last executing test programs: 2m30.354706989s ago: executing program 3 (id=278): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x0, 0x0, 0x3f00, 0x1f00, 0x0, 0x0}) 2m30.161120463s ago: executing program 3 (id=281): shmget(0x2, 0x3000, 0x740, &(0x7f0000ffa000/0x3000)=nil) shmget(0x2, 0x4000, 0x8, &(0x7f0000ffc000/0x4000)=nil) 2m29.934959617s ago: executing program 3 (id=283): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x28, 0xe, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000800}, 0x26054840) 2m29.824156651s ago: executing program 3 (id=284): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000)) fchdir(r1) open(&(0x7f0000000080)='./bus\x00', 0x169242, 0x10) rename(&(0x7f0000000440)='./bus\x00', &(0x7f00000003c0)='./file1\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000c00)=@newqdisc={0x6c, 0x24, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0xffff0001, 0x5, 0xfffffffe, 0x5, 0x6462, 0x6}, [@TCA_NETEM_RATE={0x14, 0x6, {0x500, 0x9, 0x0, 0x7f}}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0xf32, 0x1}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x5}, 0x0) r7 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_MIGRATE_ID(r7, &(0x7f0000000100)={0x12, 0x10, 0xfa00, {&(0x7f00000010c0), r8, r7}}, 0x18) openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r9 = syz_open_dev$media(&(0x7f0000000000), 0x7, 0x1) ioctl$MEDIA_IOC_REQUEST_ALLOC(r9, 0x80047c05, &(0x7f0000000440)) socket$nl_route(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) pipe2(&(0x7f0000000080)={0x0, 0x0}, 0x0) 2m28.140757091s ago: executing program 3 (id=297): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_QUERYMENU(r0, 0xc02c5625, &(0x7f0000000040)={0x98f904, 0x0, @value=0x5ad4}) 2m27.503656328s ago: executing program 3 (id=301): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10, 0x323, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x3c}}, 0x2000400c) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x400) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000380)=0x0) io_submit(r7, 0x0, &(0x7f0000000340)) sendmsg$nl_route(r2, 0x0, 0x240088c5) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000006a00010025bd70001ddcdf250200000004"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtfilter={0x1d48, 0x11, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x74, r11, {0xfff1, 0x3}, {0x0, 0x1}, {0x3, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_route={{0xa}, {0x1038, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xe1}, @TCA_ROUTE4_IIF={0x8, 0x4, r11}, @TCA_ROUTE4_TO={0x8, 0x2, 0x62}, @TCA_ROUTE4_POLICE={0x101c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xa, 0x7, 0x1, 0x0, 0x4, 0xa, 0x4, 0x80000000, 0x4, 0x1, 0x81, 0x650, 0xb1, 0x2, 0x1, 0x832, 0x6, 0x697, 0x803, 0xf53a, 0x400, 0x0, 0x0, 0x9, 0x1000, 0x0, 0x7, 0xf6b, 0x9, 0x3, 0x0, 0xfff, 0x10001, 0x9, 0x1ff, 0x2, 0x3a, 0x200, 0x1000, 0xff, 0xfc8, 0x10001, 0x4, 0x8, 0xffff0000, 0x8, 0x40000, 0x34d6, 0xf276, 0x1, 0x5, 0x7, 0x4, 0x3ff, 0x6, 0x7, 0x8, 0x81, 0x88, 0x5, 0x0, 0x0, 0x0, 0x8, 0xe7d, 0x5, 0x1000, 0x5, 0x7fffffff, 0x81, 0x0, 0x5, 0x389329a, 0x97, 0x4, 0x5, 0x3, 0x5, 0xbc4c, 0x78bec601, 0x4, 0xf7, 0x3, 0x5, 0x40, 0x101, 0xff, 0x2, 0xfffff001, 0x1, 0x6, 0x4, 0x54b, 0x7, 0x10001, 0xff3d, 0x9, 0xfffffff3, 0x7, 0x3, 0x2, 0x2, 0x8, 0x401, 0x1, 0x9, 0x9, 0x3, 0x5acb, 0x5, 0x9, 0x3, 0xd, 0x0, 0x6, 0x6d9, 0x0, 0x7, 0x7fff, 0x5, 0x1a6a, 0x6, 0x7ff, 0x9, 0x4, 0xa05, 0xff, 0x6, 0x10, 0x467, 0xe57308e8, 0x8, 0x1, 0x1, 0x6, 0x7cc, 0xf56, 0x7, 0x3, 0xfffffffe, 0x4, 0x9, 0x5, 0x3, 0x20, 0x5, 0x1, 0x5, 0x4, 0x6, 0x401, 0x7, 0x2, 0x7, 0x8, 0xfffffff8, 0x100, 0x2, 0xffffff7f, 0x8, 0x4, 0x6, 0xe6e, 0x5, 0x4, 0x7, 0xe, 0x3, 0x18, 0x7, 0x3, 0x0, 0x1fa, 0x5, 0x7, 0x101, 0x3, 0x103, 0x65, 0x9, 0x5, 0x3bfab290, 0x1, 0x6, 0x2, 0x6, 0x9, 0x2, 0x80000000, 0xfffffffb, 0xfffffffd, 0x8, 0xa0ef, 0xd, 0x1, 0x1, 0x0, 0xfff, 0x1, 0x1, 0x2, 0x1, 0x5, 0x6, 0x40, 0xffffffff, 0x8, 0x80000001, 0x3, 0x8, 0xffffffff, 0x6, 0x8, 0x468, 0x10001, 0xfffffffc, 0x4, 0x3, 0x1, 0x0, 0x0, 0x7a, 0x1, 0x2, 0x8, 0x423e, 0x8, 0x4, 0x75f1, 0xab, 0x2, 0x4a6a, 0x0, 0x3, 0xfff, 0x6, 0x92, 0x1, 0x3, 0x7, 0x200, 0x1, 0x7, 0x40, 0x3, 0x4090, 0xd8, 0xfffffffc, 0x8, 0x2, 0xffffffff, 0xa0000000, 0xc, 0xdd, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x3, 0x9, 0x9, 0x3, 0x7f, 0x3, 0x5, 0xfffffffd, 0x8, 0x5, 0xfffffffa, 0x1570, 0x0, 0x0, 0x1ff, 0x9, 0x80000000, 0x3, 0x8, 0x8, 0x2, 0x2dc, 0x626, 0x3, 0x7, 0x3, 0x9, 0x84, 0x6, 0x1, 0x3, 0xa0, 0x9, 0x80, 0x5, 0x8, 0x10, 0x3, 0xffffffff, 0x80, 0x6, 0x80, 0x3, 0x7, 0xfffffff7, 0x0, 0x0, 0x5, 0x7, 0x1, 0x6, 0x4, 0x2905, 0x7, 0x7fffffff, 0xf, 0x5b, 0x1, 0x95, 0xf2, 0x8, 0x1, 0x5f2c47a8, 0x4, 0x1, 0x4, 0x10001, 0x10, 0x8, 0x5, 0x4, 0x80000000, 0xf, 0x8, 0xffffffff, 0x1000, 0xc23, 0x2, 0x20000000, 0xffffffff, 0x101, 0x7ff, 0xd, 0xffffffff, 0x7, 0x2, 0xfffffffa, 0x67, 0x3, 0x0, 0x1, 0x9, 0xffff82bc, 0x2, 0xc2, 0x1000, 0x9c, 0x7fff, 0xf410, 0x10000, 0x8001, 0x2c, 0x3, 0x4, 0xfff, 0x8, 0x2c, 0xfffff6c3, 0x89e, 0xb530c0a5, 0x1ff, 0x18000000, 0x7, 0x3, 0x8a7, 0x2a72, 0x3, 0x9, 0x8, 0xa3, 0x1, 0x31b, 0x9, 0x1200, 0x2a15cdfd, 0x1, 0x401, 0x81, 0xd06, 0xbc, 0x53c00, 0x80000000, 0x3ff, 0x2, 0x7b6, 0x0, 0x2, 0x10000, 0xa99, 0xb, 0x2, 0x1, 0x94, 0x4, 0x9, 0x5, 0x3, 0x7, 0xba, 0xcdf, 0x0, 0x6, 0x2, 0xfffffffe, 0x1, 0xb17, 0x1, 0x6, 0xfd9, 0x5, 0x4, 0x5, 0x80000001, 0x1, 0xda4, 0x1, 0x8e91, 0x2, 0x34e, 0x4c, 0x7, 0x4, 0x5, 0x2c8, 0xa5d6, 0x3, 0x0, 0x1000, 0xf960, 0x4, 0x3, 0x6, 0x2, 0x7fffffff, 0x81, 0x7, 0x3d9, 0x5, 0xfffffffe, 0x10001, 0x300000, 0x4, 0xb, 0x1000, 0x3, 0x2, 0xb028, 0x8, 0x7, 0x0, 0x6, 0x94, 0x4, 0x5, 0x80000000, 0x10, 0x583, 0x283, 0x39f, 0x10, 0x41bd93a7, 0x0, 0x7, 0x0, 0x2, 0xdc8, 0xd8e8, 0x7, 0x7, 0x7ff, 0x8, 0x20a6, 0x4, 0x2, 0xb, 0x3, 0x27, 0x0, 0x8, 0x100, 0xffffffb2, 0x9, 0x2, 0x707e, 0x400, 0x4, 0x2, 0x4c, 0x40, 0x2, 0xffffffac, 0xfffff800, 0x800, 0x5, 0x9d, 0x6, 0x2, 0x7fffffff, 0xfffffff9, 0x8000, 0x38ede907, 0x1, 0x8000, 0xfffffffb, 0xd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xa8, 0x91, 0xba, 0xfffffffd, 0x2, 0x4, 0x4, 0x84e, 0xfff, 0x521b, 0xfffffffc, 0x3, 0x7fff, 0x1ff, 0xeb2, 0xa000, 0x9, 0x4, 0x7, 0x22b, 0xfffffffc, 0xffffffff, 0xc, 0x9, 0x1, 0x7, 0x8d, 0x2ca6, 0xfffffe01, 0x7fff, 0x30f, 0x8, 0x6, 0xc80b, 0x1, 0x9, 0x5, 0x994c, 0x7, 0x9, 0x9, 0x2, 0x1000, 0x7, 0x5, 0x7fffffff, 0x6, 0x8, 0x2, 0xa, 0x368, 0x1, 0x203a46b1, 0xbd8, 0x2, 0x6, 0x4, 0xa, 0x4, 0x3, 0x6, 0x3, 0xeb, 0x2, 0x62, 0x3, 0x3, 0x7, 0x3, 0x9, 0x7f, 0x29, 0x80000000, 0x0, 0x7, 0x40, 0x9, 0x2, 0x4, 0x7, 0x6, 0x2, 0xc3d, 0x0, 0x5, 0x1, 0xec, 0x5, 0xfffffffb, 0x4, 0x7, 0x2, 0x2, 0xffffffff, 0x4270ad9e, 0x3, 0x6, 0x4, 0x4, 0x0, 0x7fd, 0x2490ec48, 0x5, 0x7, 0x80, 0x2, 0x7123, 0x81, 0x8, 0x941, 0x6, 0x5, 0xffffff80, 0x94e, 0x0, 0x80000000, 0x84d4, 0x9, 0x10000, 0x0, 0x164a, 0xe8, 0x4, 0x3ff, 0x48000, 0xfffffff8, 0x8001, 0x6, 0xfffffffd, 0xd, 0xfffffffb, 0x4, 0xfffffff7, 0x4, 0x400, 0x61fa, 0x3, 0x9e20, 0x1, 0x9, 0x7, 0x9, 0x6, 0xa18, 0x5, 0xed, 0x1ff, 0x2, 0x6, 0x2, 0x2, 0xfffffffe, 0x453, 0x9, 0x1, 0x4, 0x24d8, 0x10, 0x7, 0x6, 0x80000001, 0x3, 0x9, 0x7, 0xfffffff7, 0x0, 0x1, 0x11, 0x0, 0x200, 0x1, 0x4, 0xf, 0xa5, 0xff, 0xffffffff, 0x3112, 0x2, 0x9, 0x7f, 0x1, 0x1, 0x7ff, 0x1, 0x4, 0x3, 0x5b, 0xb, 0x8, 0x7ff, 0x68, 0x80000001, 0x800, 0x2, 0x80000001, 0x7fc, 0x3, 0x800, 0x7, 0x7f, 0x2, 0x1c000, 0x2, 0x80000001, 0x8, 0x8, 0x709d, 0x400, 0x7661fb24, 0xc7bd, 0xd, 0xfc, 0x7, 0xfffffffe, 0x7, 0x9, 0xfff, 0x4, 0x32a, 0x9, 0xfffffff9, 0x1, 0x401, 0xb7, 0x1, 0xd, 0x1ff, 0xffffffff, 0x7ff, 0x0, 0x3, 0x8, 0x22c2, 0x700c, 0x8, 0x7, 0x8, 0x7, 0x8, 0x3, 0x8001, 0x5c4b, 0x8, 0x7, 0x1000, 0x3, 0x4, 0xa, 0xfffffff8, 0x609, 0xc9c2, 0x0, 0x7, 0x8, 0x3ff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x518cb6b1, 0x5fe2, 0x43, 0x2, 0xe674, 0x6, 0x3, 0x8, 0x5, 0x4, 0xb, 0x3, 0x40, 0x1, 0x3, 0x2, 0x6, 0x7, 0x5, 0xffffffff, 0x385a, 0x401, 0x0, 0x5, 0x1, 0x4, 0x0, 0x7f, 0x328e, 0xffffffff, 0x7, 0x5, 0x8, 0x7, 0x9, 0x40, 0xd, 0x28000000, 0xffff, 0x7, 0x4, 0xfffffffa, 0xfffff800, 0x3, 0x0, 0x7, 0xfffffff3, 0xfffffff1, 0x9, 0x5ed3, 0x7f, 0x7f, 0x4, 0x6, 0x7, 0x6, 0x0, 0x5, 0x3, 0x9, 0xffff, 0x0, 0x400, 0xfffffff9, 0x7, 0x5, 0x80000000, 0x2, 0x6, 0x5, 0x7fffffff, 0xca, 0x3, 0x3, 0x1, 0x8, 0x5, 0x0, 0x7, 0xfffffffc, 0x3, 0x3, 0x9, 0x4, 0x8, 0x8, 0x6, 0x4, 0x2, 0xff, 0xd, 0xe27c, 0x0, 0x9, 0x5, 0x4, 0x9, 0x2, 0x10001, 0x600, 0x4, 0x8, 0x1, 0x4, 0x8, 0x1, 0x3, 0x5, 0x2, 0x1, 0xd, 0x7, 0x871, 0x4, 0x6, 0x401, 0x3, 0xfffffff1, 0x25ce, 0xbf26, 0x80, 0x0, 0x4, 0x2, 0x0, 0x800, 0x3, 0x8000, 0x5, 0x40, 0x3, 0x8006da, 0x1, 0x4, 0x9, 0x4, 0x1, 0x8, 0x5, 0x7, 0xfffffff8, 0x7, 0x5, 0x2, 0x7f, 0x4, 0x9, 0x1, 0x7, 0xc60a, 0x0, 0x4, 0xff, 0x6, 0x57b0, 0x36a0, 0x9, 0x6, 0x3, 0x3ff, 0x7, 0x0, 0x8, 0x5, 0xfb6, 0x5, 0x5409, 0xcd4, 0x800, 0x9, 0xfffffffa, 0x10, 0xfffffffb, 0x3, 0x2, 0x8, 0x8, 0x1246a220, 0x6ec3280, 0x8cb, 0x10, 0x8000, 0x80, 0x7, 0x1ff, 0x7, 0x6, 0x0, 0x222, 0x4, 0xf, 0x0, 0x1ff, 0x81, 0x9, 0x1ff, 0x6, 0x4, 0x152, 0x5, 0x264, 0x325, 0x0, 0xa, 0x4, 0x4, 0x9, 0x0, 0x1, 0x254a3e7d, 0x80000001, 0x6, 0x8, 0x6, 0x4, 0x8, 0x3, 0x80, 0x80000000, 0x1, 0xe, 0x3, 0xfffffffb, 0x10001, 0x9, 0x6, 0x3d8, 0xfffff000, 0x9, 0x5, 0xa, 0x7f, 0x101, 0xfffffffe, 0xfffff6e2, 0xb, 0x7, 0x9700, 0x800, 0x10, 0x1, 0x9, 0x81, 0x2, 0x5, 0x10001, 0x60, 0x3, 0x800, 0x9, 0x9, 0x6, 0x3ff, 0xc1, 0x9, 0x5]}]}]}}, @TCA_RATE={0x6, 0x5, {0x26, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x4, 0xb}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x7, 0x70}}, @filter_kind_options=@f_basic={{0xa}, {0xc64, 0x2, [@TCA_BASIC_POLICE={0xc60, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x5, 0x5, 0xbecd, {0x7, 0x0, 0x1, 0x7, 0x401, 0x9}, {0x0, 0x0, 0x0, 0xc65c, 0x7f, 0x2}, 0x6, 0x68b, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x529050ca, 0xb72, 0x8, 0x800, 0x7, 0x5, 0x9, 0x1a4, 0x1, 0x4, 0x4, 0x1, 0x0, 0x3, 0x9, 0xfb, 0x1, 0x9, 0x4, 0xfbb, 0x1, 0x3000, 0x8000, 0x61, 0x4, 0x9, 0x7, 0x8, 0xe56, 0x6, 0x7db, 0xd, 0xc, 0x5609, 0x2f32, 0x4, 0x8, 0xfffffffa, 0xe48, 0x3, 0x5, 0x3, 0x2, 0x3, 0x200, 0x8, 0x6, 0x786, 0xa, 0x1, 0x1, 0x10, 0x0, 0x9, 0xfffffffb, 0x440, 0x3, 0x3, 0x0, 0x6, 0xa5, 0x6, 0x6, 0x4, 0x2, 0x3, 0x2, 0x0, 0x514bcdab, 0x800, 0xfffffffb, 0x2, 0xfffffffe, 0xfffffffe, 0x7, 0x5, 0x9, 0x9, 0x35, 0x2, 0x3bc, 0x7, 0x8, 0xff, 0x4, 0x80, 0x4, 0x5, 0x5, 0x79c1322c, 0x5, 0xfffffff1, 0x0, 0x7, 0x8, 0xca, 0x4, 0x4231a0cb, 0x4, 0x800, 0x914a, 0xffffffc0, 0x8000, 0x46, 0x4, 0x4, 0x6c43555b, 0x4a42, 0xfffffffc, 0xbd7, 0xcd, 0x8, 0x7, 0x7fc00, 0x10, 0x6, 0x2, 0x9d7, 0x3, 0x2, 0x65e, 0xaa, 0x4, 0x10001, 0x3, 0x9, 0x4, 0xe, 0x3ff, 0x8001, 0x6, 0x3738, 0x2, 0x81, 0x5942, 0x2, 0x200, 0xff, 0x4, 0x2, 0x0, 0x4, 0x7, 0x3ff, 0x6f4, 0x8, 0x7, 0xd0, 0x515c, 0x3, 0xd0, 0x3, 0x4, 0x4, 0x4, 0x0, 0x1, 0xe3, 0x2, 0xec2, 0xf, 0xf, 0x7, 0x3, 0xed, 0x1, 0xecba, 0x8, 0x28a, 0x5, 0xffffffff, 0x6, 0x80000000, 0xffff7fff, 0xa, 0x9, 0xa8e, 0x5, 0x8, 0xfffffff9, 0x401, 0x8, 0x9, 0x5c, 0x1, 0x1, 0x9, 0x400, 0x7, 0xfffff800, 0x9, 0x8, 0xd, 0x9, 0x8, 0x81, 0x3, 0x0, 0x2, 0x2, 0xfffffffc, 0x2, 0x6, 0xbbd1, 0xb, 0x800, 0xfffffff7, 0x3e, 0x3, 0x6, 0xb, 0x0, 0x2, 0x3, 0x0, 0xa6, 0x8, 0xe3, 0x80, 0x1, 0x6, 0x3, 0x3, 0x80000001, 0x9, 0x1, 0x8000, 0xe6, 0x7, 0x7, 0x7, 0xffffffff, 0x0, 0x40, 0x8d0, 0x7, 0x4, 0x80000000, 0xfffffeb5, 0x1, 0x1, 0x8000, 0x4000007, 0x101, 0x4, 0xff, 0x73f, 0xe831, 0x81, 0x80000000, 0x10001, 0x4c0, 0x7, 0x80000001, 0xf]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x9, 0x5, 0xa, 0x7fffffff, 0x7, 0x78, 0x2, 0x7, 0x9, 0x8, 0x2d7, 0xaf, 0x0, 0x1, 0x9, 0x3, 0x5c, 0xe, 0x5, 0x10, 0x37, 0xb9, 0x7, 0x9, 0xa4, 0x1, 0x407, 0x2, 0x0, 0x5, 0x0, 0x80, 0x4, 0x9, 0x6, 0x3, 0xc, 0x2, 0xfffffffa, 0x8000000, 0xd, 0xffff7fff, 0x2, 0x81, 0x40, 0x7ff, 0x400, 0xb, 0x791, 0x101, 0x4, 0x7, 0x200, 0x8, 0x9, 0x80000, 0x8, 0x4, 0x0, 0xfffffff9, 0x6, 0x6, 0xefce, 0x7, 0x40, 0x1000, 0x5, 0x6, 0x4, 0x639bde51, 0x6, 0x80, 0xfffffffb, 0x4, 0x7, 0x9b7, 0x0, 0x80, 0xe, 0x10000, 0x7, 0xe, 0x9, 0x7fffffff, 0xa, 0x0, 0xa, 0x10000, 0x2, 0x0, 0x1, 0x176, 0x7, 0x3, 0x80000000, 0x8, 0x30, 0x7fff, 0x7f, 0xfffff800, 0x80, 0x6, 0x2, 0x10001, 0x8, 0xff4, 0x8, 0x8e0d, 0x2, 0x8, 0x2, 0x10000, 0xe8, 0x100, 0xff, 0x8, 0x6, 0x5, 0x0, 0x400, 0x8, 0xe, 0xe, 0x80000000, 0x4a3, 0x31e1, 0xaedf, 0x854, 0xd734, 0x87, 0x400, 0xd0, 0xfffffffb, 0x37, 0x40, 0x7f, 0x1, 0x1, 0x0, 0x3, 0xb, 0x0, 0x2, 0x2, 0x1, 0x7, 0x7, 0x5, 0x3, 0x0, 0x6, 0xffffff4f, 0x8001, 0x4ae, 0x8, 0x2, 0x2, 0x6, 0xfff, 0x648000, 0x6, 0x9, 0x1, 0xbf29, 0x6, 0x10001, 0x1, 0x2, 0xfff, 0x9, 0x7, 0x1, 0x80, 0x1, 0xffffffff, 0xc, 0x7, 0x5, 0x3, 0x9, 0x101, 0x9, 0x0, 0x7fff, 0x403d, 0x9, 0xc0000000, 0x4, 0x80000000, 0x9, 0x5, 0x3ff, 0x10, 0x6, 0x0, 0x700000, 0x3, 0x5, 0x4c, 0x2f8, 0x1000, 0x8, 0x2, 0x100, 0xc, 0x61, 0x10000, 0x5, 0x4, 0x3, 0xf1, 0x5, 0x3, 0x3b6, 0x9, 0x0, 0x63, 0x7ff, 0x10, 0x4, 0x2, 0x0, 0x6, 0xff, 0x0, 0x902, 0x401, 0xffffff4d, 0x64, 0x7ff, 0x38, 0xc, 0x2, 0x8f, 0x8, 0x5, 0xa3, 0x9, 0x5, 0x401, 0x3, 0x401, 0x81, 0xfffffff8, 0x8, 0x200, 0x1, 0x6, 0x400, 0x10, 0x8, 0x401, 0xa944, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x2, 0xfb, 0xa0b, 0x40, 0x9f9, 0xd, 0x80000000, 0x6, 0x9, 0xdff8, 0x4, 0x3, 0x9, 0x2, 0x7, 0x6, 0xa0b, 0x0, 0x3, 0x8, 0xc, 0x800, 0x4, 0x14c, 0x800, 0x1, 0x0, 0x101, 0x3, 0xb1a9, 0x19ed, 0x0, 