last executing test programs: 8.752645624s ago: executing program 2 (id=162): r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r0, &(0x7f0000000500)=[{0x0}], 0x1, 0xa3, 0x0) 8.557124525s ago: executing program 2 (id=164): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000012c0)={0x14, &(0x7f0000000140)={0x40, 0x27, 0x57, {0x57, 0x29, "953891ce2198b198e18f991cc40545858fa829ef8d3ab01292adab450d1736f8e5be1571a532b0207788df74fd90c19728555924bcd463abc1eafa22de0ab05e0819f8da145ade0c9714412de18882f64d4a7818b2"}}, 0x0}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffffffffffea8, &(0x7f0000000100)=ANY=[]) 5.776263541s ago: executing program 2 (id=184): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x1, 0x3, 0x1, 0xfe, "0062ba92600000f73809630400"}) syz_open_pts(r0, 0x900) 5.35835111s ago: executing program 2 (id=186): getpgrp(0xffffffffffffffff) r0 = getpid() syz_pidfd_open(r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) 4.194801562s ago: executing program 1 (id=189): mkdir(0x0, 0x1d3) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 3.968584591s ago: executing program 1 (id=192): listns(&(0x7f0000000000)={0x20, 0x0, 0xffff, 0x20000}, 0x0, 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840), 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, 0x0) io_submit(0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 3.762361072s ago: executing program 0 (id=194): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x38, 0x0, 0x0, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 2.770572286s ago: executing program 0 (id=195): socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x20}, [@NFT_MSG_NEWCHAIN={0x4c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}]}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.664903324s ago: executing program 3 (id=196): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='{', 0x1}], 0x1}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r2, 0x5}, 0x8) 2.600739399s ago: executing program 0 (id=197): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04", 0x42, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c", 0xb7}, {&(0x7f0000000ac0)="3fe4c8a328", 0x5}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d06cd70a1b428c0", 0x37}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a60", 0xb0}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b523983", 0x72}], 0x6, 0x0, 0x0, 0xc0}], 0x1, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.548580385s ago: executing program 3 (id=198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) init_module(0x0, 0xa99, &(0x7f0000001800)='GPL\x00') r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000000d00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffffc}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000400)="b8", 0x1}], 0x1, 0x0, 0x0, 0xff000000}}], 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) 1.351449601s ago: executing program 2 (id=199): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000200000002000008000400", 0x20) 1.111164248s ago: executing program 3 (id=200): mkdir(0x0, 0x1d3) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 1.067892164s ago: executing program 2 (id=201): openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) syz_usb_connect(0x2, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="120110012cae9308da040d39dffa0102030109022d0001c94080010904f90403c0da26ff0905f10f40000300bf09050300ff030507200905821010"], 0x0) 1.043847456s ago: executing program 3 (id=202): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) 920.810534ms ago: executing program 0 (id=203): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000380)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) listen(r0, 0x5) 909.04197ms ago: executing program 3 (id=204): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x4b564d01}]}) 849.189608ms ago: executing program 0 (id=205): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80800) write(r1, &(0x7f0000000000)="00000000000010000000", 0xffffffad) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x1032, 0xffffffffffffffff, 0x21d67000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000c40)={'wlan1\x00'}) 783.053476ms ago: executing program 1 (id=206): mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x5d5dfca8) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r0, &(0x7f0000000140)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4}}, 0x50) write$UHID_INPUT(r0, &(0x7f0000004040)={0x8, {"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", 0x1000}}, 0x1006) 379.833948ms ago: executing program 0 (id=207): getpgrp(0xffffffffffffffff) r0 = getpid() syz_pidfd_open(r0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) write$sequencer(0xffffffffffffffff, 0x0, 0x0) 375.53327ms ago: executing program 1 (id=208): r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='{', 0x1}], 0x1}}], 0x1, 0x4000000) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r2, 0x5}, 0x8) 102.124909ms ago: executing program 1 (id=209): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1, 0x1ff, 0x0, 0x8009}, 0x10) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000000200000002000008000400", 0x20) 101.8408ms ago: executing program 3 (id=210): mkdir(&(0x7f0000000100)='./file0\x00', 0x1d3) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 0s ago: executing program 1 (id=211): syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x1, 0x8, 0x7fffffff, 0x2, 0x80007, 0x7f, 0x20000006, 0xca, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x100001, 0x3, 0x0, 0x5, 0x6, 0x2000001, 0x7, 0x3c5b, 0x1, 0x24, 0x8006, 0x1, 0x5, 0x0, 0xe661, 0x4, 0x7, 