last executing test programs: 14m23.428891252s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) fcntl$setlease(r5, 0x400, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xc5) 14m7.282269308s ago: executing program 32 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = open(&(0x7f0000000000)='./file0\x00', 0x1607c0, 0x78e22799f4a46ffe) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fcntl$setlease(r5, 0x400, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000480)=0x17fe, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x4c, 0xf3, 0x8, [0x0, 0x0, 0x0, 0xc, 0x5, 0x0, 0x0, 0x40000002]}}) fcntl$setlease(r5, 0x400, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0xc5) 12m20.373830209s ago: executing program 5 (id=117): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) process_mrelease(0xffffffffffffffff, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) creat(&(0x7f0000000040)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x6, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r4, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24c01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_fuse_handle_req(r4, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0x0, {0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r6, r4, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x3c, r3, 0x1, 0x0, 0x0, {0x54}, [{{@nsim={{0xe, 0x2}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000100)={0x1b, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r8, 0xc0303e03, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 12m7.064896381s ago: executing program 5 (id=131): socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0x2aa, @mcast1, 0x3}, 0x1c) getsockopt$sock_buf(r3, 0x1, 0x1c, 0x0, &(0x7f00000000c0)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r5, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x43) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000540), r6) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, r7, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x1000000, 0x0, 0x24008850}, 0x4004a040) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r4) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x28, r9, 0x10, 0x70bd26, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xc}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x839}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x44014}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 12m3.607077409s ago: executing program 5 (id=133): socket$igmp(0x2, 0x3, 0x2) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) flock(0xffffffffffffffff, 0x5) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xffff, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, 0x0, 0x310) syz_io_uring_setup(0x4090, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) rt_sigqueueinfo(0x0, 0x6, &(0x7f0000000080)={0x13, 0x5, 0x28}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) sendmsg$nl_route(r2, 0x0, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0xfffffffc, @mcast1, 0x3}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) mlock(&(0x7f0000ffd000/0x3000)=nil, 0x3000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'lo\x00'}) 11m56.775720611s ago: executing program 5 (id=141): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_open_dev$vbi(0x0, 0x2, 0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000009c0)={&(0x7f00000001c0)='xprtrdma_err_unrecognized\x00'}, 0x18) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x1c}) read(r5, &(0x7f0000000080)=""/129, 0x20) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8) ptrace$ARCH_ENABLE_TAGGED_ADDR(0x1e, r1, 0x4, 0x4002) r6 = io_uring_setup(0x2e2d, &(0x7f00000003c0)={0x0, 0xcd81, 0x8000, 0x0, 0x1e}) io_uring_register$IORING_REGISTER_RING_FDS(r6, 0x14, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000008400004803c0001800a0001006d617463680000002c0002800d000100636f6e6e6d61726b0000000010000300a62a1a4094b2c56d78942e9708000240000000010900020073797a32000000000900010073797a30"], 0x94}}, 0x0) 11m52.125293836s ago: executing program 5 (id=147): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r4 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0) write(r4, &(0x7f0000000040)="0600", 0x2) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000180)=ANY=[], 0xe) sendfile(r4, r4, &(0x7f0000001000), 0xffff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{}]}, 0x10) 11m47.930024443s ago: executing program 5 (id=149): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='uid_map\x00') writev(r0, &(0x7f0000000100)=[{&(0x7f00000000c0)='4', 0x1}], 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00'}, 0x10) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000340)={{0x2, 0x0, 0x0, 0x0, 0xee01, 0x8, 0x1}, 0x0, 0x0, 0x8, 0x3, 0x4, 0x33, 0x1, 0xf9e4, 0x5, 0x5, 0xffffffffffffffff}) r1 = socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000044c0)={&(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x0, 0x0, r1}, 0x68) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4620, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 11m44.835216029s ago: executing program 1 (id=153): openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x1) r0 = syz_open_dev$video(0x0, 0x7, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) read$FUSE(0xffffffffffffffff, 0x0, 0x0) lseek(0xffffffffffffffff, 0xfffffffffffffff5, 0x1) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0406618, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4c805}, 0x2c000011) preadv2(r3, 0x0, 0x0, 0x9, 0x4, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000004c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000700)=ANY=[@ANYBLOB="05000000030000000000000000400000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES16=r1, @ANYRES32=r2, @ANYRES8=r0], 0x38}, 0x300, 0x0, 0x0, 0x4008000}, 0x8000) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000040)=@mangle={'mangle\x00', 0x44, 0x6, 0x410, 0x2e0, 0x2e0, 0x1f8, 0x1f8, 0x98, 0x378, 0x378, 0x378, 0x378, 0x378, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@addrtype={{0x30}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0xf4}}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'macvtap0\x00', 'bridge_slave_0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@common=@icmp={{0x28}, {0x0, "c85b"}}, @inet=@rpfilter={{0x28}}]}, @ECN={0x28}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) fanotify_init(0x202, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r6, &(0x7f00000000c0), 0x0, 0x12003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'nicvf0\x00'}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x79a8, 0x8, 0x1, 0x5000032f}, &(0x7f00000000c0), &(0x7f0000000140)) 11m39.294214343s ago: executing program 1 (id=160): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00\xfdM\xab\x89\xff\xda\xc7dw2\xa1\xb2\xabuQQ\x14\x97\xc9\xfae\xc7\xa1U\xe2\xbe\"\xb9t\xa0\x0e\xfa\xdb\xf1\xa5.\xd87\xc3p\xa5l\xf8vC\xe2\xe8 \xd5-<#\x186\xe1\xbd\xc0\xc3\xb5N(vj\xa7+<:\xc4\xe00\x01\xdd \x82\x83\xed\x0e\xc4\x1d\xac\xef7\b\xd3Z5\\A\'\x18\xa2\xc3\xab\xc7`\xc3\v\xf3L\x9d[Q\x9e\x11@=\xa1\x9b\xdc\xb1\xef\xc3k<\x97L\xa0\xab\xa6\x1ce\xcd\x99\xb3m\xef\x87\xc5i^N\xbd@\x01\xc0\xb2\x88\xc3\xe2\x96T\xa3\xa5\xeb\x0f\xf2f\xb9$\xd2\x140xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x40001e0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x4620, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f00000001c0)={0x0, 0x3d, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[], 0x1a000}}, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) 11m26.24463263s ago: executing program 1 (id=165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r3, &(0x7f0000002300)={0x50, 0x0, r4, {0x7, 0x9, 0x0, 0x31008003, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x50) read$FUSE(r3, &(0x7f0000004580)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r3, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r5}, 0x10) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) dup3(r6, r3, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x85402, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x12, r7, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) chdir(0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r8 = open(0x0, 0x10000, 0x0) getdents(r8, 0x0, 0x0) 11m15.93184941s ago: executing program 1 (id=171): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, 0x0, 0x0) sendmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) syz_io_uring_setup(0x9e, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') read$qrtrtun(r4, &(0x7f00000004c0)=""/57, 0x39) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000000}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x7f, 0x0}, 0x8) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r7, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = accept4$unix(r0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) recvfrom$unix(r8, &(0x7f0000000140)=""/263, 0x40000, 0x0, 0x0, 0x0) 11m9.852652469s ago: executing program 4 (id=175): syz_open_dev$evdev(&(0x7f0000000180), 0xfffffffffffffffd, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', 0xffffffffffffffff, 0x0, 0xfff7fffffffffff5}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) read$fb(0xffffffffffffffff, &(0x7f0000000140)=""/9, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socket$alg(0x26, 0x5, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) llistxattr(0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0x5, 0x0, 0x1c) lseek(0xffffffffffffffff, 0x2, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) creat(&(0x7f00000001c0)='./file0\x00', 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x400000000000045c], 0x0, 0xffffffffff600000, 0x1, 0x1}}, 0x40) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) 11m9.851424841s ago: executing program 1 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r0, 0x3) madvise(&(0x7f000059e000/0x5000)=nil, 0x5000, 0x9) landlock_create_ruleset(0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000000), 0x12) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0xd, 0x4) 11m6.907748277s ago: executing program 4 (id=178): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000740)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000003c00070100000000"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = fsopen(&(0x7f0000000100)='binder\x00', 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x2}}, &(0x7f0000000080)='GPL\x00', 0xa, 0x10, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r5, 0x8, 0x0, 0x0, 0x18, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x1c}, 0x6d) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r4, 0x7}, 0x10) fsmount(r3, 0x0, 0x3) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002b00"], 0x14}}, 0x84) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) r8 = syz_open_dev$tty1(0xc, 0x4, 0x3) dup(r8) 11m4.508073118s ago: executing program 4 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x1, @mcast1, 0x8000}}, {{0xa, 0x0, 0xb53, @empty, 0x80}}}, 0x108) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0xfffffffffffffffd) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 11m1.719235281s ago: executing program 4 (id=184): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000003c0)) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_open_dev$dri(0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='udf\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@abs, 0x6e) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e0000ea0300000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xc, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xaa9a}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000000}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000b00)={0x8, {"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", 0x1000}}, 0x1006) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r4, 0x5408, &(0x7f0000000080)={0x49dd, 0xffff, 0x0, 0xc003, 0x0, "fa3d76170000001b"}) write$binfmt_aout(r4, &(0x7f0000000240)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000180)={0x0, 0x4, 0x1000000b, 0x9, 0x4, "00000000000000000000c2041a02003d00"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0x17) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x11, 0x11, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0xfffffffd}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1316}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 10m56.676775779s ago: executing program 4 (id=187): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0xa, 0x20) r0 = socket$inet6(0xa, 0x3, 0x75) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x48081) shutdown(0xffffffffffffffff, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r2, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000100)=0x3ff, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000040)=0x4f5f, 0x4) sendmmsg$inet6(r3, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvfrom(r3, 0x0, 0x0, 0x40002050, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/vmallocinfo\x00', 0x0, 0x0) lseek(r4, 0xe, 0x1) sched_getattr(0x0, &(0x7f00000003c0)={0x38}, 0x38, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, &(0x7f0000000040)=0x8) socket$netlink(0x10, 0x3, 0x0) 10m53.2907332s ago: executing program 34 (id=176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r0, 0x3) madvise(&(0x7f000059e000/0x5000)=nil, 0x5000, 0x9) landlock_create_ruleset(0x0, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r4, &(0x7f0000000000), 0x12) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0xd, 0x4) 10m52.791155791s ago: executing program 4 (id=194): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0xc, @pix_mp={0x12, 0x5be8, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5, 0x7}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)='./file0\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, 0x0, 0x2) timer_create(0x2, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24500, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x70, r8, 0xc79c59394d69f4e3, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x106}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfb}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c014) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f00000000c0)) syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r9, 0x0) ftruncate(r9, 0xc17a) 10m36.772972873s ago: executing program 35 (id=194): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = syz_open_dev$video(&(0x7f0000000140), 0xd, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, 0x0) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000040)={0x0, 0xfff, 0x4, {0xc, @pix_mp={0x12, 0x5be8, 0xb5315258, 0x6, 0xb, [{0x80000004, 0x7}, {0x7ff, 0x5}, {0x10000001, 0x9}, {0x63d, 0x7fd}, {0x1, 0xb}, {0x7, 0x489aa92e}, {0x5, 0x7}, {0xff, 0x7}], 0x1, 0xc, 0x2, 0x0, 0x3}}, 0xfffffffd}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f00000001c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000002c0)='./file0\x00') r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xc}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r5 = io_uring_setup(0x54a0, &(0x7f0000000000)={0x0, 0x70e6, 0x2, 0x2, 0xf2}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r5, 0x13, 0x0, 0x2) timer_create(0x2, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x24500, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={0x70, r8, 0xc79c59394d69f4e3, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x106}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfb}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x400c014) ioctl$TUNGETFEATURES(r6, 0x800454cf, &(0x7f00000000c0)) syz_open_dev$vim2m(&(0x7f0000000000), 0x3ff, 0x2) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r9, 0x0) ftruncate(r9, 0xc17a) 1m42.07318917s ago: executing program 7 (id=709): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000180)=0x7, 0x4) sendmmsg$inet6(r0, &(0x7f0000006c00)=[{{&(0x7f0000001540)={0xa, 0x4e20, 0x10000000, @dev={0xfe, 0x80, '\x00', 0x15}, 0x1}, 0x1c, &(0x7f0000005300)=[{&(0x7f0000000000)='3', 0x1}], 0x1}}], 0x1, 0x8054) 1m41.376903973s ago: executing program 7 (id=713): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/84, 0x54}, {&(0x7f0000001ec0)=""/4042, 0xfca}, {&(0x7f0000002ec0)=""/4084, 0xff4}, {&(0x7f0000000800)=""/234, 0xea}, {&(0x7f0000000140)=""/158, 0x9e}], 0x5}, 0xbf9d5a5a4c2f3718) sendmsg$inet(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0a8187bae53dca2b007ea23e163ec40028e82fccdc09da15fef6a608649e7531765f0ef82e3c0076a705259a3651f60a84c9f4d4938037e70e4509c5bb0c9246444351db86078475483687054c", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) 1m38.551822791s ago: executing program 7 (id=715): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x458, 0x5014, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x7, {0x7, 0x0, "392cdaab4a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1m33.863856712s ago: executing program 7 (id=729): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x500000000000000}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fb, &(0x7f0000000040)={'bond0\x00', @random="18faff000020"}) 1m32.87376907s ago: executing program 7 (id=732): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2503000000000000000016000000140001800d0001007564703a73797ac919"], 0x28}}, 0x0) 1m29.950786579s ago: executing program 7 (id=735): getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xf, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x8000) mkdir(0x0, 0xe8) openat$nvram(0xffffffffffffff9c, 0x0, 0x22000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x7, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0xfffffffe, 0x3, 0x4}, 0x1000000, 0x200000, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0x4, 0x10000000}) syz_open_dev$dri(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x103bff, 0x111) 1m13.396705499s ago: executing program 36 (id=735): getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xf, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x8000) mkdir(0x0, 0xe8) openat$nvram(0xffffffffffffff9c, 0x0, 0x22000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$clear(0x7, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0xfffffffe, 0x3, 0x4}, 0x1000000, 0x200000, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0x4, 0x10000000}) syz_open_dev$dri(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x103bff, 0x111) 1m4.964108953s ago: executing program 8 (id=775): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000700)={{0x12, 0x1, 0x0, 0x69, 0xf7, 0x4a, 0x20, 0x10b8, 0x1bb4, 0x3465, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x5d, 0x0, 0x0, 0x1c, 0x53, 0xc2}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000200)={0x1c, &(0x7f0000000080)=ANY=[@ANYBLOB="2017cc"], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000400)={0x20, 0x0, 0xf, "a2a504c3d3dac57950200d3ead96dc"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m3.23249034s ago: executing program 2 (id=779): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040f0400016420"], 0x7) 1m1.915675031s ago: executing program 2 (id=780): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1fd2, 0x6007, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000f16000000090282"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m0.610633413s ago: executing program 8 (id=782): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x925, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000140)={0x20, 0x21, 0xa, {0xa, 0x32, "e4c7c6dcaa99c7c0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 58.997589861s ago: executing program 2 (id=786): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x1a}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x64000) 58.194065417s ago: executing program 2 (id=788): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009e602206d0414c340000000000109022400010400a000090480000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x60, 0x2, 