0x7ff, 0x8, 0x7fff, 0x8, 0x3eed, 0xc, 0xd, 0x3, 0x80, 0x9, 0x0, 0x0, 0xacb4, 0x4, 0x3, 0x1, 0x7, 0x8001, 0x4, 0x6, 0x4, 0x2000000, 0x0, 0x1, 0xf, 0x80000000, 0x5ded, 0x0, 0x2, 0x7, 0x7ff, 0xffff, 0x1, 0x7, 0x6, 0x9, 0x8, 0x0, 0x0, 0x3, 0x5cfc, 0x9, 0x1, 0x0, 0x1, 0x119, 0x6, 0x0, 0x5, 0x4, 0x8, 0x6a, 0x7, 0x8, 0x2, 0xfffffeff, 0x3, 0x0, 0x8, 0x3, 0x3, 0xe3, 0x9, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0x3, 0x80000000, 0x40, 0x31e, 0x1, 0x2, 0xfffffffd, 0x6, 0x9, 0x7, 0xffffffff, 0x6, 0x4, 0x0, 0x39, 0x400, 0x8, 0x981c, 0x3, 0xfff, 0x9c, 0x5a, 0xffff, 0xd, 0xb19, 0x0, 0xffffffff, 0x8, 0x9, 0x1, 0x3, 0x7ff, 0x7, 0x0, 0x0, 0xdc8, 0x0, 0x5, 0xfffff326, 0x3, 0xea4, 0xffffffff, 0x40, 0x8, 0x9, 0x1, 0xfd8, 0x2, 0x9, 0xf, 0x3, 0x40, 0x9, 0x6, 0x0, 0x200, 0x401, 0xfffff929, 0x7fffffff, 0x3, 0x5, 0x1, 0x7, 0x8, 0x2, 0x2, 0x413a, 0x9, 0xb3, 0x81, 0x9, 0x7, 0x2, 0x9, 0x7fff, 0x2, 0x99, 0x7, 0x5, 0x0, 0xfcde, 0x8000, 0xb, 0x3fe, 0x9, 0x5, 0x38, 0xa, 0xc, 0xceb, 0x7ff, 0x200, 0x1a, 0x8, 0x7fff, 0x3, 0xfffffffb, 0x8001, 0x10001, 0x6, 0x6, 0x200, 0x0, 0x4, 0x277, 0xcfa6, 0x50, 0x8, 0xffff3aa7, 0x8, 0xbf8, 0xbbb3, 0x5, 0xb, 0x8, 0x8, 0x4, 0x6e, 0x7fffffff, 0xaad, 0x4, 0x2, 0x9, 0x8, 0x8, 0x7, 0x7, 0x3, 0x3, 0x8, 0x8, 0x2, 0x1a93, 0x4, 0x9, 0x5, 0x5, 0x3, 0x8, 0x1, 0x3ff, 0x8000, 0x800, 0x7, 0x6, 0x0, 0x6, 0xfff, 0x3, 0x7, 0x80000001, 0x7, 0x7e8, 0x10001, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @remote}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}]}}]}, 0x1d48}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x40) r12 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r12, 0xf507, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 2m26.2009352s ago: executing program 1 (id=317): r0 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) wait4(r0, 0x0, 0x80000000, 0x0) 2m25.486511736s ago: executing program 1 (id=311): r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'syz_tun\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf}}) 2m24.886111905s ago: executing program 1 (id=313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)={0x50, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '.!-*{\\-(@,\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}]}]}]}]}, 0x50}}, 0x0) 2m24.442472419s ago: executing program 1 (id=316): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}}, @NFT_MSG_DELSET={0x54, 0xb, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x69}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_USERDATA={0x2b, 0xd, 0x1, 0x0, "f19a6959ee0d5695d9b2789e85e01002a630c3fe8573f59827b0e95ef662dbe3284c594b325a64"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x90}}, 0x0) 2m24.298688869s ago: executing program 1 (id=319): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x40, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x40}}, 0x0) 2m24.045893541s ago: executing program 1 (id=321): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230001) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) open(0x0, 0x147842, 0x88) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x10000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0) r6 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r6, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r6, 0x0) capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x4, 0x3, 0x641352225ed612c7, 0x1000, &(0x7f0000cb0000/0x1000)=nil}) close(r0) 2m8.983132312s ago: executing program 32 (id=301): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10, 0x323, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x2, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x9}]}}]}, 0x3c}}, 0x2000400c) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x400) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) io_setup(0x4, &(0x7f0000000380)=0x0) io_submit(r7, 0x0, &(0x7f0000000340)) sendmsg$nl_route(r2, 0x0, 0x240088c5) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="180000006a00010025bd70001ddcdf250200000004"], 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newtfilter={0x1d48, 0x11, 0xd27, 0x0, 0x25dfdbff, {0x0, 0x0, 0x74, r11, {0xfff1, 0x3}, {0x0, 0x1}, {0x3, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @filter_kind_options=@f_route={{0xa}, {0x1038, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xe1}, @TCA_ROUTE4_IIF={0x8, 0x4, r11}, @TCA_ROUTE4_TO={0x8, 0x2, 0x62}, @TCA_ROUTE4_POLICE={0x101c, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xa, 0x7, 0x1, 0x0, 0x4, 0xa, 0x4, 0x80000000, 0x4, 0x1, 0x81, 0x650, 0xb1, 0x2, 0x1, 0x832, 0x6, 0x697, 0x803, 0xf53a, 0x400, 0x0, 0x0, 0x9, 0x1000, 0x0, 0x7, 0xf6b, 0x9, 0x3, 0x0, 0xfff, 0x10001, 0x9, 0x1ff, 0x2, 0x3a, 0x200, 0x1000, 0xff, 0xfc8, 0x10001, 0x4, 0x8, 0xffff0000, 0x8, 0x40000, 0x34d6, 0xf276, 0x1, 0x5, 0x7, 0x4, 0x3ff, 0x6, 0x7, 0x8, 0x81, 0x88, 0x5, 0x0, 0x0, 0x0, 0x8, 0xe7d, 0x5, 0x1000, 0x5, 0x7fffffff, 0x81, 0x0, 0x5, 0x389329a, 0x97, 0x4, 0x5, 0x3, 0x5, 0xbc4c, 0x78bec601, 0x4, 0xf7, 0x3, 0x5, 0x40, 0x101, 0xff, 0x2, 0xfffff001, 0x1, 0x6, 0x4, 0x54b, 0x7, 0x10001, 0xff3d, 0x9, 0xfffffff3, 0x7, 0x3, 0x2, 0x2, 0x8, 0x401, 0x1, 0x9, 0x9, 0x3, 0x5acb, 0x5, 0x9, 0x3, 0xd, 0x0, 0x6, 0x6d9, 0x0, 0x7, 0x7fff, 0x5, 0x1a6a, 0x6, 0x7ff, 0x9, 0x4, 0xa05, 0xff, 0x6, 0x10, 0x467, 0xe57308e8, 0x8, 0x1, 0x1, 0x6, 0x7cc, 0xf56, 0x7, 0x3, 0xfffffffe, 0x4, 0x9, 0x5, 0x3, 0x20, 0x5, 0x1, 0x5, 0x4, 0x6, 0x401, 0x7, 0x2, 0x7, 0x8, 0xfffffff8, 0x100, 0x2, 0xffffff7f, 0x8, 0x4, 0x6, 0xe6e, 0x5, 0x4, 0x7, 0xe, 0x3, 0x18, 0x7, 0x3, 0x0, 0x1fa, 0x5, 0x7, 0x101, 0x3, 0x103, 0x65, 0x9, 0x5, 0x3bfab290, 0x1, 0x6, 0x2, 0x6, 0x9, 0x2, 0x80000000, 0xfffffffb, 0xfffffffd, 0x8, 0xa0ef, 0xd, 0x1, 0x1, 0x0, 0xfff, 0x1, 0x1, 0x2, 0x1, 0x5, 0x6, 0x40, 0xffffffff, 0x8, 0x80000001, 0x3, 0x8, 0xffffffff, 0x6, 0x8, 0x468, 0x10001, 0xfffffffc, 0x4, 0x3, 0x1, 0x0, 0x0, 0x7a, 0x1, 0x2, 0x8, 0x423e, 0x8, 0x4, 0x75f1, 0xab, 0x2, 0x4a6a, 0x0, 0x3, 0xfff, 0x6, 0x92, 0x1, 0x3, 0x7, 0x200, 0x1, 0x7, 0x40, 0x3, 0x4090, 0xd8, 0xfffffffc, 0x8, 0x2, 0xffffffff, 0xa0000000, 0xc, 0xdd, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x3, 0x9, 0x9, 0x3, 0x7f, 0x3, 0x5, 0xfffffffd, 0x8, 0x5, 0xfffffffa, 0x1570, 0x0, 0x0, 0x1ff, 0x9, 0x80000000, 0x3, 0x8, 0x8, 0x2, 0x2dc, 0x626, 0x3, 0x7, 0x3, 0x9, 0x84, 0x6, 0x1, 0x3, 0xa0, 0x9, 0x80, 0x5, 0x8, 0x10, 0x3, 0xffffffff, 0x80, 0x6, 0x80, 0x3, 0x7, 0xfffffff7, 0x0, 0x0, 0x5, 0x7, 0x1, 0x6, 0x4, 0x2905, 0x7, 0x7fffffff, 0xf, 0x5b, 0x1, 0x95, 0xf2, 0x8, 0x1, 0x5f2c47a8, 0x4, 0x1, 0x4, 0x10001, 0x10, 0x8, 0x5, 0x4, 0x80000000, 0xf, 0x8, 0xffffffff, 0x1000, 0xc23, 0x2, 0x20000000, 0xffffffff, 0x101, 0x7ff, 0xd, 0xffffffff, 0x7, 0x2, 0xfffffffa, 0x67, 0x3, 0x0, 0x1, 0x9, 0xffff82bc, 0x2, 0xc2, 0x1000, 0x9c, 0x7fff, 0xf410, 0x10000, 0x8001, 0x2c, 0x3, 0x4, 0xfff, 0x8, 0x2c, 0xfffff6c3, 0x89e, 0xb530c0a5, 0x1ff, 0x18000000, 0x7, 0x3, 0x8a7, 0x2a72, 0x3, 0x9, 0x8, 0xa3, 0x1, 0x31b, 0x9, 0x1200, 0x2a15cdfd, 0x1, 0x401, 0x81, 0xd06, 0xbc, 0x53c00, 0x80000000, 0x3ff, 0x2, 0x7b6, 0x0, 0x2, 0x10000, 0xa99, 0xb, 0x2, 0x1, 0x94, 0x4, 0x9, 0x5, 0x3, 0x7, 0xba, 0xcdf, 0x0, 0x6, 0x2, 0xfffffffe, 0x1, 0xb17, 0x1, 0x6, 0xfd9, 0x5, 0x4, 0x5, 0x80000001, 0x1, 0xda4, 0x1, 0x8e91, 0x2, 0x34e, 0x4c, 0x7, 0x4, 0x5, 0x2c8, 0xa5d6, 0x3, 0x0, 0x1000, 0xf960, 0x4, 0x3, 0x6, 0x2, 0x7fffffff, 0x81, 0x7, 0x3d9, 0x5, 0xfffffffe, 0x10001, 0x300000, 0x4, 0xb, 0x1000, 0x3, 0x2, 0xb028, 0x8, 0x7, 0x0, 0x6, 0x94, 0x4, 0x5, 0x80000000, 0x10, 0x583, 0x283, 0x39f, 0x10, 0x41bd93a7, 0x0, 0x7, 0x0, 0x2, 0xdc8, 0xd8e8, 0x7, 0x7, 0x7ff, 0x8, 0x20a6, 0x4, 0x2, 0xb, 0x3, 0x27, 0x0, 0x8, 0x100, 0xffffffb2, 0x9, 0x2, 0x707e, 0x400, 0x4, 0x2, 0x4c, 0x40, 0x2, 0xffffffac, 0xfffff800, 0x800, 0x5, 0x9d, 0x6, 0x2, 0x7fffffff, 0xfffffff9, 0x8000, 0x38ede907, 0x1, 0x8000, 0xfffffffb, 0xd]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1, 0xa8, 0x91, 0xba, 0xfffffffd, 0x2, 0x4, 0x4, 0x84e, 0xfff, 0x521b, 0xfffffffc, 0x3, 0x7fff, 0x1ff, 0xeb2, 0xa000, 0x9, 0x4, 0x7, 0x22b, 0xfffffffc, 0xffffffff, 0xc, 0x9, 0x1, 0x7, 0x8d, 0x2ca6, 0xfffffe01, 0x7fff, 0x30f, 0x8, 0x6, 0xc80b, 0x1, 0x9, 0x5, 0x994c, 0x7, 0x9, 0x9, 0x2, 0x1000, 0x7, 0x5, 0x7fffffff, 0x6, 0x8, 0x2, 0xa, 0x368, 0x1, 0x203a46b1, 0xbd8, 0x2, 0x6, 0x4, 0xa, 0x4, 0x3, 0x6, 0x3, 0xeb, 0x2, 0x62, 0x3, 0x3, 0x7, 0x3, 0x9, 0x7f, 0x29, 0x80000000, 0x0, 0x7, 0x40, 0x9, 0x2, 0x4, 0x7, 0x6, 0x2, 0xc3d, 0x0, 0x5, 0x1, 0xec, 0x5, 0xfffffffb, 0x4, 0x7, 0x2, 0x2, 0xffffffff, 0x4270ad9e, 0x3, 0x6, 0x4, 0x4, 0x0, 0x7fd, 0x2490ec48, 0x5, 0x7, 0x80, 0x2, 0x7123, 0x81, 0x8, 0x941, 0x6, 0x5, 0xffffff80, 0x94e, 0x0, 0x80000000, 0x84d4, 0x9, 0x10000, 0x0, 0x164a, 0xe8, 0x4, 0x3ff, 0x48000, 0xfffffff8, 0x8001, 0x6, 0xfffffffd, 0xd, 0xfffffffb, 0x4, 0xfffffff7, 0x4, 0x400, 0x61fa, 0x3, 0x9e20, 0x1, 0x9, 0x7, 0x9, 0x6, 0xa18, 0x5, 0xed, 0x1ff, 0x2, 0x6, 0x2, 0x2, 0xfffffffe, 0x453, 0x9, 0x1, 0x4, 0x24d8, 0x10, 0x7, 0x6, 0x80000001, 0x3, 0x9, 0x7, 0xfffffff7, 0x0, 0x1, 0x11, 0x0, 0x200, 0x1, 0x4, 0xf, 0xa5, 0xff, 0xffffffff, 0x3112, 0x2, 0x9, 0x7f, 0x1, 0x1, 0x7ff, 0x1, 0x4, 0x3, 0x5b, 0xb, 0x8, 0x7ff, 0x68, 0x80000001, 0x800, 0x2, 0x80000001, 0x7fc, 0x3, 0x800, 0x7, 0x7f, 0x2, 0x1c000, 0x2, 0x80000001, 0x8, 0x8, 0x709d, 0x400, 0x7661fb24, 0xc7bd, 0xd, 0xfc, 0x7, 0xfffffffe, 0x7, 0x9, 0xfff, 0x4, 0x32a, 0x9, 0xfffffff9, 0x1, 0x401, 0xb7, 0x1, 0xd, 0x1ff, 0xffffffff, 0x7ff, 0x0, 0x3, 0x8, 0x22c2, 0x700c, 0x8, 0x7, 0x8, 0x7, 0x8, 0x3, 0x8001, 0x5c4b, 0x8, 0x7, 0x1000, 0x3, 0x4, 0xa, 0xfffffff8, 0x609, 0xc9c2, 0x0, 0x7, 0x8, 0x3ff]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x518cb6b1, 0x5fe2, 0x43, 0x2, 0xe674, 0x6, 0x3, 0x8, 0x5, 0x4, 0xb, 0x3, 0x40, 0x1, 0x3, 0x2, 0x6, 0x7, 0x5, 0xffffffff, 0x385a, 0x401, 0x0, 0x5, 0x1, 0x4, 0x0, 0x7f, 0x328e, 0xffffffff, 0x7, 0x5, 0x8, 0x7, 0x9, 0x40, 0xd, 0x28000000, 0xffff, 0x7, 0x4, 0xfffffffa, 0xfffff800, 0x3, 0x0, 0x7, 0xfffffff3, 0xfffffff1, 0x9, 0x5ed3, 0x7f, 0x7f, 0x4, 0x6, 0x7, 0x6, 0x0, 0x5, 0x3, 0x9, 0xffff, 0x0, 0x400, 0xfffffff9, 0x7, 0x5, 0x80000000, 0x2, 0x6, 0x5, 0x7fffffff, 0xca, 0x3, 0x3, 0x1, 0x8, 0x5, 0x0, 0x7, 0xfffffffc, 0x3, 0x3, 0x9, 0x4, 0x8, 0x8, 0x6, 0x4, 0x2, 0xff, 0xd, 0xe27c, 0x0, 0x9, 0x5, 0x4, 0x9, 0x2, 0x10001, 0x600, 0x4, 0x8, 0x1, 0x4, 0x8, 0x1, 0x3, 0x5, 0x2, 0x1, 0xd, 0x7, 0x871, 0x4, 0x6, 0x401, 0x3, 0xfffffff1, 0x25ce, 0xbf26, 0x80, 0x0, 0x4, 0x2, 0x0, 0x800, 0x3, 0x8000, 0x5, 0x40, 0x3, 0x8006da, 0x1, 0x4, 0x9, 0x4, 0x1, 0x8, 0x5, 0x7, 0xfffffff8, 0x7, 0x5, 0x2, 0x7f, 0x4, 0x9, 0x1, 0x7, 0xc60a, 0x0, 0x4, 0xff, 0x6, 0x57b0, 0x36a0, 0x9, 0x6, 0x3, 0x3ff, 0x7, 0x0, 0x8, 0x5, 0xfb6, 0x5, 0x5409, 0xcd4, 0x800, 0x9, 0xfffffffa, 0x10, 0xfffffffb, 0x3, 0x2, 0x8, 0x8, 0x1246a220, 0x6ec3280, 0x8cb, 0x10, 0x8000, 0x80, 0x7, 0x1ff, 0x7, 0x6, 0x0, 0x222, 0x4, 0xf, 0x0, 0x1ff, 0x81, 0x9, 0x1ff, 0x6, 0x4, 0x152, 0x5, 0x264, 0x325, 0x0, 0xa, 0x4, 0x4, 0x9, 0x0, 0x1, 0x254a3e7d, 0x80000001, 0x6, 0x8, 0x6, 0x4, 0x8, 0x3, 0x80, 0x80000000, 0x1, 0xe, 0x3, 0xfffffffb, 0x10001, 0x9, 0x6, 0x3d8, 0xfffff000, 0x9, 0x5, 0xa, 0x7f, 0x101, 0xfffffffe, 0xfffff6e2, 0xb, 0x7, 0x9700, 0x800, 0x10, 0x1, 0x9, 0x81, 0x2, 0x5, 0x10001, 0x60, 0x3, 0x800, 0x9, 0x9, 0x6, 0x3ff, 0xc1, 0x9, 0x5]}]}]}}, @TCA_RATE={0x6, 0x5, {0x26, 0x5}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x4, 0xb}}, @TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x7, 0x70}}, @filter_kind_options=@f_basic={{0xa}, {0xc64, 0x2, [@TCA_BASIC_POLICE={0xc60, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x5, 0x5, 0xbecd, {0x7, 0x0, 0x1, 0x7, 0x401, 0x9}, {0x0, 0x0, 0x0, 0xc65c, 0x7f, 0x2}, 0x6, 0x68b, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x529050ca, 0xb72, 0x8, 0x800, 0x7, 0x5, 0x9, 0x1a4, 0x1, 0x4, 0x4, 0x1, 0x0, 0x3, 0x9, 0xfb, 0x1, 0x9, 0x4, 0xfbb, 0x1, 0x3000, 0x8000, 0x61, 0x4, 0x9, 0x7, 0x8, 0xe56, 0x6, 0x7db, 0xd, 0xc, 0x5609, 0x2f32, 0x4, 0x8, 0xfffffffa, 0xe48, 0x3, 0x5, 0x3, 0x2, 0x3, 0x200, 0x8, 0x6, 0x786, 0xa, 0x1, 0x1, 0x10, 0x0, 0x9, 0xfffffffb, 0x440, 0x3, 0x3, 0x0, 0x6, 0xa5, 0x6, 0x6, 0x4, 0x2, 0x3, 0x2, 0x0, 0x514bcdab, 0x800, 0xfffffffb, 0x2, 0xfffffffe, 0xfffffffe, 0x7, 0x5, 0x9, 0x9, 0x35, 0x2, 0x3bc, 0x7, 0x8, 0xff, 0x4, 0x80, 0x4, 0x5, 0x5, 0x79c1322c, 0x5, 0xfffffff1, 0x0, 0x7, 0x8, 0xca, 0x4, 0x4231a0cb, 0x4, 0x800, 0x914a, 0xffffffc0, 0x8000, 0x46, 0x4, 0x4, 0x6c43555b, 0x4a42, 0xfffffffc, 0xbd7, 0xcd, 0x8, 0x7, 0x7fc00, 0x10, 0x6, 0x2, 0x9d7, 0x3, 0x2, 0x65e, 0xaa, 0x4, 0x10001, 0x3, 0x9, 0x4, 0xe, 0x3ff, 0x8001, 0x6, 0x3738, 0x2, 0x81, 0x5942, 0x2, 0x200, 0xff, 0x4, 0x2, 0x0, 0x4, 0x7, 0x3ff, 0x6f4, 0x8, 0x7, 0xd0, 0x515c, 0x3, 0xd0, 0x3, 0x4, 0x4, 0x4, 0x0, 0x1, 0xe3, 0x2, 0xec2, 0xf, 0xf, 0x7, 0x3, 0xed, 0x1, 0xecba, 0x8, 0x28a, 0x5, 0xffffffff, 0x6, 0x80000000, 0xffff7fff, 0xa, 0x9, 0xa8e, 0x5, 0x8, 0xfffffff9, 0x401, 0x8, 0x9, 0x5c, 0x1, 0x1, 0x9, 0x400, 0x7, 0xfffff800, 0x9, 0x8, 0xd, 0x9, 0x8, 0x81, 0x3, 0x0, 0x2, 0x2, 0xfffffffc, 0x2, 0x6, 0xbbd1, 0xb, 0x800, 0xfffffff7, 0x3e, 0x3, 0x6, 0xb, 0x0, 0x2, 0x3, 0x0, 0xa6, 0x8, 0xe3, 0x80, 0x1, 0x6, 0x3, 0x3, 0x80000001, 0x9, 0x1, 0x8000, 0xe6, 0x7, 0x7, 0x7, 0xffffffff, 0x0, 0x40, 0x8d0, 0x7, 0x4, 0x80000000, 0xfffffeb5, 0x1, 0x1, 0x8000, 0x4000007, 0x101, 0x4, 0xff, 0x73f, 0xe831, 0x81, 0x80000000, 0x10001, 0x4c0, 0x7, 0x80000001, 0xf]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x0, 0x9, 0x5, 0xa, 