0x89d2, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0xfffffffc, 0x80008071, 0x7, 0x17, 0xd, 0x3, 0x2, 0x3e, 0x8f, 0x4006, 0x6, 0x80000000, 0x0, 0x4, 0x2, 0x400, 0x80, 0x0, 0x4, 0x7, 0x8, 0x4, 0x5, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x169432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0x10, 0x312, 0xd, 0x8, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x7ffe, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x20009, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0xd8a1, 0x3, 0x8, 0xa6d, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x4, 0x5, 0xb, 0x4, 0x9, 0x5, 0x2000000, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x1fe, 0x7e, 0x7, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0x4000a9, 0x5, 0x3, 0xac8, 0x2000af, 0xfffffffe, 0x8, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0xfffffbff, 0x5, 0x1c, 0x120000, 0x1, 0x2004, 0x80a2ed, 0x4, 0x25], [0x7, 0xbb33, 0x7, 0x2, 0x5, 0x42c2, 0x6, 0x6, 0x0, 0xb9, 0x4e7, 0x5, 0x2, 0x57, 0x4, 0x8000003, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x4, 0x1, 0x1, 0x2, 0x5, 0xe7, 0x8, 0x16, 0x6, 0x3, 0x6, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x6, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0xffffffff, 0x5, 0x45, 0x8, 0x30b1d693, 0x5, 0x1f40, 0x7, 0x41, 0x6c1b, 0x7ff, 0x804, 0xac1, 0xb1e, 0xd7, 0x9, 0xffff3441, 0xfff]}, 0x45c) syz_open_dev$vim2m(&(0x7f0000000340), 0x10000000042007, 0x2) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x300}], 0x20000000000000dc, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.14' (ED25519) to the list of known hosts. [ 119.995407][ T5597] cgroup: Unknown subsys name 'net' [ 120.272522][ T5597] cgroup: Unknown subsys name 'cpuset' [ 120.339518][ T5597] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 122.435135][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 126.574565][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 126.595869][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 126.622397][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 126.672184][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 126.683508][ T5626] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 126.709722][ T5626] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 126.712585][ T5626] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 126.713499][ T5626] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 126.716906][ T5629] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 126.719125][ T5629] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 126.732922][ T5629] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 126.789747][ T60] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 126.806766][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 126.818465][ T5629] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 126.823432][ T5621] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 126.873869][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 126.874934][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 126.876946][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 126.933762][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 126.934731][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 128.862411][ T5624] Bluetooth: hci3: command tx timeout [ 128.938916][ T5624] Bluetooth: hci0: command tx timeout [ 129.018989][ T5624] Bluetooth: hci1: command tx timeout [ 129.019177][ T5624] Bluetooth: hci2: command tx timeout [ 129.345811][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.346169][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.347932][ T5619] bridge_slave_0: entered allmulticast mode [ 129.372227][ T5619] bridge_slave_0: entered promiscuous mode [ 129.417809][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.418050][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.418313][ T5617] bridge_slave_0: entered allmulticast mode [ 129.433898][ T5617] bridge_slave_0: entered promiscuous mode [ 129.454334][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.454687][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.454920][ T5619] bridge_slave_1: entered allmulticast mode [ 129.457332][ T5619] bridge_slave_1: entered promiscuous mode [ 129.521899][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.522230][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.522843][ T5617] bridge_slave_1: entered allmulticast mode [ 129.525310][ T5617] bridge_slave_1: entered promiscuous mode [ 129.571533][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.571829][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.572268][ T5618] bridge_slave_0: entered allmulticast mode [ 129.574824][ T5618] bridge_slave_0: entered promiscuous mode [ 129.577007][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.577721][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.578005][ T5616] bridge_slave_0: entered allmulticast mode [ 129.593614][ T5616] bridge_slave_0: entered promiscuous mode [ 129.667692][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.668017][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.668305][ T5618] bridge_slave_1: entered allmulticast mode [ 129.691619][ T5618] bridge_slave_1: entered promiscuous mode [ 129.693774][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.694004][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.694203][ T5616] bridge_slave_1: entered allmulticast mode [ 129.696658][ T5616] bridge_slave_1: entered promiscuous mode [ 