0xff, "6006c4e7", "c916eb9e"}}, 0x0}, 0x0) 56.205358921s ago: executing program 8 (id=791): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'rti800\x00', [0x4f27, 0x5, 0x10000, 0x0, 0x66, 0xcc7, 0x0, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1db, 0x1, 0x2, 0x101, 0x1, 0x1a449, 0x3, 0x40020003, 0x2089, 0x2, 0xd27, 0x20001e58, 0x7fff, 0xe69, 0x3c, 0x1, 0x6]}) 53.98591157s ago: executing program 3 (id=793): openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_open_procfs(0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = getpgrp(0x0) r4 = syz_pidfd_open(r3, 0x0) pidfd_send_signal(r4, 0x0, &(0x7f0000000140)={0x0, 0x0, 0xffffffc6}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x3d, 0x8}, [@func, @call={0x85, 0x0, 0x0, 0x7d}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x6}, 0x94) 53.983777037s ago: executing program 8 (id=794): rseq(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) pread64(r0, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) futex(0x0, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, 0x0, 0x4ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) userfaultfd(0x801) openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r4, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4, 0xdf}}, 0x10) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x1000000000003, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, 0x0, 0x1) 50.63760473s ago: executing program 2 (id=796): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001140)={0x24, 0x0, 0x0, &(0x7f00000010c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0xa, "90f2ce56"}, @main=@item_012={0x1, 0x0, 0xc, '0'}, @local=@item_012={0x1, 0x2, 0x8, 't'}, @main=@item_4={0x3, 0x0, 0xa, "04d8c788"}, @global=@item_012={0x0, 0x1, 0x9}]}}, 0x0}, 0x0) 50.565214157s ago: executing program 8 (id=797): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x33}, {0x100000000, 0x4, 0x0, 0x2, 0x0, 0x9, 0x0, 0x40000000000000}, {0x0, 0x1000000000, 0x53e5, 0x20}, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x2, @in6=@private1, 0x1502, 0x4, 0x0, 0x0, 0x0, 0xfffffffb, 0xfffffffe}}, 0xe4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) 50.306054102s ago: executing program 8 (id=799): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0x283}) 50.200216683s ago: executing program 3 (id=800): clock_adjtime(0x1, &(0x7f0000000000)={0x3fd, 0x6, 0x24, 0x0, 0x8, 0x1ff, 0x0, 0x0, 0xffffffffffffff7f, 0x1003, 0x3, 0x0, 0x0, 0xd, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb2a, 0x4, 0x0, 0x83}) r0 = socket(0x2, 0x3, 0x67) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e20, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e000000d001c000000000000000000000008"], 0x38}, 0x40000) 50.083390532s ago: executing program 3 (id=802): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) getgroups(0xfffffffffffffdb2, 0xfffffffffffffffe) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r3, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r3, &(0x7f0000847fff), 0x0, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x2, @loopback, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x54, 0x6}, 0x9c) 48.423526381s ago: executing program 3 (id=804): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getpgid(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r3) mkdir(0x0, 0x0) pipe(0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r5 = accept4(r4, 0x0, 0x0, 0x800) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rseq(&(0x7f0000000400), 0x20, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}], 0x1}], 0x1, 0x40800) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x4000)=nil, 0x403f, 0x0, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff040, 0x1200000000000000) 46.997216643s ago: executing program 3 (id=805): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x12ba, 0x100, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 46.666173908s ago: executing program 2 (id=806): rseq(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) pread64(r0, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) futex(0x0, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, 0x0, 0x4ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) userfaultfd(0x801) openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r4, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4, 0xdf}}, 0x10) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x1000000000003, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, 0x0, 0x1) 36.134757945s ago: executing program 6 (id=807): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000340)={0x30, r0, 0x1, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x5, 0x2}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xa}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x80) 36.134633534s ago: executing program 3 (id=808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000440)=[{0x25, 0x2, 0x0, 0xfffff015}]}) 34.600956958s ago: executing program 37 (id=799): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0x283}) 34.522859959s ago: executing program 6 (id=810): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x8, 0x46d, 0xc24f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x4, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x7, 0x84, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000f80)={0x0, 0x22, 0x7, {[@global=@item_012={0x1, 0x1, 0x0, '4'}, @main=@item_012={0x2, 0x0, 0xa, "b608"}, @global=@item_012={0x1, 0x1, 0x4, '\x00'}]}}, 0x0}, 0x0) 32.261549208s ago: executing program 6 (id=811): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x3048}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_STREAMOFF(r0, 0x40045613, &(0x7f0000000080)=0xe2d8) 32.261384304s ago: executing program 6 (id=812): syz_usb_connect(0x5, 0x1bb, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000a677c120229062d60eb3000000010902a90101000000000904"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) pwritev(r0, &(0x7f00000003c0)=[{&(0x7f0000000440)="d7", 0x1}], 0x1, 0x5, 0xb2) 30.361080227s ago: executing program 38 (id=806): rseq(0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$dri(0x0, 0x1, 0x0) pread64(r0, 0x0, 0x0, 0xce2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) futex(0x0, 0xb, 0x2, 0x0, &(0x7f00000000c0)=0x2, 0x2) futex(&(0x7f000000cffc), 0x5, 0x4, 0x0, 0x0, 0x4ffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x80a02, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$kcm(0x29, 0x5, 0x0) userfaultfd(0x801) openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r4, 0x8}}, 0x10) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000140)={0x7, 0x8, 0xfa00, {r4, 0xdf}}, 0x10) socket$unix(0x1, 0x1, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000004, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xffffffffffffffff, 0x9, 0x1000000000003, 0xf, 0x80000006}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(0xffffffffffffffff, 0x22, 0x0, 0x1) 30.322756917s ago: executing program 6 (id=814): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000500)=[{0x0}, {&(0x7f0000000180)="6fe4dd9eeba3271dc700b5", 0xb}], 0x2}, 0x0) 20.676850648s ago: executing program 6 (id=815): r0 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/146, 0x92}], 0x2}}], 0x1, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000072009fb3000800000400000007000000", @ANYRES32=0x0, @ANYBLOB="0800010001"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8000) 20.468629504s ago: executing program 39 (id=808): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000440)=[{0x25, 0x2, 0x0, 0xfffff015}]}) 0s ago: executing program 40 (id=815): r0 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000003700)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/146, 0x92}], 0x2}}], 0x1, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000072009fb3000800000400000007000000", @ANYRES32=0x0, @ANYBLOB="0800010001"], 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x8000) kernel console output (not intermixed with test programs): a9 [ 433.317932][ T7612] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000009 [ 433.317946][ T7612] RBP: 00007f0deb9e1e19 R08: 0000000000000000 R09: 0000000000000000 [ 433.317959][ T7612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.317971][ T7612] R13: 00007f0debba6218 R14: 00007f0debba6180 R15: 00007ffd4fcfca28 [ 433.318007][ T7612] [ 433.318016][ T7612] Mem-Info: [ 433.318026][ T7612] active_anon:268 inactive_anon:12362 isolated_anon:0 [ 433.318026][ T7612] active_file:5612 inactive_file:37682 isolated_file:0 [ 433.318026][ T7612] unevictable:768 dirty:34 writeback:0 [ 433.318026][ T7612] slab_reclaimable:11860 slab_unreclaimable:105575 [ 433.318026][ T7612] mapped:41465 shmem:7085 pagetables:1322 [ 433.318026][ T7612] sec_pagetables:0 bounce:0 [ 433.318026][ T7612] kernel_misc_reclaimable:0 [ 433.318026][ T7612] free:1308684 free_pcp:4761 free_cma:0 [ 433.318083][ T7612] Node 0 active_anon:1072kB inactive_anon:49448kB active_file:22200kB inactive_file:150728kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:165860kB dirty:136kB writeback:0kB shmem:26804kB kernel_stack:14092kB pagetables:5140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 433.318132][ T7612] Node 1 active_anon:0kB inactive_anon:0kB active_file:248kB inactive_file:0kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB kernel_stack:80kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 433.318177][ T7612] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 433.318236][ T7612] lowmem_reserve[]: 0 2512 2513 2513 2513 [ 433.318275][ T7612] Node 0 DMA32 free:1319448kB boost:0kB min:3940kB low:6484kB high:9028kB reserved_highatomic:0KB free_highatomic:0KB active_anon:1068kB inactive_anon:49408kB active_file:21180kB inactive_file:150660kB unevictable:1536kB writepending:36kB present:3129332kB managed:2572296kB mlocked:0kB bounce:0kB free_pcp:19044kB local_pcp:15700kB free_cma:0kB [ 433.318338][ T7612] lowmem_reserve[]: 0 0 1 1 1 [ 433.318374][ T7612] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:4kB inactive_anon:40kB active_file:1020kB inactive_file:68kB unevictable:0kB writepending:0kB present:1048580kB managed:1132kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 433.318433][ T7612] lowmem_reserve[]: 0 0 0 0 0 [ 433.318468][ T7612] Node 1 Normal free:3899928kB boost:0kB min:6364kB low:10472kB high:14580kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:248kB inactive_file:0kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 433.318537][ T7612] lowmem_reserve[]: 0 0 0 0 0 [ 433.318572][ T7612] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 433.318699][ T7612] Node 0 DMA32: 1*4kB (M) 11*8kB (UME) 14*16kB (UE) 1*32kB (M) 5*64kB (ME) 4*128kB (UME) 3*256kB (UME) 19*512kB (UM) 7*1024kB (UME) 5*2048kB (UM) 315*4096kB (M) = 1319324kB [ 433.318868][ T7612] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 433.318976][ T7612] Node 1 Normal: 194*4kB (UME) 50*8kB (UME) 34*16kB (UME) 217*32kB (UME) 81*64kB (UME) 30*128kB (UE) 15*256kB (UME) 7*512kB (UM) 4*1024kB (UM) 2*2048kB (UE) 944*4096kB (M) = 3899928kB [ 433.319147][ T7612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 433.319165][ T7612] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 433.319182][ T7612] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 433.319199][ T7612] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 433.319216][ T7612] 50372 total pagecache pages [ 433.319224][ T7612] 0 pages in swap cache [ 433.319232][ T7612] Free swap = 124996kB [ 433.319240][ T7612] Total swap = 124996kB [ 433.319248][ T7612] 2097051 pages RAM [ 433.319256][ T7612] 0 pages HighMem/MovableOnly [ 433.319263][ T7612] 422079 pages reserved [ 433.319271][ T7612] 0 pages cma reserved [ 440.594974][ T5153] Bluetooth: hci3: command 0x0405 tx timeout [ 441.388598][ T7638] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 444.771658][ T7662] loop6: detected capacity change from 0 to 7 [ 445.698184][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.698279][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.754490][ T7662] Dev loop6: unable to read RDB block 7 [ 445.754538][ T7662] loop6: unable to read partition table [ 445.754790][ T7662] loop6: partition table beyond EOD, truncated [ 445.755213][ T7662] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 445.853022][ T7657] overlayfs: failed to resolve './file1': -2 [ 447.696232][ T43] team0 (unregistering): Port device team_slave_1 removed [ 447.808636][ T6727] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 447.964552][ T6727] usb 4-1: Using ep0 maxpacket: 32 [ 447.992185][ T6727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 447.992220][ T6727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 447.992259][ T6727] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 447.992283][ T6727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.576262][ T6727] usb 4-1: config 0 descriptor?? [ 450.311606][ T43] team0 (unregistering): Port device team_slave_0 removed [ 450.352136][ T6727] usbhid 4-1:0.0: can't add hid device: -71 [ 450.352285][ T6727] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 450.417781][ T6727] usb 4-1: USB disconnect, device number 2 [ 453.081600][ T5837] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 453.094789][ T5837] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 453.096166][ T5837] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 453.097547][ T5837] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 453.098326][ T5837] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 453.238958][ T7693] netlink: 'syz.3.302': attribute type 9 has an invalid length. [ 456.114705][ T5837] Bluetooth: hci6: command tx timeout [ 458.872111][ T5837] Bluetooth: hci6: command tx timeout [ 460.920092][ T5837] Bluetooth: hci6: command tx timeout [ 461.168852][ T7714] vimc link validate: Sensor A:src:16x16 (0x33424752, 12, 0, 5, 2) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 462.239271][ T7273] chnl_net:caif_netlink_parms(): no params data found [ 463.087030][ T5837] Bluetooth: hci6: command tx timeout [ 472.285229][ T7747] erofs (device nbd2): cannot find valid erofs superblock [ 472.905260][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 472.933436][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 472.957253][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 472.979788][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 473.000211][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 475.088456][ T5837] Bluetooth: hci2: command tx timeout [ 475.297731][ T7775] tmpfs: Bad value for 'mpol' [ 477.156665][ T5837] Bluetooth: hci2: command tx timeout [ 477.887683][ T7784] bridge0: entered promiscuous mode [ 477.891592][ T7784] macvlan2: entered promiscuous mode [ 479.253166][ T5837] Bluetooth: hci2: command tx timeout [ 480.165150][ T5153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 480.187592][ T5153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 480.191128][ T5153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 480.192695][ T5153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 480.219730][ T5153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 481.367817][ T7817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 481.432481][ T5153] Bluetooth: hci2: command tx timeout [ 482.114668][ T7690] chnl_net:caif_netlink_parms(): no params data found [ 482.274775][ T5153] Bluetooth: hci5: command tx timeout [ 483.298902][ T7831] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(9) [ 483.299881][ T7831] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 483.315224][ T7831] vhci_hcd vhci_hcd.0: Device attached [ 483.548206][ T6727] vhci_hcd: vhci_device speed not set [ 483.607157][ T6727] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 484.195265][ T7832] vhci_hcd: connection reset by peer [ 484.273405][ T6272] vhci_hcd: stop threads [ 484.299723][ T6272] vhci_hcd: release socket [ 484.342098][ T6272] vhci_hcd: disconnect device [ 484.354451][ T5153] Bluetooth: hci5: command tx timeout [ 485.554855][ T7844] futex_wake_op: syz.2.324 tries to shift op by -1; fix this program [ 486.517807][ T5153] Bluetooth: hci5: command tx timeout [ 489.186622][ T5153] Bluetooth: hci5: command tx timeout [ 489.215542][ T6727] vhci_hcd: vhci_device speed not set [ 498.221898][ T43] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.784131][ T7751] chnl_net:caif_netlink_parms(): no params data found [ 504.522566][ T43] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 504.586907][ T7690] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.587076][ T7690] bridge0: port 1(bridge_slave_0) entered disabled state [ 504.587300][ T7690] bridge_slave_0: entered allmulticast mode [ 504.593730][ T7690] bridge_slave_0: entered promiscuous mode [ 504.865182][ T7690] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.865440][ T7690] bridge0: port 2(bridge_slave_1) entered disabled state [ 504.865716][ T7690] bridge_slave_1: entered allmulticast mode [ 504.869000][ T7690] bridge_slave_1: entered promiscuous mode [ 506.017825][ T7931] fuse: Bad value for 'fd' [ 506.023812][ T7931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 506.922880][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.922966][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.279211][ T7937] syz.2.341 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 508.179370][ T43] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.709493][ T43] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 510.771692][ T7690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 511.132900][ T6430] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 511.318518][ T7751] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.318691][ T7751] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.318955][ T7751] bridge_slave_0: entered allmulticast mode [ 511.322222][ T7751] bridge_slave_0: entered promiscuous mode [ 511.356311][ T6430] usb 4-1: Using ep0 maxpacket: 8 [ 511.370052][ T6430] usb 4-1: config 0 has an invalid interface number: 148 but max is 0 [ 511.370081][ T6430] usb 4-1: config 0 has no interface number 0 [ 511.377952][ T6430] usb 4-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36 [ 511.377982][ T6430] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.377999][ T6430] usb 4-1: Product: syz [ 511.378012][ T6430] usb 4-1: Manufacturer: syz [ 511.378035][ T6430] usb 4-1: SerialNumber: syz [ 511.455384][ T6430] usb 4-1: config 0 descriptor?? [ 511.486234][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 511.506705][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 511.508151][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 511.510037][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 511.549358][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 511.565201][ T7751] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.565362][ T7751] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.567611][ T7751] bridge_slave_1: entered allmulticast mode [ 511.651458][ T7751] bridge_slave_1: entered promiscuous mode [ 511.683131][ T6430] kobil_sct 4-1:0.148: KOBIL USB smart card terminal converter detected [ 511.909904][ T6430] usb 4-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 513.864817][ T6727] usb 4-1: USB disconnect, device number 3 [ 513.966657][ T6727] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 513.967861][ T6727] kobil_sct 4-1:0.148: device disconnected [ 514.027090][ T5153] Bluetooth: hci0: command tx timeout [ 514.540265][ T7751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 514.785290][ T7751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 516.034338][ T5153] Bluetooth: hci0: command tx timeout [ 517.035466][ T7990] netlink: 324 bytes leftover after parsing attributes in process `syz.3.349'. [ 518.114472][ T5153] Bluetooth: hci0: command tx timeout [ 520.251309][ T8000] Can't find ip_set type ha [ 520.255652][ T5153] Bluetooth: hci0: command tx timeout [ 520.983849][ T7751] team0: Port device team_slave_0 added [ 521.004711][ T7797] chnl_net:caif_netlink_parms(): no params data found [ 521.091938][ T7751] team0: Port device team_slave_1 added [ 523.653671][ T8020] ======================================================= [ 523.653671][ T8020] WARNING: The mand mount option has been deprecated and [ 523.653671][ T8020] and is ignored by this kernel. Remove the mand [ 523.653671][ T8020] option from the mount to silence this warning. [ 523.653671][ T8020] ======================================================= [ 523.653733][ T8020] kAFS: No cell specified [ 528.715453][ T43] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.960286][ T7751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.960305][ T7751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.960333][ T7751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 530.330284][ T7751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 530.330302][ T7751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 530.330329][ T7751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.545903][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 530.602404][ T8045] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 530.612028][ T8045] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 530.614159][ T8045] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 530.640248][ T8045] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 530.662225][ T43] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.507836][ T43] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.611829][ T7797] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.612566][ T7797] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.612856][ T7797] bridge_slave_0: entered allmulticast mode [ 531.616751][ T7797] bridge_slave_0: entered promiscuous mode [ 531.930227][ T7797] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.930422][ T7797] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.930747][ T7797] bridge_slave_1: entered allmulticast mode [ 531.934167][ T7797] bridge_slave_1: entered promiscuous mode [ 532.317936][ T43] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 532.652238][ T7797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 532.690643][ T7797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 532.754514][ T5153] Bluetooth: hci3: command tx timeout [ 533.055880][ T7797] team0: Port device team_slave_0 added [ 533.227259][ T7797] team0: Port device team_slave_1 added [ 533.633628][ T7797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.633647][ T7797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.633674][ T7797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.787460][ T7797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.787480][ T7797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.787509][ T7797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.932120][ T7957] chnl_net:caif_netlink_parms(): no params data found [ 534.116820][ T43] bridge_slave_0: left allmulticast mode [ 534.116859][ T43] bridge_slave_0: left promiscuous mode [ 534.118697][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.177222][ T43] bridge_slave_1: left allmulticast mode [ 534.177247][ T43] bridge_slave_1: left promiscuous mode [ 534.180590][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.256564][ T43] bridge_slave_0: left allmulticast mode [ 534.256602][ T43] bridge_slave_0: left promiscuous mode [ 534.256900][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.338423][ T43] bridge_slave_1: left allmulticast mode [ 534.338457][ T43] bridge_slave_1: left promiscuous mode [ 534.338746][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.396280][ T43] bridge_slave_0: left allmulticast mode [ 534.396318][ T43] bridge_slave_0: left promiscuous mode [ 534.396618][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.834611][ T5153] Bluetooth: hci3: command tx timeout [ 535.157715][ T43] bond0 (unregistering): Released all slaves [ 535.374746][ T43] bond0 (unregistering): Released all slaves [ 535.587626][ T43] bond0 (unregistering): Released all slaves [ 535.814349][ T43] bond0 (unregistering): Released all slaves [ 536.926722][ T5153] Bluetooth: hci3: command tx timeout [ 537.805173][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 537.865449][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 537.900397][ T43] bond0 (unregistering): Released all slaves [ 538.994442][ T5153] Bluetooth: hci3: command tx timeout [ 539.159969][ T8045] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 539.202360][ T8045] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 539.209671][ T8045] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 539.210879][ T8045] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 539.212083][ T8045] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 539.918684][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 539.998032][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 540.020142][ T43] bond0 (unregistering): Released all slaves [ 541.038651][ T7957] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.038834][ T7957] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.039119][ T7957] bridge_slave_0: entered allmulticast mode [ 541.042732][ T7957] bridge_slave_0: entered promiscuous mode [ 541.066927][ T8043] chnl_net:caif_netlink_parms(): no params data found [ 541.127359][ T7957] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.127549][ T7957] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.127800][ T7957] bridge_slave_1: entered allmulticast mode [ 541.139663][ T7957] bridge_slave_1: entered promiscuous mode [ 541.235206][ T5153] Bluetooth: hci2: command tx timeout [ 542.509070][ T7957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.558092][ T7957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 543.314489][ T5153] Bluetooth: hci2: command tx timeout [ 543.319536][ T7957] team0: Port device team_slave_0 added [ 543.730039][ T7957] team0: Port device team_slave_1 added [ 543.788246][ T8043] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.810886][ T8043] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.811179][ T8043] bridge_slave_0: entered allmulticast mode [ 543.814568][ T8043] bridge_slave_0: entered promiscuous mode [ 543.951032][ T8043] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.951233][ T8043] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.951566][ T8043] bridge_slave_1: entered allmulticast mode [ 543.956418][ T8043] bridge_slave_1: entered promiscuous mode [ 544.483803][ T7957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.483820][ T7957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.483843][ T7957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.642741][ T7957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.642759][ T7957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.642787][ T7957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 544.675359][ T8043] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.702947][ T8043] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.140799][ T8043] team0: Port device team_slave_0 added [ 545.157912][ T7957] hsr_slave_0: entered promiscuous mode [ 545.159650][ T7957] hsr_slave_1: entered promiscuous mode [ 545.160750][ T7957] debugfs: 'hsr0' already exists in 'hsr' [ 545.160777][ T7957] Cannot create hsr debugfs directory [ 545.194062][ T8043] team0: Port device team_slave_1 added [ 545.394516][ T5153] Bluetooth: hci2: command tx timeout [ 545.524766][ T43] hsr_slave_0: left promiscuous mode [ 545.564834][ T43] hsr_slave_1: left promiscuous mode [ 545.565995][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.566026][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.605843][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.605878][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.754643][ T43] hsr_slave_0: left promiscuous mode [ 545.774405][ T43] hsr_slave_1: left promiscuous mode [ 545.775611][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 545.775642][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 545.827527][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 545.827562][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 545.976245][ T43] veth1_macvtap: left promiscuous mode [ 545.976391][ T43] veth0_macvtap: left promiscuous mode [ 545.976743][ T43] veth1_vlan: left promiscuous mode [ 545.976985][ T43] veth0_vlan: left promiscuous mode [ 546.107362][ T43] veth1_macvtap: left promiscuous mode [ 546.107522][ T43] veth0_macvtap: left promiscuous mode [ 546.107871][ T43] veth1_vlan: left promiscuous mode [ 546.108111][ T43] veth0_vlan: left promiscuous mode [ 547.474502][ T5153] Bluetooth: hci2: command tx timeout [ 549.945427][ T43] team0 (unregistering): Port device team_slave_1 removed [ 550.245743][ T43] team0 (unregistering): Port device team_slave_0 removed [ 555.647800][ T43] team0 (unregistering): Port device team_slave_1 removed [ 555.915646][ T43] team0 (unregistering): Port device team_slave_0 removed [ 559.398119][ T8043] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.398138][ T8043] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.398163][ T8043] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 559.403378][ T8069] chnl_net:caif_netlink_parms(): no params data found [ 559.511010][ T8043] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 559.511029][ T8043] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.511055][ T8043] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.406557][ T8043] hsr_slave_0: entered promiscuous mode [ 560.408197][ T8043] hsr_slave_1: entered promiscuous mode [ 560.740972][ T8069] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.741141][ T8069] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.741431][ T8069] bridge_slave_0: entered allmulticast mode [ 560.757082][ T8069] bridge_slave_0: entered promiscuous mode [ 560.966150][ T8069] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.966413][ T8069] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.966654][ T8069] bridge_slave_1: entered allmulticast mode [ 560.970848][ T8069] bridge_slave_1: entered promiscuous mode [ 561.367573][ T8069] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.388902][ T8069] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.727217][ T8069] team0: Port device team_slave_0 added [ 561.824157][ T8069] team0: Port device team_slave_1 added [ 562.324999][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.325016][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.325043][ T8069] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.387676][ T8069] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.387694][ T8069] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.387722][ T8069] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.749200][ T7957] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 563.017436][ T7957] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 563.124678][ T8069] hsr_slave_0: entered promiscuous mode [ 563.131419][ T8069] hsr_slave_1: entered promiscuous mode [ 563.132514][ T8069] debugfs: 'hsr0' already exists in 'hsr' [ 563.132541][ T8069] Cannot create hsr debugfs directory [ 563.304575][ T7957] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 563.357174][ T7957] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 564.070684][ T8043] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 564.118766][ T8043] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 564.180438][ T8043] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 564.250827][ T8043] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 565.178965][ T8069] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 565.305542][ T8069] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 565.389908][ T8069] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 565.456936][ T8069] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 565.950495][ T7957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.100157][ T8043] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.106131][ T7957] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.609027][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.609309][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.873965][ T43] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.910362][ T6272] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.910523][ T6272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.931329][ T8043] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.053672][ T5968] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.054483][ T5968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.283450][ T43] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.397724][ T5968] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.397901][ T5968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.631641][ T43] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.991685][ T43] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.060452][ T8069] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.308038][ T8069] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.362825][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.362913][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.383034][ T6272] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.383259][ T6272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.509700][ T6279] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.509881][ T6279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.834124][ T43] bridge_slave_1: left allmulticast mode [ 568.834370][ T43] bridge_slave_1: left promiscuous mode [ 568.834867][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.896350][ T43] bridge_slave_0: left allmulticast mode [ 568.896388][ T43] bridge_slave_0: left promiscuous mode [ 568.896736][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.970427][ T43] bridge_slave_1: left allmulticast mode [ 568.970466][ T43] bridge_slave_1: left promiscuous mode [ 568.970750][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.036686][ T43] bridge_slave_0: left allmulticast mode [ 569.036723][ T43] bridge_slave_0: left promiscuous mode [ 569.037081][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.103495][ T43] bridge_slave_1: left allmulticast mode [ 569.103522][ T43] bridge_slave_1: left promiscuous mode [ 569.103713][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.188406][ T43] bridge_slave_0: left allmulticast mode [ 569.188444][ T43] bridge_slave_0: left promiscuous mode [ 569.188741][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.263396][ T43] bridge_slave_1: left allmulticast mode [ 569.263439][ T43] bridge_slave_1: left promiscuous mode [ 569.264127][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.316718][ T43] bridge_slave_0: left allmulticast mode [ 569.316755][ T43] bridge_slave_0: left promiscuous mode [ 569.317044][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.926716][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.035867][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.111337][ T43] bond0 (unregistering): Released all slaves [ 570.377868][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.456173][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.519071][ T43] bond0 (unregistering): Released all slaves [ 571.781695][ T8045] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 571.810167][ T8045] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 571.811668][ T8045] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 571.813648][ T8045] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 571.842766][ T8045] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 572.919758][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.996619][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.043598][ T43] bond0 (unregistering): Released all slaves [ 573.275329][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.340331][ T43] bond0 (unregistering): Released all slaves [ 573.875089][ T8045] Bluetooth: hci4: command tx timeout [ 574.329231][ T8043] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.956284][ T8045] Bluetooth: hci4: command tx timeout [ 576.288017][ T8069] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.291716][ T8190] chnl_net:caif_netlink_parms(): no params data found [ 576.873807][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.931600][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.947841][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 576.989547][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.124363][ T43] hsr_slave_0: left promiscuous mode [ 577.144390][ T43] hsr_slave_1: left promiscuous mode [ 577.155085][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.155118][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.211217][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.211253][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.330192][ T43] veth1_macvtap: left promiscuous mode [ 577.330344][ T43] veth0_macvtap: left promiscuous mode [ 577.330693][ T43] veth1_vlan: left promiscuous mode [ 577.330938][ T43] veth0_vlan: left promiscuous mode [ 578.034471][ T8045] Bluetooth: hci4: command tx timeout [ 578.035443][ T43] team0 (unregistering): Port device team_slave_1 removed [ 578.198024][ T43] team0 (unregistering): Port device team_slave_0 removed [ 578.995597][ T43] team0 (unregistering): Port device team_slave_1 removed [ 579.148200][ T43] team0 (unregistering): Port device team_slave_0 removed [ 580.116227][ T8045] Bluetooth: hci4: command tx timeout [ 582.105523][ T43] team0 (unregistering): Port device team_slave_1 removed [ 582.349539][ T43] team0 (unregistering): Port device team_slave_0 removed [ 585.768981][ T8190] bridge0: port 1(bridge_slave_0) entered blocking state [ 585.769225][ T8190] bridge0: port 1(bridge_slave_0) entered disabled state [ 585.769474][ T8190] bridge_slave_0: entered allmulticast mode [ 585.772767][ T8190] bridge_slave_0: entered promiscuous mode [ 585.788588][ T8190] bridge0: port 2(bridge_slave_1) entered blocking state [ 585.788752][ T8190] bridge0: port 2(bridge_slave_1) entered disabled state [ 585.788949][ T8190] bridge_slave_1: entered allmulticast mode [ 585.792560][ T8190] bridge_slave_1: entered promiscuous mode [ 586.116082][ T8190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 586.171092][ T8190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.407230][ T8043] veth0_vlan: entered promiscuous mode [ 586.546204][ T8190] team0: Port device team_slave_0 added [ 586.618493][ T8190] team0: Port device team_slave_1 added [ 587.036251][ T8043] veth1_vlan: entered promiscuous mode [ 587.078130][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 587.078148][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.078175][ T8190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 587.090668][ T8190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 587.090686][ T8190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.090714][ T8190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 587.183812][ T8069] veth0_vlan: entered promiscuous mode [ 587.452335][ T8069] veth1_vlan: entered promiscuous mode [ 587.473405][ T8190] hsr_slave_0: entered promiscuous mode [ 587.475409][ T8190] hsr_slave_1: entered promiscuous mode [ 587.476329][ T8190] debugfs: 'hsr0' already exists in 'hsr' [ 587.476353][ T8190] Cannot create hsr debugfs directory [ 587.944741][ T8043] veth0_macvtap: entered promiscuous mode [ 588.148695][ T8043] veth1_macvtap: entered promiscuous mode [ 588.366900][ T8069] veth0_macvtap: entered promiscuous mode [ 588.822921][ T8069] veth1_macvtap: entered promiscuous mode [ 588.892227][ T8043] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.239319][ T8043] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.272217][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.313947][ T5985] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.336113][ T5985] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.587762][ T8069] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 589.587855][ T5985] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.609758][ T5985] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.710671][ T6267] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.749009][ T5969] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.969292][ T5969] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 589.973888][ T5969] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.401273][ T5985] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 591.401298][ T5985] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.607561][ T8190] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 591.769712][ T8190] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 591.821417][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 591.847965][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 591.850358][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 591.903514][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 591.913480][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 592.226732][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 592.226753][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 592.229140][ T8190] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 592.315918][ T8190] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 593.829249][ T8288] netlink: 16 bytes leftover after parsing attributes in process `syz.6.164'. [ 594.485199][ T8045] Bluetooth: hci0: command tx timeout [ 594.629572][ T8045] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 594.646351][ T8045] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 594.647846][ T8045] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 594.649800][ T8045] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 594.650748][ T8045] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 597.100134][ T8297] Bluetooth: MGMT ver 1.23 [ 597.543406][ T8045] Bluetooth: hci0: command tx timeout [ 597.543485][ T8045] Bluetooth: hci3: command tx timeout [ 597.711679][ T43] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 600.209686][ T5153] Bluetooth: hci3: command tx timeout [ 600.209726][ T5153] Bluetooth: hci0: command tx timeout [ 601.513223][ T43] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 603.019011][ T8045] Bluetooth: hci0: command tx timeout [ 603.019050][ T8045] Bluetooth: hci3: command tx timeout [ 605.018669][ T43] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 605.914362][ T5153] Bluetooth: hci3: command tx timeout [ 606.042913][ T8357] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 606.043294][ T8357] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 607.555405][ T43] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.631556][ T8269] chnl_net:caif_netlink_parms(): no params data found [ 608.032724][ T8190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.264004][ T8289] chnl_net:caif_netlink_parms(): no params data found [ 608.335664][ T8269] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.335901][ T8269] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.336157][ T8269] bridge_slave_0: entered allmulticast mode [ 608.339436][ T8269] bridge_slave_0: entered promiscuous mode [ 608.364484][ T8269] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.364629][ T8269] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.364853][ T8269] bridge_slave_1: entered allmulticast mode [ 608.367604][ T8269] bridge_slave_1: entered promiscuous mode [ 608.763560][ T8269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 608.786321][ T8269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 608.792661][ T8190] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.890478][ T43] bridge_slave_1: left allmulticast mode [ 608.890503][ T43] bridge_slave_1: left promiscuous mode [ 608.890737][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.961895][ T43] bridge_slave_0: left allmulticast mode [ 608.961933][ T43] bridge_slave_0: left promiscuous mode [ 608.962230][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.037382][ T43] bridge_slave_1: left allmulticast mode [ 609.037407][ T43] bridge_slave_1: left promiscuous mode [ 609.037571][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.096300][ T43] bridge_slave_0: left allmulticast mode [ 609.096328][ T43] bridge_slave_0: left promiscuous mode [ 609.096509][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.495296][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.555773][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.583238][ T43] bond0 (unregistering): Released all slaves [ 613.335263][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 613.442583][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 613.459630][ T43] bond0 (unregistering): Released all slaves [ 613.969678][ T8269] team0: Port device team_slave_0 added [ 614.089642][ T8289] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.092254][ T8289] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.092524][ T8289] bridge_slave_0: entered allmulticast mode [ 614.113032][ T8289] bridge_slave_0: entered promiscuous mode [ 614.128609][ T8269] team0: Port device team_slave_1 added [ 614.160674][ T6267] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.160851][ T6267] bridge0: port 1(bridge_slave_0) entered forwarding state [ 614.187647][ T8289] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.187821][ T8289] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.188076][ T8289] bridge_slave_1: entered allmulticast mode [ 614.210849][ T8289] bridge_slave_1: entered promiscuous mode [ 614.578168][ T8269] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.578186][ T8269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.578214][ T8269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.581385][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.582194][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 614.591248][ T8289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.596113][ T8269] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.596128][ T8269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.596151][ T8269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.831938][ T43] hsr_slave_0: left promiscuous mode [ 614.844573][ T43] hsr_slave_1: left promiscuous mode [ 614.845625][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 614.845656][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 614.917736][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 614.917770][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.064499][ T43] hsr_slave_0: left promiscuous mode [ 615.086325][ T43] hsr_slave_1: left promiscuous mode [ 615.087423][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 615.125349][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 615.258436][ T43] veth1_macvtap: left promiscuous mode [ 615.258581][ T43] veth0_macvtap: left promiscuous mode [ 615.258932][ T43] veth1_vlan: left promiscuous mode [ 615.259172][ T43] veth0_vlan: left promiscuous mode [ 618.137201][ T43] team0 (unregistering): Port device team_slave_1 removed [ 618.415469][ T43] team0 (unregistering): Port device team_slave_0 removed [ 622.173329][ T43] team0 (unregistering): Port device team_slave_1 removed [ 622.435465][ T43] team0 (unregistering): Port device team_slave_0 removed [ 624.928509][ T8289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.352555][ T8289] team0: Port device team_slave_0 added [ 625.492759][ T8289] team0: Port device team_slave_1 added [ 625.503709][ T8269] hsr_slave_0: entered promiscuous mode [ 625.505629][ T8269] hsr_slave_1: entered promiscuous mode [ 625.858763][ T8289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 625.858776][ T8289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.858790][ T8289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 625.979839][ T8289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 625.979853][ T8289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 625.979874][ T8289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.481487][ T8289] hsr_slave_0: entered promiscuous mode [ 626.483094][ T8289] hsr_slave_1: entered promiscuous mode [ 626.492691][ T8289] debugfs: 'hsr0' already exists in 'hsr' [ 626.492718][ T8289] Cannot create hsr debugfs directory [ 628.320092][ T8190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 629.806284][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.806373][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.149186][ T8190] veth0_vlan: entered promiscuous mode [ 630.180227][ T8190] veth1_vlan: entered promiscuous mode [ 630.336176][ T8190] veth0_macvtap: entered promiscuous mode [ 630.348025][ T8190] veth1_macvtap: entered promiscuous mode [ 630.437895][ T8190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 630.488287][ T8190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 630.651069][ T43] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.667202][ T43] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.720674][ T5985] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.738145][ T5985] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.937271][ T8269] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 631.026844][ T8269] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 631.142935][ T8269] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 631.281024][ T8269] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 631.797078][ T8289] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 631.858547][ T8289] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 631.944623][ T8289] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 632.036026][ T8289] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 632.933386][ T8045] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 632.953616][ T8045] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 632.967202][ T8045] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 632.968688][ T8045] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 632.969575][ T8045] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 633.190193][ T8269] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.900183][ T5985] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.320222][ T5985] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.430471][ T8269] 8021q: adding VLAN 0 to HW filter on device team0 [ 634.658684][ T5985] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.713648][ T8289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 634.728527][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.728837][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.970185][ T5985] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 634.994355][ T5153] Bluetooth: hci4: command tx timeout [ 635.013804][ T6267] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.013927][ T6267] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.196050][ T8289] 8021q: adding VLAN 0 to HW filter on device team0 [ 635.380934][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.381186][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 635.583717][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.583909][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 635.628303][ T8465] chnl_net:caif_netlink_parms(): no params data found [ 635.933390][ T5985] bridge_slave_1: left allmulticast mode [ 635.933426][ T5985] bridge_slave_1: left promiscuous mode [ 635.933725][ T5985] bridge0: port 2(bridge_slave_1) entered disabled state [ 636.016687][ T5985] bridge_slave_0: left allmulticast mode [ 636.016724][ T5985] bridge_slave_0: left promiscuous mode [ 636.017032][ T5985] bridge0: port 1(bridge_slave_0) entered disabled state [ 637.086888][ T5153] Bluetooth: hci4: command tx timeout [ 638.247338][ T5985] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 638.307438][ T5985] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 638.362767][ T5985] bond0 (unregistering): Released all slaves [ 638.778111][ T8465] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.778356][ T8465] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.778614][ T8465] bridge_slave_0: entered allmulticast mode [ 638.781836][ T8465] bridge_slave_0: entered promiscuous mode [ 638.944398][ T5985] hsr_slave_0: left promiscuous mode [ 638.964498][ T5985] hsr_slave_1: left promiscuous mode [ 638.967047][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 638.967077][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 639.015650][ T5985] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 639.015685][ T5985] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 639.111985][ T5985] veth1_macvtap: left promiscuous mode [ 639.112132][ T5985] veth0_macvtap: left promiscuous mode [ 639.112466][ T5985] veth1_vlan: left promiscuous mode [ 639.112713][ T5985] veth0_vlan: left promiscuous mode [ 639.154437][ T5153] Bluetooth: hci4: command tx timeout [ 641.245387][ T5153] Bluetooth: hci4: command tx timeout [ 641.757676][ T5985] team0 (unregistering): Port device team_slave_1 removed [ 642.002586][ T5985] team0 (unregistering): Port device team_slave_0 removed [ 644.719415][ T8465] bridge0: port 2(bridge_slave_1) entered blocking state [ 644.719586][ T8465] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.719801][ T8465] bridge_slave_1: entered allmulticast mode [ 644.723052][ T8465] bridge_slave_1: entered promiscuous mode [ 645.047922][ T8465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 645.149112][ T8465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 645.432170][ T8465] team0: Port device team_slave_0 added [ 645.445855][ T8465] team0: Port device team_slave_1 added [ 645.800971][ T8465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.800990][ T8465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.801016][ T8465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.838358][ T8465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 645.838374][ T8465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.838397][ T8465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 645.882011][ T8269] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.319394][ T8465] hsr_slave_0: entered promiscuous mode [ 646.320917][ T8465] hsr_slave_1: entered promiscuous mode [ 646.321964][ T8465] debugfs: 'hsr0' already exists in 'hsr' [ 646.321991][ T8465] Cannot create hsr debugfs directory [ 646.899436][ T8289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 647.538493][ T8269] veth0_vlan: entered promiscuous mode [ 647.599931][ T8269] veth1_vlan: entered promiscuous mode [ 647.780747][ T8289] veth0_vlan: entered promiscuous mode [ 647.829627][ T8289] veth1_vlan: entered promiscuous mode [ 647.935151][ T8269] veth0_macvtap: entered promiscuous mode [ 647.956792][ T8269] veth1_macvtap: entered promiscuous mode [ 648.239383][ T8289] veth0_macvtap: entered promiscuous mode [ 648.261333][ T8269] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.272664][ T8289] veth1_macvtap: entered promiscuous mode [ 648.289310][ T8269] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.341288][ T1182] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.353760][ T1182] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.365990][ T1182] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.380016][ T6272] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.404458][ T8289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 648.555283][ T8289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 648.646393][ T1182] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.722899][ T1182] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.771292][ T43] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 648.799909][ T43] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 649.087511][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.087534][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.293779][ T8465] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 649.428231][ T8465] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 649.521217][ T8465] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 649.556681][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.556703][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 649.559305][ T8465] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 649.690010][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 649.690033][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 653.041851][ T6316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 653.041873][ T6316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 654.314406][ T8571] input: syz0 as /devices/virtual/input/input7 [ 657.684596][ T8594] program syz.6.374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 657.721781][ T8594] program syz.6.374 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 657.722445][ T8594] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 658.183554][ T8465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 658.567692][ T8465] 8021q: adding VLAN 0 to HW filter on device team0 [ 659.333844][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.334364][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 659.488163][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.494446][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 659.623941][ T8601] netlink: 44 bytes leftover after parsing attributes in process `syz.8.375'. [ 661.639154][ T8618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 661.652366][ T8619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 661.654987][ T8619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 661.658773][ T8619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 661.659596][ T8619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 663.494274][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 664.487981][ T8646] netlink: 8 bytes leftover after parsing attributes in process `syz.3.385'. [ 664.633123][ T5153] Bluetooth: hci5: command tx timeout [ 664.664930][ T37] audit: type=1326 audit(1757944015.837:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8636 comm="syz.8.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127c3beba9 code=0x7ffc0000 [ 664.664984][ T37] audit: type=1326 audit(1757944015.837:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8636 comm="syz.8.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127c3beba9 code=0x7ffc0000 [ 664.739843][ T8646] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 665.221596][ T37] audit: type=1326 audit(1757944016.137:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8636 comm="syz.8.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f127c3beba9 code=0x7ffc0000 [ 665.221654][ T37] audit: type=1326 audit(1757944016.377:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8636 comm="syz.8.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127c3beba9 code=0x7ffc0000 [ 665.221697][ T37] audit: type=1326 audit(1757944016.377:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8636 comm="syz.8.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127c3beba9 code=0x7ffc0000 [ 665.256594][ T37] audit: type=1326 audit(1757944016.427:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8636 comm="syz.8.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f127c3beba9 code=0x7ffc0000 [ 665.268758][ T37] audit: type=1326 audit(1757944016.437:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8636 comm="syz.8.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127c3beba9 code=0x7ffc0000 [ 665.268821][ T37] audit: type=1326 audit(1757944016.437:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8636 comm="syz.8.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127c3beba9 code=0x7ffc0000 [ 665.275065][ T37] audit: type=1326 audit(1757944016.447:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8636 comm="syz.8.