last executing test programs: 3m36.641699676s ago: executing program 2 (id=25): syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000f80)=ANY=[@ANYBLOB="00000105000001", @ANYBLOB='\f'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m33.891747412s ago: executing program 2 (id=30): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000080)=[{0x6, 0x40, 0x0, 0x7fffffff}, {0x6, 0xff, 0xf, 0xfffff000}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0x40082104, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) flistxattr(r4, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000040)={0x40, 0xffffffde, 0x3, 0x3}, 0x10) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r6 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pipe2$watch_queue(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r9 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffff, '\x00', 0x0, r6, 0x3, 0x2, 0x1}, 0x50) ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) ioctl$TUNSETVNETBE(r8, 0x400454de, &(0x7f00000000c0)=0x1) accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 3m24.150407008s ago: executing program 2 (id=52): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='kfree\x00'}, 0x10) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='setgroups\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0xa, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="240000001000010700000000000000000a000000060001001700000008000a00", @ANYRES32=r2], 0x24}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 3m22.007806736s ago: executing program 2 (id=54): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) socket$inet(0xa, 0x801, 0x84) sendto$inet(0xffffffffffffffff, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000200)={0x0, 0x2}, 0x8) close(0xffffffffffffffff) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2014800, 0x0) creat(&(0x7f0000000240)='./file0/bus\x00', 0x0) chroot(&(0x7f0000000040)='./file0\x00') umount2(&(0x7f00000000c0)='./file0\x00', 0x0) 3m20.158017545s ago: executing program 2 (id=59): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r0}, 0x18) ioctl$VHOST_VDPA_SET_CONFIG(0xffffffffffffffff, 0x4008af74, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r3, 0x0, 0x14) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) 3m18.395959219s ago: executing program 2 (id=62): socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x3}}) 3m1.940335011s ago: executing program 32 (id=62): socket$pptp(0x18, 0x1, 0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x3}}) 2m30.995852126s ago: executing program 0 (id=140): openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x7d, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) 2m29.775748753s ago: executing program 0 (id=143): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, 0x0, &(0x7f0000000380)='GPL\x00', 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = syz_io_uring_setup(0xa0, &(0x7f00000002c0)={0x0, 0x305cc6, 0x1, 0x0, 0x20a}, &(0x7f0000000240)=0x0, &(0x7f00000000c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r3, 0xc000000, &(0x7f0000000000)=[{&(0x7f0000001600)=""/4096, 0x1000}], 0x1, 0x12}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m27.732436218s ago: executing program 0 (id=144): r0 = syz_open_dev$sndctrl(&(0x7f00000003c0), 0xb, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) 2m27.409039912s ago: executing program 0 (id=147): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000340)=0x4) 2m26.862473076s ago: executing program 0 (id=150): mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x420, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0xfffffffd) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioperm(0x9, 0x9, 0x7) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x6, 0x1, @tid=r1}, &(0x7f0000bbdffc)=0x0) open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) timer_settime(r2, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a64000000060a030600000000000000000a0000090900010073797a31000000000900020073797a32000000003800048034000180090001007866726d000000002400028008000140000000000500030001"], 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000019200)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0}) msgget(0x2, 0x760) 2m23.56875633s ago: executing program 0 (id=157): socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x9e6e, 0x1000, 0x2}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0xc4, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) munlockall() 2m7.53725281s ago: executing program 33 (id=157): socket$inet6(0xa, 0x1, 0x8010000000000084) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x5e9, &(0x7f0000000480)={0x0, 0x9e6e, 0x1000, 0x2}, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r1, &(0x7f0000001740)=[{{0x0, 0xc4, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}}, 0x0) munlockall() 22.54473011s ago: executing program 4 (id=423): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x20000806) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/partitions\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xc, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x24000000) syz_emit_ethernet(0x25e, &(0x7f0000000880)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x228, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@srh={0x33, 0x6, 0x4, 0x3, 0x6, 0x0, 0x3, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x3c}, @mcast1]}, @srh={0x5e, 0x4, 0x4, 0x2, 0x4, 0x0, 0x2, [@dev={0xfe, 0x80, '\x00', 0x22}, @remote]}, @srh={0x16, 0x8, 0x4, 0x4, 0xfb, 0x8, 0xf, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @mcast2, @private0]}, @hopopts={0x2, 0x1b, '\x00', [@jumbo={0xc2, 0x4, 0xe}, @enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x22}}, @generic={0x6, 0x9f, "e65dbb5113db51c1ddb659c8be88e3bc16b45eb3b2556ec14490abedb01e70b553d8bfb3a3a7c2cc95bbd0fd39d0e3e7b42342d9405cb32920ddd177b61826460ee9b7db1f262790b6b1da95efcb57f9a77e66b7843b7f0d6059ab13183e36d2a8b9723fd22e2051198fda0a50150c3e7f16a532f6dbef12bce858be8d883a84f720f288544e1b9c03a750666821aa296047a0b1148bdad1ebf2651d0127c4"}, @pad1, @calipso={0x7, 0x18, {0x2, 0x4, 0x4, 0x9, [0x9, 0xa]}}]}, @srh={0x84, 0x0, 0x4, 0x0, 0x8, 0x8, 0x6}, @routing={0x21, 0xc, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 20.40381141s ago: executing program 1 (id=426): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xa800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008~?n\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r7 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x20, &(0x7f0000000380)={0x0}, 0x1) sendto$inet6(r6, &(0x7f0000000100)="b8", 0xffe0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) 16.520861836s ago: executing program 4 (id=427): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x3, 0x5, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0xfffffffffffffff7, 0xfffdfffffffffffd, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc19, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40, 0x0, 0xffffffffffffff15, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc1, 0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0xe411, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffffffff8001, 0x0, 0x10000, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5bfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x40000000000000]}) 14.479893204s ago: executing program 1 (id=429): setsockopt(0xffffffffffffffff, 0x84, 0x8, &(0x7f00000002c0)="142f1ee2cbe40795ad9b605dbc09cf37bf7a516a59ef480f2851d9604b78cafafc8084ac41ba4d7c073cdec80e97bf8cd56bc4d0c6e9b150af5a1d717961ce56964bccd6097a83d15649522e705c8dffff2957d7394a420a16d5a368af2c589473a139f00681bf71d279917fdce37a5f5ed56f737f9d6d2d7bbd6b383f076363f728e0d3d5c859132d925a42a5e12004cd008e7c8c4f25f0304c712ca83626d7b036372ed78f9a6c1447ae2f915813287a68302420b1352d0ae4fc0a6ecd256e39e9aef8221f58ebad2d7b3f619ad0b967264b61305b1274467c3b98ed7b1b54e53bc7", 0xe3) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0x0, 0x3, 0x10}, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, 0x0, &(0x7f00000005c0)}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{r0}, 0x0, &(0x7f00000003c0)='%pB \x00'}, 0x20) syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00') fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f0000000400)={0x53, 0xfffffffffffffffb, 0x0, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffff, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$sndpcmp(&(0x7f0000001540), 0x1, 0x0) timer_create(0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r4, 0xc1004111, 0x0) r5 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) 14.47942352s ago: executing program 4 (id=430): open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) pipe2$9p(&(0x7f0000001900), 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x303, 0x300}}) 13.856640203s ago: executing program 4 (id=431): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000002300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000d00)='kfree\x00', r1}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) 12.575847942s ago: executing program 1 (id=434): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x9c000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x840) 10.79172097s ago: executing program 3 (id=436): socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, 0x0, 0x20000806) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x80100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/partitions\x00', 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0xc, 0x2, 0x1, 0x0, 0x2}) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000040)=0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='clear_refs\x00') writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0xfffffffffffffe05, 0x8, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0xa, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000000851000000100000095000000000000001800000020646c2500000000002020207b1af8ff00000000bd21ffff0000000007010000f8ffffffb502020008040000b70300000000000085000000a400000095"], &(0x7f0000000080)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x24000000) syz_emit_ethernet(0x25e, &(0x7f0000000880)={@random="cf702e8cf675", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x228, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[@srh={0x33, 0x6, 0x4, 0x3, 0x6, 0x0, 0x3, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x3c}, @mcast1]}, @srh={0x5e, 0x4, 0x4, 0x2, 0x4, 0x0, 0x2, [@dev={0xfe, 0x80, '\x00', 0x22}, @remote]}, @srh={0x16, 0x8, 0x4, 0x4, 0xfb, 0x8, 0xf, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, @mcast2, @private0]}, @hopopts={0x2, 0x1b, '\x00', [@jumbo={0xc2, 0x4, 0xe}, @enc_lim={0x4, 0x1, 0x3}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x22}}, @generic={0x6, 0x9f, "e65dbb5113db51c1ddb659c8be88e3bc16b45eb3b2556ec14490abedb01e70b553d8bfb3a3a7c2cc95bbd0fd39d0e3e7b42342d9405cb32920ddd177b61826460ee9b7db1f262790b6b1da95efcb57f9a77e66b7843b7f0d6059ab13183e36d2a8b9723fd22e2051198fda0a50150c3e7f16a532f6dbef12bce858be8d883a84f720f288544e1b9c03a750666821aa296047a0b1148bdad1ebf2651d0127c4"}, @pad1, @calipso={0x7, 0x18, {0x2, 0x4, 0x4, 0x9, [0x9, 0xa]}}]}, @srh={0x84, 0x0, 0x4, 0x0, 0x8, 0x8, 0x6}, @routing={0x21, 0xc, 0x0, 0x0, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @ipv4={'\x00', '\xff\xff', @multicast1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote]}], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @dev, @dev}}}}}}, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 8.426529441s ago: executing program 1 (id=437): syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xa800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x008~?n\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) r5 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r5, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) chdir(&(0x7f00000003c0)='./bus\x00') r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r7 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000080)) io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x20, &(0x7f0000000380)={0x0}, 0x1) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f00000000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) 8.100600929s ago: executing program 4 (id=438): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006100), 0x49f, 0x0, 0x0) 5.411506685s ago: executing program 4 (id=439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000040)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="50000000080211000001ffffffffffff0802110000000000000000000000000064000100000602020202020201010b"], 0x48) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000440)=ANY=[@ANYBLOB="10000000080211000001080211000000080211000000200004a000000c0001"], 0x3c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r7) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 5.361284563s ago: executing program 3 (id=440): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000003, 0x0, 0x0, 0x1, 0x4000003}) 5.128678441s ago: executing program 3 (id=441): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ptrace$setopts(0x4200, r0, 0x0, 0x20) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$BTRFS_IOC_START_SYNC(r2, 0x80089418, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000000600)={"7ae26121d85559e2083650b9df450277", 