129.758491][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.811752][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.816296][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.878508][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.913507][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.920714][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.976290][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.990599][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.021050][ T5619] team0: Port device team_slave_0 added [ 130.065521][ T5617] team0: Port device team_slave_0 added [ 130.073196][ T5619] team0: Port device team_slave_1 added [ 130.121850][ T5617] team0: Port device team_slave_1 added [ 130.150464][ T5618] team0: Port device team_slave_0 added [ 130.156096][ T5616] team0: Port device team_slave_0 added [ 130.212980][ T5618] team0: Port device team_slave_1 added [ 130.216263][ T5616] team0: Port device team_slave_1 added [ 130.247341][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.247356][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.247376][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.324325][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.324339][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.324359][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.326657][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.326669][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.326689][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.437410][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.437423][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.437443][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.490220][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.490233][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.490253][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.493114][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.493127][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.493147][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.599149][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.599162][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.599182][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.601172][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.601182][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 130.601202][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.795489][ T5619] hsr_slave_0: entered promiscuous mode [ 130.797712][ T5619] hsr_slave_1: entered promiscuous mode [ 130.938990][ T4923] Bluetooth: hci3: command tx timeout [ 131.020112][ T4923] Bluetooth: hci0: command tx timeout [ 131.088200][ T5617] hsr_slave_0: entered promiscuous mode [ 131.091622][ T5617] hsr_slave_1: entered promiscuous mode [ 131.100470][ T4923] Bluetooth: hci2: command tx timeout [ 131.100498][ T4923] Bluetooth: hci1: command tx timeout [ 131.112552][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 131.112662][ T5617] Cannot create hsr debugfs directory [ 131.173426][ T5618] hsr_slave_0: entered promiscuous mode [ 131.175614][ T5618] hsr_slave_1: entered promiscuous mode [ 131.176897][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 131.176922][ T5618] Cannot create hsr debugfs directory [ 131.206054][ T5616] hsr_slave_0: entered promiscuous mode [ 131.207629][ T5616] hsr_slave_1: entered promiscuous mode [ 131.211367][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 131.211435][ T5616] Cannot create hsr debugfs directory [ 132.138275][ T5619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 132.192670][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 132.213741][ T5619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 132.244440][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 132.254585][ T5619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 132.292762][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 132.340862][ T5619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.369773][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 132.519792][ T5618] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 132.565232][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 132.577071][ T5618] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 132.625479][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 132.637740][ T5618] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 132.675454][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 132.705817][ T5618] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 132.744149][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 132.872591][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 132.907701][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 132.925582][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 132.966209][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 132.981703][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 133.018991][ T5624] Bluetooth: hci3: command tx timeout [ 133.034500][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.072809][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 133.099401][ T5624] Bluetooth: hci0: command tx timeout [ 133.123783][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.179238][ T5624] Bluetooth: hci1: command tx timeout [ 133.179271][ T5624] Bluetooth: hci2: command tx timeout [ 133.286849][ T5616] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 133.325105][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 133.385487][ T5616] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 133.415308][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 133.429857][ T5616] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 133.464874][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 133.480844][ T5616] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 133.513924][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 133.623606][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.750517][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.810245][ T1003] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.810508][ T1003] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.890850][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.907539][ T1003] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.907911][ T1003] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.070508][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.093433][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.151114][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.151459][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.197271][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.197473][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.256889][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.312079][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.312250][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.344081][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.393285][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.393417][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.552758][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.627511][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.627728][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.733497][ T2349] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.733739][ T2349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.098856][ T4923] Bluetooth: hci3: command tx timeout [ 135.178892][ T4923] Bluetooth: hci0: command tx timeout [ 135.259930][ T5624] Bluetooth: hci1: command tx timeout [ 135.259982][ T4923] Bluetooth: hci2: command tx timeout [ 135.620988][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.025443][ T5619] veth0_vlan: entered promiscuous mode [ 136.097856][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.142209][ T5619] veth1_vlan: entered promiscuous mode [ 136.367421][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.463447][ T5619] veth0_macvtap: entered promiscuous mode [ 136.497856][ T5619] veth1_macvtap: entered promiscuous mode [ 136.528014][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.554060][ T5618] veth0_vlan: entered promiscuous mode [ 136.630795][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.646267][ T5618] veth1_vlan: entered promiscuous mode [ 136.682558][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.735454][ T5617] veth0_vlan: entered promiscuous mode [ 136.771491][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.788233][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.803694][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.833067][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.861613][ T5617] veth1_vlan: entered promiscuous mode [ 136.974987][ T5616] veth0_vlan: entered promiscuous mode [ 137.060865][ T5618] veth0_macvtap: entered promiscuous mode [ 137.193095][ T5618] veth1_macvtap: entered promiscuous mode [ 137.260972][ T5616] veth1_vlan: entered promiscuous mode [ 137.373342][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.373358][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.377041][ T5617] veth0_macvtap: entered promiscuous mode [ 137.451376][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.523095][ T5617] veth1_macvtap: entered promiscuous mode [ 137.570008][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.602128][ T408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.602148][ T408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.635627][ T2349] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.688925][ T2349] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.696682][ T2349] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.700208][ T2349] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.737819][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.778632][ T5616] veth0_macvtap: entered promiscuous mode [ 137.816047][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.817029][ T5616] veth1_macvtap: entered promiscuous mode [ 138.066674][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.108099][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.145311][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.385773][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.529857][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 138.689319][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.038873][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.038893][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.076538][ T25] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.110373][ T1182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.127352][ T1182] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.166263][ T1182] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.332146][ T2349] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.332164][ T2349] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.855186][ T2349] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 139.855206][ T2349] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.029119][ T1003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.029139][ T1003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.072813][ T1339] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.072992][ T1339] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.308399][ T823] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 140.440693][ T408] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.440715][ T408] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.641842][ T5779] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 140.645619][ T823] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 140.645648][ T823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.723313][ T408] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.723343][ T408] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.022258][ T823] usb 1-1: config 0 descriptor?? [ 141.281726][ T5784] syz.1.9 uses obsolete (PF_INET,SOCK_PACKET) [ 141.398367][ T823] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 141.399969][ T823] [drm:udl_init] *ERROR* Selecting channel failed [ 141.976880][ T823] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 141.976909][ T823] [drm] Initialized udl on minor 2 [ 142.226803][ T823] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 142.326446][ T823] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 142.606348][ T5787] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 142.606944][ T5787] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 142.818594][ T823] usb 1-1: USB disconnect, device number 2 [ 143.000331][ T5797] ======================================================= [ 143.000331][ T5797] WARNING: The mand mount option has been deprecated and [ 143.000331][ T5797] and is ignored by this kernel. Remove the mand [ 143.000331][ T5797] option from the mount to silence this warning. [ 143.000331][ T5797] ======================================================= [ 143.110311][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 145.540089][ T5817] Zero length message leads to an empty skb [ 145.781663][ T5817] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 145.781707][ T5817] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 145.781753][ T5817] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 145.954946][ T5817] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 145.986807][ T5817] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 147.020761][ T1676] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 147.221845][ T1676] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 147.221889][ T1676] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.304882][ T1676] usb 2-1: config 0 descriptor?? [ 147.382024][ T823] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 147.530197][ T1676] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 147.530683][ T1676] [drm:udl_init] *ERROR* Selecting channel failed [ 147.550270][ T823] usb 1-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 147.550304][ T823] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.550326][ T823] usb 1-1: Product: syz [ 147.550340][ T823] usb 1-1: Manufacturer: syz [ 147.550357][ T823] usb 1-1: SerialNumber: syz [ 147.711625][ T1676] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 147.711653][ T1676] [drm] Initialized udl on minor 2 [ 147.738363][ T1676] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 147.749377][ T1676] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 147.795798][ T5722] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 147.817342][ T5722] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 147.817555][ T5722] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 147.907664][ T1676] usb 2-1: USB disconnect, device number 2 [ 147.992225][ T823] usb 1-1: config 0 descriptor?? [ 148.211087][ T823] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 148.813640][ T823] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 148.868655][ T823] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 148.874179][ T823] usb 1-1: media controller created [ 149.056459][ T5859] siw: device registration error -23 [ 149.193345][ T823] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 149.400598][ T823] DVB: Unable to find symbol mt352_attach() [ 149.513118][ T823] DVB: Unable to find symbol nxt6000_attach() [ 149.513136][ T823] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 149.596803][ T823] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 149.931322][ T823] dvb-usb: schedule remote query interval to 1000 msecs. [ 149.931348][ T823] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 149.931632][ T823] dvb-usb: bulk message failed: -22 (7/0) [ 149.931653][ T823] dvb-usb: bulk message failed: -22 (7/0) [ 149.983728][ T823] usb 1-1: USB disconnect, device number 3 [ 150.588672][ T823] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 150.761831][ T5887] syz.3.44 (5887) used greatest stack depth: 19488 bytes left [ 152.793883][ T5912] vivid-000: kernel_thread() failed [ 153.369266][ T5919] nbd: must specify at least one socket [ 158.686721][ T6039] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.996912][ T6046] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 158.996942][ T6046] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 159.072664][ T6046] vhci_hcd vhci_hcd.0: Device attached [ 159.458900][ T5714] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 159.470226][ T5707] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 159.613252][ T5714] usb 3-1: config 0 has no interfaces? [ 159.613281][ T5714] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 159.613298][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.754889][ T5714] usb 3-1: config 0 descriptor?? [ 160.004585][ T1676] usb 3-1: USB disconnect, device number 2 [ 160.061726][ T6047] vhci_hcd: connection closed [ 160.109773][ T5707] usb 37-1: device descriptor read/64, error -71 [ 160.125574][ T148] vhci_hcd vhci_hcd.2: stop threads [ 160.137540][ T148] vhci_hcd vhci_hcd.2: release