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f127c3beba9 code=0x7ffc0000 [ 665.275117][ T37] audit: type=1326 audit(1757944016.447:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=8636 comm="syz.8.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f127c3beba9 code=0x7ffc0000 [ 666.306230][ T8662] sctp: failed to load transform for md5: -2 [ 666.808900][ T8045] Bluetooth: hci5: command tx timeout [ 668.108581][ T8678] Bluetooth: MGMT ver 1.23 [ 668.836477][ T8045] Bluetooth: hci5: command tx timeout [ 671.552832][ T8045] Bluetooth: hci5: command tx timeout [ 672.222104][ T8695] block nbd3: Attempted send on invalid socket [ 672.222348][ T8695] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 672.223745][ T8695] ADFS-fs (nbd3): error: unable to read block 3, try 0 [ 673.395379][ T8700] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 674.620355][ T5968] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.137144][ T5968] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.317867][ T8465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.815438][ T8750] ceph: No mds server is up or the cluster is laggy [ 681.079575][ T8697] libceph: connect (1)[c::]:6789 error -101 [ 681.079854][ T8697] libceph: mon0 (1)[c::]:6789 connect error [ 683.007827][ T8759] syz.8.401 (8759) used greatest stack depth: 17976 bytes left [ 685.023785][ T8766] block nbd8: Attempted send on invalid socket [ 685.023810][ T8766] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 685.023927][ T8766] ADFS-fs (nbd8): error: unable to read block 3, try 0 [ 685.331847][ T8697] libceph: connect (1)[c::]:6789 error -101 [ 685.332109][ T8697] libceph: mon0 (1)[c::]:6789 connect error [ 685.367496][ T6430] libceph: connect (1)[c::]:6789 error -101 [ 685.367749][ T6430] libceph: mon0 (1)[c::]:6789 connect error [ 686.206661][ T5968] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.486433][ T8613] chnl_net:caif_netlink_parms(): no params data found [ 687.617584][ T8778] vivid-002: disconnect [ 689.301953][ T8778] Bluetooth: MGMT ver 1.23 [ 691.098602][ T8775] vivid-002: reconnect [ 691.273713][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.280925][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.435098][ T8810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 695.649648][ T5968] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 697.254733][ T8045] Bluetooth: hci1: unexpected event for opcode 0x2016 [ 699.428179][ T8841] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 700.253243][ T8845] ubi31: attaching mtd0 [ 700.283606][ T8845] ubi31: scanning is finished [ 701.212082][ T8841] orangefs_mount: mount request failed with -4 [ 701.330546][ T8613] bridge0: port 1(bridge_slave_0) entered blocking state [ 701.330713][ T8613] bridge0: port 1(bridge_slave_0) entered disabled state [ 701.330967][ T8613] bridge_slave_0: entered allmulticast mode [ 701.418503][ T8613] bridge_slave_0: entered promiscuous mode [ 701.459705][ T8845] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 701.689944][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 701.714067][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 701.736350][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 701.753001][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 701.758064][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 704.144803][ T8045] Bluetooth: hci3: command tx timeout [ 707.675227][ T5153] Bluetooth: hci3: command tx timeout [ 708.070178][ T8613] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.070282][ T8613] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.070459][ T8613] bridge_slave_1: entered allmulticast mode [ 708.075269][ T8613] bridge_slave_1: entered promiscuous mode [ 708.474829][ T8873] ucma_write: process 86 (syz.8.424) changed security contexts after opening file descriptor, this is not allowed. [ 708.503460][ T5153] Bluetooth: hci1: unexpected event for opcode 0x200c [ 709.004485][ T8697] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 709.086186][ T5153] Bluetooth: hci1: unexpected event for opcode 0x2012 [ 709.119758][ T8613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 709.196978][ T8697] usb 7-1: config 8 has an invalid interface number: 223 but max is 0 [ 709.197008][ T8697] usb 7-1: config 8 contains an unexpected descriptor of type 0x1, skipping [ 709.197027][ T8697] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 709.197046][ T8697] usb 7-1: config 8 has no interface number 0 [ 709.197098][ T8697] usb 7-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64 [ 709.197125][ T8697] usb 7-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 709.200350][ T8697] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 709.200378][ T8697] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.200399][ T8697] usb 7-1: Product: syz [ 709.200413][ T8697] usb 7-1: Manufacturer: syz [ 709.200428][ T8697] usb 7-1: SerialNumber: syz [ 709.358387][ T8613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 709.619409][ T8697] usb 7-1: USB disconnect, device number 2 [ 709.714566][ T5153] Bluetooth: hci3: command tx timeout [ 711.817575][ T5153] Bluetooth: hci3: command tx timeout [ 714.096320][ T8912] netlink: 36 bytes leftover after parsing attributes in process `syz.8.432'. [ 714.330068][ T5153] Bluetooth: hci2: unexpected event for opcode 0x203b [ 714.343781][ T8911] 9pnet: Could not find request transport: fd0x0000000000000003 [ 714.432241][ T5968] bridge_slave_1: left allmulticast mode [ 714.432279][ T5968] bridge_slave_1: left promiscuous mode [ 714.432580][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 714.671871][ T5968] bridge_slave_0: left allmulticast mode [ 714.671911][ T5968] bridge_slave_0: left promiscuous mode [ 714.672267][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 714.771896][ T5153] Bluetooth: hci2: unexpected cc 0x0c1b length: 1 < 5 [ 714.771931][ T5153] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 714.925992][ T10] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 715.003251][ T5153] Bluetooth: hci1: unexpected cc 0x203c length: 9 > 1 [ 715.003286][ T5153] Bluetooth: hci1: unexpected event for opcode 0x203c [ 715.084412][ T10] usb 9-1: Using ep0 maxpacket: 32 [ 715.089129][ T10] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 715.089196][ T10] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 715.089254][ T10] usb 9-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 715.089279][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.129387][ T10] usb 9-1: config 0 descriptor?? [ 715.248903][ T10] usb 9-1: bad CDC descriptors [ 715.419213][ T8045] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 715.629837][ T8619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 715.717623][ T8619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 715.782702][ T8619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 715.870327][ T8619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 716.318432][ T8395] usb 9-1: USB disconnect, device number 2 [ 716.437239][ T8940] overlay: Unknown parameter './bus' [ 716.771379][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.439'. [ 717.773376][ T8952] 9pnet: Could not find request transport: fd0x0000000000000003 [ 717.774383][ T8395] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 717.949077][ T8950] netlink: 36 bytes leftover after parsing attributes in process `syz.6.443'. [ 717.954940][ T8395] usb 9-1: Using ep0 maxpacket: 8 [ 717.957540][ T8395] usb 9-1: config 11 has an invalid interface number: 95 but max is 0 [ 717.957565][ T8395] usb 9-1: config 11 has no interface number 0 [ 717.957619][ T8395] usb 9-1: config 11 interface 95 has no altsetting 0 [ 717.962467][ T8395] usb 9-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d [ 717.962491][ T8395] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 717.962508][ T8395] usb 9-1: Product: syz [ 717.962521][ T8395] usb 9-1: Manufacturer: syz [ 717.962533][ T8395] usb 9-1: SerialNumber: syz [ 718.349743][ T8395] usb 9-1: USB disconnect, device number 3 [ 718.360909][ T5153] Bluetooth: hci4: command tx timeout [ 720.593574][ T5153] Bluetooth: hci4: command tx timeout [ 722.034428][ T5911] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 722.255252][ T5911] usb 4-1: Using ep0 maxpacket: 8 [ 722.277684][ T5911] usb 4-1: unable to get BOS descriptor or descriptor too short [ 722.281661][ T5911] usb 4-1: config 7 has an invalid interface number: 148 but max is 0 [ 722.281689][ T5911] usb 4-1: config 7 has no interface number 0 [ 722.312543][ T5911] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=1c.76 [ 722.312634][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 722.312656][ T5911] usb 4-1: Product: syz [ 722.312670][ T5911] usb 4-1: Manufacturer: syz [ 722.312684][ T5911] usb 4-1: SerialNumber: syz [ 722.594309][ T5153] Bluetooth: hci4: command tx timeout [ 722.713467][ T5911] ldusb 4-1:7.148: Interrupt in endpoint not found [ 722.722744][ T5968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 722.780180][ T5911] usb 4-1: USB disconnect, device number 4 [ 722.798763][ T5968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 722.839051][ T5968] bond0 (unregistering): Released all slaves [ 726.712088][ T5153] Bluetooth: hci4: command tx timeout [ 727.034430][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 728.344220][ T10] usb 7-1: Using ep0 maxpacket: 16 [ 728.359089][ T10] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 728.371471][ T10] usb 7-1: New USB device found, idVendor=05ac, idProduct=0231, bcdDevice= 0.40 [ 728.371503][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 728.371523][ T10] usb 7-1: Product: syz [ 728.371538][ T10] usb 7-1: Manufacturer: syz [ 728.371552][ T10] usb 7-1: SerialNumber: syz [ 728.441248][ T10] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input8 [ 728.483171][ T8993] Unknown options in mask b7f2 [ 729.314564][ T5189] bcm5974 7-1:1.0: could not read from device [ 730.504233][ T10] usb 7-1: USB disconnect, device number 3 [ 730.701873][ T8994] netlink: 36 bytes leftover after parsing attributes in process `syz.3.453'. [ 730.714363][ T8996] 9pnet: Could not find request transport: fd0x0000000000000003 [ 730.964247][ T8395] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 731.134469][ T8395] usb 9-1: Using ep0 maxpacket: 16 [ 731.137441][ T8395] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 731.137468][ T8395] usb 9-1: config 0 has no interface number 0 [ 731.137520][ T8395] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 731.140217][ T8395] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 731.140245][ T8395] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 731.140267][ T8395] usb 9-1: Product: syz [ 731.140282][ T8395] usb 9-1: SerialNumber: syz [ 731.241769][ T8395] usb 9-1: config 0 descriptor?? [ 731.269121][ T8395] usbhid 9-1:0.8: couldn't find an input interrupt endpoint [ 731.314360][ T5911] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 731.324346][ T10] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 731.464455][ T5911] usb 4-1: Using ep0 maxpacket: 16 [ 731.468062][ T8395] usb 9-1: USB disconnect, device number 4 [ 731.468128][ T5911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.477869][ T5911] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 731.477899][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.477917][ T5911] usb 4-1: Product: syz [ 731.477930][ T5911] usb 4-1: Manufacturer: syz [ 731.477942][ T5911] usb 4-1: SerialNumber: syz [ 731.544391][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 731.582604][ T10] usb 7-1: config 162 has an invalid interface number: 97 but max is 0 [ 731.582635][ T10] usb 7-1: config 162 has no interface number 0 [ 731.582692][ T10] usb 7-1: config 162 interface 97 has no altsetting 0 [ 731.604286][ T10] usb 7-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b [ 731.604320][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 731.604339][ T10] usb 7-1: Product: syz [ 731.604354][ T10] usb 7-1: Manufacturer: syz [ 731.604368][ T10] usb 7-1: SerialNumber: syz [ 731.820025][ T5911] usb 4-1: config 0 descriptor?? [ 731.856216][ T5911] dm9601 4-1:0.0: probe with driver dm9601 failed with error -22 [ 731.861204][ T5911] sr9700 4-1:0.0: probe with driver sr9700 failed with error -22 [ 731.983537][ T10] metro_usb 7-1:162.97: interrupt-out endpoint missing [ 732.016035][ T10] usb 7-1: USB disconnect, device number 4 [ 732.073252][ T5968] hsr_slave_0: left promiscuous mode [ 732.077971][ T8395] usb 4-1: USB disconnect, device number 5 [ 732.131297][ T5968] hsr_slave_1: left promiscuous mode [ 732.132372][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 732.132402][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 732.178874][ T5968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 732.178910][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 732.342854][ T5968] veth1_macvtap: left promiscuous mode [ 732.342986][ T5968] veth0_macvtap: left promiscuous mode [ 732.343312][ T5968] veth1_vlan: left promiscuous mode [ 732.343542][ T5968] veth0_vlan: left promiscuous mode [ 734.164276][ T8395] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 734.960398][ T6727] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 734.994352][ T8395] usb 4-1: Using ep0 maxpacket: 32 [ 734.997031][ T8395] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 735.023549][ T8395] usb 4-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 735.023582][ T8395] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 735.023602][ T8395] usb 4-1: Product: syz [ 735.023617][ T8395] usb 4-1: Manufacturer: syz [ 735.023631][ T8395] usb 4-1: SerialNumber: syz [ 735.123256][ T8395] kobil_sct 4-1:2.0: required endpoints missing [ 735.134326][ T6727] usb 9-1: Using ep0 maxpacket: 16 [ 735.145995][ T6727] usb 9-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 735.146056][ T6727] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 735.146083][ T6727] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 735.146108][ T6727] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 735.146131][ T6727] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 735.199806][ T6727] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 735.199840][ T6727] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 735.199861][ T6727] usb 9-1: SerialNumber: syz [ 735.265224][ T9025] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 735.265466][ T9025] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 735.409166][ T5911] usb 4-1: USB disconnect, device number 6 [ 735.541638][ T6727] usb 9-1: USB disconnect, device number 5 [ 737.464546][ T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 737.524470][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 737.644590][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 737.651566][ T10] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 737.651598][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.651624][ T10] usb 4-1: Product: syz [ 737.651640][ T10] usb 4-1: Manufacturer: syz [ 737.651655][ T10] usb 4-1: SerialNumber: syz [ 737.703256][ T10] usb 4-1: config 0 descriptor?? [ 737.714241][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 737.714728][ T5911] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 737.717061][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 737.717088][ T9] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 0 [ 737.717113][ T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 737.783759][ T9] usb 7-1: New USB device found, idVendor=110a, idProduct=1110, bcdDevice=ab.5d [ 737.783785][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.783796][ T9] usb 7-1: Product: syz [ 737.783805][ T9] usb 7-1: Manufacturer: syz [ 737.783818][ T9] usb 7-1: SerialNumber: syz [ 737.873352][ T9] ti_usb_3410_5052 7-1:1.0: TI USB 3410 1 port adapter converter detected [ 737.877820][ T5911] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 737.877846][ T5911] usb 9-1: config 0 has no interface number 0 [ 737.888229][ T5911] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 737.888260][ T5911] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.888281][ T5911] usb 9-1: Product: syz [ 737.888295][ T5911] usb 9-1: Manufacturer: syz [ 737.888307][ T5911] usb 9-1: SerialNumber: syz [ 737.926329][ T5911] usb 9-1: config 0 descriptor?? [ 737.974360][ T10] dvb_usb_dtv5100 4-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -71 [ 738.008368][ T10] usb 4-1: USB disconnect, device number 7 [ 738.116425][ T9] usb 7-1: USB disconnect, device number 5 [ 738.225538][ T5911] dvb_usb_ec168 9-1:0.1: probe with driver dvb_usb_ec168 failed with error -71 [ 738.259835][ T5911] usb 9-1: USB disconnect, device number 6 [ 741.384714][ T9071] vivid-002: disconnect [ 742.811386][ T9066] vivid-002: reconnect [ 744.716321][ T9084] netlink: 'syz.8.484': attribute type 21 has an invalid length. [ 745.232164][ T5968] team0 (unregistering): Port device team_slave_1 removed [ 745.525295][ T5968] team0 (unregistering): Port device team_slave_0 removed [ 748.347079][ T9072] netlink: 755 bytes leftover after parsing attributes in process `syz.6.481'. [ 748.352127][ T9084] netlink: 132 bytes leftover after parsing attributes in process `syz.8.484'. [ 748.572567][ T9089] warning: `syz.6.486' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 752.683921][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.684009][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 756.099957][ T8849] chnl_net:caif_netlink_parms(): no params data found [ 758.813062][ T8931] chnl_net:caif_netlink_parms(): no params data found [ 763.518665][ T9183] netlink: 2 bytes leftover after parsing attributes in process `syz.6.511'. [ 763.864746][ T8619] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 763.897736][ T8619] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 763.909479][ T8619] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 763.921983][ T8619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 763.923614][ T8619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 764.749067][ T9199] vivid-003: disconnect [ 765.740474][ T9193] vivid-003: reconnect [ 765.954474][ T5153] Bluetooth: hci3: command tx timeout [ 767.713403][ T9220] sctp: failed to load transform for md5: -2 [ 768.193769][ T5153] Bluetooth: hci3: command tx timeout [ 770.493405][ T5153] Bluetooth: hci1: unexpected event for opcode 0x080e [ 770.538336][ T5153] Bluetooth: hci3: command tx timeout [ 770.754623][ T9248] netlink: 'syz.8.524': attribute type 1 has an invalid length. [ 772.604790][ T5153] Bluetooth: hci3: command tx timeout [ 774.555170][ T8931] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.555324][ T8931] bridge0: port 1(bridge_slave_0) entered disabled state [ 774.555565][ T8931] bridge_slave_0: entered allmulticast mode [ 774.568125][ T8931] bridge_slave_0: entered promiscuous mode [ 775.239575][ T8619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 775.269981][ T8619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 775.271485][ T8619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 775.305455][ T8619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 775.313750][ T8619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 776.897949][ T5968] bridge_slave_1: left allmulticast mode [ 776.897986][ T5968] bridge_slave_1: left promiscuous mode [ 776.898306][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 776.948609][ T5968] bridge_slave_0: left allmulticast mode [ 776.948648][ T5968] bridge_slave_0: left promiscuous mode [ 776.948962][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.049586][ T5968] bridge_slave_1: left allmulticast mode [ 777.049628][ T5968] bridge_slave_1: left promiscuous mode [ 777.049916][ T5968] bridge0: port 2(bridge_slave_1) entered disabled state [ 777.136196][ T5968] bridge_slave_0: left allmulticast mode [ 777.136233][ T5968] bridge_slave_0: left promiscuous mode [ 