0x0, 0x0, {0xcd, 0xfffff001}, {0x400, 0x6}, 0x6a7b, [0x1ff, 0x1, 0x3, 0xdb4, 0x9, 0x1a7, 0xa9, 0x3, 0xd3c5, 0x80, 0x7, 0x1, 0xffff, 0x5, 0x1, 0x1]}) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0xffffffff80013248, 0x2d, 0x0, 0x6, 0x5, 0x0, 0x0, 0x10}}, 0x50) readlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000080)=""/149, 0x95) read$FUSE(r3, &(0x7f0000008bc0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, r5, {0x7, 0x24, 0x0, 0xffffffffc0416010, 0x20}}, 0x50) 3.50949223s ago: executing program 3 (id=442): r0 = open(&(0x7f0000000580)='./file0/file0\x00', 0x220420, 0xa2) fcntl$notify(r0, 0x402, 0x8000003d) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) syz_open_dev$ttys(0xc, 0x2, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket(0x3, 0x1, 0x6) socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6076cd8a0018000020010000000000000000000000000000fc0000000000000000000000000000010002000000000000070800000000000000d6000100010100ddfb21de856b443ba0f7ca0dcb08bff7e3a8b1db9c1b21e01113f11d1cffaf1f831f0fd5dd4eb7187343f75dd65136b1821d2c21e7c96bb422f43ab641f75d802048b74b0efb93a5cefc"], 0x0) r4 = syz_open_dev$sndctrl(&(0x7f00000003c0), 0xb, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r4, 0xc4c85513, &(0x7f0000000040)={0x2, 0x5, 0x2}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x11, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5, 0x1}, 0xc) syz_clone(0x25004100, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)="63dc5cb4b2085c17c30112d09e3166453284d9a5efb10f3927556a7ef1229a6c1c49907b997d9bdb1b5920bc8dc4d3f1d31ba9e56fed1850b94f289d4c5f539ec5409a571fdc2fd1299cb156816061fadda4095535e10b382549e016") 2.621523256s ago: executing program 1 (id=443): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x80) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) ioprio_set$pid(0x2, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) chdir(&(0x7f0000000440)='./bus\x00') write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000180)={0xa0, 0x0, 0x0, {{0x1000000000003, 0x3, 0x8000000000007, 0xaa, 0x3, 0x80001, {0x0, 0x180, 0x20fe, 0x0, 0x87, 0xd615, 0x9, 0x9, 0xfffffffe, 0x8000, 0x0, 0xee00, 0x0, 0x3ff, 0x1}}, {0x0, 0x11}}}, 0xa0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0x7f03) 1.529854207s ago: executing program 3 (id=444): read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) msgctl$IPC_SET(0x0, 0x1, &(0x7f00000026c0)={{0x1, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0x0, 0x130, 0xfff9}, 0x0, 0x0, 0x0, 0x8, 0x8, 0x6, 0x7, 0x6979, 0x4, 0x5, 0x0, r1}) 1.331820249s ago: executing program 3 (id=445): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="02000000040000000f00000007"], 0x13) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x9c000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x12, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x840) 0s ago: executing program 1 (id=446): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x60d}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.190' (ED25519) to the list of known hosts. [ 88.496496][ T5786] cgroup: Unknown subsys name 'net' [ 88.756867][ T5786] cgroup: Unknown subsys name 'cpuset' [ 88.831658][ T5786] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 90.835251][ T5786] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.005072][ T2064] cfg80211: failed to load regulatory.db [ 95.257909][ T5802] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.269647][ T5802] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.278313][ T5802] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.279799][ T5802] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.280756][ T5802] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.291708][ T5803] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.300242][ T5802] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.301383][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.303307][ T5802] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.303691][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.313419][ T5807] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.313954][ T5807] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.314945][ T5807] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.344052][ T5807] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.345005][ T5807] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.410044][ T5803] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.418899][ T5803] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.428532][ T5803] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.431393][ T5803] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.440572][ T5803] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.488200][ T5803] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 95.499071][ T5803] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 95.509553][ T5803] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 95.525796][ T5803] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 95.527922][ T5803] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 96.524049][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 96.530720][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 96.587458][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 96.597722][ T5808] chnl_net:caif_netlink_parms(): no params data found [ 97.042620][ T5812] chnl_net:caif_netlink_parms(): no params data found [ 97.362519][ T61] Bluetooth: hci0: command tx timeout [ 97.362525][ T5803] Bluetooth: hci2: command tx timeout [ 97.441808][ T5803] Bluetooth: hci1: command tx timeout [ 97.521185][ T5803] Bluetooth: hci3: command tx timeout [ 97.602740][ T5803] Bluetooth: hci4: command tx timeout [ 97.720565][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.721972][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.722723][ T5796] bridge_slave_0: entered allmulticast mode [ 97.726232][ T5796] bridge_slave_0: entered promiscuous mode [ 97.734899][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.735050][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.735282][ T5804] bridge_slave_0: entered allmulticast mode [ 97.738561][ T5804] bridge_slave_0: entered promiscuous mode [ 97.889275][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.889366][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.889507][ T5796] bridge_slave_1: entered allmulticast mode [ 97.892155][ T5796] bridge_slave_1: entered promiscuous mode [ 97.897176][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.897326][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.897538][ T5804] bridge_slave_1: entered allmulticast mode [ 97.900718][ T5804] bridge_slave_1: entered promiscuous mode [ 97.907010][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.907162][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.907375][ T5797] bridge_slave_0: entered allmulticast mode [ 97.910674][ T5797] bridge_slave_0: entered promiscuous mode [ 97.915733][ T5808] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.915888][ T5808] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.916089][ T5808] bridge_slave_0: entered allmulticast mode [ 97.919251][ T5808] bridge_slave_0: entered promiscuous mode [ 98.132507][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.132626][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.132766][ T5797] bridge_slave_1: entered allmulticast mode [ 98.134707][ T5797] bridge_slave_1: entered promiscuous mode [ 98.137511][ T5808] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.137623][ T5808] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.137750][ T5808] bridge_slave_1: entered allmulticast mode [ 98.139639][ T5808] bridge_slave_1: entered promiscuous mode [ 98.606447][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.610252][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.882104][ T5812] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.882772][ T5812] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.882981][ T5812] bridge_slave_0: entered allmulticast mode [ 98.884914][ T5812] bridge_slave_0: entered promiscuous mode [ 98.889947][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.894667][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.939732][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.945568][ T5808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.945849][ T5812] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.947401][ T5812] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.947628][ T5812] bridge_slave_1: entered allmulticast mode [ 98.950800][ T5812] bridge_slave_1: entered promiscuous mode [ 99.104483][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.106946][ T5808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.442316][ T61] Bluetooth: hci0: command tx timeout [ 99.442492][ T5803] Bluetooth: hci2: command tx timeout [ 99.521094][ T61] Bluetooth: hci1: command tx timeout [ 99.601210][ T61] Bluetooth: hci3: command tx timeout [ 99.664303][ T5796] team0: Port device team_slave_0 added [ 99.666784][ T5804] team0: Port device team_slave_0 added [ 99.681033][ T61] Bluetooth: hci4: command tx timeout [ 99.796410][ T5812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.798511][ T5796] team0: Port device team_slave_1 added [ 99.800509][ T5804] team0: Port device team_slave_1 added [ 99.804386][ T5797] team0: Port device team_slave_0 added [ 100.004295][ T5808] team0: Port device team_slave_0 added [ 100.007363][ T5812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.113640][ T5797] team0: Port device team_slave_1 added [ 100.213910][ T5808] team0: Port device team_slave_1 added [ 100.633477][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.633491][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.633509][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.712938][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.712956][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.712983][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.794001][ T5812] team0: Port device team_slave_0 added [ 100.795334][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.795350][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.795379][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.796508][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.796518][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.796544][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.797795][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.797808][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.797836][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.799384][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.799394][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.799413][ T5808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.806594][ T5812] team0: Port device team_slave_1 added [ 100.827047][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.827067][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.827098][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.844044][ T5808] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.844063][ T5808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.844094][ T5808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.140106][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.140124][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.140152][ T5812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.293557][ T5812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.293571][ T5812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.293591][ T5812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.521124][ T61] Bluetooth: hci0: command tx timeout [ 101.521163][ T61] Bluetooth: hci2: command tx timeout [ 101.601315][ T5803] Bluetooth: hci1: command tx timeout [ 101.627285][ T5796] hsr_slave_0: entered promiscuous mode [ 101.629059][ T5796] hsr_slave_1: entered promiscuous mode [ 101.682554][ T5803] Bluetooth: hci3: command tx timeout [ 101.748373][ T5804] hsr_slave_0: entered promiscuous mode [ 101.749387][ T5804] hsr_slave_1: entered promiscuous mode [ 101.750244][ T5804] debugfs: 'hsr0' already exists in 'hsr' [ 101.750340][ T5804] Cannot create hsr debugfs directory [ 101.771045][ T5803] Bluetooth: hci4: command tx timeout [ 101.853428][ T5797] hsr_slave_0: entered promiscuous mode [ 101.854412][ T5797] hsr_slave_1: entered promiscuous mode [ 101.855146][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 101.855164][ T5797] Cannot create hsr debugfs directory [ 101.863554][ T5808] hsr_slave_0: entered promiscuous mode [ 101.865301][ T5808] hsr_slave_1: entered promiscuous mode [ 101.866469][ T5808] debugfs: 'hsr0' already exists in 'hsr' [ 101.866496][ T5808] Cannot create hsr debugfs directory [ 102.598085][ T5812] hsr_slave_0: entered promiscuous mode [ 102.599161][ T5812] hsr_slave_1: entered promiscuous mode [ 102.599836][ T5812] debugfs: 'hsr0' already exists in 'hsr' [ 102.599857][ T5812] Cannot create hsr debugfs directory [ 103.601127][ T5803] Bluetooth: hci2: command tx timeout [ 103.601164][ T5803] Bluetooth: hci0: command tx timeout [ 103.681055][ T61] Bluetooth: hci1: command tx timeout [ 103.761070][ T61] Bluetooth: hci3: command tx timeout [ 103.841943][ T61] Bluetooth: hci4: command tx timeout [ 103.939755][ T5796] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 103.988837][ T5796] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.025936][ T5796] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.080765][ T5796] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.189909][ T5804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.228292][ T5804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.256725][ T5804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.302961][ T5804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.429782][ T5797] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 104.470409][ T5797] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 104.508850][ T5797] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 104.571218][ T5797] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 104.724100][ T5808] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 104.764656][ T5808] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 104.806089][ T5808] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 104.853293][ T5808] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 104.958397][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.013718][ T5812] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.063040][ T5812] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.099034][ T5812] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.149337][ T5812] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.188414][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.233490][ T4151] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.234058][ T4151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.286450][ T4151] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.286746][ T4151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.306539][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.398092][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.415264][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.449921][ T1434] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.450071][ T1434] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.492453][ T4151] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.492593][ T4151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.546772][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.580287][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.580425][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.608769][ T5808] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.645924][ T4151] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.646072][ T4151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.737762][ T5808] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.763896][ T5812] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.787091][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.787312][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.867283][ T4151] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.867877][ T4151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.945793][ T5812] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.994042][ T4151] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.994348][ T4151] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.073172][ T4151] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.075449][ T4151] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.146710][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.334462][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.487125][ T5796] veth0_vlan: entered promiscuous mode [ 106.536666][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.542131][ T5796] veth1_vlan: entered promiscuous mode [ 106.676427][ T5804] veth0_vlan: entered promiscuous mode [ 106.754593][ T5804] veth1_vlan: entered promiscuous mode [ 106.799950][ T5808] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.827254][ T5796] veth0_macvtap: entered promiscuous mode [ 106.873157][ T5796] veth1_macvtap: entered promiscuous mode [ 106.893062][ T5797] veth0_vlan: entered promiscuous mode [ 106.936506][ T5812] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.980062][ T5797] veth1_vlan: entered promiscuous mode [ 107.003966][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.035888][ T5804] veth0_macvtap: entered promiscuous mode [ 107.062866][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.065219][ T5804] veth1_macvtap: entered promiscuous mode [ 107.119865][ T4151] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.139235][ T4151] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.150812][ T4151] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.164502][ T4151] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.237617][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.316571][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.334116][ T5797] veth0_macvtap: entered promiscuous mode [ 107.420677][ T4151] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.422727][ T5812] veth0_vlan: entered promiscuous mode [ 107.437657][ T5797] veth1_macvtap: entered promiscuous mode [ 107.439318][ T4151] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.461849][ T4151] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.486706][ T4151] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.526708][ T1434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.526737][ T1434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.589469][ T5812] veth1_vlan: entered promiscuous mode [ 107.677724][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.765339][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.765362][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.773154][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.798654][ T5808] veth0_vlan: entered promiscuous mode [ 107.858873][ T1434] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.873393][ T1434] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.875792][ T1434] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.875869][ T1434] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.875883][ T1434] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.889835][ T1434] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.907679][ T5808] veth1_vlan: entered promiscuous mode [ 108.024260][ T5812] veth0_macvtap: entered promiscuous mode [ 108.138277][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.138297][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.147655][ T5812] veth1_macvtap: entered promiscuous mode [ 108.418190][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.418214][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.424241][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.433302][ T5808] veth0_macvtap: entered promiscuous mode [ 108.458712][ T5812] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.466393][ T5808] veth1_macvtap: entered promiscuous mode [ 108.527778][ T4151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.542155][ T4151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.545303][ T4151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.587358][ T4151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.660027][ T1434] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.660050][ T1434] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.210937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.210986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.211036][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.211079][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.211120][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.211158][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.211198][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.211239][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.211280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.211320][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 109.513425][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.628790][ T5808] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.790808][ T1434] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.806931][ T1434] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.842002][ T1434] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.886521][ T1434] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.160709][ T5937] random: crng reseeded on system resumption [ 110.751555][ T4151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.751576][ T4151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.164788][ T5945] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 111.226449][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.226473][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.160530][ T5950] atomic_op ffff888030008218 conn xmit_atomic 0000000000000000 [ 112.247567][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.247590][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.485008][ T175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.485031][ T175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.648339][ T5963] syz.1.14 (5963): drop_caches: 2 [ 114.901587][ T5958] syzkaller0: entered promiscuous mode [ 114.901621][ T5958] syzkaller0: entered allmulticast mode [ 115.532263][ T5960] [U]  [ 115.565308][ T5961] syz.3.4 (5961) used greatest stack depth: 17784 bytes left [ 124.164291][ T5967] Zero length message leads to an empty skb [ 124.291013][ T990] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.345080][ T990] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.345416][ T990] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.345873][ T990] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 124.370725][ T5977] syz.3.17 uses obsolete (PF_INET,SOCK_PACKET) [ 124.573811][ T5980] random: crng reseeded on system resumption [ 127.009518][ T6001] netlink: 16 bytes leftover after parsing attributes in process `syz.3.22'. [ 127.454525][ T5810] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 128.446821][ T6006] syz.0.24 (6006): drop_caches: 2 [ 128.686919][ T5810] usb 2-1: device descriptor read/all, error -71 [ 129.586580][ T5873] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 130.180634][ T6017] [U]  [ 130.268403][ T5873] usb 5-1: config 0 interface 0 has no altsetting 0 [ 130.268444][ T5873] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 130.268460][ T5873] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.297930][ T5873] usb 5-1: config 0 descriptor?? [ 131.608709][ T6051] mmap: syz.2.30 (6051) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 133.487517][ T5888] usb 5-1: USB disconnect, device number 2 [ 133.867945][ T6063] random: crng reseeded on system resumption [ 134.754765][ T6069] erofs (device nbd3): cannot find valid erofs superblock [ 135.369009][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 135.581381][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.581409][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.585298][ T31] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 135.585329][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 135.585349][ T31] usb 1-1: SerialNumber: syz [ 136.124536][ T31] usb 1-1: 0:2 : does not exist [ 136.124669][ T31] usb 1-1: unit 255 not found! [ 136.289238][ T31] usb 1-1: USB disconnect, device number 2 [ 137.862444][ T6046] udevd[6046]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 138.162525][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.162627][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 141.320986][ T5895] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 141.648630][ T5895] usb 1-1: config 0 interface 0 has no altsetting 0 [ 141.648671][ T5895] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 141.648694][ T5895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.051278][ T5895] usb 1-1: config 0 descriptor?? [ 142.235785][ T6118] syz.4.51 (6118): drop_caches: 2 [ 144.303676][ T9] usb 1-1: USB disconnect, device number 3 [ 146.206562][ T6148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.755798][ T6148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.645133][ T6148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.931956][ T5810] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 156.085166][ T5810] usb 4-1: config 0 interface 0 has no altsetting 0 [ 156.085212][ T5810] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 156.085230][ T5810] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.163832][ T5810] usb 4-1: config 0 descriptor?? [ 156.258433][ T6148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.614246][ T5810] usb 4-1: USB disconnect, device number 2 [ 158.702435][ T6206] syz.4.77 (6206): drop_caches: 2 [ 158.739886][ T6066] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.788057][ T58] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.788136][ T58] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.834204][ T58] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.651320][ T6217] netlink: 128 bytes leftover after parsing attributes in process `syz.3.79'. [ 159.651566][ T6217] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 163.886364][ T5803] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 163.898522][ T5803] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 163.899948][ T5803] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 163.910332][ T5803] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 163.936487][ T5803] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 166.560181][ T5930] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 166.642373][ T6254] syz.0.91 (6254): drop_caches: 2 [ 166.741040][ T5930] usb 4-1: device descriptor read/64, error -71 [ 166.748267][ T6258] loop2: detected capacity change from 0 to 7 [ 166.776184][ T6258] Dev loop2: unable to read RDB block 7 [ 166.776236][ T6258] loop2: unable to read partition table [ 166.776443][ T6258] loop2: partition table beyond EOD, truncated [ 166.776475][ T6258] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 166.801026][ T5803] Bluetooth: hci1: command tx timeout [ 166.991076][ T5930] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 167.580268][ T5930] usb 4-1: device descriptor read/64, error -71 [ 167.673375][ T37] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.683129][ T5930] usb usb4-port1: attempt power cycle [ 168.881244][ T5803] Bluetooth: hci1: command tx timeout [ 169.887777][ T5930] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 170.971091][ T5803] Bluetooth: hci1: command tx timeout [ 171.719601][ T5930] usb 4-1: device not accepting address 5, error -71 [ 172.318557][ T6279] syz.4.102 (6279): drop_caches: 2 [ 172.998962][ T37] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.049180][ T5803] Bluetooth: hci1: command tx timeout [ 174.026951][ T37] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.576850][ T37] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.421203][ T6241] chnl_net:caif_netlink_parms(): no params data found [ 176.626545][ T37] bridge_slave_1: left allmulticast mode [ 176.626657][ T37] bridge_slave_1: left promiscuous mode [ 176.628341][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.904312][ T37] bridge_slave_0: left allmulticast mode [ 176.904352][ T37] bridge_slave_0: left promiscuous mode [ 176.904698][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.321307][ T6360] fuse: Bad value for 'rootmode' [ 189.600114][ T6382] random: crng reseeded on system resumption [ 192.641322][ T6406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.134'. [ 193.497625][ T5873] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 193.587450][ T6416] evm: overlay not supported [ 193.681126][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 193.689276][ T5873] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 193.689309][ T5873] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 193.689351][ T5873] usb 2-1: config 0 interface 0 has no altsetting 0 [ 193.769929][ T5873] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 193.769977][ T5873] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 193.770035][ T5873] usb 2-1: Product: syz [ 193.770052][ T5873] usb 2-1: Manufacturer: syz [ 193.770116][ T5873] usb 2-1: SerialNumber: syz [ 193.830490][ T5873] usb 2-1: config 0 descriptor?? [ 193.984358][ T5873] ldusb 2-1:0.0: Interrupt in endpoint not found [ 194.495490][ T5873] usb 2-1: USB disconnect, device number 4 [ 196.885752][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.747537][ T6448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.150'. [ 198.182717][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.416741][ T37] bond0 (unregistering): Released all slaves [ 200.516423][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.516476][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.683135][ T6466] loop2: detected capacity change from 0 to 7 [ 200.705994][ T6466] Dev loop2: unable to read RDB block 7 [ 200.706052][ T6466] loop2: unable to read partition table [ 200.706287][ T6466] loop2: partition table beyond EOD, truncated [ 200.706324][ T6466] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 202.700973][ T5873] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 202.852173][ T5873] usb 2-1: too many configurations: 171, using maximum allowed: 8 [ 202.900137][ T5873] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 202.900169][ T5873] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.900190][ T5873] usb 2-1: Product: syz [ 202.900205][ T5873] usb 2-1: Manufacturer: syz [ 202.900219][ T5873] usb 2-1: SerialNumber: syz [ 202.925674][ T5873] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 203.123825][ T5810] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 204.620286][ T5873] usb 2-1: USB disconnect, device number 5 [ 204.630999][ T5810] usb 2-1: ath9k_htc: Unable to allocate URBs [ 204.649822][ T5873] usb 2-1: ath9k_htc: USB layer deinitialized [ 205.200989][ T5895] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 205.370965][ T5895] usb 4-1: Using ep0 maxpacket: 8 [ 205.386488][ T5895] usb 4-1: config 8 has an invalid interface number: 160 but max is 0 [ 205.386519][ T5895] usb 4-1: config 8 has no interface number 0 [ 205.386559][ T5895] usb 4-1: config 8 interface 160 has no altsetting 0 [ 205.403281][ T5895] usb 4-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=82.ee [ 205.403313][ T5895] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.403334][ T5895] usb 4-1: Product: syz [ 205.403349][ T5895] usb 4-1: Manufacturer: syz [ 205.403364][ T5895] usb 4-1: SerialNumber: syz [ 210.584911][ T5895] usb 4-1: Invalid firmware size=18. [ 210.641138][ T5930] usb 4-1: USB disconnect, device number 7 [ 213.021122][ T6241] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.021262][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.021500][ T6241] bridge_slave_0: entered allmulticast mode [ 213.024388][ T6241] bridge_slave_0: entered promiscuous mode [ 213.076637][ T6533] loop2: detected capacity change from 0 to 7 [ 213.087607][ T6241] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.098152][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.098390][ T6241] bridge_slave_1: entered allmulticast mode [ 213.481574][ T6241] bridge_slave_1: entered promiscuous mode [ 213.518286][ T6533] Dev loop2: unable to read RDB block 7 [ 213.518337][ T6533] loop2: unable to read partition table [ 213.518575][ T6533] loop2: partition table beyond EOD, truncated [ 213.518618][ T6533] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 216.485749][ T6241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.526865][ T37] hsr_slave_0: left promiscuous mode [ 217.618831][ T37] hsr_slave_1: left promiscuous mode [ 217.620043][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.620165][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.750314][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.750345][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.145935][ T6568] process 'syz.1.178' launched './file0' with NULL argv: empty string added [ 218.229860][ T6568] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 218.229917][ T6568] CIFS mount error: No usable UNC path provided in device string! [ 218.229917][ T6568] [ 218.230177][ T6568] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 219.623917][ T37] veth1_macvtap: left promiscuous mode [ 219.624177][ T37] veth0_macvtap: left promiscuous mode [ 219.624843][ T37] veth1_vlan: left promiscuous mode [ 219.625192][ T37] veth0_vlan: left promiscuous mode [ 221.286951][ C1] vkms_vblank_simulate: vblank timer overrun [ 221.740955][ T5860] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 222.108051][ T5803] Bluetooth: hci4: command 0x0406 tx timeout [ 222.108094][ T5803] Bluetooth: hci0: command 0x0406 tx timeout [ 222.108120][ T5803] Bluetooth: hci2: command 0x0406 tx timeout [ 222.108361][ T5803] Bluetooth: hci3: command 0x0406 tx timeout [ 222.158116][ C1] vkms_vblank_simulate: vblank timer overrun [ 222.238894][ T5803] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 222.249429][ T5803] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 222.250594][ T5803] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 222.253259][ T5803] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 222.291072][ T5803] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 222.294245][ T5860] usb 5-1: config 0 interface 0 has no altsetting 0 [ 222.294287][ T5860] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 222.294313][ T5860] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.380035][ T5860] usb 5-1: config 0 descriptor?? [ 222.852726][ C1] vkms_vblank_simulate: vblank timer overrun [ 223.524071][ T5930] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 223.692349][ T5930] usb 4-1: Using ep0 maxpacket: 32 [ 223.694971][ T5930] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 223.695020][ T5930] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 223.695107][ T5930] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 223.695141][ T5930] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 223.695170][ T5930] usb 4-1: config 0 interface 0 has no altsetting 0 [ 223.825382][ T5930] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 223.825413][ T5930] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 223.825435][ T5930] usb 4-1: Product: syz [ 223.825451][ T5930] usb 4-1: Manufacturer: syz [ 223.825467][ T5930] usb 4-1: SerialNumber: syz [ 223.870566][ T5802] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 223.896356][ T5802] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 223.901601][ T5802] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 223.903321][ T5802] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 223.987638][ T5802] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 223.989123][ T5930] usb 4-1: config 0 descriptor?? [ 224.086715][ T5930] ldusb 4-1:0.0: Interrupt in endpoint not found [ 224.277873][ T5860] usb 4-1: USB disconnect, device number 8 [ 224.398008][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.465516][ C1] vkms_vblank_simulate: vblank timer overrun [ 224.471180][ T31] usb 5-1: USB disconnect, device number 3 [ 225.223625][ T5802] Bluetooth: hci5: command tx timeout [ 225.771876][ T5930] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 225.919084][ T6611] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 226.738401][ T5802] Bluetooth: hci6: command tx timeout [ 226.826950][ T5930] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 226.827013][ T5930] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 226.827039][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.949210][ T5930] usb 4-1: config 0 descriptor?? [ 226.971821][ T5930] pwc: Askey VC010 type 2 USB webcam detected. [ 227.281018][ T5802] Bluetooth: hci5: command tx timeout [ 227.397838][ T5930] pwc: recv_control_msg error -32 req 02 val 2b00 [ 227.399793][ T5930] pwc: recv_control_msg error -32 req 02 val 2700 [ 227.400389][ T5930] pwc: recv_control_msg error -32 req 02 val 2c00 [ 227.411329][ T5930] pwc: recv_control_msg error -32 req 04 val 1000 [ 227.412123][ T5930] pwc: recv_control_msg error -32 req 04 val 1300 [ 227.412790][ T5930] pwc: recv_control_msg error -32 req 04 val 1400 [ 227.430978][ T5930] pwc: recv_control_msg error -32 req 02 val 2000 [ 227.449057][ T5930] pwc: recv_control_msg error -32 req 02 val 2100 [ 227.449804][ T5930] pwc: recv_control_msg error -32 req 04 val 1500 [ 227.653044][ T5930] pwc: recv_control_msg error -71 req 02 val 2400 [ 227.653700][ T5930] pwc: recv_control_msg error -71 req 02 val 2600 [ 227.654581][ T5930] pwc: recv_control_msg error -71 req 02 val 2900 [ 227.655091][ T5930] pwc: recv_control_msg error -71 req 02 val 2800 [ 227.655818][ T5930] pwc: recv_control_msg error -71 req 04 val 1100 [ 227.656318][ T5930] pwc: recv_control_msg error -71 req 04 val 1200 [ 227.713048][ T5930] pwc: Registered as video103. [ 227.761970][ T5930] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 228.197690][ T5930] usb 4-1: USB disconnect, device number 9 [ 228.850922][ T5802] Bluetooth: hci6: command tx timeout [ 229.363111][ T5802] Bluetooth: hci5: command tx timeout [ 230.534014][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.655587][ C1] vkms_vblank_simulate: vblank timer overrun [ 230.892463][ T5802] Bluetooth: hci6: command tx timeout [ 231.161047][ T5873] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 231.301743][ C1] vkms_vblank_simulate: vblank timer overrun [ 231.334424][ T5873] usb 2-1: Using ep0 maxpacket: 32 [ 231.336665][ T5873] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 231.336702][ T5873] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 231.336732][ T5873] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 231.336748][ T5873] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 231.336768][ T5873] usb 2-1: config 0 interface 0 has no altsetting 0 [ 232.263439][ C1] vkms_vblank_simulate: vblank timer overrun [ 232.275615][ T5802] Bluetooth: hci5: command tx timeout [ 232.868212][ T5873] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 232.868246][ T5873] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 232.868268][ T5873] usb 2-1: Product: syz [ 232.868283][ T5873] usb 2-1: Manufacturer: syz [ 232.868298][ T5873] usb 2-1: SerialNumber: syz [ 232.916958][ T5873] usb 2-1: config 0 descriptor?? [ 232.936481][ T5873] ldusb 