socket [ 160.157928][ T148] vhci_hcd vhci_hcd.2: disconnect device [ 160.298977][ T5707] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 162.149078][ T5508] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 162.279541][ T5508] usb 3-1: device descriptor read/64, error -71 [ 162.549935][ T5508] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 162.592167][ T6113] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 162.679049][ T5508] usb 3-1: device descriptor read/64, error -71 [ 162.799377][ T5508] usb usb3-port1: attempt power cycle [ 163.169137][ T5508] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 163.189577][ T5508] usb 3-1: device descriptor read/8, error -71 [ 163.443083][ T5508] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 163.472676][ T5508] usb 3-1: device descriptor read/8, error -71 [ 163.590986][ T5508] usb usb3-port1: unable to enumerate USB device [ 164.029153][ T5508] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 164.219847][ T5508] usb 1-1: Using ep0 maxpacket: 8 [ 164.225379][ T5508] usb 1-1: config 0 interface 0 has no altsetting 0 [ 164.225500][ T5508] usb 1-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 164.225559][ T5508] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.266970][ T5508] usb 1-1: config 0 descriptor?? [ 164.280963][ T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 164.456966][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 164.456993][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 164.457063][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 164.457081][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 164.581583][ T6149] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 164.758544][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 164.917134][ T5508] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 164.917174][ T5508] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 164.917202][ T5508] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 164.917228][ T5508] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 164.917254][ T5508] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 164.917281][ T5508] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 164.917309][ T5508] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 164.917348][ T5508] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 164.917376][ T5508] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 164.917403][ T5508] sony 0003:054C:0268.0001: unknown main item tag 0x0 [ 165.199799][ T5508] sony 0003:054C:0268.0001: hiddev0,hidraw0: USB HID v80.c1 Device [HID 054c:0268] on usb-dummy_hcd.0-1/input0 [ 165.199837][ T5508] sony 0003:054C:0268.0001: failed to claim input [ 165.278849][ T5796] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 165.428872][ T5796] usb 4-1: device descriptor read/64, error -71 [ 165.564432][ T5508] usb 1-1: USB disconnect, device number 4 [ 165.668877][ T5796] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 165.799826][ T5796] usb 4-1: device descriptor read/64, error -71 [ 165.909253][ T5796] usb usb4-port1: attempt power cycle [ 166.076793][ T10] usb 3-1: USB disconnect, device number 7 [ 166.252354][ T5796] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 166.296566][ T5796] usb 4-1: device descriptor read/8, error -71 [ 166.549697][ T5796] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 166.573399][ T5796] usb 4-1: device descriptor read/8, error -71 [ 166.681222][ T5796] usb usb4-port1: unable to enumerate USB device [ 167.148970][ T10] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 167.318873][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 167.323192][ T10] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 167.323220][ T10] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 167.323243][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 167.323266][ T10] usb 3-1: config 1 has no interface number 0 [ 167.323314][ T10] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 167.323342][ T10] usb 3-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 167.323386][ T10] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 167.323418][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.591813][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found [ 167.714926][ T10] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now attached [ 168.194754][ T5796] usb 3-1: USB disconnect, device number 8 [ 168.324376][ T5796] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 169.996214][ T5508] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 170.128437][ T6248] loop8: detected capacity change from 0 to 8 [ 170.168807][ T5508] usb 3-1: device descriptor read/64, error -71 [ 170.252513][ T6248] Dev loop8: unable to read RDB block 8 [ 170.252548][ T6248] loop8: unable to read partition table [ 170.252696][ T6248] loop8: partition table beyond EOD, truncated [ 170.252722][ T6248] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 170.418893][ T5508] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 170.558831][ T5508] usb 3-1: device descriptor read/64, error -71 [ 170.670320][ T5508] usb usb3-port1: attempt power cycle [ 170.751174][ T6258] comedi comedi0: pcl816: I/O base address not correctly aligned [ 171.117314][ T5508] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 171.418412][ T5508] usb 3-1: device descriptor read/8, error -71 [ 171.778929][ T5508] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 171.806444][ T5508] usb 3-1: device descriptor read/8, error -71 [ 171.911085][ T5508] usb usb3-port1: unable to enumerate USB device [ 