777.136531][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 777.394370][ T8619] Bluetooth: hci5: command tx timeout [ 777.715770][ T5968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 777.796080][ T5968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 777.858947][ T5968] bond0 (unregistering): Released all slaves [ 779.477848][ T8619] Bluetooth: hci5: command tx timeout [ 779.675272][ T5968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.766614][ T5968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 779.822410][ T5968] bond0 (unregistering): Released all slaves [ 780.181408][ T9190] chnl_net:caif_netlink_parms(): no params data found [ 780.554773][ T5968] hsr_slave_0: left promiscuous mode [ 780.624412][ T5968] hsr_slave_1: left promiscuous mode [ 780.625572][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.685435][ T5968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 781.554466][ T8619] Bluetooth: hci5: command tx timeout [ 782.695179][ T5968] team0 (unregistering): Port device team_slave_1 removed [ 782.987147][ T5968] team0 (unregistering): Port device team_slave_0 removed [ 783.654206][ T8619] Bluetooth: hci5: command tx timeout [ 786.174476][ T9257] chnl_net:caif_netlink_parms(): no params data found [ 786.764205][ T9190] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.764438][ T9190] bridge0: port 1(bridge_slave_0) entered disabled state [ 786.764693][ T9190] bridge_slave_0: entered allmulticast mode [ 786.794234][ T9190] bridge_slave_0: entered promiscuous mode [ 786.833930][ T9190] bridge0: port 2(bridge_slave_1) entered blocking state [ 786.834588][ T9190] bridge0: port 2(bridge_slave_1) entered disabled state [ 786.834828][ T9190] bridge_slave_1: entered allmulticast mode [ 786.838079][ T9190] bridge_slave_1: entered promiscuous mode [ 787.477101][ T9257] bridge0: port 1(bridge_slave_0) entered blocking state [ 787.477194][ T9257] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.477334][ T9257] bridge_slave_0: entered allmulticast mode [ 787.479061][ T9257] bridge_slave_0: entered promiscuous mode [ 787.488427][ T9190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 787.517389][ T9190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 787.651861][ T9257] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.652027][ T9257] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.652247][ T9257] bridge_slave_1: entered allmulticast mode [ 787.657274][ T9257] bridge_slave_1: entered promiscuous mode [ 787.848364][ T9190] team0: Port device team_slave_0 added [ 787.961431][ T9190] team0: Port device team_slave_1 added [ 787.972701][ T9257] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.132407][ T9257] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.340293][ T9190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.340312][ T9190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.340341][ T9190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.486469][ T9190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.486486][ T9190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 788.486516][ T9190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.657803][ T9257] team0: Port device team_slave_0 added [ 788.679482][ T9257] team0: Port device team_slave_1 added [ 789.070323][ T9257] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 789.070341][ T9257] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.070370][ T9257] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.134319][ T9190] hsr_slave_0: entered promiscuous mode [ 789.135967][ T9190] hsr_slave_1: entered promiscuous mode [ 789.136983][ T9190] debugfs: 'hsr0' already exists in 'hsr' [ 789.137011][ T9190] Cannot create hsr debugfs directory [ 789.138178][ T9257] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.138193][ T9257] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 789.138222][ T9257] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.691611][ T9257] hsr_slave_0: entered promiscuous mode [ 789.693148][ T9257] hsr_slave_1: entered promiscuous mode [ 789.694810][ T9257] debugfs: 'hsr0' already exists in 'hsr' [ 789.694836][ T9257] Cannot create hsr debugfs directory [ 789.797105][ T5968] bridge_slave_0: left allmulticast mode [ 789.797151][ T5968] bridge_slave_0: left promiscuous mode [ 789.797442][ T5968] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.103971][ T5968] bond0 (unregistering): Released all slaves [ 790.299367][ T5968] bond0 (unregistering): Released all slaves [ 793.642688][ T9190] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 793.685581][ T9190] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 793.712213][ T9190] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 793.776413][ T9190] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 794.053665][ T9257] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 794.110481][ T9257] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 794.163179][ T9257] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 794.217197][ T9257] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 794.582685][ T9190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.695164][ T9190] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.731637][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.731926][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.767567][ T9257] 8021q: adding VLAN 0 to HW filter on device bond0 [ 794.779434][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.779615][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 794.850334][ T9257] 8021q: adding VLAN 0 to HW filter on device team0 [ 794.887664][ T6277] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.888037][ T6277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 794.914459][ T6295] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.914709][ T6295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 795.803059][ T9190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 795.888318][ T9257] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 796.069556][ T9257] veth0_vlan: entered promiscuous mode [ 796.149200][ T9257] veth1_vlan: entered promiscuous mode [ 796.339658][ T9257] veth0_macvtap: entered promiscuous mode [ 796.379681][ T9257] veth1_macvtap: entered promiscuous mode [ 796.459019][ T9257] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 796.473205][ T9257] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 796.527435][ T6295] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.527772][ T6295] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.528063][ T6295] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 796.529475][ T6295] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 797.016675][ T43] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.016699][ T43] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.164416][ T5985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 797.164439][ T5985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 797.235905][ T9190] veth0_vlan: entered promiscuous mode [ 797.301088][ T9190] veth1_vlan: entered promiscuous mode [ 797.447669][ T9405] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 797.652006][ T9409] trusted_key: syz.2.368 sent an empty control message without MSG_MORE. [ 797.689767][ T9190] veth0_macvtap: entered promiscuous mode [ 797.722443][ T9190] veth1_macvtap: entered promiscuous mode [ 798.499540][ T9190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.517462][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.368'. [ 798.569890][ T9190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.603279][ T6295] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.617240][ T6295] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.635079][ T2242] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.636560][ T2242] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 800.193516][ T9431] vivid-000: disconnect [ 800.590586][ T9437] netlink: 12 bytes leftover after parsing attributes in process `syz.8.530'. [ 801.052871][ T9424] vivid-000: reconnect [ 801.138035][ T9443] netlink: 'syz.3.531': attribute type 3 has an invalid length. [ 801.138062][ T9443] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.531'. [ 801.317208][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.317231][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 801.842594][ T5985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 801.842624][ T5985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 802.995223][ T9454] netlink: 4 bytes leftover after parsing attributes in process `syz.6.539'. [ 814.125696][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 814.125788][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 817.285123][ T6727] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 817.725774][ T6727] usb 9-1: unable to get BOS descriptor or descriptor too short [ 817.727754][ T6727] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 817.727813][ T6727] usb 9-1: config 1 interface 0 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 817.727842][ T6727] usb 9-1: config 1 interface 0 has no altsetting 0 [ 817.741006][ T6727] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 817.741044][ T6727] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.741063][ T6727] usb 9-1: Product: syz [ 817.741076][ T6727] usb 9-1: Manufacturer: syz [ 817.741089][ T6727] usb 9-1: SerialNumber: syz [ 818.163751][ T6727] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22 [ 818.207002][ T6727] usb 9-1: USB disconnect, device number 7 [ 821.911102][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.575'. [ 822.470542][ T9603] netlink: 24 bytes leftover after parsing attributes in process `syz.6.581'. [ 830.743361][ T8619] Bluetooth: hci2: unexpected event for opcode 0x1005 [ 832.095865][ T9661] syz.2.599 (9661) used greatest stack depth: 17832 bytes left [ 833.865110][ T9692] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 834.367390][ T9692] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 851.481191][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 851.974183][ T10] usb 4-1: device not accepting address 8, error -71 [ 860.508645][ T9854] usb usb1: usbfs: interface 0 claimed by hub while 'syz.8.662' sets config #-1 [ 867.023097][ T9908] netlink: 340 bytes leftover after parsing attributes in process `syz.2.677'. [ 867.023318][ T9908] netlink: 48 bytes leftover after parsing attributes in process `syz.2.677'. [ 868.392607][ T8697] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 868.939415][ T8697] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.939473][ T8697] usb 3-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 868.939497][ T8697] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.817417][ T8697] usb 3-1: config 0 descriptor?? [ 871.132616][ T8697] usb 3-1: can't set config #0, error -71 [ 871.167521][ T8697] usb 3-1: USB disconnect, device number 2 [ 872.127034][ T5898] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 872.442078][ T5898] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.442115][ T5898] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 872.442162][ T5898] usb 8-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 872.442187][ T5898] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.529453][ T5898] usb 8-1: config 0 descriptor?? [ 873.207940][ T5898] hid_parser_main: 128 callbacks suppressed [ 873.207970][ T5898] ortek 0003:1223:3F07.0002: unknown main item tag 0x3 [ 873.207997][ T5898] ortek 0003:1223:3F07.0002: item fetching failed at offset 48/69 [ 873.209235][ T5898] ortek 0003:1223:3F07.0002: probe with driver ortek failed with error -22 [ 873.418042][ T5898] usb 8-1: USB disconnect, device number 2 [ 875.629232][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.629881][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 879.652194][T10010] netlink: 88 bytes leftover after parsing attributes in process `syz.7.705'. [ 881.554844][T10036] netlink: 60 bytes leftover after parsing attributes in process `syz.7.713'. [ 881.567127][T10033] netlink: 60 bytes leftover after parsing attributes in process `syz.7.713'. [ 885.574530][ T9258] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 886.674427][ T9258] usb 8-1: Using ep0 maxpacket: 16 [ 886.677143][ T9258] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 886.677175][ T9258] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 886.677216][ T9258] usb 8-1: New USB device found, idVendor=0458, idProduct=5014, bcdDevice= 0.00 [ 886.677240][ T9258] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.773966][ T9258] usb 8-1: config 0 descriptor?? [ 887.389629][ T9258] kye 0003:0458:5014.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 887.409490][ T9258] kye 0003:0458:5014.0003: item fetching failed at offset 5/7 [ 887.422480][ T9258] kye 0003:0458:5014.0003: parse failed [ 887.422527][ T9258] kye 0003:0458:5014.0003: probe with driver kye failed with error -22 [ 887.476977][ T9258] usb 8-1: USB disconnect, device number 3 [ 888.498770][ T8619] Bluetooth: hci3: command 0x0406 tx timeout [ 895.504504][ T8697] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 896.840945][ T8697] usb 7-1: Using ep0 maxpacket: 16 [ 896.860969][ T8697] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 896.860998][ T8697] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 897.161394][ T8697] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 897.161429][ T8697] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.161450][ T8697] usb 7-1: Product: syz [ 897.161465][ T8697] usb 7-1: Manufacturer: syz [ 897.161479][ T8697] usb 7-1: SerialNumber: syz [ 898.120733][ T5153] Bluetooth: hci5: command 0x0406 tx timeout [ 900.885265][ T8697] usb 7-1: 0:2 : does not exist [ 900.917613][ T8697] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 903.092847][ T8697] usb 7-1: USB disconnect, device number 6 [ 903.501974][T10164] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.418414][ T9336] udevd[9336]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 905.654407][ T8697] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 905.807930][ T8697] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.833707][ T8697] usb 7-1: New USB device found, idVendor=1822, idProduct=3202, bcdDevice=13.4a [ 905.833742][ T8697] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 905.833763][ T8697] usb 7-1: Product: syz [ 905.833778][ T8697] usb 7-1: Manufacturer: syz [ 905.833792][ T8697] usb 7-1: SerialNumber: syz [ 906.242740][ T8697] usb 7-1: config 0 descriptor?? [ 907.304182][ T9258] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 907.465145][ T9258] usb 3-1: Using ep0 maxpacket: 16 [ 907.497460][ T9258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 907.497497][ T9258] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 907.497709][ T9258] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 907.497810][ T9258] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 907.898257][ T9258] usb 3-1: config 0 descriptor?? [ 907.903151][ T8697] usb 7-1: can't set config #0, error -71 [ 908.569771][ T8697] usb 7-1: USB disconnect, device number 7 [ 909.473011][ T9258] konepure 0003:1E7D:2DB4.0004: item fetching failed at offset 0/4 [ 909.578858][ T9258] konepure 0003:1E7D:2DB4.0004: parse failed [ 909.578957][ T9258] konepure 0003:1E7D:2DB4.0004: probe with driver konepure failed with error -22 [ 910.730630][ T6430] usb 3-1: USB disconnect, device number 3 [ 913.653735][T10222] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1340 [ 914.277797][ T5911] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 915.456332][T10232] tipc: Started in network mode [ 915.456369][T10232] tipc: Node identity 0000000000005f000000000000000001, cluster identity 4711 [ 915.456436][T10232] tipc: Enabling of bearer rejected, failed to enable media [ 915.724940][ T5911] usb 4-1: Using ep0 maxpacket: 32 [ 916.556855][ T5911] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 916.556888][ T5911] usb 4-1: config 0 has no interface number 0 [ 916.588278][ T5911] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 916.588311][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 916.588332][ T5911] usb 4-1: Product: syz [ 916.588346][ T5911] usb 4-1: Manufacturer: syz [ 916.588360][ T5911] usb 4-1: SerialNumber: syz [ 916.637411][ T5911] usb 4-1: config 0 descriptor?? [ 916.686541][ T5911] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 916.948450][ T5911] usb 4-1: qt2_attach - failed to power on unit: -71 [ 916.948785][ T5911] quatech2 4-1:0.51: probe with driver quatech2 failed with error -71 [ 917.041816][ T5911] usb 4-1: USB disconnect, device number 10 [ 918.819675][ T5153] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 918.907367][ T5153] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 918.910365][ T5153] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 918.911756][ T5153] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 918.912674][ T5153] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 919.044249][ T5911] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 919.199939][ T5911] usb 9-1: config 0 has an invalid interface number: 93 but max is 0 [ 919.199971][ T5911] usb 9-1: config 0 has no interface number 0 [ 919.203402][ T5911] usb 9-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65 [ 919.203434][ T5911] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.203454][ T5911] usb 9-1: Product: syz [ 919.203469][ T5911] usb 9-1: Manufacturer: syz [ 919.203484][ T5911] usb 9-1: SerialNumber: syz [ 919.334847][ T5911] usb 9-1: config 0 descriptor?? [ 919.810597][ T5911] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state. [ 920.473994][ T5911] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 920.476407][ T5911] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 920.481161][ T5911] usb 9-1: media controller created [ 920.548346][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 921.253485][ T8619] Bluetooth: hci3: command tx timeout [ 921.266054][ T5911] DVB: Unable to find symbol dib7000p_attach() [ 921.266072][ T5911] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 921.266087][ T5911] dvb-usb: will use the device's hardware PID filter (table count: 32). [ 921.269546][ T5911] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design) [ 921.269613][ T5911] usb 9-1: media controller created [ 921.874249][ T5850] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 922.044262][ T5850] usb 3-1: Using ep0 maxpacket: 16 [ 922.055627][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.055663][ T5850] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.055705][ T5850] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 922.055727][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 922.097146][ T5850] usb 3-1: config 0 descriptor?? [ 922.336725][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 922.374724][ T5911] dib0700: the master dib7090 has to be initialized first [ 922.374742][ T5911] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design' [ 922.714251][ T6727] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 922.720604][ T5850] hid-multitouch 0003:1FD2:6007.0005: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 922.734179][ T5911] rc_core: IR keymap rc-dib0700-rc5 not found [ 922.734202][ T5911] Registered IR keymap rc-empty [ 922.735146][ T5911] dvb-usb: could not initialize remote control. [ 922.735158][ T5911] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected. [ 922.847304][ T5911] usb 9-1: USB disconnect, device number 8 [ 922.856452][ T5850] usb 3-1: USB disconnect, device number 4 [ 922.891601][ T6727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 922.891637][ T6727] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 922.891680][ T6727] usb 4-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00 [ 922.891704][ T6727] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.019528][T10288] fido_id[10288]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 