2-1:0.0: Interrupt in endpoint not found [ 232.960992][ T5802] Bluetooth: hci6: command tx timeout [ 233.143469][ T5873] usb 2-1: USB disconnect, device number 6 [ 233.463978][ T5895] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 233.617236][ T5895] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 233.617267][ T5895] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 233.618937][ T5895] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 233.618977][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 233.619001][ T5895] usb 4-1: SerialNumber: syz [ 234.107988][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.402197][ C1] vkms_vblank_simulate: vblank timer overrun [ 234.798669][ T5895] usb 4-1: 0:2 : does not exist [ 234.798782][ T5895] usb 4-1: unit 255 not found! [ 234.798801][ T5895] usb 4-1: unit 18 not found! [ 234.914612][ T5895] usb 4-1: USB disconnect, device number 10 [ 235.007723][ T6507] udevd[6507]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.175088][ C1] vkms_vblank_simulate: vblank timer overrun [ 239.671002][ T5810] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 239.711840][ T37] team0 (unregistering): Port device team_slave_1 removed [ 239.824926][ T5810] usb 4-1: Using ep0 maxpacket: 32 [ 239.829252][ T5810] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 239.829297][ T5810] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 239.829338][ T5810] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 239.829365][ T5810] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 239.829388][ T5810] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 239.829413][ T5810] usb 4-1: config 0 interface 0 has no altsetting 0 [ 239.845904][ T5810] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 239.845941][ T5810] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 239.845965][ T5810] usb 4-1: Product: syz [ 239.845982][ T5810] usb 4-1: Manufacturer: syz [ 239.846000][ T5810] usb 4-1: SerialNumber: syz [ 239.867692][ T5810] usb 4-1: config 0 descriptor?? [ 240.885591][ T5810] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 241.052292][ T5810] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 241.120703][ T5810] usb 4-1: USB disconnect, device number 11 [ 241.140195][ T5810] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 241.751766][ T37] team0 (unregistering): Port device team_slave_0 removed [ 241.832308][ T5930] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 242.010099][ T5930] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.010128][ T5930] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 242.019874][ T5930] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 242.019912][ T5930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 242.019936][ T5930] usb 2-1: SerialNumber: syz [ 242.241108][ T5873] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 242.270596][ T5930] usb 2-1: 0:2 : does not exist [ 242.270709][ T5930] usb 2-1: unit 18 not found! [ 242.350415][ T5930] usb 2-1: USB disconnect, device number 7 [ 242.423967][ T5873] usb 4-1: config 0 interface 0 has no altsetting 0 [ 242.424012][ T5873] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 242.424037][ T5873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.444188][ T5873] usb 4-1: config 0 descriptor?? [ 242.453608][ T6507] udevd[6507]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 245.921004][ T5930] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 245.952040][ T5888] usb 4-1: USB disconnect, device number 12 [ 246.651007][ T5930] usb 2-1: Using ep0 maxpacket: 32 [ 246.678387][ T5930] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 246.678434][ T5930] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 246.678476][ T5930] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 246.678504][ T5930] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 246.678527][ T5930] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 246.678556][ T5930] usb 2-1: config 0 interface 0 has no altsetting 0 [ 246.681968][ T5930] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 246.681999][ T5930] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 246.682029][ T5930] usb 2-1: Product: syz [ 246.682044][ T5930] usb 2-1: Manufacturer: syz [ 246.682060][ T5930] usb 2-1: SerialNumber: syz [ 246.783787][ T5930] usb 2-1: config 0 descriptor?? [ 246.802683][ T5930] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 246.809061][ T5930] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 246.998232][ T6713] ldusb 2-1:0.0: Couldn't submit interrupt_in_urb -90 [ 247.000582][ T5888] usb 2-1: USB disconnect, device number 8 [ 247.010739][ T5888] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 249.027866][ T6745] loop2: detected capacity change from 0 to 7 [ 249.048175][ T6507] Dev loop2: unable to read RDB block 7 [ 249.048224][ T6507] loop2: unable to read partition table [ 249.048500][ T6507] loop2: partition table beyond EOD, truncated [ 249.072019][ T6745] Dev loop2: unable to read RDB block 7 [ 249.073665][ T6745] loop2: unable to read partition table [ 249.078670][ T6745] loop2: partition table beyond EOD, truncated [ 249.078702][ T6745] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 251.456325][ T6761] binder: 6759:6761 ioctl c0306201 0 returned -14 [ 251.456962][ T6761] binder: 6759:6761 ioctl 4018620d 0 returned -22 [ 251.480014][ T6761] binder: 6759:6761 ioctl c0306201 2000000003c0 returned -14 [ 251.748501][ T2064] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 251.922288][ T2064] usb 2-1: Using ep0 maxpacket: 32 [ 251.932789][ T2064] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 251.932842][ T2064] usb 2-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 251.932892][ T2064] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 251.932923][ T2064] usb 2-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid wMaxPacketSize 0 [ 251.932950][ T2064] usb 2-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 251.932981][ T2064] usb 2-1: config 0 interface 0 has no altsetting 0 [ 251.940172][ T2064] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 251.940209][ T2064] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 251.940238][ T2064] usb 2-1: Product: syz [ 251.940257][ T2064] usb 2-1: Manufacturer: syz [ 251.940277][ T2064] usb 2-1: SerialNumber: syz [ 251.948780][ T2064] usb 2-1: config 0 descriptor?? [ 251.968151][ T2064] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 251.972705][ T2064] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 252.181045][ T5930] usb 2-1: USB disconnect, device number 9 [ 252.189269][ T5930] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 253.494813][ T6776] loop2: detected capacity change from 0 to 7 [ 253.507866][ T6776] Dev loop2: unable to read RDB block 7 [ 253.507915][ T6776] loop2: unable to read partition table [ 253.508147][ T6776] loop2: partition table beyond EOD, truncated [ 253.508166][ T6776] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 255.104090][ C0] vkms_vblank_simulate: vblank timer overrun [ 255.189349][ T6241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 255.570970][ T5887] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 255.731023][ T5887] usb 5-1: Using ep0 maxpacket: 32 [ 255.734690][ T5887] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 255.734731][ T5887] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 255.734773][ T5887] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 255.734801][ T5887] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 255.734830][ T5887] usb 5-1: config 0 interface 0 has no altsetting 0 [ 255.739165][ T5887] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 255.739194][ T5887] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 255.739216][ T5887] usb 5-1: Product: syz [ 255.739231][ T5887] usb 5-1: Manufacturer: syz [ 255.739247][ T5887] usb 5-1: SerialNumber: syz [ 255.929741][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.031113][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.116251][ T5887] usb 5-1: config 0 descriptor?? [ 256.145366][ T5887] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 256.194721][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.436937][ T5887] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 256.455103][ T5887] usb 5-1: USB disconnect, device number 4 [ 256.550311][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.915870][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.258891][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.305360][ T5887] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 257.762110][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.454158][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.657224][ T6821] syz.3.257 (6821): drop_caches: 2 [ 259.381019][ T5930] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 259.435442][ T6600] chnl_net:caif_netlink_parms(): no params data found [ 259.530990][ T5930] usb 5-1: Using ep0 maxpacket: 32 [ 259.533841][ T5930] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 259.533888][ T5930] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 259.533949][ T5930] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 259.533978][ T5930] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 259.534007][ T5930] usb 5-1: config 0 interface 0 has no altsetting 0 [ 259.537755][ T5930] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 259.537786][ T5930] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 259.537809][ T5930] usb 5-1: Product: syz [ 259.537825][ T5930] usb 5-1: Manufacturer: syz [ 259.537840][ T5930] usb 5-1: SerialNumber: syz [ 259.559288][ T5930] usb 5-1: config 0 descriptor?? [ 259.581173][ T5930] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 259.593730][ T5930] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 259.802323][ T5860] Process accounting resumed [ 259.965992][ C0] vkms_vblank_simulate: vblank timer overrun [ 260.022388][ T5860] usb 5-1: USB disconnect, device number 5 [ 260.023730][ C0] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 260.049191][ T5860] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 260.362216][ T6864] syz.1.271 (6864): drop_caches: 2 [ 260.637109][ T6586] chnl_net:caif_netlink_parms(): no params data found [ 260.717718][ T37] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.747742][ T5860] Process accounting resumed [ 260.910121][ T5895] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 260.985885][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.985962][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.099916][ T5895] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.099946][ T5895] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 261.099985][ T5895] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 261.100008][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.193083][ T5895] usb 2-1: config 0 descriptor?? [ 261.718061][ T6900] CIFS mount error: No usable UNC path provided in device string! [ 261.718061][ T6900] [ 261.718139][ T6900] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 262.653981][ T37] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.698421][ T6914] fuse: Unknown parameter '0x0000000000000003' [ 262.714292][ T6600] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.714541][ T6600] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.714809][ T6600] bridge_slave_0: entered allmulticast mode [ 262.718012][ T6600] bridge_slave_0: entered promiscuous mode [ 262.768253][ T6600] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.768417][ T6600] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.768695][ T6600] bridge_slave_1: entered allmulticast mode [ 262.782506][ T6600] bridge_slave_1: entered promiscuous mode [ 262.846159][ T6920] loop2: detected capacity change from 0 to 7 [ 262.861150][ T6920] Dev loop2: unable to read RDB block 7 [ 262.861192][ T6920] loop2: unable to read partition table [ 262.861383][ T6920] loop2: partition table beyond EOD, truncated [ 262.861400][ T6920] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 263.032898][ T5888] Process accounting resumed [ 263.118706][ T37] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.251043][ T5895] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 263.253683][ T6931] binder: 6930:6931 ioctl c0306201 0 returned -14 [ 263.254067][ T6931] binder: 6930:6931 ioctl 4018620d 0 returned -22 [ 263.401056][ T5895] usb 5-1: Using ep0 maxpacket: 32 [ 263.406144][ T5895] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 263.406190][ T5895] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 263.406233][ T5895] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 263.406261][ T5895] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 263.406289][ T5895] usb 5-1: config 0 interface 0 has no altsetting 0 [ 263.409609][ T5895] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 263.409639][ T5895] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 263.409662][ T5895] usb 5-1: Product: syz [ 263.409677][ T5895] usb 5-1: Manufacturer: syz [ 263.409693][ T5895] usb 5-1: SerialNumber: syz [ 263.420134][ T5895] usb 5-1: config 0 descriptor?? [ 263.427880][ T5895] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 