timeout [ 1041.536314][T13724] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1825'. [ 1041.752132][ T6073] usb 3-1: USB disconnect, device number 56 [ 1041.994825][T13604] udevd[13604]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card5/controlC5/../uevent} for writing: No such file or directory [ 1042.790043][T13739] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1829'. [ 1043.103822][T13746] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1831'. [ 1043.356049][ T9327] Bluetooth: hci5: command tx timeout [ 1044.489522][T13765] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1836'. [ 1046.965651][ T6755] usb 4-1: new full-speed USB device number 47 using dummy_hcd [ 1047.127968][ T6755] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1047.128451][ T6755] usb 4-1: not running at top speed; connect to a high speed hub [ 1047.128474][ T6755] usb 4-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 2.a8 [ 1047.129346][ T6755] usb 4-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 1047.138038][ T6755] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.138055][ T6755] usb 4-1: Product: syz [ 1047.138062][ T6755] usb 4-1: Manufacturer: syz [ 1047.138070][ T6755] usb 4-1: SerialNumber: syz [ 1047.375343][T13792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.386957][T13792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.463222][T13792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1047.463545][T13792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1047.564183][T13387] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1047.598731][T13387] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1047.602183][ T6755] apple-mfi-fastcharge 4-1: USB disconnect, device number 47 [ 1047.625721][ T6073] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1047.674409][T13806] netlink: 'syz.1.1848': attribute type 1 has an invalid length. [ 1047.704400][T13387] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1047.714445][T13387] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1047.732634][T13387] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1047.806366][ T6073] usb 3-1: Using ep0 maxpacket: 32 [ 1047.808533][ T6073] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 1047.810767][ T6073] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1047.813547][ T6073] usb 3-1: config 0 descriptor?? [ 1047.820085][T13387] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1047.844326][ T6073] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 1047.945314][T13387] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1047.967814][T13387] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1050.432939][T13658] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.433059][T13658] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.433153][T13658] bridge_slave_0: entered allmulticast mode [ 1050.435860][T13658] bridge_slave_0: entered promiscuous mode [ 1050.439639][T13658] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.439718][T13658] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.439806][T13658] bridge_slave_1: entered allmulticast mode [ 1050.442969][T13658] bridge_slave_1: entered promiscuous mode [ 1051.577949][ T6073] gspca_vc032x: reg_w err -110 [ 1051.577969][ T6073] gspca_vc032x: I2c Bus Busy Wait 00 [ 1051.577975][ T6073] gspca_vc032x: I2c Bus Busy Wait 00 [ 1051.577980][ T6073] gspca_vc032x: I2c Bus Busy Wait 00 [ 1051.577984][ T6073] gspca_vc032x: I2c Bus Busy Wait 00 [ 1051.577989][ T6073] gspca_vc032x: I2c Bus Busy Wait 00 [ 1051.577994][ T6073] gspca_vc032x: I2c Bus Busy Wait 00 [ 1051.577998][ T6073] gspca_vc032x: I2c Bus Busy Wait 00 [ 1051.578003][ T6073] gspca_vc032x: I2c Bus Busy Wait 00 [ 1051.578007][ T6073] gspca_vc032x: I2c Bus Busy Wait 00 [ 1051.578012][ T6073] gspca_vc032x: I2c Bus Busy Wait 00 [ 1051.578016][ T6073] gspca_vc032x: I2c Bus Busy Wait 00 [ 1051.578021][ T6073] gspca_vc032x: I2c Bus Busy Wait 00 [ 1051.578026][ T6073] gspca_vc032x: I2c Bus Busy Wait 00 [ 1051.578030][ T6073] gspca_vc032x: I2c Bus Busy Wait 00 [ 1051.578035][ T6073] gspca_vc032x: I2c Bus Busy Wait 00 [ 1051.578039][ T6073] gspca_vc032x: I2c Bus Busy Wait 00 [ 1051.578044][ T6073] gspca_vc032x: I2c Bus Busy Wait 00 [ 1051.578048][ T6073] gspca_vc032x: I2c Bus Busy Wait 00 [ 1051.578052][ T6073] gspca_vc032x: Unknown sensor... [ 1051.578114][ T6073] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 1051.640032][T13658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1051.844225][ T6755] usb 3-1: USB disconnect, device number 57 [ 1052.054151][T13658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.207224][T13658] team0: Port device team_slave_0 added [ 1052.231256][T13658] team0: Port device team_slave_1 added [ 1052.756593][T13658] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.756606][T13658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.756620][T13658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.772748][T13658] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1052.772805][T13658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1052.772821][T13658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.370656][T13658] hsr_slave_0: entered promiscuous mode [ 1053.375395][T13658] hsr_slave_1: entered promiscuous mode [ 1053.383153][T13658] debugfs: 'hsr0' already exists in 'hsr' [ 1053.383172][T13658] Cannot create hsr debugfs directory [ 1053.413615][T13849] netlink: 'syz.3.1858': attribute type 1 has an invalid length. [ 1053.421342][T13846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1856'. [ 1053.693584][T13387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1057.132075][T13387] 8021q: adding VLAN 0 to HW filter on device team0 [ 1057.479846][T13871] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1861'. [ 1057.565915][ T6755] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 1057.902950][ T6755] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1057.910817][ T6755] usb 3-1: not running at top speed; connect to a high speed hub [ 1057.910843][ T6755] usb 3-1: New USB device found, idVendor=05ac, idProduct=12a8, bcdDevice= 2.a8 [ 1057.912311][ T6755] usb 3-1: config 3 has 0 interfaces, different from the descriptor's value: 1 [ 1057.920432][ T6755] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.920459][ T6755] usb 3-1: Product: syz [ 1057.920467][ T6755] usb 3-1: Manufacturer: syz [ 1057.920475][ T6755] usb 3-1: SerialNumber: syz [ 1058.168666][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.168742][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.211323][T13880] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1864'. [ 1058.262424][T13868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1058.270081][T13868] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1058.535657][ T5582] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1059.063902][ T5582] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1059.980344][ T5582] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.980363][ T5582] usb 2-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 