173.878730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.898730][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.908727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.918725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.928723][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.938725][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.948727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.958721][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 173.968731][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 174.041897][ T10] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 174.251251][ T10] usb 3-1: config 201 has an invalid interface number: 249 but max is 0 [ 174.251281][ T10] usb 3-1: config 201 has no interface number 0 [ 174.251335][ T10] usb 3-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 174.251372][ T10] usb 3-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 174.251403][ T10] usb 3-1: config 201 interface 249 has no altsetting 0 [ 174.260844][ T10] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 174.260928][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.260977][ T10] usb 3-1: Product: syz [ 174.261018][ T10] usb 3-1: Manufacturer: syz [ 174.261060][ T10] usb 3-1: SerialNumber: syz [ 174.617301][ T10] ------------[ cut here ]------------ [ 174.617319][ T10] workqueue: ath6kl_wq is using neither WQ_PERCPU or WQ_UNBOUND. Setting WQ_PERCPU. [ 174.617337][ T10] WARNING: kernel/workqueue.c:5856 at __alloc_workqueue+0x1d02/0x2070, CPU#0: kworker/0:1/10 [ 174.617383][ T10] Modules linked in: [ 174.617432][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 174.617459][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 174.617475][ T10] Workqueue: usb_hub_wq hub_event [ 174.617513][ T10] RIP: 0010:__alloc_workqueue+0x1d07/0x2070 [ 174.617545][ T10] Code: e9 36 f9 ff ff e8 89 8a 37 00 e9 05 fb ff ff e8 7f 8a 37 00 e9 92 fb ff ff e8 75 8a 37 00 48 8d 3d ee ff 43 0e 48 8b 74 24 20 <67> 48 0f b9 3a 81 cd 00 01 00 00 e9 88 e5 ff ff e8 54 8a 37 00 48 [ 174.617565][ T10] RSP: 0018:ffffc900000f6bc8 EFLAGS: 00010287 [ 174.617585][ T10] RAX: ffffffff818e412b RBX: 0000000000000000 RCX: 0000000000100000 [ 174.617602][ T10] RDX: ffffc900184c2000 RSI: ffff888026db2168 RDI: ffffffff8fd24120 [ 174.617620][ T10] RBP: 0000000000000000 R08: ffff88801dadbe00 R09: 0000000000000002 [ 174.617642][ T10] R10: 0000000000000100 R11: 0000000000000102 R12: dffffc0000000000 [ 174.617658][ T10] R13: ffff888026db2000 R14: ffffc900000f6ce0 R15: 0000000000000000 [ 174.617676][ T10] FS: 0000000000000000(0000) GS:ffff888125a6b000(0000) knlGS:0000000000000000 [ 174.617695][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 174.617711][ T10] CR2: 0000000000000000 CR3: 0000000054a38000 CR4: 00000000003526f0 [ 174.617730][ T10] Call Trace: [ 174.617745][ T10] [ 174.617774][ T10] alloc_workqueue_noprof+0xe3/0x210 [ 174.617812][ T10] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 174.617850][ T10] ? __kmalloc_cache_noprof+0x3d0/0x6d0 [ 174.617884][ T10] ? ath6kl_usb_probe+0x8e/0x1580 [ 174.617930][ T10] ath6kl_usb_probe+0xaa/0x1580 [ 174.617979][ T10] ? usb_unlocked_disable_lpm+0x8c/0xb0 [ 174.618017][ T10] usb_probe_interface+0x659/0xc70 [ 174.618063][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 174.618094][ T10] really_probe+0x267/0xaf0 [ 174.618135][ T10] __driver_probe_device+0x1e2/0x350 [ 174.618170][ T10] driver_probe_device+0x4f/0x240 [ 174.618207][ T10] __device_attach_driver+0x270/0x410 [ 174.618244][ T10] bus_for_each_drv+0x25b/0x2f0 [ 174.618268][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 174.618301][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 174.618325][ T10] ? rt_spin_unlock+0x160/0x200 [ 174.618358][ T10] __device_attach+0x2c8/0x450 [ 174.618391][ T10] ? __pfx___device_attach+0x10/0x10 [ 174.618423][ T10] ? rt_spin_unlock+0x160/0x200 [ 174.618454][ T10] device_initial_probe+0xa1/0xd0 [ 174.618487][ T10] bus_probe_device+0x12d/0x220 [ 174.618515][ T10] device_add+0x7ec/0xb90 [ 174.618547][ T10] usb_set_configuration+0x1a87/0x2110 [ 174.618632][ T10] usb_generic_driver_probe+0x8d/0x150 [ 174.618664][ T10] usb_probe_device+0x1c4/0x3b0 [ 174.618742][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 174.618772][ T10] really_probe+0x267/0xaf0 [ 174.618812][ T10] __driver_probe_device+0x1e2/0x350 [ 174.618847][ T10] driver_probe_device+0x4f/0x240 [ 174.618883][ T10] __device_attach_driver+0x270/0x410 [ 174.618920][ T10] bus_for_each_drv+0x25b/0x2f0 [ 174.618944][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 174.618987][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 174.619011][ T10] ? rt_spin_unlock+0x160/0x200 [ 174.619043][ T10] __device_attach+0x2c8/0x450 [ 174.619077][ T10] ? __pfx___device_attach+0x10/0x10 [ 174.619108][ T10] ? rt_spin_unlock+0x160/0x200 [ 174.619139][ T10] device_initial_probe+0xa1/0xd0 [ 174.619173][ T10] bus_probe_device+0x12d/0x220 [ 174.619201][ T10] device_add+0x7ec/0xb90 [ 174.619235][ T10] usb_new_device+0x9f8/0x16e0 [ 174.619273][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 174.619309][ T10] hub_event+0x2a49/0x4f60 [ 174.619396][ T10] ? __pfx_hub_event+0x10/0x10 [ 174.619424][ T10] ? process_one_work+0x8be/0x1630 [ 174.619473][ T10] ? process_one_work+0x8be/0x1630 [ 174.619508][ T10] process_one_work+0x98b/0x1630 [ 174.619568][ T10] ? __pfx_process_one_work+0x10/0x10 [ 174.619601][ T10] ? do_raw_spin_lock+0x12b/0x2f0 [ 174.619648][ T10] worker_thread+0xb49/0x1140 [ 174.619716][ T10] kthread+0x388/0x470 [ 174.619744][ T10] ? __pfx_worker_thread+0x10/0x10 [ 174.619779][ T10] ? __pfx_kthread+0x10/0x10 [ 174.619809][ T10] ret_from_fork+0x514/0xb70 [ 