0x7fffffff, 0x7, 0x78, 0x2, 0x7, 0x9, 0x8, 0x2d7, 0xaf, 0x0, 0x1, 0x9, 0x3, 0x5c, 0xe, 0x5, 0x10, 0x37, 0xb9, 0x7, 0x9, 0xa4, 0x1, 0x407, 0x2, 0x0, 0x5, 0x0, 0x80, 0x4, 0x9, 0x6, 0x3, 0xc, 0x2, 0xfffffffa, 0x8000000, 0xd, 0xffff7fff, 0x2, 0x81, 0x40, 0x7ff, 0x400, 0xb, 0x791, 0x101, 0x4, 0x7, 0x200, 0x8, 0x9, 0x80000, 0x8, 0x4, 0x0, 0xfffffff9, 0x6, 0x6, 0xefce, 0x7, 0x40, 0x1000, 0x5, 0x6, 0x4, 0x639bde51, 0x6, 0x80, 0xfffffffb, 0x4, 0x7, 0x9b7, 0x0, 0x80, 0xe, 0x10000, 0x7, 0xe, 0x9, 0x7fffffff, 0xa, 0x0, 0xa, 0x10000, 0x2, 0x0, 0x1, 0x176, 0x7, 0x3, 0x80000000, 0x8, 0x30, 0x7fff, 0x7f, 0xfffff800, 0x80, 0x6, 0x2, 0x10001, 0x8, 0xff4, 0x8, 0x8e0d, 0x2, 0x8, 0x2, 0x10000, 0xe8, 0x100, 0xff, 0x8, 0x6, 0x5, 0x0, 0x400, 0x8, 0xe, 0xe, 0x80000000, 0x4a3, 0x31e1, 0xaedf, 0x854, 0xd734, 0x87, 0x400, 0xd0, 0xfffffffb, 0x37, 0x40, 0x7f, 0x1, 0x1, 0x0, 0x3, 0xb, 0x0, 0x2, 0x2, 0x1, 0x7, 0x7, 0x5, 0x3, 0x0, 0x6, 0xffffff4f, 0x8001, 0x4ae, 0x8, 0x2, 0x2, 0x6, 0xfff, 0x648000, 0x6, 0x9, 0x1, 0xbf29, 0x6, 0x10001, 0x1, 0x2, 0xfff, 0x9, 0x7, 0x1, 0x80, 0x1, 0xffffffff, 0xc, 0x7, 0x5, 0x3, 0x9, 0x101, 0x9, 0x0, 0x7fff, 0x403d, 0x9, 0xc0000000, 0x4, 0x80000000, 0x9, 0x5, 0x3ff, 0x10, 0x6, 0x0, 0x700000, 0x3, 0x5, 0x4c, 0x2f8, 0x1000, 0x8, 0x2, 0x100, 0xc, 0x61, 0x10000, 0x5, 0x4, 0x3, 0xf1, 0x5, 0x3, 0x3b6, 0x9, 0x0, 0x63, 0x7ff, 0x10, 0x4, 0x2, 0x0, 0x6, 0xff, 0x0, 0x902, 0x401, 0xffffff4d, 0x64, 0x7ff, 0x38, 0xc, 0x2, 0x8f, 0x8, 0x5, 0xa3, 0x9, 0x5, 0x401, 0x3, 0x401, 0x81, 0xfffffff8, 0x8, 0x200, 0x1, 0x6, 0x400, 0x10, 0x8, 0x401, 0xa944, 0x8]}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x2, 0xfb, 0xa0b, 0x40, 0x9f9, 0xd, 0x80000000, 0x6, 0x9, 0xdff8, 0x4, 0x3, 0x9, 0x2, 0x7, 0x6, 0xa0b, 0x0, 0x3, 0x8, 0xc, 0x800, 0x4, 0x14c, 0x800, 0x1, 0x0, 0x101, 0x3, 0xb1a9, 0x19ed, 0x0, 0x7ff, 0x8, 0x7fff, 0x8, 0x3eed, 0xc, 0xd, 0x3, 0x80, 0x9, 0x0, 0x0, 0xacb4, 0x4, 0x3, 0x1, 0x7, 0x8001, 0x4, 0x6, 0x4, 0x2000000, 0x0, 0x1, 0xf, 0x80000000, 0x5ded, 0x0, 0x2, 0x7, 0x7ff, 0xffff, 0x1, 0x7, 0x6, 0x9, 0x8, 0x0, 0x0, 0x3, 0x5cfc, 0x9, 0x1, 0x0, 0x1, 0x119, 0x6, 0x0, 0x5, 0x4, 0x8, 0x6a, 0x7, 0x8, 0x2, 0xfffffeff, 0x3, 0x0, 0x8, 0x3, 0x3, 0xe3, 0x9, 0x1, 0x7, 0x5, 0x7fff, 0x8, 0x3, 0x80000000, 0x40, 0x31e, 0x1, 0x2, 0xfffffffd, 0x6, 0x9, 0x7, 0xffffffff, 0x6, 0x4, 0x0, 0x39, 0x400, 0x8, 0x981c, 0x3, 0xfff, 0x9c, 0x5a, 0xffff, 0xd, 0xb19, 0x0, 0xffffffff, 0x8, 0x9, 0x1, 0x3, 0x7ff, 0x7, 0x0, 0x0, 0xdc8, 0x0, 0x5, 0xfffff326, 0x3, 0xea4, 0xffffffff, 0x40, 0x8, 0x9, 0x1, 0xfd8, 0x2, 0x9, 0xf, 0x3, 0x40, 0x9, 0x6, 0x0, 0x200, 0x401, 0xfffff929, 0x7fffffff, 0x3, 0x5, 0x1, 0x7, 0x8, 0x2, 0x2, 0x413a, 0x9, 0xb3, 0x81, 0x9, 0x7, 0x2, 0x9, 0x7fff, 0x2, 0x99, 0x7, 0x5, 0x0, 0xfcde, 0x8000, 0xb, 0x3fe, 0x9, 0x5, 0x38, 0xa, 0xc, 0xceb, 0x7ff, 0x200, 0x1a, 0x8, 0x7fff, 0x3, 0xfffffffb, 0x8001, 0x10001, 0x6, 0x6, 0x200, 0x0, 0x4, 0x277, 0xcfa6, 0x50, 0x8, 0xffff3aa7, 0x8, 0xbf8, 0xbbb3, 0x5, 0xb, 0x8, 0x8, 0x4, 0x6e, 0x7fffffff, 0xaad, 0x4, 0x2, 0x9, 0x8, 0x8, 0x7, 0x7, 0x3, 0x3, 0x8, 0x8, 0x2, 0x1a93, 0x4, 0x9, 0x5, 0x5, 0x3, 0x8, 0x1, 0x3ff, 0x8000, 0x800, 0x7, 0x6, 0x0, 0x6, 0xfff, 0x3, 0x7, 0x80000001, 0x7, 0x7e8, 0x10001, 0x9]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x3}]}]}}, @filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ARP_THA={0xa, 0x41, @remote}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}, @TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_ARP_SHA_MASK={0xa, 0x40, [0xff, 0xff, 0xff, 0xff]}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}]}}]}, 0x1d48}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x40) r12 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r12, 0xf507, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 2m8.541122949s ago: executing program 33 (id=321): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230001) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) open(0x0, 0x147842, 0x88) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x10000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x400000000, 0x0) r6 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) shmat(r6, &(0x7f0000ff9000/0x1000)=nil, 0x4000) shmctl$IPC_RMID(r6, 0x0) capset(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000140)={0x4, 0x3, 0x641352225ed612c7, 0x1000, &(0x7f0000cb0000/0x1000)=nil}) close(r0) 1m49.491006949s ago: executing program 0 (id=353): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x88d}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1m48.914501035s ago: executing program 0 (id=355): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000000)=0xd, 0x4) syz_emit_ethernet(0x5e, &(0x7f00000005c0)=ANY=[@ANYBLOB="cf702e8cf675aaaaaaaaaabb86dd6000000000283afffe880000000000000000000000000001ff020000000000000000000000000001"], 0x0) 1m48.359286812s ago: executing program 0 (id=356): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x28, 0x9, 0x8, 0xfffff034}, {0x6, 0x0, 0x6c, 0xfffffffe}]}, 0x8) syz_emit_ethernet(0x3a, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004600002c000000000006"], 0x0) 1m47.668309995s ago: executing program 0 (id=357): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x2f, 0x0, 0x0, 0xcbb, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, 0x8000, 0x10, 0x101, 0xd66}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x2, 0x4038a09, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) 1m46.788746942s ago: executing program 0 (id=360): socketpair$unix(0x1, 0x2, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x8}) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c560a0677bc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010000081000418e00000004fcff", 0x58}], 0x1) 1m45.77470876s ago: executing program 0 (id=361): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) 1m43.368268827s ago: executing program 2 (id=363): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth1_virt_wifi\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="0b040700e0ff030002004788aa96a13bb100000000004305", 0x18, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14) 1m43.184613646s ago: executing program 2 (id=364): r0 = syz_usb_connect$cdc_ecm(0x2, 0x56, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000090000102505a1a4400000000101090244000101000000090400001202060000052406000005240000000d240f010000000000000000000905810340000000000905820260000000000905030208"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1m40.397144149s ago: executing program 2 (id=366): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b000905", @ANYRES32], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000180)={0x0, 0x0, 0x3, 'Yf\''}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m38.731099111s ago: executing program 4 (id=368): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 1m38.274305277s ago: executing program 4 (id=369): r0 = socket(0x11, 0x800000003, 0x96) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x1f, 0x2, {{0x3, [0x0, 0xe], 0x0, [0x4, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) 1m37.869890412s ago: executing program 4 (id=370): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="5ff8811cb3bfafb7c6f66aae9f16ef97a451da307e55c03989942c284e32122eff11c3d9a6985c6253de262835379bbe0ebbef776c4752c39c06916e713643863b6be74eff315ad29edb92691e10c4aa5f9af2d93d75500063ee0921bac1a3682a2971d8bdfe83aeea1e", 0x6a}, {&(0x7f00000001c0)="32d177d1fcf51533a11527465c39bfd8a27ca81cd092a37f69c3f44011ae92fc3c8c98f3b8cf9b86", 0x28}], 0x2, &(0x7f0000003600)=ANY=[@ANYBLOB="18000000000000002900000037000000ff0000002000000018"], 0x30}}], 0x1, 0x50d41de21d476b07) 1m37.491678446s ago: executing program 4 (id=371): sendmsg$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@iv={0x60, 0x117, 0x2, 0x45, "d5782052f63ec0a92ab76fd604c4e0399b0b82e79abed568cf1b91d37563f871a7fbdbff8fd958a8186ba184f86945d2ff5cab076de5d5eedc549e981f0319c70ca2285ef5"}], 0x60, 0x20000000}, 0x24000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x38, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) 1m37.081041289s ago: executing program 4 (id=372): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000300)={0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="40316f0000006f0161"], 0x0, 0x0, 0x0}, 0x0) 1m36.970263595s ago: executing program 2 (id=373): r0 = fsopen(&(0x7f0000000580)='overlay\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x11, 0x86dd, r2, 0x1, 0x7, 0x6, @broadcast}, 0x14) 1m36.495682289s ago: executing program 2 (id=374): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12012000f1048108cd060202d4920001000109021b1901000000d40904150001da40df000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 1m34.727419122s ago: executing program 4 (id=375): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000a80)={0x18, &(0x7f0000000800)=ANY=[@ANYBLOB="000af1"], 0x0, 0x0, 0x0, 0x0}, 0x0) 1m33.923483505s ago: executing program 5 (id=329): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x5, "1cbd00"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="01010000000000000000e705e040105226eca2986308f7b6", 0x18}], 0x1}, 0x800) 1m33.535984184s ago: executing program 6 (id=331): userfaultfd(0x801) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) r2 = socket(0x22, 0x2, 0x24) close(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) shutdown(r5, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r6 = fsopen(&(0x7f00000001c0)='squashfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x218, 0x0) r2 = socket(0x22, 0x2, 0x24) close(r2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) ftruncate(r4, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) shutdown(r5, 0x1) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r6 = fsopen(&(0x7f00000001c0)='squashfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x77e, 0x0, 0x0, 0x0) 25.342379275s ago: executing program 9 (id=399): r0 = memfd_secret(0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000005c0), 0x10) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x7}) read(r1, &(0x7f0000000800)=""/4073, 0xfe9) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x3, @local, 'vlan0\x00'}}, 0x1e) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x0) 25.009696453s ago: executing program 9 (id=400): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r3, 0x0) ppoll(&(0x7f0000000000)=[{r3, 0x200}], 0x1, &(0x7f00000002c0)={0x0, 0x989680}, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000001c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000004c0)="e0"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000200)=[@acquire, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x30, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x30}}, 0x0) 24.630891311s ago: executing program 9 (id=401): r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141101) dup(r0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@private1, 0x0, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xbb8) 18.991294865s ago: executing program 8 (id=402): r0 = creat(0x0, 0x8) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,u', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4}, [@FRA_FLOW={0x8, 0xb, 0xb05}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 18.180372227s ago: executing program 9 (id=403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f00009d7000/0x1000)=nil}) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x400}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16.249499256s ago: executing program 8 (id=404): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r1 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, &(0x7f00000003c0)=0x0, &(0x7f0000000300)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000240)={0x10000000}) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_TEE={0x21, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, 0x7}) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="06"], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, 0x0, 0x60, 0x185100}) io_uring_enter(r1, 0x7277, 0x0, 0x28, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) 15.988115147s ago: executing program 8 (id=405): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000800)={0x1, 0x0, [{0xdddd9000, 0xcd, &(0x7f00000008c0)=""/205}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf, @void, @value}, 0x94) 15.690762672s ago: executing program 8 (id=406): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x4000000805, 0x0) socket$packet(0x11, 0x3, 0x300) epoll_create1(0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 2.060130959s ago: executing program 39 (id=403): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f00009d7000/0x1000)=nil}) r2 = userfaultfd(0x1) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x400}) ioctl$UFFDIO_WRITEPROTECT(r2, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 40 (id=406): socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) socket$inet(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00') socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet(0x2, 0x4000000805, 0x0) socket$packet(0x11, 0x3, 0x300) epoll_create1(0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) kernel console output (not intermixed with test programs): T5920] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 