1059.980384][ T5582] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1060.364084][ T1329] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.364178][ T1329] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.540971][T12337] bridge_slave_1: left allmulticast mode [ 1060.540997][T12337] bridge_slave_1: left promiscuous mode [ 1060.541241][T12337] bridge0: port 2(bridge_slave_1) entered disabled state [ 1060.547909][T12337] bridge_slave_0: left allmulticast mode [ 1060.547931][T12337] bridge_slave_0: left promiscuous mode [ 1060.549245][T12337] bridge0: port 1(bridge_slave_0) entered disabled state [ 1060.987418][ T6755] apple-mfi-fastcharge 3-1: USB disconnect, device number 58 [ 1061.284468][ T6073] usb 2-1: USB disconnect, device number 54 [ 1061.428924][T12337] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1061.449025][T12337] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1061.460987][T12337] bond0 (unregistering): Released all slaves [ 1061.589295][ T5254] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1061.633450][ T990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.633570][ T990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1061.891145][T12337] hsr_slave_0: left promiscuous mode [ 1061.891742][T12337] hsr_slave_1: left promiscuous mode [ 1061.892561][T12337] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.893028][T12337] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1065.579399][T13920] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1873'. [ 1065.634455][T12337] team0 (unregistering): Port device team_slave_1 removed [ 1065.676871][T12337] team0 (unregistering): Port device team_slave_0 removed [ 1065.868105][ T5616] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1065.902899][ T5616] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1065.904201][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1065.907718][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1065.908199][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1065.983971][T13924] [ 1092.743377][T13924] ============================================ [ 1092.749565][T13924] WARNING: possible recursive locking detected [ 1092.755747][T13924] syzkaller #0 Tainted: G L [ 1092.761697][T13924] -------------------------------------------- [ 1092.767818][T13924] syz.2.1874/13924 is trying to acquire lock: [ 1092.773892][T13924] ffffffff8ebc23a8 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xeb0 [ 1092.784087][T13924] [ 1092.784087][T13924] but task is already holding lock: [ 1092.791424][T13924] ffffffff8ebc23a8 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xeb0 [ 1092.801484][T13924] [ 1092.801484][T13924] other info that might help us debug this: [ 1092.809515][T13924] Possible unsafe locking scenario: [ 1092.809515][T13924] [ 1092.817014][T13924] CPU0 [ 1092.820276][T13924] ---- [ 1092.823535][T13924] lock(qp_broker_list.mutex); [ 1092.828382][T13924] lock(qp_broker_list.mutex); [ 1092.833232][T13924] [ 1092.833232][T13924] *** DEADLOCK *** [ 1092.833232][T13924] [ 1092.841356][T13924] May be due to missing lock nesting notation [ 1092.841356][T13924] [ 1092.849698][T13924] locks held by syz.2.1874/13924: 1, last CPU#0: [ 1092.856005][T13924] #0: ffffffff8ebc23a8 (qp_broker_list.mutex){+.+.