174.619841][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 174.619870][ T10] ? __switch_to+0xc79/0x1410 [ 174.619897][ T10] ? __pfx_kthread+0x10/0x10 [ 174.619926][ T10] ret_from_fork_asm+0x1a/0x30 [ 174.619984][ T10] [ 174.619997][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 174.620014][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 174.620042][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 174.620056][ T10] Workqueue: usb_hub_wq hub_event [ 174.620083][ T10] Call Trace: [ 174.620092][ T10] [ 174.620101][ T10] vpanic+0x56c/0xa60 [ 174.620137][ T10] ? __pfx__printk+0x10/0x10 [ 174.620163][ T10] ? __pfx_vpanic+0x10/0x10 [ 174.620195][ T10] ? is_bpf_text_address+0x292/0x2b0 [ 174.620229][ T10] ? is_bpf_text_address+0x26/0x2b0 [ 174.620272][ T10] panic+0xc5/0xd0 [ 174.620306][ T10] ? __pfx_panic+0x10/0x10 [ 174.620352][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 174.620390][ T10] __warn+0x315/0x4c0 [ 174.620422][ T10] ? __alloc_workqueue+0x1d02/0x2070 [ 174.620452][ T10] ? __alloc_workqueue+0x1d02/0x2070 [ 174.620483][ T10] __report_bug+0x339/0x540 [ 174.620512][ T10] ? __device_attach+0x2c8/0x450 [ 174.620540][ T10] ? device_initial_probe+0xa1/0xd0 [ 174.620568][ T10] ? bus_probe_device+0x12d/0x220 [ 174.620595][ T10] ? __alloc_workqueue+0x1d02/0x2070 [ 174.620623][ T10] ? __pfx___report_bug+0x10/0x10 [ 174.620650][ T10] ? device_add+0x7ec/0xb90 [ 174.620700][ T10] report_bug_entry+0x19a/0x290 [ 174.620731][ T10] ? __alloc_workqueue+0x1d07/0x2070 [ 174.620756][ T10] ? __alloc_workqueue+0x1d0c/0x2070 [ 174.620782][ T10] handle_bug+0xce/0x200 [ 174.620817][ T10] exc_invalid_op+0x1a/0x50 [ 174.620852][ T10] asm_exc_invalid_op+0x1a/0x20 [ 174.620875][ T10] RIP: 0010:__alloc_workqueue+0x1d07/0x2070 [ 174.620903][ T10] Code: e9 36 f9 ff ff e8 89 8a 37 00 e9 05 fb ff ff e8 7f 8a 37 00 e9 92 fb ff ff e8 75 8a 37 00 48 8d 3d ee ff 43 0e 48 8b 74 24 20 <67> 48 0f b9 3a 81 cd 00 01 00 00 e9 88 e5 ff ff e8 54 8a 37 00 48 [ 174.620922][ T10] RSP: 0018:ffffc900000f6bc8 EFLAGS: 00010287 [ 174.620942][ T10] RAX: ffffffff818e412b RBX: 0000000000000000 RCX: 0000000000100000 [ 174.620958][ T10] RDX: ffffc900184c2000 RSI: ffff888026db2168 RDI: ffffffff8fd24120 [ 174.620983][ T10] RBP: 0000000000000000 R08: ffff88801dadbe00 R09: 0000000000000002 [ 174.620998][ T10] R10: 0000000000000100 R11: 0000000000000102 R12: dffffc0000000000 [ 174.621014][ T10] R13: ffff888026db2000 R14: ffffc900000f6ce0 R15: 0000000000000000 [ 174.621040][ T10] ? __alloc_workqueue+0x1cfb/0x2070 [ 174.621075][ T10] ? __alloc_workqueue+0x1cfb/0x2070 [ 174.621121][ T10] alloc_workqueue_noprof+0xe3/0x210 [ 174.621157][ T10] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 174.621189][ T10] ? __kmalloc_cache_noprof+0x3d0/0x6d0 [ 174.621216][ T10] ? ath6kl_usb_probe+0x8e/0x1580 [ 174.621259][ T10] ath6kl_usb_probe+0xaa/0x1580 [ 174.621301][ T10] ? usb_unlocked_disable_lpm+0x8c/0xb0 [ 174.621337][ T10] usb_probe_interface+0x659/0xc70 [ 174.621386][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 174.621413][ T10] really_probe+0x267/0xaf0 [ 174.621449][ T10] __driver_probe_device+0x1e2/0x350 [ 174.621483][ T10] driver_probe_device+0x4f/0x240 [ 174.621518][ T10] __device_attach_driver+0x270/0x410 [ 174.621555][ T10] bus_for_each_drv+0x25b/0x2f0 [ 174.621579][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 174.621610][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 174.621633][ T10] ? rt_spin_unlock+0x160/0x200 [ 174.621664][ T10] __device_attach+0x2c8/0x450 [ 174.621698][ T10] ? __pfx___device_attach+0x10/0x10 [ 174.621729][ T10] ? rt_spin_unlock+0x160/0x200 [ 174.621761][ T10] device_initial_probe+0xa1/0xd0 [ 174.621794][ T10] bus_probe_device+0x12d/0x220 [ 174.621822][ T10] device_add+0x7ec/0xb90 [ 174.621854][ T10] usb_set_configuration+0x1a87/0x2110 [ 174.621916][ T10] usb_generic_driver_probe+0x8d/0x150 [ 174.621945][ T10] usb_probe_device+0x1c4/0x3b0 [ 174.621987][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 174.622015][ T10] really_probe+0x267/0xaf0 [ 174.622055][ T10] __driver_probe_device+0x1e2/0x350 [ 174.622089][ T10] driver_probe_device+0x4f/0x240 [ 174.622125][ T10] __device_attach_driver+0x270/0x410 [ 174.622162][ T10] bus_for_each_drv+0x25b/0x2f0 [ 174.622186][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 174.622218][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 174.622242][ T10] ? rt_spin_unlock+0x160/0x200 [ 174.622274][ T10] __device_attach+0x2c8/0x450 [ 174.622307][ T10] ? __pfx___device_attach+0x10/0x10 [ 174.622338][ T10] ? rt_spin_unlock+0x160/0x200 [ 174.622370][ T10] device_initial_probe+0xa1/0xd0 [ 174.622402][ T10] bus_probe_device+0x12d/0x220 [ 174.622430][ T10] device_add+0x7ec/0xb90 [ 174.622461][ T10] usb_new_device+0x9f8/0x16e0 [ 174.622500][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 174.622535][ T10] hub_event+0x2a49/0x4f60 [ 174.622620][ T10] ? __pfx_hub_event+0x10/0x10 [ 174.622648][ T10] ? process_one_work+0x8be/0x1630 [ 174.622697][ T10] ? process_one_work+0x8be/0x1630 [ 174.622730][ T10] process_one_work+0x98b/0x1630 [ 174.622790][ T10] ? __pfx_process_one_work+0x10/0x10 [ 174.622822][ T10] ? do_raw_spin_lock+0x12b/0x2f0 [ 174.622867][ T10] worker_thread+0xb49/0x1140 [ 174.622934][ T10] kthread+0x388/0x470 [ 174.622969][ T10] ? __pfx_worker_thread+0x10/0x10 [ 174.623004][ T10] ? __pfx_kthread+0x10/0x10 [ 174.623033][ T10] ret_from_fork+0x514/0xb70 [ 174.623065][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 174.623093][ T10] ? __switch_to+0xc79/0x1410 [ 174.623120][ T10] ? __pfx_kthread+0x10/0x10 [ 174.623149][ T10] ret_from_fork_asm+0x1a/0x30 [ 174.623201][ T10] [ 174.623795][ T10] Kernel Offset: disabled