923.101456][ T6727] usb 4-1: config 0 descriptor?? [ 923.160512][ T5911] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected. [ 923.314297][ T8619] Bluetooth: hci3: command tx timeout [ 923.554676][ T5911] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 923.599614][ T6727] hid_mf 0003:0079:1846.0006: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.3-1/input0 [ 923.599649][ T6727] hid_mf 0003:0079:1846.0006: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler [ 923.714362][ T5911] usb 9-1: Using ep0 maxpacket: 16 [ 923.716884][ T5911] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 923.716918][ T5911] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 923.716962][ T5911] usb 9-1: New USB device found, idVendor=0925, idProduct=0005, bcdDevice= 0.00 [ 923.716985][ T5911] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.811827][ T6430] usb 4-1: USB disconnect, device number 11 [ 923.843870][ T5911] usb 9-1: config 0 descriptor?? [ 924.053515][ T6277] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 924.163323][T10293] fido_id[10293]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 924.388547][ T5911] smartjoyplus 0003:0925:0005.0007: item fetching failed at offset 3/5 [ 924.389443][ T5911] smartjoyplus 0003:0925:0005.0007: parse failed [ 924.389522][ T5911] smartjoyplus 0003:0925:0005.0007: probe with driver smartjoyplus failed with error -22 [ 924.635924][ T5911] usb 9-1: USB disconnect, device number 9 [ 925.077144][ T6277] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 925.647416][ T8619] Bluetooth: hci3: command tx timeout [ 926.137729][ T5850] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 926.314221][ T5850] usb 3-1: Using ep0 maxpacket: 32 [ 926.317019][ T5850] usb 3-1: config 4 has an invalid interface number: 128 but max is 0 [ 926.317055][ T5850] usb 3-1: config 4 has no interface number 0 [ 926.317108][ T5850] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 926.317158][ T5850] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 926.317199][ T5850] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 926.317222][ T5850] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.448052][ T5850] hub 3-1:4.128: USB hub found [ 927.007015][ T5850] hub 3-1:4.128: 9 ports detected [ 927.007083][ T5850] hub 3-1:4.128: Using single TT (err -22) [ 927.029382][ T5850] hub 3-1:4.128: insufficient power available to use all downstream ports [ 927.949016][ T5850] hub 3-1:4.128: hub_hub_status failed (err = -71) [ 927.949048][ T5850] hub 3-1:4.128: config failed, can't get hub status (err -71) [ 928.523188][ T8619] Bluetooth: hci3: command tx timeout [ 928.646042][ T5850] usb 3-1: USB disconnect, device number 5 [ 931.839650][ T6277] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 932.334216][ T6727] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 932.486959][ T6727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 932.487002][ T6727] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 932.487025][ T6727] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 932.487069][ T6727] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 932.487093][ T6727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.573608][ T6727] usb 3-1: config 0 descriptor?? [ 932.578146][ T6277] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.857898][ T6727] plantronics 0003:047F:FFFF.0008: collection stack underflow [ 933.857932][ T6727] plantronics 0003:047F:FFFF.0008: item 0 1 0 12 parsing failed [ 933.858886][ T6727] plantronics 0003:047F:FFFF.0008: parse failed [ 933.859008][ T6727] plantronics 0003:047F:FFFF.0008: probe with driver plantronics failed with error -22 [ 935.624475][ T8697] usb 7-1: new low-speed USB device number 8 using dummy_hcd [ 935.787156][ T8697] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 935.787192][ T8697] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8 [ 935.787219][ T8697] usb 7-1: config 0 interface 0 has no altsetting 0 [ 935.787255][ T8697] usb 7-1: New USB device found, idVendor=5543, idProduct=0005, bcdDevice= 0.00 [ 935.787278][ T8697] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 935.842422][ T8697] usb 7-1: config 0 descriptor?? [ 935.853174][T10353] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 936.056965][ T6209] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 936.214862][ T6209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 936.215136][ T6209] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 936.215162][ T6209] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 936.215210][ T6209] usb 4-1: New USB device found, idVendor=12ba, idProduct=0100, bcdDevice= 0.00 [ 936.215858][ T6209] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.086071][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.089085][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.227279][ T6209] usb 4-1: config 0 descriptor?? [ 939.844275][ T8697] usbhid 7-1:0.0: can't add hid device: -71 [ 939.844430][ T8697] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 941.052328][ T8697] usb 7-1: USB disconnect, device number 8 [ 941.128213][ T6209] usbhid 4-1:0.0: can't add hid device: -71 [ 941.128358][ T6209] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 941.186648][ T6209] usb 4-1: USB disconnect, device number 12 [ 947.390175][ C0] sched: DL replenish lagged too much [ 948.474330][ T6209] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 948.632672][ T6209] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 948.632711][ T6209] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 948.632741][ T6209] usb 7-1: config 0 interface 0 has no altsetting 0 [ 948.632779][ T6209] usb 7-1: New USB device found, idVendor=046d, idProduct=c24f, bcdDevice= 0.00 [ 948.632803][ T6209] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.724388][ T6209] usb 7-1: config 0 descriptor?? [ 948.730018][T10377] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 949.210079][ T6209] logitech 0003:046D:C24F.0009: unbalanced collection at end of report description [ 949.211097][ T6209] logitech 0003:046D:C24F.0009: parse failed [ 949.211215][ T6209] logitech 0003:046D:C24F.0009: probe with driver logitech failed with error -22 [ 949.399662][ T6209] usb 7-1: USB disconnect, device number 9 [ 949.841929][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 950.322900][ T5153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 950.344760][ T5153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 950.347305][ T5153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 950.349012][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 950.554338][ T6209] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 950.709342][ T6209] usb 7-1: Using ep0 maxpacket: 32 [ 950.712339][ T6209] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 950.712402][ T6209] usb 7-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 950.712427][ T6209] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.759458][ T6209] usb 7-1: config 0 descriptor?? [ 950.806331][ T6209] dvb-usb: found a 'TeVii S662' in warm state. [ 950.806390][ T6209] dw2102: su3000_power_ctrl: 1, initialized 0 [ 950.807101][ T6209] dvb-usb: bulk message failed: -22 (2/0) [ 950.857057][ T6209] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 950.876206][ T6209] dvbdev: DVB: registering new adapter (TeVii S662) [ 950.876275][ T6209] usb 7-1: media controller created [ 950.877280][ T6209] dvb-usb: bulk message failed: -22 (6/0) [ 950.877301][ T6209] dw2102: i2c transfer failed. [ 950.877324][ T6209] dvb-usb: bulk message failed: -22 (6/0) [ 950.877339][ T6209] dw2102: i2c transfer failed. [ 950.877358][ T6209] dvb-usb: bulk message failed: -22 (6/0) [ 950.877373][ T6209] dw2102: i2c transfer failed. [ 950.877391][ T6209] dvb-usb: bulk message failed: -22 (6/0) [ 950.877406][ T6209] dw2102: i2c transfer failed. [ 950.877425][ T6209] dvb-usb: bulk message failed: -22 (6/0) [ 950.877439][ T6209] dw2102: i2c transfer failed. [ 950.877458][ T6209] dvb-usb: bulk message failed: -22 (6/0) [ 950.877472][ T6209] dw2102: i2c transfer failed. [ 950.877483][ T6209] dvb-usb: MAC address: 02:02:02:02:02:02 [ 951.012797][T10387] dvb-usb: bulk message failed: -22 (4/0) [ 951.012822][T10387] dw2102: i2c transfer failed. [ 951.129693][ T6209] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 951.228503][ T6209] dvb-usb: bulk message failed: -22 (3/0) [ 951.228528][ T6209] dw2102: command 0x0e transfer failed. [ 951.228537][ T6209] dvb-usb: bulk message failed: -22 (3/0) [ 951.228552][ T6209] dw2102: command 0x0e transfer failed. [ 951.535965][ T6209] dvb-usb: bulk message failed: -22 (3/0) [ 951.535992][ T6209] dw2102: command 0x0e transfer failed. [ 951.536003][ T6209] dvb-usb: bulk message failed: -22 (3/0) [ 951.536017][ T6209] dw2102: command 0x0e transfer failed. [ 951.536027][ T6209] dvb-usb: bulk message failed: -22 (1/0) [ 951.536042][ T6209] dw2102: command 0x51 transfer failed. [ 951.536052][ T6209] dvb-usb: bulk message failed: -22 (5/0) [ 951.536065][ T6209] dw2102: i2c probe for address 0x68 failed. [ 951.536078][ T6209] dvb-usb: bulk message failed: -22 (5/0) [ 951.536093][ T6209] dw2102: i2c probe for address 0x69 failed. [ 951.536105][ T6209] dvb-usb: bulk message failed: -22 (5/0) [ 951.536119][ T6209] dw2102: i2c probe for address 0x6a failed. [ 951.536130][ T6209] dw2102: probing for demodulator failed. Is the external power switched on? [ 951.536141][ T6209] dvb-usb: no frontend was attached by 'TeVii S662' [ 951.864333][ T6209] rc_core: IR keymap rc-tt-1500 not found [ 951.864360][ T6209] Registered IR keymap rc-empty [ 951.875226][ T6209] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 951.879215][ T6209] input: TeVii S662 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input10 [ 951.964407][ T6209] dvb-usb: schedule remote query interval to 250 msecs. [ 951.964435][ T6209] dw2102: su3000_power_ctrl: 0, initialized 1 [ 951.964450][ T6209] dvb-usb: TeVii S662 successfully initialized and connected. [ 951.969942][ T6209] usb 7-1: USB disconnect, device number 10 [ 952.441690][ T5153] Bluetooth: hci4: command tx timeout [ 952.493957][ T5850] usb 3-1: USB disconnect, device number 6 [ 953.671555][ T8619] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 953.696780][ T8619] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 953.703450][ T8619] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 953.724388][ T8619] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 953.745012][ T8619] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 954.514339][ T5153] Bluetooth: hci4: command tx timeout [ 955.794198][ T5153] Bluetooth: hci6: command tx timeout [ 956.594180][ T5153] Bluetooth: hci4: command tx timeout [ 957.884957][ T5153] Bluetooth: hci6: command tx timeout [ 958.674153][ T5153] Bluetooth: hci4: command tx timeout [ 960.054075][ T5153] Bluetooth: hci6: command tx timeout [ 962.114286][ T5153] Bluetooth: hci6: command tx timeout [ 963.552716][ T8619] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 963.579251][ T8619] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 963.581125][ T8619] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 963.583123][ T8619] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 963.614456][ T8619] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 965.716127][ T8619] Bluetooth: hci7: command tx timeout [ 967.801916][ T8619] Bluetooth: hci7: command tx timeout [ 969.874345][ T8619] Bluetooth: hci7: command tx timeout [ 971.066679][ T5153] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 971.094822][ T5153] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 971.099603][ T5153] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 971.101002][ T5153] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 971.101959][ T5153] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 971.954275][ T5153] Bluetooth: hci7: command tx timeout [ 973.234367][ T5153] Bluetooth: hci8: command tx timeout [ 975.314131][ T5153] Bluetooth: hci8: command tx timeout [ 977.544604][ T5153] Bluetooth: hci8: command tx timeout [ 980.414161][ T5153] Bluetooth: hci8: command tx timeout [ 989.686871][ T6209] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 990.851705][ T8619] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 990.876916][ T8619] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 990.893897][ T8619] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 990.902753][ T8619] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 990.920417][ T8619] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 992.994298][ T5153] Bluetooth: hci5: command tx timeout [ 995.074434][ T5153] Bluetooth: hci5: command tx timeout [ 997.154552][ T5153] Bluetooth: hci5: command tx timeout [ 998.454968][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.455054][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.234813][ T5153] Bluetooth: hci5: command tx timeout [ 1009.766629][ T8619] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1009.813880][ T8619] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1009.849076][ T8619] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1009.869540][ T8619] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1009.870478][ T8619] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1011.954305][ T5153] Bluetooth: hci9: command tx timeout [ 1013.758181][ T8619] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1013.801684][ T8619] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1013.803297][ T8619] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1013.825544][ T8619] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1013.835588][ T8619] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1014.034323][ T8619] Bluetooth: hci9: command tx timeout [ 1015.954223][ T8619] Bluetooth: hci10: command tx timeout [ 1016.119567][ T8619] Bluetooth: hci9: command tx timeout [ 1018.043174][ T8619] Bluetooth: hci10: command tx timeout [ 1018.194315][ T8619] Bluetooth: hci9: command tx timeout [ 1020.114616][ T8619] Bluetooth: hci10: command tx timeout [ 1022.204300][ T8619] Bluetooth: hci10: command tx timeout [ 1023.711430][T10438] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1023.732892][T10438] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1023.743526][T10438] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1023.752895][T10438] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1023.779905][T10438] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1031.495767][T10444] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1031.527497][T10444] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1031.556383][T10444] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1031.557843][T10444] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1031.559620][T10444] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1044.456603][ T8619] Bluetooth: hci11: command tx timeout [ 1046.514232][T10438] Bluetooth: hci11: command tx timeout [ 1046.514734][T10438] Bluetooth: hci12: command tx timeout [ 1048.594289][ T8619] Bluetooth: hci12: command tx timeout [ 1048.594325][ T8619] Bluetooth: hci11: command tx timeout [ 1050.567631][ T8619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1050.572799][ T8619] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1050.593044][ T8619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1050.601922][ T8619] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1050.611273][ T8619] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1050.681231][T10438] Bluetooth: hci11: command tx timeout [ 1050.681270][T10438] Bluetooth: hci12: command tx timeout [ 1052.674236][ T8619] Bluetooth: hci2: command tx timeout [ 1052.762187][ T8619] Bluetooth: hci12: command tx timeout [ 1054.755928][ T8619] Bluetooth: hci2: command tx timeout [ 1056.834307][ T8619] Bluetooth: hci2: command tx timeout [ 1058.914295][ T8619] Bluetooth: hci2: command tx timeout [ 1061.439002][ T1325] ieee802154 phy0 wpan0: encryption failed: -22 [ 1061.439124][ T1325] ieee802154 phy1 wpan1: encryption failed: -22 [ 1070.336287][T10438] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1070.361883][T10438] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1070.363463][T10438] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1070.398166][T10438] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1070.406521][T10438] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1075.052582][T10444] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1075.076733][T10444] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1075.080460][T10444] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1075.082017][T10444] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1075.083039][T10444] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1077.342075][ T8619] Bluetooth: hci4: command 0x0406 tx timeout [ 1077.342129][ T8619] Bluetooth: hci6: command 0x0406 tx timeout [ 1079.314370][T10438] Bluetooth: hci13: command tx timeout [ 1079.315011][T10438] Bluetooth: hci14: command tx timeout [ 1081.394315][ T8619] Bluetooth: hci14: command tx timeout [ 1081.394354][ T8619] Bluetooth: hci13: command tx timeout [ 1083.474178][T10438] Bluetooth: hci13: command tx timeout [ 1083.474215][T10438] Bluetooth: hci14: command tx timeout [ 1084.128890][T10438] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1084.152299][T10438] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1084.164422][T10438] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1084.186264][T10438] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1084.190032][T10438] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1085.584246][T10473] Bluetooth: hci14: command tx timeout [ 1085.584289][T10473] Bluetooth: hci13: command tx timeout [ 1087.568524][T10472] Bluetooth: hci7: command 0x0406 tx timeout [ 1092.656281][T10473] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1092.689589][T10473] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1092.691959][T10473] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1092.693366][T10473] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1092.717737][T10473] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1097.807297][ T5153] Bluetooth: hci8: command 0x0406 tx timeout [ 1098.319448][ T38] INFO: task kworker/u8:20:6277 blocked for more than 143 seconds. [ 1098.319477][ T38] Not tainted syzkaller #0 [ 1098.319489][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1098.319500][ T38] task:kwor[ 1098.319500][ T38] task:kworker/u8:20 state:D stack:19736 pid:6277 tgid:6277 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1098.319556][ T38] Workqueue: netns cleanup_net [ 1098.319690][ T38] Call Trace: [ 1098.319698][ T38] [ 1098.319714][ T38] __schedule+0x16f3/0x4c20 [ 1098.319805][ T38] ? __lock_acquire+0xab9/0xd20 [ 1098.319878][ T38] ? __pfx___schedule+0x10/0x10 [ 1098.319929][ T38] ? schedule+0x91/0x360 [ 1098.319962][ T38] schedule+0x165/0x360 [ 1098.319993][ T38] schedule_timeout+0x9a/0x270 [ 1098.320022][ T38] ? __pfx_schedule_timeout+0x10/0x10 [ 1098.320067][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1098.320096][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1098.320122][ T38] ? wait_for_completion+0x267/0x5d0 [ 1098.320153][ T38] wait_for_completion+0x2bf/0x5d0 [ 1098.320200][ T38] ? __pfx_wait_for_completion+0x10/0x10 [ 1098.320238][ T38] ? __init_swait_queue_head+0xa9/0x150 [ 1098.320269][ T38] rcu_barrier+0x463/0x570 [ 1098.320320][ T38] netdev_run_todo+0x327/0xea0 [ 1098.320380][ T38] ? __pfx_netdev_run_todo+0x10/0x10 [ 1098.320400][ T38] ? kasan_quarantine_put+0xdd/0x220 [ 1098.320450][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1098.320488][ T38] ? kfree+0x195/0x550 [ 1098.320531][ T38] nsim_destroy+0x3a6/0x670 [ 1098.320626][ T38] __nsim_dev_port_del+0x14d/0x1b0 [ 1098.320658][ T38] nsim_dev_reload_destroy+0x288/0x490 [ 1098.320693][ T38] nsim_dev_reload_down+0x8a/0xc0 [ 1098.320724][ T38] devlink_reload+0x1b6/0x8d0 [ 1098.320796][ T38] ? xa_get_mark+0x67/0x7b0 [ 1098.320849][ T38] ? __pfx_devlink_reload+0x10/0x10 [ 1098.320871][ T38] ? xa_get_mark+0x70f/0x7b0 [ 1098.320909][ T38] devlink_pernet_pre_exit+0x1d9/0x3d0 [ 1098.320937][ T38] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1098.320969][ T38] ? class_remove_file_ns+0x124/0x160 [ 1098.321047][ T38] ops_undo_list+0x184/0x990 [ 1098.321085][ T38] ? __pfx_ops_undo_list+0x10/0x10 [ 1098.321126][ T38] cleanup_net+0x4cb/0x800 [ 1098.321159][ T38] ? __pfx_cleanup_net+0x10/0x10 [ 1098.321193][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 1098.321222][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1098.321255][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 1098.321284][ T38] process_scheduled_works+0xade/0x17b0 [ 1098.321354][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 1098.321404][ T38] worker_thread+0x8a0/0xda0 [ 1098.321464][ T38] kthread+0x70e/0x8a0 [ 1098.321508][ T38] ? __pfx_worker_thread+0x10/0x10 [ 1098.321535][ T38] ? __pfx_kthread+0x10/0x10 [ 1098.321572][ T38] ? __pfx_kthread+0x10/0x10 [ 1098.321606][ T38] ret_from_fork+0x439/0x7d0 [ 1098.321649][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1098.321685][ T38] ? __switch_to_asm+0x39/0x70 [ 1098.321723][ T38] ? __switch_to_asm+0x33/0x70 [ 1098.321742][ T38] ? __pfx_kthread+0x10/0x10 [ 1098.321774][ T38] ret_from_fork_asm+0x1a/0x30 [ 1098.321813][ T38] [ 1098.321872][ T38] [ 1098.321872][ T38] Showing all locks held in the system: [ 1098.321882][ T38] 4 locks held by kworker/0:0/9: [ 1098.321894][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1098.321953][ T38] #1: ffffc900000e7bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1098.322007][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1098.322059][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1098.322121][ T38] 2 locks held by kworker/0:1/10: [ 1098.322141][ T38] 2 locks held by ksoftirqd/0/15: [ 1098.322152][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1098.322203][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1098.322257][ T38] 6 locks held by rcuc/0/20: [ 1098.322269][ T38] 6 locks held by rcuc/1/28: [ 1098.322280][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1098.322333][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1098.322393][ T38] #2: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 1098.322443][ T38] #3: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1098.322496][ T38] #4: ffffffff8d9a8ea0 (rcu_callback){....