}-{4:4}, at: vmci_qp_broker_detach+0xe9/0xeb0 [ 1092.866504][T13924] [ 1092.866504][T13924] stack backtrace: [ 1092.872371][T13924] CPU: 0 UID: 0 PID: 13924 Comm: syz.2.1874 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1092.883826][T13924] Tainted: [L]=SOFTLOCKUP [ 1092.888127][T13924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1092.898169][T13924] Call Trace: [ 1092.901443][T13924] [ 1092.904355][T13924] dump_stack_lvl+0xe8/0x150 [ 1092.908930][T13924] print_deadlock_bug+0x27a/0x290 [ 1092.913935][T13924] __lock_acquire+0x25db/0x2de0 [ 1092.918764][T13924] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1092.924562][T13924] ? stack_depot_save_flags+0x404/0x7f0 [ 1092.930105][T13924] ? kasan_save_track+0x4f/0x80 [ 1092.934946][T13924] ? kasan_save_track+0x3e/0x80 [ 1092.939790][T13924] ? kasan_save_free_info+0x40/0x50 [ 1092.944969][T13924] ? __kasan_slab_free+0x5c/0x80 [ 1092.949904][T13924] ? kfree+0x1c5/0x6d0 [ 1092.953952][T13924] ? vmci_ctx_put+0x5ba/0xc00 [ 1092.958606][T13924] ? vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 1092.964388][T13924] ? vmci_datagram_dispatch+0x450/0xc80 [ 1092.969913][T13924] lock_acquire+0x115/0x350 [ 1092.974394][T13924] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 1092.979742][T13924] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 1092.985113][T13924] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 1092.990498][T13924] mutex_lock_nested+0x5a/0x1d0 [ 1092.995344][T13924] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 1093.000703][T13924] vmci_qp_broker_detach+0xe9/0xeb0 [ 1093.005888][T13924] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1093.011677][T13924] ? kasan_quarantine_put+0xbb/0x1f0 [ 1093.016969][T13924] ? lockdep_hardirqs_on+0x7b/0x110 [ 1093.022216][T13924] ? kfree+0x1c5/0x6d0 [ 1093.026278][T13924] ? vmci_ctx_put+0x5ba/0xc00 [ 1093.030928][T13924] ? vmci_ctx_put+0x13e/0xc00 [ 1093.035587][T13924] vmci_ctx_put+0x619/0xc00 [ 1093.040079][T13924] ? vmci_ctx_put+0x13e/0xc00 [ 1093.044742][T13924] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1093.049744][T13924] ? rt_spin_unlock+0x159/0x200 [ 1093.054582][T13924] ? rt_spin_unlock+0x165/0x200 [ 1093.059423][T13924] vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 1093.065040][T13924] vmci_datagram_dispatch+0x450/0xc80 [ 1093.070399][T13924] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 1093.076276][T13924] vmci_qp_broker_detach+0x87e/0xeb0 [ 1093.081543][T13924] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1093.087325][T13924] ? kasan_quarantine_put+0xbb/0x1f0 [ 1093.092597][T13924] ? kfree+0x1c5/0x6d0 [ 1093.096669][T13924] ? vmci_ctx_put+0x5ba/0xc00 [ 1093.101319][T13924] vmci_ctx_put+0x619/0xc00 [ 1093.105801][T13924] ? vmci_ctx_put+0x13e/0xc00 [ 1093.110453][T13924] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1093.115456][T13924] vmci_host_close+0x91/0x140 [ 1093.120128][T13924] ? __pfx_vmci_host_close+0x10/0x10 [ 1093.125391][T13924] __fput+0x42a/0xa80 [ 1093.129369][T13924] task_work_run+0x1d9/0x270 [ 1093.133937][T13924] ? __pfx_task_work_run+0x10/0x10 [ 1093.139029][T13924] ? __fput_deferred+0x253/0x3e0 [ 1093.143946][T13924] exit_to_user_mode_loop+0x204/0x770 [ 1093.149294][T13924] ? rcu_is_watching+0x16/0xb0 [ 1093.154046][T13924] do_syscall_64+0x328/0x520 [ 1093.158633][T13924] ? trace_irq_disable+0x3b/0x140 [ 1093.163646][T13924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.169689][T13924] ? clear_bhb_loop+0x70/0xc0 [ 1093.174346][T13924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1093.180229][T13924] RIP: 0033:0x7f6675c9e159 [ 1093.184647][T13924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1093.204246][T13924] RSP: 002b:00007f6673ed5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1093.212650][T13924] RAX: 