263.433035][ T5895] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 263.759531][ T6935] CIFS mount error: No usable UNC path provided in device string! [ 263.759531][ T6935] [ 263.759607][ T6935] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 264.295645][ T5860] usb 2-1: USB disconnect, device number 10 [ 264.324505][ T5888] usb 5-1: USB disconnect, device number 6 [ 264.324601][ C1] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 264.335556][ T5888] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 264.424252][ T6600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.844987][ T37] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.908045][ T6600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.909066][ T6586] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.909291][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.909487][ T6586] bridge_slave_0: entered allmulticast mode [ 265.514341][ T6949] fuse: Bad value for 'fd' [ 265.522323][ T6586] bridge_slave_0: entered promiscuous mode [ 265.753977][ T6957] loop2: detected capacity change from 0 to 7 [ 265.757878][ T6957] Dev loop2: unable to read RDB block 7 [ 265.757916][ T6957] loop2: AHDI p1 p2 p3 [ 265.757947][ T6957] loop2: partition table partially beyond EOD, truncated [ 265.760426][ T6957] loop2: p1 start 1601398130 is beyond EOD, truncated [ 265.760450][ T6957] loop2: p2 start 1702059890 is beyond EOD, truncated [ 265.809030][ T6959] fuse: Unknown parameter '0x0000000000000003' [ 265.836056][ T6586] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.836220][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.836467][ T6586] bridge_slave_1: entered allmulticast mode [ 265.870666][ T6586] bridge_slave_1: entered promiscuous mode [ 266.077474][ T6967] binder: 6966:6967 ioctl c0306201 0 returned -14 [ 266.078068][ T6967] binder: 6966:6967 ioctl 4018620d 0 returned -22 [ 266.080253][ T6967] binder: 6966:6967 ioctl c0306201 2000000003c0 returned -14 [ 266.375685][ T6600] team0: Port device team_slave_0 added [ 266.912302][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.962208][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.122148][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.164247][ T6990] fuse: Unknown parameter 'fd0x0000000000000003' [ 268.737788][ T6600] team0: Port device team_slave_1 added [ 268.927971][ T6586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.143539][ C1] vkms_vblank_simulate: vblank timer overrun [ 269.174867][ T6586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.207426][ T6600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 269.207439][ T6600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.207458][ T6600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 269.401832][ T7009] fuse: Unknown parameter 'fd0x0000000000000003' [ 269.448802][ T6600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 269.448820][ T6600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 269.448848][ T6600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 269.753351][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.700282][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.730250][ C1] vkms_vblank_simulate: vblank timer overrun [ 270.753224][ T6586] team0: Port device team_slave_0 added [ 270.839784][ T6586] team0: Port device team_slave_1 added [ 270.928099][ C1] vkms_vblank_simulate: vblank timer overrun [ 271.244362][ T5930] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 271.418888][ T5930] usb 4-1: config 0 interface 0 has no altsetting 0 [ 271.418935][ T5930] usb 4-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 271.418959][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.473227][ T5930] usb 4-1: config 0 descriptor?? [ 272.121730][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.121749][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.121788][ T6586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.196681][ T6600] hsr_slave_0: entered promiscuous mode [ 272.210629][ T6600] hsr_slave_1: entered promiscuous mode [ 272.218747][ T6600] debugfs: 'hsr0' already exists in 'hsr' [ 272.218776][ T6600] Cannot create hsr debugfs directory [ 272.236810][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.236827][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 272.236856][ T6586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.237619][ T37] bridge_slave_1: left allmulticast mode [ 272.237643][ T37] bridge_slave_1: left promiscuous mode [ 272.237815][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.353304][ T37] bridge_slave_0: left allmulticast mode [ 272.353327][ T37] bridge_slave_0: left promiscuous mode [ 272.353622][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.380142][ T5873] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 272.415998][ T37] bridge_slave_1: left allmulticast mode [ 272.416021][ T37] bridge_slave_1: left promiscuous mode [ 272.416614][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.502218][ T37] bridge_slave_0: left allmulticast mode [ 272.502251][ T37] bridge_slave_0: left promiscuous mode [ 272.502472][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.544739][ T5873] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 272.544778][ T5873] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 272.546044][ T5873] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 272.546072][ T5873] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 272.546092][ T5873] usb 2-1: SerialNumber: syz [ 272.825888][ T5873] usb 2-1: 0:2 : does not exist [ 272.865199][ T5873] usb 2-1: USB disconnect, device number 11 [ 272.934761][ T6507] udevd[6507]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 273.151695][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.231717][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.299535][ T37] bond0 (unregistering): Released all slaves [ 273.697849][ T7041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.326'. [ 274.021055][ T5873] usb 4-1: USB disconnect, device number 13 [ 275.223828][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.889303][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.902765][ T7063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.333'. [ 277.675894][ T61] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 277.679103][ T61] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 277.696237][ T61] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 277.711344][ T61] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 277.731592][ T61] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 277.792282][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.954186][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.005595][ T37] bond0 (unregistering): Released all slaves [ 278.037352][ T7076] netlink: 16 bytes leftover after parsing attributes in process `syz.3.337'. [ 278.448367][ C1] vkms_vblank_simulate: vblank timer overrun [ 279.373459][ T7084] random: crng reseeded on system resumption [ 279.846036][ T61] Bluetooth: hci1: command tx timeout [ 281.777367][ T7101] netlink: 16 bytes leftover after parsing attributes in process `syz.1.345'. [ 282.108244][ T7103] CIFS mount error: No usable UNC path provided in device string! [ 282.108244][ T7103] [ 282.108267][ T7103] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 282.141713][ T61] Bluetooth: hci1: command tx timeout [ 283.960490][ T7115] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 284.161141][ T61] Bluetooth: hci1: command tx timeout [ 284.999269][ T7122] random: crng reseeded on system resumption [ 285.798578][ T5802] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 285.809430][ T5802] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 285.810719][ T5802] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 285.813369][ T5802] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 285.814261][ T5802] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 286.244541][ T5802] Bluetooth: hci1: command tx timeout [ 287.960969][ T5802] Bluetooth: hci2: command tx timeout [ 289.173870][ T7147] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.342027][ T7156] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 290.825365][ T5802] Bluetooth: hci2: command tx timeout [ 292.572052][ T7173] fuse: Unknown parameter 'group_i00000000000000000000' [ 293.463372][ T5802] Bluetooth: hci2: command tx timeout [ 293.633296][ T37] hsr_slave_0: left promiscuous mode [ 293.654607][ T37] hsr_slave_1: left promiscuous mode [ 293.655620][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.655647][ T37] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.685035][ T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.685066][ T37] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.943070][ T37] veth1_macvtap: left promiscuous mode [ 293.943147][ T37] veth0_macvtap: left promiscuous mode [ 293.943364][ T37] veth1_vlan: left promiscuous mode [ 293.943485][ T37] veth0_vlan: left promiscuous mode [ 294.007762][ T7180] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 294.040939][ T5895] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 294.236824][ T5895] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 294.236909][ T5895] usb 2-1: config 8 has no interface number 0 [ 294.237533][ T5895] usb 2-1: config 8 interface 177 altsetting 9 bulk endpoint 0x9 has invalid maxpacket 1023 [ 294.237617][ T5895] usb 2-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 294.237700][ T5895] usb 2-1: config 8 interface 177 altsetting 9 endpoint 0x8F has invalid wMaxPacketSize 0 [ 294.237751][ T5895] usb 2-1: config 8 interface 177 altsetting 9 bulk endpoint 0x8F has invalid maxpacket 0 [ 294.237831][ T5895] usb 2-1: config 8 interface 177 has no altsetting 0 [ 294.238087][ T5895] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 294.238138][ T5895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.357366][ T7176] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 294.560982][ T5895] usb 2-1: string descriptor 0 read error: -71 [ 294.567807][ T5895] ir_toy 2-1:8.177: required endpoints not found [ 294.583270][ T5895] usb 2-1: USB disconnect, device number 12 [ 295.468811][ T7191] netlink: 16 bytes leftover after parsing attributes in process `syz.3.369'. [ 295.520986][ T5802] Bluetooth: hci2: command tx timeout [ 297.872321][ T7202] fuse: Unknown parameter 'group_i00000000000000000000' [ 299.041418][ T7204] syz.3.375 (7204): drop_caches: 2 [ 299.148517][ T7206] loop2: detected capacity change from 0 to 7 [ 299.174609][ T7206] Dev loop2: unable to read RDB block 7 [ 299.174650][ T7206] loop2: AHDI p1 p2 p3 [ 299.174682][ T7206] loop2: partition table partially beyond EOD, truncated [ 299.175007][ T7206] loop2: p1 start 1601398130 is beyond EOD, truncated [ 299.175030][ T7206] loop2: p2 start 1702059890 is beyond EOD, truncated [ 299.729607][ T7218] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 299.983258][ T37] team0 (unregistering): Port device team_slave_1 removed [ 300.200984][ T2064] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 300.233753][ T37] team0 (unregistering): Port device team_slave_0 removed [ 300.363791][ T2064] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 300.363824][ T2064] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 300.369735][ T2064] usb 4-1: config 0 descriptor?? [ 300.627147][ T2064] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 300.907320][ T2064] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2 [ 300.907348][ T2064] [drm] Initialized udl on minor 2 [ 301.075926][ T2064] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 301.095862][ T2064] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 301.172525][ T5930] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 301.173023][ T5930] udl 4-1:0.0: [drm] Cannot find any crtc or sizes [ 301.174467][ T2064] usb 4-1: USB disconnect, device number 14 [ 301.447956][ T7226] netlink: 16 bytes leftover after parsing attributes in process `syz.1.384'. [ 301.831040][ T7228] syz.3.385 (7228): drop_caches: 2 [ 303.377609][ T7244] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 303.527721][ T7245] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 303.527774][ T7245] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 303.544200][ T7245] vhci_hcd vhci_hcd.0: Device attached [ 303.875569][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.037372][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.135928][ C1] vkms_vblank_simulate: vblank timer overrun [ 304.178474][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.201018][ T2064] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 305.209987][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.242614][ C1] vkms_vblank_simulate: vblank timer overrun [ 305.407172][ T7246] vhci_hcd: connection reset by peer [ 305.466717][ T1139] vhci_hcd: stop threads [ 305.467765][ T1139] vhci_hcd: release socket [ 305.498140][ T1139] vhci_hcd: disconnect device [ 305.986798][ T7164] vlan1: entered promiscuous mode [ 305.986966][ T7164] vlan1: entered allmulticast mode [ 305.986977][ T7164] veth0_vlan: entered allmulticast mode [ 306.003534][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.252284][ C1] vkms_vblank_simulate: vblank timer overrun [ 