}-{0:0}, at: rcu_cpu_kthread+0x23e/0x1b50 [ 1098.322552][ T38] #5: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x41/0x270 [ 1098.322609][ T38] 1 lock held by khungtaskd/38: [ 1098.322621][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1098.322698][ T38] 2 locks held by getty/5594: [ 1098.322711][ T38] #0: ffff88823bf648a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1098.322790][ T38] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 1098.322842][ T38] 4 locks held by kworker/0:3/5840: [ 1098.322854][ T38] #0: ffff88805c5ea938 ((wq_completion)wg-kex-wg0#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1098.322912][ T38] #1: ffffc90004eefbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1098.322980][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1098.323032][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1098.323086][ T38] 4 locks held by kworker/1:3/5898: [ 1098.323098][ T38] 3 locks held by kworker/1:4/5911: [ 1098.323109][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1098.323160][ T38] #1: ffffc900052ffbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1098.323213][ T38] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 1098.323302][ T38] 2 locks held by kworker/1:8/6209: [ 1098.323314][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1098.323374][ T38] #1: ffffc90007d0fbc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1098.323427][ T38] 3 locks held by kworker/u8:16/6267: [ 1098.323439][ T38] #0: ffff888030492938 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1098.323491][ T38] #1: ffffc9000c6e7bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1098.323543][ T38] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1098.323632][ T38] 6 locks held by kworker/u8:20/6277: [ 1098.323644][ T38] #0: ffff88801a6f4138 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1098.323695][ T38] #1: ffffc9000c737bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1098.323748][ T38] #2: ffffffff8ecc6700 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1098.323802][ T38] #3: ffff8880354090d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 1098.323851][ T38] #4: ffff888036bd7300 (&devlink->lock_key#13){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 1098.323904][ T38] #5: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1098.494255][ T38] 3 locks held by kworker/u8:21/6279: [ 1098.494272][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1098.494331][ T38] #1: ffffc9000c757bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1098.494385][ T38] #2: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1098.494512][ T38] 3 locks held by kworker/1:9/6430: [ 1098.494525][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1098.494578][ T38] #1: ffffc9000c8d7bc0 ((work_completion)(&p->wq)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1098.494630][ T38] #2: ffff88813fffc5d8 (&zone->lock){+.+.}-{3:3}, at: free_one_page+0x41/0x270 [ 1098.494695][ T38] 4 locks held by kworker/u9:4/8619: [ 1098.494707][ T38] #0: ffff888032211138 ((wq_completion)hci15#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1098.494766][ T38] #1: ffffc90004c5fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1098.494819][ T38] #2: ffff888086ab00a8 (&hdev->lock){+.+.}-{4:4}, at: le_conn_complete_evt+0xb1/0x1220 [ 1098.494919][ T38] #3: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_connect_cfm+0x2c/0x140 [ 1098.495000][ T38] 1 lock held by syz-executor/9257: [ 1098.495012][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1098.495063][ T38] 2 locks held by kworker/0:9/9258: [ 1098.495079][ T38] 1 lock held by syz-executor/10261: [ 1098.495092][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1098.495214][ T38] 1 lock held by syz.8.799/10340: [ 1098.495226][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1098.495274][ T38] 1 lock held by syz.3.808/10373: [ 1098.495285][ T38] #0: ffffffff8d9ae730 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1098.495333][ T38] 4 locks held by kworker/0:10/10395: [ 1098.495345][ T38] #0: ffff88805f8c9d38 ((wq_completion)wg-crypt-wg0#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1098.495411][ T38] #1: ffffc90005747bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1098.495481][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1098.495534][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1098.495587][ T38] 1 lock held by syz.6.815/10398: [ 1098.495599][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x41/0x1c0 [ 1098.495655][ T38] 4 locks held by kworker/0:11/10403: [ 1098.495666][ T38] #0: ffff888050ee0138 ((wq_completion)wg-crypt-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1098.495725][ T38] #1: ffffc900058dfbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1098.495795][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 1098.495846][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 1098.495899][ T38] 4 locks held by kworker/0:12/10410: [ 1098.495912][ T38] 2 locks held by syz-executor/10423: [ 1098.495924][ T38] 1 lock held by syz-executor/10435: [ 1098.495937][ T38] 6 locks held by kworker/u9:0/10438: [ 1098.495948][ T38] #0: ffff88806084d138 ((wq_completion)hci7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1098.496001][ T38] #1: ffffc900058cfbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1098.496056][ T38] #2: ffff888064874e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1098.496129][ T38] #3: ffff8880648740a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1098.496203][ T38] #4: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1098.496279][ T38] #5: ffff88803b98ab58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1098.496379][ T38] 1 lock held by syz-executor/10442: [ 1098.496398][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 1098.496473][ T38] 4 locks held by kworker/u9:2/10444: [ 1098.496485][ T38] #0: ffff888023186138 ((wq_completion)hci6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1098.496538][ T38] #1: ffffc90005847bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1098.496591][ T38] #2: ffff888069a2ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1098.496650][ T38] #3: ffff888069a2c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1098.496707][ T38] 1 lock held by syz-executor/10452: [ 1098.496719][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1098.496789][ T38] 1 lock held by syz-executor/10464: [ 1098.496800][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1098.496849][ T38] 1 lock held by syz-executor/10469: [ 1098.496860][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1098.496909][ T38] 5 locks held by kworker/u9:3/10472: [ 1098.496920][ T38] #0: ffff888027cf6138 ((wq_completion)hci8){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1098.496999][ T38] #1: ffffc90004f2fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1098.497051][ T38] #2: ffff88806d254e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 1098.497101][ T38] #3: ffff88806d2540a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 1098.497154][ T38] #4: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 1098.497210][ T38] 4 locks held by kworker/u9:5/10473: [ 1098.497222][ T38] #0: ffff888034804138 ((wq_completion)hci3#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1098.497279][ T38] #1: ffffc90004f0fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1098.497333][ T38] #2: ffff8880390e80a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 1098.497386][ T38] #3: ffffffff8ee3b0d8 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 1098.497446][ T38] 1 lock held by syz-executor/10475: [ 1098.497457][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1098.497506][ T38] 1 lock held by syz-executor/10480: [ 1098.497517][ T38] #0: ffffffff8ecd35f8 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1098.497565][ T38] 1 lock held by dhcpcd/10486: [ 1098.497577][ T38] #0: ffff8880604c0350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 1098.497688][ T38] [ 1098.497694][ T38] ============================================= [ 1098.497694][ T38] [ 1098.497704][ T38] NMI backtrace for cpu 1 [ 1098.497720][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1098.497743][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1098.497756][ T38] Call Trace: [ 1098.497764][ T38] [ 1098.497773][ T38] dump_stack_lvl+0x189/0x250 [ 1098.497808][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1098.497838][ T38] ? __pfx__printk+0x10/0x10 [ 1098.497874][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 1098.497965][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1098.497994][ T38] ? __pfx__printk+0x10/0x10 [ 1098.498022][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1098.498063][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1098.498094][ T38] watchdog+0xf93/0xfe0 [ 1098.498131][ T38] ? watchdog+0x1de/0xfe0 [ 1098.498163][ T38] kthread+0x70e/0x8a0 [ 1098.498197][ T38] ? __pfx_watchdog+0x10/0x10 [ 1098.498222][ T38] ? __pfx_kthread+0x10/0x10 [ 1098.498258][ T38] ? __pfx_kthread+0x10/0x10 [ 1098.498289][ T38] ret_from_fork+0x439/0x7d0 [ 1098.498320][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1098.498352][ T38] ? __switch_to_asm+0x39/0x70 [ 1098.498371][ T38] ? __switch_to_asm+0x33/0x70 [ 1098.498396][ T38] ? __pfx_kthread+0x10/0x10 [ 1098.498427][ T38] ret_from_fork_asm+0x1a/0x30 [ 1098.498465][ T38] [ 1098.498473][ T38] Sending NMI from CPU 1 to CPUs 0: [ 1098.498502][ C0] NMI backtrace for cpu 0 [ 1098.498519][ C0] CPU: 0 UID: 0 PID: 20 Comm: rcuc/0 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1098.498539][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1098.498548][ C0] RIP: 0010:__lock_acquire+0xa4f/0xd20 [ 1098.498572][ C0] Code: e7 ff 90 0f 0b 90 90 90 31 c0 48 8b 3c 24 48 83 78 40 00 0f 84 8c 02 00 00 41 8b 46 20 25 ff 1f 00 00 48 0f a3 05 a1 e2 61 11 <73> 10 48 69 c0 c8 00 00 00 48 8d 80 f0 f2 9e 92 eb 40 83 3d 48 72 [ 1098.498587][ C0] RSP: 0018:ffffc90000196548 EFLAGS: 00000003 [ 1098.498602][ C0] RAX: 000000000000000b RBX: 0000000000000005 RCX: 00000000a0aa584e [ 1098.498613][ C0] RDX: 00000000b4101d3a RSI: 00000000e7639ed2 RDI: ffff88801c2dd940 [ 1098.498625][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8172c165 [ 1098.498635][ C0] R10: ffffc90000196798 R11: ffffffff81aaf310 R12: 0000000024dd02a8 [ 1098.498648][ C0] R13: ffff88801c2de460 R14: ffff88801c2de528 R15: 402ca304a0aa584e [ 1098.498660][ C0] FS: 0000000000000000(0000) GS:ffff8881268bc000(0000) knlGS:0000000000000000 [ 1098.498674][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1098.498686][ C0] CR2: 000000110c285067 CR3: 000000000d7a6000 CR4: 00000000003526f0 [ 1098.498703][ C0] Call Trace: [ 1098.498709][ C0] [ 1098.498719][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1098.498740][ C0] lock_acquire+0x120/0x360 [ 1098.498760][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1098.498784][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1098.498803][ C0] ? kmem_cache_alloc_node_noprof+0x14e/0x330 [ 1098.498825][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1098.498846][ C0] unwind_next_frame+0xc2/0x2390 [ 1098.498866][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1098.498888][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1098.498908][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1098.498938][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1098.498956][ C0] arch_stack_walk+0x11c/0x150 [ 1098.498980][ C0] ? kmem_cache_alloc_node_noprof+0x14e/0x330 [ 1098.499002][ C0] stack_trace_save+0x9c/0xe0 [ 1098.499018][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1098.499038][ C0] kasan_save_track+0x3e/0x80 [ 1098.499055][ C0] ? kasan_save_track+0x3e/0x80 [ 1098.499071][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1098.499088][ C0] ? kmem_cache_alloc_node_noprof+0x14e/0x330 [ 1098.499128][ C0] __kasan_slab_alloc+0x6c/0x80 [ 1098.499155][ C0] ? __alloc_skb+0x112/0x2d0 [ 1098.499182][ C0] kmem_cache_alloc_node_noprof+0x14e/0x330 [ 1098.499204][ C0] __alloc_skb+0x112/0x2d0 [ 1098.499227][ C0] synproxy_send_client_synack+0x16c/0xe20 [ 1098.499316][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1098.499338][ C0] ? nft_tunnel_get_reduce+0x330/0x640 [ 1098.499399][ C0] ? synproxy_pernet+0x45/0x270 [ 1098.499418][ C0] nft_synproxy_eval_v4+0x36e/0x560 [ 1098.499437][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1098.499455][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1098.499473][ C0] nft_synproxy_do_eval+0x345/0x570 [ 1098.499492][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1098.499508][ C0] ? __pv_queued_spin_lock_slowpath+0xa05/0xb60 [ 1098.499538][ C0] nft_do_chain+0x409/0x1920 [ 1098.499560][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1098.499589][ C0] nft_do_chain_inet+0x25d/0x340 [ 1098.499622][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1098.499638][ C0] ? __lock_acquire+0xab9/0xd20 [ 1098.499661][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1098.499695][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1098.499712][ C0] nf_hook_slow+0xc5/0x220 [ 1098.499751][ C0] NF_HOOK+0x206/0x3a0 [ 1098.499771][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1098.499792][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1098.499811][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1098.499830][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1098.499851][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1098.499873][ C0] ? skb_dst+0x4f/0xd0 [ 1098.499893][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 1098.499914][ C0] NF_HOOK+0x309/0x3a0 [ 1098.499934][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1098.499954][ C0] ? NF_HOOK+0x9a/0x3a0 [ 1098.499973][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1098.499994][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1098.500018][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1098.500037][ C0] __netif_receive_skb+0x143/0x380 [ 1098.500056][ C0] ? rt_spin_unlock+0x65/0x80 [ 1098.500075][ C0] ? process_backlog+0x27b/0x900 [ 1098.500095][ C0] process_backlog+0x31e/0x900 [ 1098.500119][ C0] __napi_poll+0xb3/0x540 [ 1098.500145][ C0] net_rx_action+0x707/0xe00 [ 1098.500164][ C0] ? arch_stack_walk+0x11c/0x150 [ 1098.500188][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 1098.500208][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1098.500229][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 1098.500254][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 1098.500276][ C0] handle_softirqs+0x22f/0x710 [ 1098.500298][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 1098.500321][ C0] __local_bh_enable_ip+0x179/0x270 [ 1098.500339][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1098.500362][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 1098.500385][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 1098.500406][ C0] rcu_cpu_kthread+0xc3d/0x1b50 [ 1098.500429][ C0] ? rcu_cpu_kthread+0x23e/0x1b50 [ 1098.500455][ C0] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 1098.500477][ C0] ? __lock_acquire+0xab9/0xd20 [ 1098.500496][ C0] ? __pfx___schedule+0x10/0x10 [ 1098.500523][ C0] ? schedule+0x91/0x360 [ 1098.500545][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1098.500564][ C0] smpboot_thread_fn+0x53f/0xa60 [ 1098.500582][ C0] ? smpboot_thread_fn+0x4d/0xa60 [ 1098.500604][ C0] kthread+0x70e/0x8a0 [ 1098.500627][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 1098.500645][ C0] ? __pfx_kthread+0x10/0x10 [ 1098.500668][ C0] ? __pfx_kthread+0x10/0x10 [ 1098.500690][ C0] ret_from_fork+0x439/0x7d0 [ 1098.500710][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1098.500732][ C0] ? __switch_to_asm+0x39/0x70 [ 1098.500746][ C0] ? __switch_to_asm+0x33/0x70 [ 1098.500761][ C0] ? __pfx_kthread+0x10/0x10 [ 1098.500783][ C0] ret_from_fork_asm+0x1a/0x30 [ 1098.500804][ C0] [ 1098.501500][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 1098.501517][ T38] CPU: 1 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1098.501539][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1098.501551][ T38] Call Trace: [ 1098.501558][ T38] [ 1098.501567][ T38] dump_stack_lvl+0x99/0x250 [ 1098.501598][ T38] ? __asan_memcpy+0x40/0x70 [ 1098.501621][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1098.501651][ T38] ? __pfx__printk+0x10/0x10 [ 1098.501688][ T38] vpanic+0x281/0x750 [ 1098.501721][ T38] ? __pfx_vpanic+0x10/0x10 [ 1098.501755][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 1098.501777][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 1098.501825][ T38] panic+0xb9/0xc0 [ 1098.501853][ T38] ? __pfx_panic+0x10/0x10 [ 1098.501885][ T38] ? irq_work_queue+0xc3/0x140 [ 1098.501927][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 1098.501956][ T38] watchdog+0xfd2/0xfe0 [ 1098.501988][ T38] ? watchdog+0x1de/0xfe0 [ 1098.502020][ T38] kthread+0x70e/0x8a0 [ 1098.502054][ T38] ? __pfx_watchdog+0x10/0x10 [ 1098.502079][ T38] ? __pfx_kthread+0x10/0x10 [ 1098.502115][ T38] ? __pfx_kthread+0x10/0x10 [ 1098.502145][ T38] ret_from_fork+0x439/0x7d0 [ 1098.502175][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 1098.502208][ T38] ? __switch_to_asm+0x39/0x70 [ 1098.502227][ T38] ? __switch_to_asm+0x33/0x70 [ 1098.502246][ T38] ? __pfx_kthread+0x10/0x10 [ 1098.502278][ T38] ret_from_fork_asm+0x1a/0x30 [ 1098.502315][ T38] [ 1098.502609][ T38] Kernel Offset: disabled