0000000000000000 RBX: 00007f6675f26090 RCX: 00007f6675c9e159 [ 1093.220614][T13924] RDX: 0000200000000540 RSI: 00000000000007a8 RDI: 0000000000000009 [ 1093.228566][T13924] RBP: 00007f6675d3506b R08: 0000000000000000 R09: 0000000000000000 [ 1093.236511][T13924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1093.244459][T13924] R13: 00007f6675f26128 R14: 00007f6675f26090 R15: 00007ffe110870a8 [ 1093.252415][T13924] SYZFAIL: failed to send rpc fd=3 want=4640 sent=0 n=-1 (errno 32: Broken pipe) [ 1094.196140][T13924] ------------[ cut here ]------------ [ 1094.196152][T13924] rtmutex deadlock detected [ 1094.196159][T13924] WARNING: kernel/locking/rtmutex.c:1698 at rt_mutex_handle_deadlock+0x21/0xb0, CPU#0: syz.2.1874/13924 [ 1094.217341][T13924] Modules linked in: [ 1094.221242][T13924] CPU: 0 UID: 0 PID: 13924 Comm: syz.2.1874 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1094.232799][T13924] Tainted: [L]=SOFTLOCKUP [ 1094.237140][T13924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1094.247221][T13924] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0 [ 1094.253358][T13924] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 81 00 00 00 48 89 f7 e8 16 41 01 00 48 8d 3d ef 52 5b 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1d 63 a5 4b 07 4c 8d [ 1094.273061][T13924] RSP: 0018:ffffc900048cf4f0 EFLAGS: 00010286 [ 1094.279274][T13924] RAX: 8000000000000000 RBX: 00000000ffffffdd RCX: ffffffff99aec501 [ 1094.287258][T13924] RDX: 0000000000000001 RSI: ffffffff8bcc3560 RDI: ffffffff8fb52d80 [ 1094.295208][T13924] RBP: ffffc900048cf6a0 R08: ffffffff8fb2167f R09: 1ffffffff1f642cf [ 1094.303209][T13924] R10: dffffc0000000000 R11: fffffbfff1f642d0 R12: 1ffff92000919eac [ 1094.311356][T13924] R13: ffffffff8b59d4d2 R14: ffffffff8ebc2350 R15: dffffc0000000000 [ 1094.319339][T13924] FS: 00007f6673ed56c0(0000) GS:ffff888125bc8000(0000) knlGS:0000000000000000 [ 1094.328272][T13924] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1094.334833][T13924] CR2: 000055dbcadd4e78 CR3: 000000005f7b8000 CR4: 00000000003526f0 [ 1094.342818][T13924] Call Trace: [ 1094.346093][T13924] [ 1094.349002][T13924] ? rt_mutex_slowlock+0x1f2/0x780 [ 1094.354121][T13924] rt_mutex_slowlock+0x73e/0x780 [ 1094.359063][T13924] ? rt_mutex_slowlock+0x1f2/0x780 [ 1094.364152][T13924] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1094.369619][T13924] ? lock_acquire+0x232/0x350 [ 1094.374273][T13924] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 1094.379639][T13924] mutex_lock_nested+0x168/0x1d0 [ 1094.384554][T13924] vmci_qp_broker_detach+0xe9/0xeb0 [ 1094.389767][T13924] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1094.395570][T13924] ? kasan_quarantine_put+0xbb/0x1f0 [ 1094.400842][T13924] ? lockdep_hardirqs_on+0x7b/0x110 [ 1094.406043][T13924] ? kfree+0x1c5/0x6d0 [ 1094.410101][T13924] ? vmci_ctx_put+0x5ba/0xc00 [ 1094.414750][T13924] ? vmci_ctx_put+0x13e/0xc00 [ 1094.419423][T13924] vmci_ctx_put+0x619/0xc00 [ 1094.423899][T13924] ? vmci_ctx_put+0x13e/0xc00 [ 1094.428580][T13924] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1094.433579][T13924] ? rt_spin_unlock+0x159/0x200 [ 1094.438424][T13924] ? rt_spin_unlock+0x165/0x200 [ 1094.443251][T13924] vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 1094.448892][T13924] vmci_datagram_dispatch+0x450/0xc80 [ 1094.454239][T13924] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 1094.460128][T13924] vmci_qp_broker_detach+0x87e/0xeb0 [ 1094.465397][T13924] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1094.471205][T13924] ? kasan_quarantine_put+0xbb/0x1f0 [ 1094.476485][T13924] ? kfree+0x1c5/0x6d0 [ 1094.480549][T13924] ? vmci_ctx_put+0x5ba/0xc00 [ 1094.485202][T13924] vmci_ctx_put+0x619/0xc00 [ 1094.489702][T13924] ? vmci_ctx_put+0x13e/0xc00 [ 1094.494354][T13924] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1094.499377][T13924] vmci_host_close+0x91/0x140 [ 1094.504050][T13924] ? __pfx_vmci_host_close+0x10/0x10 [ 1094.509341][T13924] __fput+0x42a/0xa80 [ 1094.513300][T13924] task_work_run+0x1d9/0x270 [ 1094.517900][T13924] ? __pfx_task_work_run+0x10/0x10 [ 1094.522985][T13924] ? __fput_deferred+0x253/0x3e0 [ 1094.527935][T13924] exit_to_user_mode_loop+0x204/0x770 [ 1094.533286][T13924] ? rcu_is_watching+0x16/0xb0 [ 1094.538048][T13924] do_syscall_64+0x328/0x520 [ 1094.542645][T13924] ? trace_irq_disable+0x3b/0x140 [ 1094.547665][T13924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.553709][T13924] ? clear_bhb_loop+0x70/0xc0 [ 1094.558387][T13924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1094.564271][T13924] RIP: 0033:0x7f6675c9e159 [ 1094.568679][T13924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1094.588301][T13924] RSP: 002b:00007f6673ed5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1094.596712][T13924] RAX: 0000000000000000 RBX: 00007f6675f26090 RCX: 00007f6675c9e159 [ 1094.604660][T13924] RDX: 0000200000000540 RSI: 00000000000007a8 RDI: 0000000000000009 [ 1094.612637][T13924] RBP: 00007f6675d3506b R08: 0000000000000000 R09: 0000000000000000 [ 1094.620604][T13924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1094.628571][T13924] R13: 00007f6675f26128 R14: 00007f6675f26090 R15: 00007ffe110870a8 [ 1094.636546][T13924] [ 1094.639559][T13924] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1094.646829][T13924] CPU: 0 UID: 0 PID: 13924 Comm: syz.2.1874 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 1094.658259][T13924] Tainted: [L]=SOFTLOCKUP [ 1094.662730][T13924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1094.672760][T13924] Call Trace: [ 1094.676031][T13924] [ 1094.678938][T13924] vpanic+0x56d/0xa60 [ 1094.682919][T13924] ? __pfx__printk+0x10/0x10 [ 1094.687481][T13924] ? __pfx_vpanic+0x10/0x10 [ 1094.691956][T13924] ? is_bpf_text_address+0x292/0x2b0 [ 1094.697241][T13924] ? is_bpf_text_address+0x26/0x2b0 [ 1094.702417][T13924] panic+0xc5/0xd0 [ 1094.706155][T13924] ? __pfx_panic+0x10/0x10 [ 1094.710552][T13924] __warn+0x315/0x4c0 [ 1094.714520][T13924] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 1094.720042][T13924] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 1094.725561][T13924] __report_bug+0x276/0x570 [ 1094.730102][T13924] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 1094.735625][T13924] ? __pfx___report_bug+0x10/0x10 [ 1094.740629][T13924] ? __schedule+0x16ef/0x5700 [ 1094.745283][T13924] report_bug_entry+0x19b/0x290 [ 1094.750110][T13924] ? rt_mutex_handle_deadlock+0x21/0xb0 [ 1094.755634][T13924] ? rt_mutex_handle_deadlock+0x26/0xb0 [ 1094.761154][T13924] handle_bug+0xce/0x200 [ 1094.765388][T13924] exc_invalid_op+0x1a/0x50 [ 1094.769864][T13924] asm_exc_invalid_op+0x1a/0x20 [ 1094.774690][T13924] RIP: 0010:rt_mutex_handle_deadlock+0x21/0xb0 [ 1094.780820][T13924] Code: 90 90 90 90 90 90 90 90 90 41 57 41 56 41 55 41 54 53 83 ff dd 0f 85 81 00 00 00 48 89 f7 e8 16 41 01 00 48 8d 3d ef 52 5b 04 <67> 48 0f b9 3a 4c 8d 3d 00 00 00 00 65 48 8b 1d 63 a5 4b 07 4c 8d [ 1094.800401][T13924] RSP: 0018:ffffc900048cf4f0 EFLAGS: 00010286 [ 1094.806441][T13924] RAX: 8000000000000000 RBX: 00000000ffffffdd RCX: ffffffff99aec501 [ 1094.814387][T13924] RDX: 0000000000000001 RSI: ffffffff8bcc3560 RDI: ffffffff8fb52d80 [ 1094.822333][T13924] RBP: ffffc900048cf6a0 R08: ffffffff8fb2167f R09: 1ffffffff1f642cf [ 1094.830279][T13924] R10: dffffc0000000000 R11: fffffbfff1f642d0 R12: 1ffff92000919eac [ 1094.838227][T13924] R13: ffffffff8b59d4d2 R14: ffffffff8ebc2350 R15: dffffc0000000000 [ 1094.846185][T13924] ? rt_mutex_slowlock+0x1f2/0x780 [ 1094.851281][T13924] ? rt_mutex_slowlock+0x1f2/0x780 [ 1094.856382][T13924] rt_mutex_slowlock+0x73e/0x780 [ 1094.861299][T13924] ? rt_mutex_slowlock+0x1f2/0x780 [ 1094.866383][T13924] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1094.871835][T13924] ? lock_acquire+0x232/0x350 [ 1094.876489][T13924] ? vmci_qp_broker_detach+0xe9/0xeb0 [ 1094.881838][T13924] mutex_lock_nested+0x168/0x1d0 [ 1094.886753][T13924] vmci_qp_broker_detach+0xe9/0xeb0 [ 1094.891928][T13924] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1094.897719][T13924] ? kasan_quarantine_put+0xbb/0x1f0 [ 1094.902983][T13924] ? lockdep_hardirqs_on+0x7b/0x110 [ 1094.908169][T13924] ? kfree+0x1c5/0x6d0 [ 1094.912230][T13924] ? vmci_ctx_put+0x5ba/0xc00 [ 1094.916900][T13924] ? vmci_ctx_put+0x13e/0xc00 [ 1094.921560][T13924] vmci_ctx_put+0x619/0xc00 [ 1094.926043][T13924] ? vmci_ctx_put+0x13e/0xc00 [ 1094.930697][T13924] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1094.935702][T13924] ? rt_spin_unlock+0x159/0x200 [ 1094.940534][T13924] ? rt_spin_unlock+0x165/0x200 [ 1094.945371][T13924] vmci_ctx_enqueue_datagram+0x3c3/0x440 [ 1094.950984][T13924] vmci_datagram_dispatch+0x450/0xc80 [ 1094.956344][T13924] ? __pfx_vmci_datagram_dispatch+0x10/0x10 [ 1094.962218][T13924] vmci_qp_broker_detach+0x87e/0xeb0 [ 1094.967486][T13924] ? __pfx_vmci_qp_broker_detach+0x10/0x10 [ 1094.973277][T13924] ? kasan_quarantine_put+0xbb/0x1f0 [ 1094.978556][T13924] ? kfree+0x1c5/0x6d0 [ 1094.982607][T13924] ? vmci_ctx_put+0x5ba/0xc00 [ 1094.987266][T13924] vmci_ctx_put+0x619/0xc00 [ 1094.991747][T13924] ? vmci_ctx_put+0x13e/0xc00 [ 1094.996421][T13924] ? __pfx_vmci_ctx_put+0x10/0x10 [ 1095.001427][T13924] vmci_host_close+0x91/0x140 [ 1095.006086][T13924] ? __pfx_vmci_host_close+0x10/0x10 [ 1095.011436][T13924] __fput+0x42a/0xa80 [ 1095.015410][T13924] task_work_run+0x1d9/0x270 [ 1095.019981][T13924] ? __pfx_task_work_run+0x10/0x10 [ 1095.025069][T13924] ? __fput_deferred+0x253/0x3e0 [ 1095.029990][T13924] exit_to_user_mode_loop+0x204/0x770 [ 1095.035363][T13924] ? rcu_is_watching+0x16/0xb0 [ 1095.040110][T13924] do_syscall_64+0x328/0x520 [ 1095.044683][T13924] ? trace_irq_disable+0x3b/0x140 [ 1095.049683][T13924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.055726][T13924] ? clear_bhb_loop+0x70/0xc0 [ 1095.060399][T13924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.066266][T13924] RIP: 0033:0x7f6675c9e159 [ 1095.070660][T13924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1095.090239][T13924] RSP: 002b:00007f6673ed5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1095.098628][T13924] RAX: 0000000000000000 RBX: 00007f6675f26090 RCX: 00007f6675c9e159 [ 1095.106576][T13924] RDX: 0000200000000540 RSI: 00000000000007a8 RDI: 0000000000000009 [ 1095.114525][T13924] RBP: 00007f6675d3506b R08: 0000000000000000 R09: 0000000000000000 [ 1095.122471][T13924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1095.130423][T13924] R13: 00007f6675f26128 R14: 00007f6675f26090 R15: 00007ffe110870a8 [ 1095.138376][T13924] [ 1095.141433][T13924] Kernel Offset: disabled [ 1095.145739][T13924] Rebooting in 86400 seconds..