306.375716][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.110317][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.275010][ C1] vkms_vblank_simulate: vblank timer overrun [ 307.542450][ T7274] netlink: 16 bytes leftover after parsing attributes in process `syz.4.397'. [ 307.561398][ T5895] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 307.798225][ T5895] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 307.798250][ T5895] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 307.825414][ T5895] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 307.825510][ T5895] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 307.825559][ T5895] usb 4-1: SerialNumber: syz [ 308.220758][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.248243][ T5895] usb 4-1: 0:2 : does not exist [ 308.248607][ T5895] usb 4-1: unit 5 not found! [ 308.355429][ T5895] usb 4-1: USB disconnect, device number 15 [ 308.911653][ C1] vkms_vblank_simulate: vblank timer overrun [ 308.924685][ T6507] udevd[6507]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 309.020653][ T7296] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 309.028411][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.142686][ C1] vkms_vblank_simulate: vblank timer overrun [ 309.392827][ T7297] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 310.103668][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.270768][ T7302] comedi comedi0: pcl711: I/O port conflict (0x6,16) [ 310.472036][ T2064] vhci_hcd: vhci_device speed not set [ 310.629650][ C1] vkms_vblank_simulate: vblank timer overrun [ 310.728134][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.107657][ C1] vkms_vblank_simulate: vblank timer overrun [ 311.450123][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.279539][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.651861][ C1] vkms_vblank_simulate: vblank timer overrun [ 312.900284][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.021254][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.145532][ C1] vkms_vblank_simulate: vblank timer overrun [ 313.276731][ T7319] netlink: 48 bytes leftover after parsing attributes in process `syz.1.404'. [ 313.536665][ T7070] chnl_net:caif_netlink_parms(): no params data found [ 313.959995][ T7331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.409'. [ 313.987865][ T7129] chnl_net:caif_netlink_parms(): no params data found [ 314.672668][ C1] vkms_vblank_simulate: vblank timer overrun [ 314.727926][ T7343] loop2: detected capacity change from 0 to 7 [ 314.737683][ T7343] Dev loop2: unable to read RDB block 7 [ 314.737717][ T7343] loop2: AHDI p1 p2 p3 [ 314.737748][ T7343] loop2: partition table partially beyond EOD, truncated [ 314.740647][ T7343] loop2: p1 start 1601398130 is beyond EOD, truncated [ 314.740683][ T7343] loop2: p2 start 1702059890 is beyond EOD, truncated [ 315.293535][ T7347] CIFS mount error: No usable UNC path provided in device string! [ 315.293535][ T7347] [ 315.293558][ T7347] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 315.365183][ C1] vkms_vblank_simulate: vblank timer overrun [ 315.855060][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.258778][ C1] vkms_vblank_simulate: vblank timer overrun [ 316.361030][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.149941][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.379523][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.393507][ T7361] random: crng reseeded on system resumption [ 317.436846][ T7362] random: crng reseeded on system resumption [ 318.834734][ C0] vkms_vblank_simulate: vblank timer overrun [ 318.868332][ T7070] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.868496][ T7070] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.868739][ T7070] bridge_slave_0: entered allmulticast mode [ 318.915867][ T7070] bridge_slave_0: entered promiscuous mode [ 319.071705][ T7070] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.071845][ T7070] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.081119][ T7070] bridge_slave_1: entered allmulticast mode [ 319.112007][ T7070] bridge_slave_1: entered promiscuous mode [ 319.243426][ T7374] syz.1.418 (7374): drop_caches: 2 [ 319.565224][ T7366] [U]  [ 320.139295][ T7070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.173167][ T7129] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.173302][ T7129] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.173545][ T7129] bridge_slave_0: entered allmulticast mode [ 320.182625][ T7129] bridge_slave_0: entered promiscuous mode [ 320.214536][ T7380] loop2: detected capacity change from 0 to 7 [ 320.286006][ T7380] Dev loop2: unable to read RDB block 7 [ 320.286049][ T7380] loop2: AHDI p1 p2 p3 [ 320.286079][ T7380] loop2: partition table partially beyond EOD, truncated [ 320.286352][ T7380] loop2: p1 start 1601398130 is beyond EOD, truncated [ 320.286374][ T7380] loop2: p2 start 1702059890 is beyond EOD, truncated [ 320.294401][ T7070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.297998][ T7129] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.298218][ T7129] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.298459][ T7129] bridge_slave_1: entered allmulticast mode [ 320.364913][ T7129] bridge_slave_1: entered promiscuous mode [ 320.851522][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.102112][ T7386] fuse: Unknown parameter 'group_id00000000000000000000' [ 321.161515][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.507623][ C0] vkms_vblank_simulate: vblank timer overrun [ 321.821814][ C0] vkms_vblank_simulate: vblank timer overrun [ 322.923624][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.923702][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 323.081077][ C0] vkms_vblank_simulate: vblank timer overrun [ 323.201598][ C0] vkms_vblank_simulate: vblank timer overrun [ 327.613347][ T7070] team0: Port device team_slave_0 added [ 327.630629][ T7070] team0: Port device team_slave_1 added [ 327.746098][ T7129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 329.268679][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.654611][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.961118][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.104538][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.176075][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.731241][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.862756][ T7427] fuse: Bad value for 'user_id' [ 330.862775][ T7427] fuse: Bad value for 'user_id' [ 331.561352][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.599347][ C0] vkms_vblank_simulate: vblank timer overrun [ 331.635212][ T5930] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 331.698441][ T7129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 331.814408][ T5930] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 331.814439][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.999253][ T5930] usb 5-1: config 0 descriptor?? [ 332.972891][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.005670][ T5930] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 333.009516][ T7070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.009534][ T7070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.009564][ T7070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.061000][ C0] vkms_vblank_simulate: vblank timer overrun [ 333.187446][ T7070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.187465][ T7070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.187494][ T7070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.188314][ T37] bridge_slave_1: left allmulticast mode [ 333.188342][ T37] bridge_slave_1: left promiscuous mode [ 333.188601][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.258804][ T5930] [drm:udl_init] *ERROR* Selecting channel failed [ 333.292282][ T5930] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2 [ 333.292316][ T5930] [drm] Initialized udl on minor 2 [ 333.299728][ T5930] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 333.300103][ T5930] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 333.339620][ T5810] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 333.361889][ T5810] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 333.362090][ T5810] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 333.365991][ T5930] usb 5-1: USB disconnect, device number 7 [ 333.393004][ T37] bridge_slave_0: left allmulticast mode [ 333.393035][ T37] bridge_slave_0: left promiscuous mode [ 333.393307][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.543659][ T37] bridge_slave_1: left allmulticast mode [ 333.543689][ T37] bridge_slave_1: left promiscuous mode [ 333.544006][ T37] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.628351][ T37] bridge_slave_0: left allmulticast mode [ 337.628422][ T37] bridge_slave_0: left promiscuous mode [ 337.644789][ T37] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.111752][ T7464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.167317][ T7464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.170169][ T7464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.484353][ T7469] netlink: 'syz.4.439': attribute type 10 has an invalid length. [ 339.654763][ T7472] fuse: Bad value for 'user_id' [ 339.654811][ T7472] fuse: Bad value for 'user_id' [ 341.519195][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.589052][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 341.715470][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.720641][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.784568][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.363756][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 342.581539][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 342.583658][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 342.584842][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 342.596982][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.642892][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.074193][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.272949][ C1] vkms_vblank_simulate: vblank timer overrun [ 343.752055][ C1] vkms_vblank_simulate: vblank timer overrun [ 344.081768][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.234624][ T37] bond0 (unregistering): Released all slaves [ 344.721178][ T61] Bluetooth: hci5: command tx timeout [ 344.891618][ T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.951162][ T5802] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 344.975742][ T5802] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 344.979061][ T5802] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 345.030546][ T5802] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 345.043965][ T5802] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 345.091178][ T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.199400][ T37] bond0 (unregistering): Released all slaves [ 345.705781][ T7464] warning: `syz.4.439' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 345.852054][ T7469] ------------[ cut here ]------------ [ 345.852079][ T7469] WARNING: CPU: 0 PID: 7469 at net/wireless/scan.c:1194 cfg80211_scan_done+0x2f3/0x480 [ 345.852128][ T7469] Modules linked in: [ 345.852171][ T7469] CPU: 0 UID: 0 PID: 7469 Comm: syz.4.439 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 345.852197][ T7469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 345.852215][ T7469] RIP: 0010:cfg80211_scan_done+0x2f3/0x480 [ 345.852251][ T7469] Code: 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c2 55 b1 00 cc e8 5c 14 ac f7 90 0f 0b 90 e9 07 fe ff ff e8 4e 14 ac f7 90 <0f> 0b 90 e9 d7 fe ff ff e8 40 14 ac f7 c6 05 cf c6 ad 04 01 90 48 [ 345.852270][ T7469] RSP: 0018:ffffc90004f2e5a0 EFLAGS: 00010283 [ 345.852289][ T7469] RAX: ffffffff8a12a9b2 RBX: ffff88802780b418 RCX: 0000000000080000 [ 345.852306][ T7469] RDX: ffffc9001287c000 RSI: 0000000000000a85 RDI: 0000000000000a86 [ 345.852321][ T7469] RBP: ffffc90004f2e678 R08: 0000000000000000 R09: 0000000000000000 [ 345.852335][ T7469] R10: dffffc0000000000 R11: fffffbfff1dac52f R12: ffff88802780b400 [ 345.852352][ T7469] R13: ffff88802780b478 R14: dffffc0000000000 R15: ffff8880601a0860 [ 345.852370][ T7469] FS: 00007fb40f1296c0(0000) GS:ffff888126dfc000(0000) knlGS:0000000000000000 [ 345.852389][ T7469] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 345.852404][ T7469] CR2: 000020000028a030 CR3: 000000005f322000 CR4: 00000000003526f0 [ 345.852423][ T7469] Call Trace: [ 345.852437][ T7469] [ 345.852456][ T7469] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 345.852505][ T7469] __ieee80211_scan_completed+0x550/0xb40 [ 345.852542][ T7469] ieee80211_do_stop+0x209/0x1fc0 [ 345.852589][ T7469] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 345.852619][ T7469] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.852649][ T7469] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 345.852674][ T7469] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 345.852719][ T7469] ? rt_mutex_slowunlock+0x493/0x8a0 [ 345.852740][ T7469] ? rt_spin_lock+0x1c1/0x3e0 [ 345.852774][ T7469] ? rt_spin_unlock+0x150/0x200 [ 345.852802][ T7469] ? rt_spin_unlock+0x161/0x200 [ 345.852828][ T7469] ieee80211_stop+0x1b1/0x240 [ 345.852856][ T7469] ? __pfx_ieee80211_stop+0x10/0x10 [ 345.852886][ T7469] __dev_close_many+0x364/0x6f0 [ 345.852930][ T7469] ? __pfx___dev_close_many+0x10/0x10 [ 345.852962][ T7469] ? rt_spin_unlock+0x161/0x200 [ 345.852986][ T7469] ? dev_set_rx_mode+0x4d/0x300 [ 345.853009][ T7469] ? dev_set_rx_mode+0x244/0x300 [ 345.853037][ T7469] __dev_change_flags+0x2c7/0x6d0 [ 345.853065][ T7469] ? finish_task_switch+0x3ee/0x950 [ 345.853099][ T7469] ? __pfx___dev_change_flags+0x10/0x10 [ 345.853128][ T7469] ? __schedule+0x1709/0x4c20 [ 345.853167][ T7469] netif_change_flags+0x88/0x1a0 [ 345.853197][ T7469] do_setlink+0xc55/0x41c0 [ 345.853241][ T7469] ? __pfx_do_setlink+0x10/0x10 [ 345.853265][ T7469] ? do_raw_spin_unlock+0x122/0x240 [ 345.853297][ T7469] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 345.853330][ T7469] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 345.853360][ T7469] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.853389][ T7469] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 345.853419][ T7469] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 345.853463][ T7469] ? rt_mutex_slowlock+0x3de/0x6e0 [ 345.853488][ T7469] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 345.853512][ T7469] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 345.853533][ T7469] ? __lock_acquire+0xab9/0xd20 [ 345.853575][ T7469] ? rtnl_newlink+0x8e9/0x1c80 [ 345.853611][ T7469] ? safesetid_security_capable+0xa9/0x1a0 [ 345.853649][ T7469] ? bpf_lsm_capable+0x9/0x20 [ 345.853671][ T7469] ? security_capable+0x7e/0x2e0 [ 345.853704][ T7469] ? mutex_lock_nested+0x16a/0x1d0 [ 345.853747][ T7469] rtnl_newlink+0x1619/0x1c80 [ 345.853780][ T7469] ? netlink_deliver_tap+0x19c/0x1b0 [ 345.853817][ T7469] ? __pfx_rtnl_newlink+0x10/0x10 [ 345.853872][ T7469] ? __local_bh_enable+0x27b/0x410 [ 345.853904][ T7469] ? __local_bh_enable+0x28c/0x410 [ 345.853930][ T7469] ? reacquire_held_locks+0x127/0x1d0 [ 345.853967][ T7469] ? __pfx___local_bh_enable+0x10/0x10 [ 345.854003][ T7469] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 345.854031][ T7469] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.854067][ T7469] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 345.854092][ T7469] ? dev_hard_start_xmit+0x7f5/0x870 [ 345.854119][ T7469] ? __dev_queue_xmit+0x26f/0x3b70 [ 345.854162][ T7469] ? __dev_queue_xmit+0x26f/0x3b70 [ 345.854190][ T7469] ? __dev_queue_xmit+0x26f/0x3b70 [ 345.854220][ T7469] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 345.854255][ T7469] ? __lock_acquire+0xab9/0xd20 [ 345.854314][ T7469] ? __pfx_rtnl_newlink+0x10/0x10 [ 345.854348][ T7469] rtnetlink_rcv_msg+0x7cf/0xb70 [ 345.854387][ T7469] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 345.854421][ T7469] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 345.854453][ T7469] ? ref_tracker_free+0x61e/0x7c0 [ 345.854484][ T7469] ? __asan_memcpy+0x40/0x70 [ 345.854510][ T7469] ? __pfx_ref_tracker_free+0x10/0x10 [ 345.854538][ T7469] ? __skb_clone+0x63/0x7a0 [ 345.854575][ T7469] netlink_rcv_skb+0x208/0x470 [ 345.854599][ T7469] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 345.854635][ T7469] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 345.854671][ T7469] ? netlink_deliver_tap+0x2e/0x1b0 [ 345.854703][ T7469] netlink_unicast+0x846/0xa10 [ 345.854748][ T7469] ? __pfx_netlink_unicast+0x10/0x10 [ 345.854785][ T7469] ? netlink_sendmsg+0x642/0xb30 [ 345.854805][ T7469] ? skb_put+0x11b/0x210 [ 345.854832][ T7469] netlink_sendmsg+0x805/0xb30 [ 345.854866][ T7469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.854900][ T7469] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 345.854932][ T7469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.854956][ T7469] __sock_sendmsg+0x21c/0x270 [ 345.854992][ T7469] ____sys_sendmsg+0x508/0x820 [ 345.855025][ T7469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.855062][ T7469] ? import_iovec+0x74/0xa0 [ 345.855091][ T7469] ___sys_sendmsg+0x21f/0x2a0 [ 345.855121][ T7469] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.855195][ T7469] ? __fget_files+0x2a/0x420 [ 345.855231][ T7469] ? __fget_files+0x3a6/0x420 [ 345.855275][ T7469] __x64_sys_sendmsg+0x1a1/0x260 [ 345.855306][ T7469] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.855352][ T7469] ? do_syscall_64+0xbe/0xfa0 [ 345.855387][ T7469] do_syscall_64+0xfa/0xfa0 [ 345.855413][ T7469] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.855442][ T7469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.855465][ T7469] ? clear_bhb_loop+0x60/0xb0 [ 345.855492][ T7469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.855514][ T7469] RIP: 0033:0x7fb41132efc9 [ 345.855540][ T7469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.855558][ T7469] RSP: 002b:00007fb40f129038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.855581][ T7469] RAX: ffffffffffffffda RBX: 00007fb411586270 RCX: 00007fb41132efc9 [ 345.855598][ T7469] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000007 [ 345.855612][ T7469] RBP: 00007fb4113b1f91 R08: 0000000000000000 R09: 0000000000000000 [ 345.855626][ T7469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.855639][ T7469] R13: 00007fb411586308 R14: 00007fb411586270 R15: 00007fffe9e90448 [ 345.855678][ T7469] [ 345.855694][ T7469] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 345.855711][ T7469] CPU: 0 UID: 0 PID: 7469 Comm: syz.4.439 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 345.855735][ T7469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 345.855748][ T7469] Call Trace: [ 345.855756][ T7469] [ 345.855765][ T7469] dump_stack_lvl+0x99/0x250 [ 345.855801][ T7469] ? __asan_memcpy+0x40/0x70 [ 345.855827][ T7469] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.855860][ T7469] ? __pfx__printk+0x10/0x10 [ 345.855903][ T7469] vpanic+0x237/0x6d0 [ 345.855925][ T7469] ? __pfx_vpanic+0x10/0x10 [ 345.855959][ T7469] panic+0xb9/0xc0 [ 345.855981][ T7469] ? __pfx_panic+0x10/0x10 [ 345.856020][ T7469] __warn+0x31b/0x4b0 [ 345.856040][ T7469] ? cfg80211_scan_done+0x2f3/0x480 [ 345.856077][ T7469] ? cfg80211_scan_done+0x2f3/0x480 [ 345.856110][ T7469] report_bug+0x2be/0x4f0 [ 345.856138][ T7469] ? cfg80211_scan_done+0x2f3/0x480 [ 345.856178][ T7469] ? cfg80211_scan_done+0x2f3/0x480 [ 345.856212][ T7469] ? cfg80211_scan_done+0x2f5/0x480 [ 345.856246][ T7469] handle_bug+0x84/0x160 [ 345.856280][ T7469] exc_invalid_op+0x1a/0x50 [ 345.856313][ T7469] asm_exc_invalid_op+0x1a/0x20 [ 345.856333][ T7469] RIP: 0010:cfg80211_scan_done+0x2f3/0x480 [ 345.856366][ T7469] Code: 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c2 55 b1 00 cc e8 5c 14 ac f7 90 0f 0b 90 e9 07 fe ff ff e8 4e 14 ac f7 90 <0f> 0b 90 e9 d7 fe ff ff e8 40 14 ac f7 c6 05 cf c6 ad 04 01 90 48 [ 345.856383][ T7469] RSP: 0018:ffffc90004f2e5a0 EFLAGS: 00010283 [ 345.856402][ T7469] RAX: ffffffff8a12a9b2 RBX: ffff88802780b418 RCX: 0000000000080000 [ 345.856418][ T7469] RDX: ffffc9001287c000 RSI: 0000000000000a85 RDI: 0000000000000a86 [ 345.856433][ T7469] RBP: ffffc90004f2e678 R08: 0000000000000000 R09: 0000000000000000 [ 345.856447][ T7469] R10: dffffc0000000000 R11: fffffbfff1dac52f R12: ffff88802780b400 [ 345.856464][ T7469] R13: ffff88802780b478 R14: dffffc0000000000 R15: ffff8880601a0860 [ 345.856490][ T7469] ? cfg80211_scan_done+0x2f2/0x480 [ 345.856541][ T7469] ? __pfx_cfg80211_scan_done+0x10/0x10 [ 345.856589][ T7469] __ieee80211_scan_completed+0x550/0xb40 [ 345.856626][ T7469] ieee80211_do_stop+0x209/0x1fc0 [ 345.856670][ T7469] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 345.856700][ T7469] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.856729][ T7469] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 345.856755][ T7469] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 345.856801][ T7469] ? rt_mutex_slowunlock+0x493/0x8a0 [ 345.856823][ T7469] ? rt_spin_lock+0x1c1/0x3e0 [ 345.856856][ T7469] ? rt_spin_unlock+0x150/0x200 [ 345.856885][ T7469] ? rt_spin_unlock+0x161/0x200 [ 345.856912][ T7469] ieee80211_stop+0x1b1/0x240 [ 345.856940][ T7469] ? __pfx_ieee80211_stop+0x10/0x10 [ 345.856971][ T7469] __dev_close_many+0x364/0x6f0 [ 345.857012][ T7469] ? __pfx___dev_close_many+0x10/0x10 [ 345.857044][ T7469] ? rt_spin_unlock+0x161/0x200 [ 345.857067][ T7469] ? dev_set_rx_mode+0x4d/0x300 [ 345.857089][ T7469] ? dev_set_rx_mode+0x244/0x300 [ 345.857116][ T7469] __dev_change_flags+0x2c7/0x6d0 [ 345.857150][ T7469] ? finish_task_switch+0x3ee/0x950 [ 345.857185][ T7469] ? __pfx___dev_change_flags+0x10/0x10 [ 345.857214][ T7469] ? __schedule+0x1709/0x4c20 [ 345.857247][ T7469] netif_change_flags+0x88/0x1a0 [ 345.857277][ T7469] do_setlink+0xc55/0x41c0 [ 345.857319][ T7469] ? __pfx_do_setlink+0x10/0x10 [ 345.857342][ T7469] ? do_raw_spin_unlock+0x122/0x240 [ 345.857374][ T7469] ? try_to_take_rt_mutex+0x7fd/0xac0 [ 345.857408][ T7469] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 345.857437][ T7469] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.857467][ T7469] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 345.857498][ T7469] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 345.857541][ T7469] ? rt_mutex_slowlock+0x3de/0x6e0 [ 345.857566][ T7469] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 345.857591][ T7469] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 345.857612][ T7469] ? __lock_acquire+0xab9/0xd20 [ 345.857654][ T7469] ? rtnl_newlink+0x8e9/0x1c80 [ 345.857689][ T7469] ? safesetid_security_capable+0xa9/0x1a0 [ 345.857727][ T7469] ? bpf_lsm_capable+0x9/0x20 [ 345.857750][ T7469] ? security_capable+0x7e/0x2e0 [ 345.857783][ T7469] ? mutex_lock_nested+0x16a/0x1d0 [ 345.857812][ T7469] rtnl_newlink+0x1619/0x1c80 [ 345.857844][ T7469] ? netlink_deliver_tap+0x19c/0x1b0 [ 345.857881][ T7469] ? __pfx_rtnl_newlink+0x10/0x10 [ 345.857935][ T7469] ? __local_bh_enable+0x27b/0x410 [ 345.857968][ T7469] ? __local_bh_enable+0x28c/0x410 [ 345.857994][ T7469] ? reacquire_held_locks+0x127/0x1d0 [ 345.858030][ T7469] ? __pfx___local_bh_enable+0x10/0x10 [ 345.858068][ T7469] ? __local_bh_enable_ip+0x1c0/0x2e0 [ 345.858095][ T7469] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.858131][ T7469] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 345.858165][ T7469] ? dev_hard_start_xmit+0x7f5/0x870 [ 345.858192][ T7469] ? __dev_queue_xmit+0x26f/0x3b70 [ 345.858229][ T7469] ? __dev_queue_xmit+0x26f/0x3b70 [ 345.858258][ T7469] ? __dev_queue_xmit+0x26f/0x3b70 [ 345.858289][ T7469] ? __dev_queue_xmit+0x1d3d/0x3b70 [ 345.858324][ T7469] ? __lock_acquire+0xab9/0xd20 [ 345.858383][ T7469] ? __pfx_rtnl_newlink+0x10/0x10 [ 345.858416][ T7469] rtnetlink_rcv_msg+0x7cf/0xb70 [ 345.858455][ T7469] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 345.858490][ T7469] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 345.858524][ T7469] ? ref_tracker_free+0x61e/0x7c0 [ 345.858556][ T7469] ? __asan_memcpy+0x40/0x70 [ 345.858581][ T7469] ? __pfx_ref_tracker_free+0x10/0x10 [ 345.858609][ T7469] ? __skb_clone+0x63/0x7a0 [ 345.858647][ T7469] netlink_rcv_skb+0x208/0x470 [ 345.858671][ T7469] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 345.858707][ T7469] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 345.858743][ T7469] ? netlink_deliver_tap+0x2e/0x1b0 [ 345.858776][ T7469] netlink_unicast+0x846/0xa10 [ 345.858820][ T7469] ? __pfx_netlink_unicast+0x10/0x10 [ 345.858857][ T7469] ? netlink_sendmsg+0x642/0xb30 [ 345.858877][ T7469] ? skb_put+0x11b/0x210 [ 345.858905][ T7469] netlink_sendmsg+0x805/0xb30 [ 345.858939][ T7469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.858973][ T7469] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 345.859004][ T7469] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.859029][ T7469] __sock_sendmsg+0x21c/0x270 [ 345.859065][ T7469] ____sys_sendmsg+0x508/0x820 [ 345.859098][ T7469] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.859136][ T7469] ? import_iovec+0x74/0xa0 [ 345.859172][ T7469] ___sys_sendmsg+0x21f/0x2a0 [ 345.859202][ T7469] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.859273][ T7469] ? __fget_files+0x2a/0x420 [ 345.859304][ T7469] ? __fget_files+0x3a6/0x420 [ 345.859349][ T7469] __x64_sys_sendmsg+0x1a1/0x260 [ 345.859379][ T7469] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.859427][ T7469] ? do_syscall_64+0xbe/0xfa0 [ 345.859461][ T7469] do_syscall_64+0xfa/0xfa0 [ 345.859488][ T7469] ? lockdep_hardirqs_on+0x9c/0x150 [ 345.859517][ T7469] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.859539][ T7469] ? clear_bhb_loop+0x60/0xb0 [ 345.859568][ T7469] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.859590][ T7469] RIP: 0033:0x7fb41132efc9 [ 345.859609][ T7469] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.859627][ T7469] RSP: 002b:00007fb40f129038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.859648][ T7469] RAX: ffffffffffffffda RBX: 00007fb411586270 RCX: 00007fb41132efc9 [ 345.859665][ T7469] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000007 [ 345.859679][ T7469] RBP: 00007fb4113b1f91 R08: 0000000000000000 R09: 0000000000000000 [ 345.859693][ T7469] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.859706][ T7469] R13: 00007fb411586308 R14: 00007fb411586270 R15: 00007fffe9e90448 [ 345.859744][ T7469] [ 345.860028][ T7469] Kernel Offset: disabled