168.844911][ T24] usb 1-1: Product: syz [ 168.850228][ T5920] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 168.863478][ T5912] usb 2-1: config 0 has no interfaces? [ 168.873598][ T24] usb 1-1: Manufacturer: syz [ 168.879548][ T24] usb 1-1: SerialNumber: syz [ 168.879683][ T5912] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 168.897717][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.914872][ T5912] usb 2-1: Product: syz [ 168.920862][ T5912] usb 2-1: Manufacturer: syz [ 168.928961][ T5912] usb 2-1: SerialNumber: syz [ 168.944852][ T24] ni6501 1-1:7.247: driver 'ni6501' failed to auto-configure device. [ 168.957766][ T5912] usb 2-1: config 0 descriptor?? [ 169.423051][ T6569] capability: warning: `syz.0.155' uses 32-bit capabilities (legacy support in use) [ 169.486534][ T6573] program syz.1.157 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 169.583883][ T5920] usb 5-1: USB disconnect, device number 10 [ 169.615811][ T6573] netdevsim netdevsim1 ªªªªªª: set [1, 1] type 2 family 0 port 20000 - 0 [ 169.629219][ T6573] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 169.649626][ T6573] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 169.699825][ T6573] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 169.742798][ T6550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.772120][ T880] usb 4-1: USB disconnect, device number 7 [ 169.794157][ T6573] geneve2: entered promiscuous mode [ 169.838016][ T6573] geneve2: entered allmulticast mode [ 169.932337][ T6573] netdevsim netdevsim1 ªªªªªª: unset [1, 1] type 2 family 0 port 20000 - 0 [ 169.941374][ T6573] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 169.953283][ T6573] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 169.963690][ T6573] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 170.112891][ T880] usb 1-1: USB disconnect, device number 7 [ 170.217705][ T6582] tipc: Started in network mode [ 170.224743][ T6582] tipc: Node identity -, cluster identity 4711 [ 170.650744][ T6592] af_packet: tpacket_rcv: packet too big, clamped from 122 to 4294967286. macoff=82 [ 171.586007][ T5912] usb 2-1: USB disconnect, device number 8 [ 171.595889][ T6599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.161'. [ 171.638481][ T6599] bridge_slave_1: left allmulticast mode [ 171.638502][ T6599] bridge_slave_1: left promiscuous mode [ 171.638667][ T6599] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.724120][ T6603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.163'. [ 171.730202][ T6599] bridge_slave_0: left allmulticast mode [ 171.730222][ T6599] bridge_slave_0: left promiscuous mode [ 171.738287][ T6599] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.570407][ T5965] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 172.686858][ T6595] syz.3.161: vmalloc error: size 268439552, failed to allocated page array size 524296, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 172.710159][ T6595] CPU: 0 UID: 0 PID: 6595 Comm: syz.3.161 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 172.710191][ T6595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 172.710203][ T6595] Call Trace: [ 172.710212][ T6595] [ 172.710220][ T6595] dump_stack_lvl+0x189/0x250 [ 172.710262][ T6595] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.710290][ T6595] ? __pfx__printk+0x10/0x10 [ 172.710310][ T6595] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 172.710330][ T6595] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 172.710351][ T6595] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 172.710374][ T6595] warn_alloc+0x214/0x310 [ 172.710401][ T6595] ? __pfx_warn_alloc+0x10/0x10 [ 172.710433][ T6595] ? __get_vm_area_node+0x28f/0x300 [ 172.710454][ T6595] ? xskq_create+0xbf/0x170 [ 172.710485][ T6595] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 172.710538][ T6595] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 172.710562][ T6595] ? __kasan_kmalloc+0x93/0xb0 [ 172.710593][ T6595] vmalloc_user_noprof+0xad/0xf0 [ 172.710612][ T6595] ? xskq_create+0xbf/0x170 [ 172.710639][ T6595] xskq_create+0xbf/0x170 [ 172.710670][ T6595] xsk_init_queue+0xb0/0x110 [ 172.710702][ T6595] xsk_setsockopt+0x4de/0x710 [ 172.710730][ T6595] ? __pfx_xsk_setsockopt+0x10/0x10 [ 172.710757][ T6595] ? __lock_acquire+0xab9/0xd20 [ 172.710784][ T6595] ? aa_sock_opt_perm+0x74/0x110 [ 172.710812][ T6595] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 172.710836][ T6595] ? __pfx_xsk_setsockopt+0x10/0x10 [ 172.710864][ T6595] do_sock_setsockopt+0x25a/0x3e0 [ 172.710888][ T6595] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 172.710907][ T6595] ? __fget_files+0x2a/0x420 [ 172.710933][ T6595] ? __fget_files+0x3a0/0x420 [ 172.710952][ T6595] ? __fget_files+0x2a/0x420 [ 172.710981][ T6595] __ia32_sys_setsockopt+0x18b/0x220 [ 172.711008][ T6595] __do_fast_syscall_32+0xb6/0x2b0 [ 172.711035][ T6595] do_fast_syscall_32+0x34/0x80 [ 172.711053][ T6595] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 172.711087][ T6595] RIP: 0023:0xf7f52539 [ 172.711106][ T6595] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 172.711122][ T6595] RSP: 002b:00000000f505555c EFLAGS: 00000206 ORIG_RAX: 000000000000016e [ 172.711144][ T6595] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 000000000000011b [ 172.711157][ T6595] RDX: 0000000000000002 RSI: 00000000800004c0 RDI: 0000000000000004 [ 172.711168][ T6595] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 172.711180][ T6595] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 172.711191][ T6595] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 172.711222][ T6595] [ 172.766961][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 172.779540][ T6595] Mem-Info: [ 172.995599][ T5965] usb 3-1: Using ep0 maxpacket: 32 [ 173.001714][ T6595] active_anon:6069 inactive_anon:0 isolated_anon:0 [ 173.001714][ T6595] active_file:10365 inactive_file:39839 isolated_file:0 [ 173.001714][ T6595] unevictable:768 dirty:350 writeback:0 [ 173.001714][ T6595] slab_reclaimable:9993 slab_unreclaimable:98340 [ 173.001714][ T6595] mapped:36214 shmem:1362 pagetables:1269 [ 173.001714][ T6595] sec_pagetables:0 bounce:0 [ 173.001714][ T6595] kernel_misc_reclaimable:0 [ 173.001714][ T6595] free:1300861 free_pcp:24518 free_cma:0 [ 173.050223][ T6595] Node 0 active_anon:24276kB inactive_anon:0kB active_file:41460kB inactive_file:159152kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:144856kB dirty:1396kB writeback:0kB shmem:3912kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12268kB pagetables:4920kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 173.063365][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.0.165'. [ 173.138818][ T5965] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 173.155027][ T6595] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 173.196216][ T6617] netlink: 'syz.0.165': attribute type 5 has an invalid length. [ 173.201179][ T5965] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 173.213494][ T6618] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'. [ 173.216598][ T6617] netlink: 28 bytes leftover after parsing attributes in process `syz.0.165'. [ 173.222390][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 173.222418][ T5965] usb 3-1: Product: syz [ 173.231728][ T6595] Node 0 [ 173.240525][ T5965] usb 3-1: Manufacturer: syz [ 173.254303][ T5965] usb 3-1: SerialNumber: syz [ 173.271282][ T5965] usb 3-1: config 0 descriptor?? [ 173.280023][ T6610] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 173.314906][ T6595] DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 173.347740][ T6595] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 173.357803][ T6595] Node 0 DMA32 free:1297020kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24500kB inactive_anon:0kB active_file:41460kB inactive_file:157340kB unevictable:1536kB writepending:1432kB present:3129332kB managed:2561020kB mlocked:0kB bounce:0kB free_pcp:69848kB local_pcp:48808kB free_cma:0kB [ 173.403987][ T6595] lowmem_reserve[]: 0 0 1 1 1 [ 173.412159][ T6595] Node 0 Normal free:28kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:52kB inactive_anon:0kB active_file:0kB inactive_file:1812kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 173.441510][ T6595] lowmem_reserve[]: 0 0 0 0 0 [ 173.446437][ T6595] Node 1 Normal free:3895736kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:22912kB local_pcp:8000kB free_cma:0kB [ 173.482030][ T6595] lowmem_reserve[]: 0 0 0 0 0 [ 173.487142][ T6595] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 173.500116][ T6595] Node 0 DMA32: 461*4kB (ME) 241*8kB (M) 174*16kB (UME) 68*32kB (ME) 16*64kB (ME) 1*128kB (U) 3*256kB (UM) 3*512kB (UE) 0*1024kB 1*2048kB (U) 313*4096kB (M) = 1296284kB [ 173.520408][ T6595] Node 0 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 28kB [ 173.533679][ T6595] Node 1 Normal: 214*4kB (UM) 52*8kB (UME) 44*16kB (UME) 92*32kB (UME) 32*64kB (UME) 7*128kB (UME) 7*256kB (UME) 2*512kB (M) 2*1024kB (ME) 2*2048kB (UE) 947*4096kB (M) = 3895736kB [ 173.560358][ T6595] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.569976][ T6595] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 173.608069][ T6595] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 173.619676][ T6595] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 173.629228][ T6595] 51563 total pagecache pages [ 173.634259][ T6595] 0 pages in swap cache [ 173.638551][ T6595] Free swap = 124996kB [ 173.643833][ T6595] Total swap = 124996kB [ 173.648186][ T6595] 2097051 pages RAM [ 173.652135][ T6595] 0 pages HighMem/MovableOnly [ 173.657088][ T6595] 424690 pages reserved [ 173.669596][ T5912] usb 3-1: USB disconnect, device number 11 [ 173.684203][ T6595] 0 pages cma reserved [ 173.917743][ T6611] bridge_slave_0: left allmulticast mode [ 173.923838][ T6611] bridge_slave_0: left promiscuous mode [ 173.929614][ T6611] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.952664][ T6611] bridge_slave_1: left allmulticast mode [ 173.958652][ T6611] bridge_slave_1: left promiscuous mode [ 174.001630][ T6611] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.010885][ T6603] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.163'. [ 174.026201][ T6603] netlink: zone id is out of range [ 174.034138][ T6603] netlink: zone id is out of range [ 174.039434][ T6603] netlink: zone id is out of range [ 174.045041][ T6603] netlink: zone id is out of range [ 174.051654][ T6603] netlink: zone id is out of range [ 174.056811][ T6603] netlink: zone id is out of range [ 174.065383][ T6603] netlink: zone id is out of range [ 174.089693][ T6611] bond0: (slave bond_slave_0): Releasing backup interface [ 174.100561][ T6603] netlink: zone id is out of range [ 174.119388][ T6603] netlink: zone id is out of range [ 174.125418][ T6603] netlink: zone id is out of range [ 174.163550][ T6611] bond0: (slave bond_slave_1): Releasing backup interface [ 174.198752][ T6611] team0: Port device team_slave_0 removed [ 174.212938][ T6611] team0: Port device team_slave_1 removed [ 174.219540][ T6611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.240514][ T6611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.251447][ T6611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.259141][ T6611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.286700][ T6611] bond1: (slave ip6gretap1): Removing an active aggregator [ 174.297428][ T6611] bond1: (slave ip6gretap1): Releasing backup interface [ 174.383560][ T30] kauditd_printk_skb: 61 callbacks suppressed [ 174.383581][ T30] audit: type=1326 audit(1750372940.450:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 174.386639][ T6611] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 92:c1:8b:d4:8e:21 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 174.431797][ T30] audit: type=1326 audit(1750372940.450:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 174.454655][ T30] audit: type=1326 audit(1750372940.450:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 174.484380][ T30] audit: type=1326 audit(1750372940.450:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 174.485152][ T6611] bond1: (slave veth3): Releasing backup interface [ 174.516305][ T30] audit: type=1326 audit(1750372940.450:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 174.640955][ T5912] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 174.697211][ T30] audit: type=1326 audit(1750372940.450:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=281 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 174.795847][ T30] audit: type=1326 audit(1750372940.450:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 174.841085][ T30] audit: type=1326 audit(1750372940.450:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 174.847189][ T5912] usb 4-1: config 0 has no interfaces? [ 174.944985][ T5912] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 174.960620][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.969081][ T5912] usb 4-1: Product: syz [ 175.015013][ T5912] usb 4-1: Manufacturer: syz [ 175.019832][ T5912] usb 4-1: SerialNumber: syz [ 175.027396][ T30] audit: type=1326 audit(1750372940.450:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 175.073780][ T5912] usb 4-1: config 0 descriptor?? [ 175.085231][ T30] audit: type=1326 audit(1750372940.450:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6621 comm="syz.3.166" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f52539 code=0x7ffc0000 [ 175.622070][ T6617] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 175.656180][ T6617] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 175.670451][ T6617] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 175.697420][ T6617] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 175.780362][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 175.817114][ T6617] geneve2: entered promiscuous mode [ 175.826322][ T6617] geneve2: entered allmulticast mode [ 177.171498][ T10] usb 2-1: config 0 has no interfaces? [ 177.195420][ T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 177.210416][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.273172][ T10] usb 2-1: Product: syz [ 177.300835][ T10] usb 2-1: Manufacturer: syz [ 177.314011][ T10] usb 2-1: SerialNumber: syz [ 177.351011][ T10] usb 2-1: config 0 descriptor?? [ 177.454060][ T10] usb 4-1: USB disconnect, device number 8 [ 177.490383][ T2154] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 178.062320][ T6652] netlink: 32 bytes leftover after parsing attributes in process `syz.3.171'. [ 178.233055][ T2154] usb 1-1: config 0 has no interfaces? [ 178.273292][ T2154] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 178.287432][ T2154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.415986][ T2154] usb 1-1: Product: syz [ 178.430643][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 178.480304][ T2154] usb 1-1: Manufacturer: syz [ 178.498931][ T2154] usb 1-1: SerialNumber: syz [ 178.516140][ T2154] usb 1-1: config 0 descriptor?? [ 178.791374][ T10] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 178.831139][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.030200][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 179.054324][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.090989][ T6647] program syz.0.170 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.177434][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 179.216825][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.283511][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 179.399622][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.475932][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 179.794509][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.807485][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 179.827849][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.840992][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 179.866361][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.881827][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 179.924885][ T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 179.935540][ T10] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9 [ 180.466753][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 180.476134][ T10] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 180.485008][ T10] usb 4-1: Product: syz [ 180.489325][ T10] usb 4-1: Manufacturer: syz [ 180.494762][ T10] usb 4-1: SerialNumber: syz [ 180.509326][ T10] usb 4-1: config 0 descriptor?? [ 180.880881][ T10] usb 2-1: USB disconnect, device number 9 [ 181.741363][ T5965] usb 4-1: USB disconnect, device number 9 [ 181.952143][ T5965] usb 1-1: USB disconnect, device number 8 [ 183.038852][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.176'. [ 184.110341][ T5965] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 184.346342][ T5965] usb 1-1: Using ep0 maxpacket: 32 [ 184.365037][ T5965] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 184.374725][ T5965] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 184.384390][ T5965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.545267][ T5965] usb 1-1: config 0 descriptor?? [ 184.650559][ T2154] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 184.745189][ T6696] input: syz1 as /devices/virtual/input/input13 [ 184.820744][ T2154] usb 3-1: Using ep0 maxpacket: 16 [ 184.831066][ T2154] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 184.905685][ T2154] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.062831][ T2154] usb 3-1: config 0 has no interface number 0 [ 185.193323][ T2154] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 185.202563][ T2154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.222167][ T2154] usb 3-1: Product: syz [ 185.249409][ T2154] usb 3-1: Manufacturer: syz [ 185.280398][ T2154] usb 3-1: SerialNumber: syz [ 185.458049][ T2154] usb 3-1: config 0 descriptor?? [ 185.610365][ T10] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 185.670198][ T2154] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 185.683861][ T2154] usb 3-1: No valid video chain found. [ 185.864342][ T10] usb 4-1: config 0 has no interfaces? [ 185.931068][ T10] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 185.940329][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.954333][ T10] usb 4-1: Product: syz [ 186.039737][ T10] usb 4-1: Manufacturer: syz [ 186.064106][ T10] usb 4-1: SerialNumber: syz [ 186.142995][ T10] usb 4-1: config 0 descriptor?? [ 187.160441][ T6726] xt_CT: You must specify a L4 protocol and not use inversions on it [ 187.510608][ T24] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 187.661011][ T5919] usb 3-1: USB disconnect, device number 12 [ 187.770384][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 187.800498][ T24] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 187.808548][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 187.907420][ T24] usb 2-1: config 0 has no interface number 0 [ 187.930429][ T24] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 187.935726][ T5965] usb 1-1: USB disconnect, device number 9 [ 188.095169][ T24] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.166277][ T24] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 188.190679][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.206285][ T24] usb 2-1: config 0 descriptor?? [ 188.386655][ T24] hso 2-1:0.1: Failed to find BULK IN ep [ 189.074372][ T6744] sctp: [Deprecated]: syz.0.186 (pid 6744) Use of int in max_burst socket option deprecated. [ 189.074372][ T6744] Use struct sctp_assoc_value instead [ 189.188064][ T880] usb 4-1: USB disconnect, device number 10 [ 189.442302][ T6748] netlink: 12 bytes leftover after parsing attributes in process `syz.2.187'. [ 189.499644][ T6749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.696517][ T6755] tipc: Started in network mode [ 190.719201][ T6755] tipc: Node identity -, cluster identity 4711 [ 190.830820][ T980] usb 2-1: USB disconnect, device number 10 [ 190.950370][ T5965] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 191.170625][ T5965] usb 1-1: config 0 has no interfaces? [ 191.674930][ T5965] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 191.779246][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.916555][ T5965] usb 1-1: Product: syz [ 191.981555][ T5965] usb 1-1: Manufacturer: syz [ 191.986222][ T5965] usb 1-1: SerialNumber: syz [ 192.248582][ T5965] usb 1-1: config 0 descriptor?? [ 192.510374][ T980] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 192.730783][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 192.788713][ T980] usb 3-1: unable to get BOS descriptor or descriptor too short [ 192.862047][ T980] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 192.889590][ T980] usb 3-1: config 1 interface 0 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.953827][ T6766] program syz.0.190 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 193.082233][ T6787] netdevsim netdevsim0 netdevsim0: set [1, 2] type 2 family 0 port 20000 - 0 [ 193.091582][ T6787] netdevsim netdevsim0 netdevsim1: set [1, 2] type 2 family 0 port 20000 - 0 [ 193.210574][ T980] usb 3-1: config 1 interface 0 has no altsetting 0 [ 193.364503][ T980] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40 [ 193.373978][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.382521][ T980] usb 3-1: Product: syz [ 193.386788][ T980] usb 3-1: Manufacturer: syz [ 193.400568][ T6787] netdevsim netdevsim0 netdevsim2: set [1, 2] type 2 family 0 port 20000 - 0 [ 193.420994][ T980] usb 3-1: SerialNumber: syz [ 193.460819][ T6787] netdevsim netdevsim0 netdevsim3: set [1, 2] type 2 family 0 port 20000 - 0 [ 193.500162][ T6787] geneve3: entered promiscuous mode [ 193.535132][ T6787] geneve3: entered allmulticast mode [ 193.851565][ T5965] IPVS: starting estimator thread 0... [ 193.949316][ T6787] netdevsim netdevsim0 netdevsim0: unset [1, 2] type 2 family 0 port 20000 - 0 [ 193.970489][ T6792] IPVS: using max 25 ests per chain, 60000 per kthread [ 194.019465][ T6787] netdevsim netdevsim0 netdevsim1: unset [1, 2] type 2 family 0 port 20000 - 0 [ 194.041878][ T6772] trusted_key: encrypted_key: insufficient parameters specified [ 194.139385][ T6787] netdevsim netdevsim0 netdevsim2: unset [1, 2] type 2 family 0 port 20000 - 0 [ 194.156757][ T6787] netdevsim netdevsim0 netdevsim3: unset [1, 2] type 2 family 0 port 20000 - 0 [ 194.465510][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.473959][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.527300][ T2154] usb 1-1: USB disconnect, device number 10 [ 196.179163][ T6818] netlink: 'syz.0.196': attribute type 9 has an invalid length. [ 196.244934][ T980] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 196.315237][ T980] usb 3-1: USB disconnect, device number 13 [ 197.411584][ T6838] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3527266299 (28218130392 ns) > initial count (9270480872 ns). Using initial count to start timer. [ 197.440036][ T2154] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 197.720416][ T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 197.728656][ T2154] usb 4-1: Using ep0 maxpacket: 8 [ 197.932961][ T2154] usb 4-1: config 0 has no interfaces? [ 197.942000][ T2154] usb 4-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 197.962540][ T24] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 197.971404][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.987442][ T2154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.008459][ T24] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 198.060566][ T24] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 198.070163][ T2154] usb 4-1: config 0 descriptor?? [ 198.190427][ T24] usb 1-1: Manufacturer: syz [ 198.217459][ T24] usb 1-1: config 0 descriptor?? [ 198.850360][ T24] rc_core: IR keymap rc-hauppauge not found [ 198.894066][ T24] Registered IR keymap rc-empty [ 198.969130][ T24] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 199.067042][ T24] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input14 [ 199.364423][ T980] usb 1-1: USB disconnect, device number 11 [ 199.802873][ T6876] xt_CT: You must specify a L4 protocol and not use inversions on it [ 200.001911][ T2154] usb 4-1: USB disconnect, device number 11 [ 200.210481][ T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 200.391219][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 200.405814][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 200.419682][ T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.442562][ T24] usb 5-1: config 0 has no interface number 0 [ 200.449129][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 200.596704][ T24] usb 5-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.920420][ T2154] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 200.970393][ T24] usb 5-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 200.984339][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.008681][ T24] usb 5-1: config 0 descriptor?? [ 201.028094][ T24] hso 5-1:0.1: Failed to find BULK IN ep [ 201.110346][ T2154] usb 2-1: Using ep0 maxpacket: 8 [ 201.117327][ T2154] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xAD, changing to 0x8D [ 201.330451][ T2154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 201.363882][ T2154] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 201.390556][ T2154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 201.506654][ T2154] usb 2-1: New USB device found, idVendor=0bfd, idProduct=0124, bcdDevice=3a.9f [ 201.520613][ T2154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.528804][ T2154] usb 2-1: Product: syz [ 201.533339][ T2154] usb 2-1: Manufacturer: syz [ 201.537988][ T2154] usb 2-1: SerialNumber: syz [ 201.555223][ T2154] usb 2-1: config 0 descriptor?? [ 201.629270][ T2154] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s) [ 201.820681][ T980] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 202.145912][ T980] usb 3-1: Using ep0 maxpacket: 16 [ 202.227133][ T980] usb 3-1: config 0 has an invalid interface number: 4 but max is 0 [ 202.350658][ T980] usb 3-1: config 0 has no interface number 0 [ 202.357609][ T980] usb 3-1: config 0 interface 4 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 202.696389][ T980] usb 3-1: string descriptor 0 read error: -71 [ 202.718068][ T980] usb 3-1: New USB device found, idVendor=05c6, idProduct=9000, bcdDevice=45.8e [ 202.727687][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.750173][ T980] usb 3-1: config 0 descriptor?? [ 202.842302][ T980] usb 3-1: can't set config #0, error -71 [ 202.865460][ T6895] trusted_key: encrypted_key: insufficient parameters specified [ 203.050544][ T980] usb 3-1: USB disconnect, device number 14 [ 203.357260][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.208'. [ 203.370442][ T980] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 203.387700][ T2154] usb 5-1: USB disconnect, device number 11 [ 203.656123][ T2154] usb 2-1: USB disconnect, device number 11 [ 203.694824][ T980] usb 3-1: config 0 has no interfaces? [ 203.810412][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 203.826164][ T980] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 203.910510][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.951396][ T980] usb 3-1: Product: syz [ 203.955660][ T980] usb 3-1: Manufacturer: syz [ 203.971334][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 204.016646][ T9] usb 4-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 204.030442][ T980] usb 3-1: SerialNumber: syz [ 204.049907][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.061703][ T980] usb 3-1: config 0 descriptor?? [ 204.103082][ T9] usb 4-1: Product: syz [ 204.128082][ T9] usb 4-1: Manufacturer: syz [ 204.143713][ T9] usb 4-1: SerialNumber: syz [ 204.179127][ T9] usb 4-1: config 0 descriptor?? [ 204.227446][ T9] usb 4-1: selecting invalid altsetting 3 [ 204.239681][ T6924] fuse: root generation should be zero [ 204.407043][ T6907] program syz.2.207 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.476315][ T6907] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 204.485464][ T9] comedi comedi0: could not set alternate setting 3 in high speed [ 204.499479][ T6907] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 204.515437][ T6907] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 204.534833][ T9] usbdux 4-1:0.0: driver 'usbdux' failed to auto-configure device. [ 204.551878][ T6907] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 204.564617][ T9] usbdux 4-1:0.0: probe with driver usbdux failed with error -22 [ 204.629219][ T9] usb 4-1: USB disconnect, device number 12 [ 204.644969][ T6907] geneve2: entered promiscuous mode [ 204.651063][ T6907] geneve2: entered allmulticast mode [ 204.779865][ T6907] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 204.837501][ T6907] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 204.866885][ T6907] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 204.896032][ T6907] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 205.262170][ T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 205.545114][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 205.612452][ T9] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 205.626814][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 205.722999][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 205.822768][ T6949] netlink: 7464 bytes leftover after parsing attributes in process `syz.3.214'. [ 205.906659][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 205.953215][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 206.004516][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 206.036592][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.373403][ T9] usb 1-1: GET_CAPABILITIES returned 0 [ 206.390728][ T9] usbtmc 1-1:16.0: can't read capabilities [ 206.440997][ T10] usb 3-1: USB disconnect, device number 15 [ 206.582447][ T6932] syz.0.212(6932): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 206.599712][ T2154] usb 1-1: USB disconnect, device number 12 [ 206.630447][ T5965] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 206.824602][ T5965] usb 5-1: Using ep0 maxpacket: 16 [ 206.865938][ T5965] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 206.905690][ T5965] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C [ 206.923350][ T6962] fuse: Bad value for 'fd' [ 206.935316][ T6949] team0 (unregistering): Port device team_slave_0 removed [ 206.951363][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 7 [ 206.985788][ T6965] tipc: Can't bind to reserved service type 2 [ 206.995451][ T5965] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 207.015909][ T6949] team0 (unregistering): Port device team_slave_1 removed [ 207.046576][ T5965] usb 5-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f [ 207.064409][ T5965] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.075823][ T5965] usb 5-1: Product: syz [ 207.163827][ T5965] usb 5-1: Manufacturer: syz [ 207.197134][ T5965] usb 5-1: SerialNumber: syz [ 207.229370][ T5965] usb 5-1: config 0 descriptor?? [ 207.412225][ T5965] rc_core: IR keymap rc-xbox-dvd not found [ 207.418161][ T5965] Registered IR keymap rc-empty [ 207.608735][ T5965] rc rc0: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 207.696507][ T5965] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input15 [ 207.974571][ T6980] input: syz0 as /devices/virtual/input/input16 [ 209.724045][ T6991] syz_tun: entered allmulticast mode [ 209.738969][ T6990] syz_tun: left allmulticast mode [ 210.521397][ T980] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 210.730893][ T980] usb 2-1: Using ep0 maxpacket: 32 [ 210.798229][ T980] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 210.807585][ T980] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.931168][ T980] usb 2-1: config 0 descriptor?? [ 210.965067][ T980] gspca_main: sunplus-2.14.0 probing 041e:400b [ 211.861082][ T980] gspca_sunplus: reg_w_riv err -110 [ 211.866764][ T980] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 212.313314][ T9] usb 5-1: USB disconnect, device number 12 [ 212.319316][ C0] xbox_remote 5-1:0.0: xbox_remote_irq_in: usb_submit_urb()=-19 [ 213.483673][ T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 213.731618][ T9] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 213.743223][ T9] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 213.791639][ T9] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 213.821599][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.851466][ T7012] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 213.864207][ T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 214.994673][ T7021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.231'. [ 215.486681][ T2154] usb 2-1: USB disconnect, device number 12 [ 216.194971][ T2154] usb 5-1: USB disconnect, device number 13 [ 216.226391][ T7011] delete_channel: no stack [ 217.275935][ T30] kauditd_printk_skb: 52 callbacks suppressed [ 217.275953][ T30] audit: type=1326 audit(1750372983.340:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 217.375759][ T30] audit: type=1326 audit(1750372983.340:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=277 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 217.407248][ T30] audit: type=1326 audit(1750372983.350:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 217.457080][ T30] audit: type=1326 audit(1750372983.350:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=281 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 217.557333][ T30] audit: type=1326 audit(1750372983.350:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 217.601025][ T980] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 217.649119][ T30] audit: type=1326 audit(1750372983.350:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 217.695166][ T7052] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 217.724204][ T30] audit: type=1326 audit(1750372983.350:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 217.755203][ T30] audit: type=1326 audit(1750372983.350:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 217.853808][ T980] usb 5-1: config 0 has no interfaces? [ 217.916906][ T980] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 217.944550][ T980] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.961775][ T980] usb 5-1: Product: syz [ 217.968244][ T980] usb 5-1: Manufacturer: syz [ 217.975970][ T980] usb 5-1: SerialNumber: syz [ 217.988353][ T980] usb 5-1: config 0 descriptor?? [ 218.003177][ T30] audit: type=1326 audit(1750372983.350:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=4 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 218.133997][ T30] audit: type=1326 audit(1750372983.350:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7036 comm="syz.4.236" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f27539 code=0x7ffc0000 [ 218.460474][ T980] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 218.903503][ T980] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 218.967681][ T980] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.021330][ T980] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 219.030712][ T980] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 219.046923][ T980] usb 2-1: Manufacturer: syz [ 219.067483][ T980] usb 2-1: config 0 descriptor?? [ 219.284648][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.0.242'. [ 219.426117][ T7066] IPVS: sync thread started: state = BACKUP, mcast_ifn = netdevsim0, syncid = 67108897, id = 0 [ 219.481039][ T980] rc_core: IR keymap rc-hauppauge not found [ 219.496539][ T980] Registered IR keymap rc-empty [ 219.799625][ T980] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 219.826710][ T980] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input18 [ 220.480366][ T2154] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 220.636481][ T10] usb 2-1: USB disconnect, device number 13 [ 220.699604][ T2154] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 220.770349][ T2154] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 220.858745][ T10] usb 5-1: USB disconnect, device number 14 [ 220.910907][ T2154] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 220.957570][ T2154] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.001857][ T7071] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 221.013148][ T2154] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 222.530410][ T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 222.796180][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 222.874468][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 223.624444][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 223.686916][ T5920] usb 3-1: USB disconnect, device number 16 [ 223.720087][ T7070] delete_channel: no stack [ 223.860374][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.947675][ T7083] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 223.960007][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 225.269402][ T7099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.250'. [ 225.610711][ T9] usb 1-1: USB disconnect, device number 13 [ 227.046439][ T10] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 227.352989][ T10] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 227.407797][ T10] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 227.449943][ T10] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 227.483319][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.530732][ T7130] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 227.599497][ T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 228.925649][ T7149] netlink: 8 bytes leftover after parsing attributes in process `syz.3.265'. [ 229.015508][ T7152] netlink: 7464 bytes leftover after parsing attributes in process `syz.4.268'. [ 229.127727][ T7159] nftables ruleset with unbound chain [ 229.351635][ T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 229.389159][ T7161] random: crng reseeded on system resumption [ 229.591058][ T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 229.630558][ T9] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 229.675646][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 229.685749][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.708236][ T7157] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 229.727356][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 229.826917][ T5919] usb 1-1: USB disconnect, device number 14 [ 229.858097][ T7129] delete_channel: no stack [ 230.104107][ T7152] team0 (unregistering): Port device team_slave_0 removed [ 230.328963][ T7152] team0 (unregistering): Port device team_slave_1 removed [ 231.517628][ T7178] usb usb1: usbfs: process 7178 (syz.3.278) did not claim interface 0 before use [ 231.733419][ T7183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.279'. [ 231.940808][ T5919] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 232.026606][ T2154] usb 3-1: USB disconnect, device number 17 [ 232.141821][ T5919] usb 1-1: Using ep0 maxpacket: 16 [ 232.177649][ T5919] usb 1-1: config 0 has no interfaces? [ 232.192503][ T5919] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 232.217383][ T5919] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 232.239487][ T5919] usb 1-1: Manufacturer: syz [ 232.261475][ T5919] usb 1-1: config 0 descriptor?? [ 232.613854][ T7180] lo: entered promiscuous mode [ 232.623318][ T7180] tunl0: entered promiscuous mode [ 232.635668][ T7180] gre0: entered promiscuous mode [ 232.643326][ T7180] gretap0: entered promiscuous mode [ 232.648669][ T7180] net_ratelimit: 9 callbacks suppressed [ 232.648679][ T7180] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 232.756602][ T2154] usb 1-1: USB disconnect, device number 15 [ 234.553462][ T7229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.295'. [ 235.143215][ T7239] netlink: 7464 bytes leftover after parsing attributes in process `syz.3.301'. [ 235.989186][ T5919] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 236.310534][ T5919] usb 5-1: Using ep0 maxpacket: 16 [ 236.327822][ T5919] usb 5-1: config 0 has no interfaces? [ 236.337700][ T5919] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 236.356166][ T5919] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 236.598498][ T5919] usb 5-1: Manufacturer: syz [ 236.693803][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.309'. [ 236.708205][ T5919] usb 5-1: config 0 descriptor?? [ 236.803576][ T7271] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 237.102399][ T7255] lo: entered promiscuous mode [ 237.109338][ T7255] tunl0: entered promiscuous mode [ 237.118150][ T7255] gre0: entered promiscuous mode [ 237.154065][ T7255] gretap0: entered promiscuous mode [ 237.166394][ T7255] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 237.192031][ T5919] usb 5-1: USB disconnect, device number 15 [ 243.476755][ T7302] netlink: 4 bytes leftover after parsing attributes in process `syz.0.326'. [ 249.154683][ C1] sched: DL replenish lagged too much [ 255.910578][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.916962][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.590392][ T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 256.828310][ T10] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 256.932860][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.067749][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.185618][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 257.291814][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.375662][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.473841][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 257.565439][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.641815][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 257.757078][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 257.837585][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 257.916371][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.030325][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 258.109230][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.180149][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.221037][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.338'. [ 258.262501][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 258.343155][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.408264][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.502090][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 258.600540][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.609521][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.760383][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 258.812827][ T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 258.825688][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 258.838931][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 258.860991][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 258.873342][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 258.881438][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.909659][ T10] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 258.939553][ T10] usb 3-1: config 0 interface 0 has no altsetting 0 [ 258.953634][ T10] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 258.967747][ T10] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 258.976734][ T10] usb 3-1: Product: syz [ 258.981337][ T10] usb 3-1: Manufacturer: syz [ 258.986037][ T10] usb 3-1: SerialNumber: syz [ 258.998909][ T10] usb 3-1: config 0 descriptor?? [ 259.025563][ T10] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 259.214973][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 259.234963][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 259.245026][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 259.256060][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 259.269276][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 259.280608][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 259.290943][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 259.298645][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 259.340191][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 259.350788][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 259.492603][ T10] usb 3-1: USB disconnect, device number 18 [ 259.538003][ T10] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 261.340469][ T51] Bluetooth: hci2: command tx timeout [ 261.420409][ T51] Bluetooth: hci4: command tx timeout [ 263.421140][ T51] Bluetooth: hci2: command tx timeout [ 263.500420][ T51] Bluetooth: hci4: command tx timeout [ 265.500622][ T51] Bluetooth: hci2: command tx timeout [ 265.581123][ T51] Bluetooth: hci4: command tx timeout [ 267.580345][ T51] Bluetooth: hci2: command tx timeout [ 267.660361][ T51] Bluetooth: hci4: command tx timeout [ 272.578754][ T7341] chnl_net:caif_netlink_parms(): no params data found [ 272.730612][ T980] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 272.920577][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 272.946654][ T980] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 272.970890][ T10] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 272.994103][ T980] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.061968][ T980] usb 3-1: config 0 descriptor?? [ 273.165667][ T7340] chnl_net:caif_netlink_parms(): no params data found [ 273.196434][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 273.210407][ T10] usb 5-1: config 0 has no interface number 0 [ 273.257933][ T10] usb 5-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 273.315276][ T980] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 273.329943][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.383536][ T980] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 273.416879][ T10] usb 5-1: config 0 descriptor?? [ 273.475303][ T10] usb 5-1: selecting invalid altsetting 1 [ 273.498084][ T980] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 273.548613][ T10] dvb_ttusb_budget: ttusb_init_controller: error [ 273.576282][ T980] usb 3-1: media controller created [ 273.631002][ T10] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 273.827614][ T980] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 274.002819][ T980] az6027: usb out operation failed. (-71) [ 274.093932][ T980] az6027: usb out operation failed. (-71) [ 274.099734][ T980] stb0899_attach: Driver disabled by Kconfig [ 274.210552][ T980] az6027: no front-end attached [ 274.210552][ T980] [ 274.308705][ T980] az6027: usb out operation failed. (-71) [ 274.369925][ T980] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 274.467966][ T980] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input21 [ 274.480903][ T10] DVB: Unable to find symbol cx22700_attach() [ 274.630438][ T980] dvb-usb: schedule remote query interval to 400 msecs. [ 274.682152][ T980] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 274.721310][ T7341] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.797897][ T7341] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.863452][ T7341] bridge_slave_0: entered allmulticast mode [ 274.883570][ T980] usb 3-1: USB disconnect, device number 19 [ 274.945646][ T7341] bridge_slave_0: entered promiscuous mode [ 274.999355][ T10] DVB: Unable to find symbol tda10046_attach() [ 275.059388][ T7341] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.078036][ T10] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 275.153856][ T7341] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.216508][ T10] usb 5-1: USB disconnect, device number 16 [ 275.242371][ T7341] bridge_slave_1: entered allmulticast mode [ 275.335985][ T7341] bridge_slave_1: entered promiscuous mode [ 275.415911][ T7402] capability: warning: `syz.0.360' uses deprecated v2 capabilities in a way that may be insecure [ 275.503290][ T980] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 275.921441][ T980] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 276.091440][ T980] usb 3-1: Using ep0 maxpacket: 32 [ 276.110476][ T980] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 276.132261][ T7341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.148644][ T980] usb 3-1: config 0 has no interface number 0 [ 276.185707][ T980] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 276.218470][ T7341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.239548][ T980] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.267386][ T980] usb 3-1: Product: syz [ 276.274459][ T7340] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.300536][ T980] usb 3-1: Manufacturer: syz [ 276.305494][ T7340] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.331376][ T980] usb 3-1: SerialNumber: syz [ 276.336720][ T7340] bridge_slave_0: entered allmulticast mode [ 276.360014][ T980] usb 3-1: config 0 descriptor?? [ 276.392656][ T7340] bridge_slave_0: entered promiscuous mode [ 276.405506][ T980] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 276.741816][ T7340] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.789692][ T7340] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.827655][ T7340] bridge_slave_1: entered allmulticast mode [ 276.920647][ T7340] bridge_slave_1: entered promiscuous mode [ 276.937489][ T980] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 277.028428][ T980] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 277.139137][ T7341] team0: Port device team_slave_0 added [ 277.285054][ T7341] team0: Port device team_slave_1 added [ 277.446010][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 48 [ 277.664836][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 277.676095][ T9] usb 3-1: USB disconnect, device number 20 [ 277.722378][ T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 277.799833][ T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 277.865007][ T9] quatech2 3-1:0.51: device disconnected [ 278.053723][ T7340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.102505][ T7341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.119770][ T7341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.172288][ T7341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.189649][ T7340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.202164][ T7341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.209160][ T7341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.281537][ T7341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.411580][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 278.612483][ T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 278.637295][ T7340] team0: Port device team_slave_0 added [ 278.651832][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.714294][ T9] usb 5-1: config 0 descriptor?? [ 278.764244][ T9] cp210x 5-1:0.0: cp210x converter detected [ 278.942620][ T7340] team0: Port device team_slave_1 added [ 279.030794][ T5952] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 279.211521][ T5952] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 279.231341][ T9] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 279.254947][ T5952] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 96, setting to 64 [ 279.294692][ T9] usb 5-1: cp210x converter now attached to ttyUSB0 [ 279.318894][ T5952] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 279.358076][ T7340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.380375][ T7340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.455474][ T5952] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 279.512834][ T5952] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 279.533126][ T9] usb 5-1: USB disconnect, device number 17 [ 279.539843][ T7340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.583069][ T5952] usb 3-1: SerialNumber: syz [ 279.589470][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 279.634794][ T7413] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 279.684687][ T7341] hsr_slave_0: entered promiscuous mode [ 279.693167][ T5952] hub 3-1:1.0: bad descriptor, ignoring hub [ 279.699213][ T5952] hub 3-1:1.0: probe with driver hub failed with error -5 [ 279.724217][ T9] cp210x 5-1:0.0: device disconnected [ 279.741720][ T7341] hsr_slave_1: entered promiscuous mode [ 279.778279][ T7341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.818839][ T7341] Cannot create hsr debugfs directory [ 279.835666][ T7340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.853748][ T7340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 279.912515][ T7413] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 279.945585][ T7340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.563576][ T7340] hsr_slave_0: entered promiscuous mode [ 280.575542][ T7340] hsr_slave_1: entered promiscuous mode [ 280.595145][ T7340] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.613774][ T7340] Cannot create hsr debugfs directory [ 280.657064][ T5952] cdc_ether 3-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 280.668947][ T980] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 280.751310][ T5952] usb 3-1: USB disconnect, device number 21 [ 280.774170][ T5952] cdc_ether 3-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 280.864993][ T980] usb 5-1: Using ep0 maxpacket: 16 [ 280.894167][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 280.934666][ T980] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 280.954320][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 281.023009][ T980] usb 5-1: config 0 descriptor?? [ 281.543233][ T980] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 282.049653][ T980] usb 5-1: USB disconnect, device number 18 [ 282.297349][ T7341] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 282.337404][ T7341] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 282.366902][ T7341] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 282.458676][ T7341] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 282.765355][ T7340] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 282.870744][ T7340] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 282.920501][ T7340] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 282.994511][ T7340] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 283.191875][ T7433] netlink: 'syz.4.368': attribute type 12 has an invalid length. [ 283.210816][ T7433] netlink: 'syz.4.368': attribute type 29 has an invalid length. [ 283.218713][ T7433] netlink: 148 bytes leftover after parsing attributes in process `syz.4.368'. [ 283.267044][ T7433] netlink: 59 bytes leftover after parsing attributes in process `syz.4.368'. [ 283.611696][ T7341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.696340][ T7435] netlink: 64 bytes leftover after parsing attributes in process `syz.4.369'. [ 283.737309][ T7341] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.864294][ T7340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.927115][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.934406][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.038265][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.045547][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.168613][ T7340] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.297294][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.304580][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.377555][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.384899][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.029945][ T7341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.106393][ T7340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.220444][ T980] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 285.400432][ T980] usb 5-1: Using ep0 maxpacket: 32 [ 285.432526][ T980] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 285.469918][ T7340] veth0_vlan: entered promiscuous mode [ 285.507133][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 285.584786][ T980] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 285.616578][ T7341] veth0_vlan: entered promiscuous mode [ 285.629353][ T980] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 285.645900][ T7340] veth1_vlan: entered promiscuous mode [ 285.660960][ T980] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.708490][ T7341] veth1_vlan: entered promiscuous mode [ 285.732034][ T980] usb 5-1: config 0 descriptor?? [ 285.750111][ T7441] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 285.802994][ T980] hub 5-1:0.0: USB hub found [ 285.943630][ T7340] veth0_macvtap: entered promiscuous mode [ 286.017031][ T7340] veth1_macvtap: entered promiscuous mode [ 286.035102][ T980] hub 5-1:0.0: config failed, hub has too many ports! (err -19) [ 286.157808][ T7341] veth0_macvtap: entered promiscuous mode [ 286.210265][ T7340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.256469][ T7341] veth1_macvtap: entered promiscuous mode [ 286.272482][ T980] usbhid 5-1:0.0: can't add hid device: -71 [ 286.295272][ T980] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 286.334035][ T7340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.363148][ T980] usb 5-1: USB disconnect, device number 19 [ 286.419932][ T7340] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.451289][ T7340] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.496177][ T7340] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.528263][ T7340] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.559804][ T7341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.619731][ T7341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.688803][ T7341] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.711348][ T7341] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.725840][ T7341] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.736914][ T7341] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.223516][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.255801][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.384590][ T4872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.409749][ T4872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.418588][ T10] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 287.519428][ T2907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.559838][ T2907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.590754][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 287.623556][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.669738][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.702608][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.721857][ T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 287.744876][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.759821][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.862726][ T10] usb 5-1: config 0 descriptor?? [ 287.882433][ T10] hub 5-1:0.0: USB hub found [ 288.144203][ T10] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 288.379562][ T10] usbhid 5-1:0.0: can't add hid device: -71 [ 288.424515][ T10] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 288.544421][ T10] usb 5-1: USB disconnect, device number 20 [ 288.667513][ T7455] delete_channel: no stack [ 313.126395][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 313.148211][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 313.158062][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 313.167696][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 313.176494][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 313.686987][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 313.701641][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 313.710769][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 313.745256][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 313.754500][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 313.858615][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 313.868579][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 313.879194][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 313.918029][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 313.926575][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 314.011314][ T5156] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 314.029635][ T5156] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 314.047008][ T5156] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 314.070955][ T5156] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 314.086625][ T5156] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 314.439214][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 314.448402][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 314.457458][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 314.507036][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 314.514994][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 315.270417][ T51] Bluetooth: hci1: command tx timeout [ 315.824913][ T51] Bluetooth: hci2: command tx timeout [ 316.065429][ T51] Bluetooth: hci3: command tx timeout [ 316.140550][ T51] Bluetooth: hci5: command tx timeout [ 316.551028][ T5156] Bluetooth: hci6: command tx timeout [ 317.364280][ T5156] Bluetooth: hci1: command tx timeout [ 317.371604][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.378123][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.442640][ T7472] chnl_net:caif_netlink_parms(): no params data found [ 317.905754][ T5156] Bluetooth: hci2: command tx timeout [ 317.926869][ T7475] chnl_net:caif_netlink_parms(): no params data found [ 317.969996][ T7476] chnl_net:caif_netlink_parms(): no params data found [ 318.014853][ T7468] chnl_net:caif_netlink_parms(): no params data found [ 318.037122][ T7478] chnl_net:caif_netlink_parms(): no params data found [ 318.141258][ T5156] Bluetooth: hci3: command tx timeout [ 318.227080][ T5156] Bluetooth: hci5: command tx timeout [ 318.623969][ T5156] Bluetooth: hci6: command tx timeout [ 318.981133][ T7472] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.999575][ T7472] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.012725][ T7472] bridge_slave_0: entered allmulticast mode [ 319.038592][ T7472] bridge_slave_0: entered promiscuous mode [ 319.241820][ T7472] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.249047][ T7472] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.268957][ T7472] bridge_slave_1: entered allmulticast mode [ 319.305379][ T7472] bridge_slave_1: entered promiscuous mode [ 319.422128][ T5156] Bluetooth: hci1: command tx timeout [ 319.982042][ T5156] Bluetooth: hci2: command tx timeout [ 319.994362][ T7476] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.019973][ T7476] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.038969][ T7476] bridge_slave_0: entered allmulticast mode [ 320.047462][ T7476] bridge_slave_0: entered promiscuous mode [ 320.080075][ T7476] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.090625][ T7476] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.113123][ T7476] bridge_slave_1: entered allmulticast mode [ 320.132410][ T7476] bridge_slave_1: entered promiscuous mode [ 320.152831][ T7472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.221505][ T5156] Bluetooth: hci3: command tx timeout [ 320.301848][ T5156] Bluetooth: hci5: command tx timeout [ 320.475805][ T7475] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.495330][ T7475] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.515442][ T7475] bridge_slave_0: entered allmulticast mode [ 320.531137][ T7475] bridge_slave_0: entered promiscuous mode [ 320.676372][ T7472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.702650][ T5156] Bluetooth: hci6: command tx timeout [ 320.711040][ T7468] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.718259][ T7468] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.747149][ T7468] bridge_slave_0: entered allmulticast mode [ 320.763572][ T7468] bridge_slave_0: entered promiscuous mode [ 320.780998][ T7478] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.788238][ T7478] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.818074][ T7478] bridge_slave_0: entered allmulticast mode [ 320.842240][ T7478] bridge_slave_0: entered promiscuous mode [ 320.864702][ T7475] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.886568][ T7475] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.900957][ T7475] bridge_slave_1: entered allmulticast mode [ 320.916090][ T7475] bridge_slave_1: entered promiscuous mode [ 321.136040][ T7468] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.154087][ T7468] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.184610][ T7468] bridge_slave_1: entered allmulticast mode [ 321.204096][ T7468] bridge_slave_1: entered promiscuous mode [ 321.305768][ T7478] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.313612][ T7478] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.334588][ T7478] bridge_slave_1: entered allmulticast mode [ 321.354961][ T7478] bridge_slave_1: entered promiscuous mode [ 321.469113][ T7476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.502376][ T5156] Bluetooth: hci1: command tx timeout [ 321.974138][ T7476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.064121][ T5156] Bluetooth: hci2: command tx timeout [ 322.168123][ T7472] team0: Port device team_slave_0 added [ 322.196806][ T7468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.301281][ T5156] Bluetooth: hci3: command tx timeout [ 322.332566][ T7475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.381896][ T5156] Bluetooth: hci5: command tx timeout [ 322.474402][ T7472] team0: Port device team_slave_1 added [ 322.496287][ T7468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.531713][ T7478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.562537][ T7475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.596406][ T7476] team0: Port device team_slave_0 added [ 322.791065][ T5156] Bluetooth: hci6: command tx timeout [ 322.950901][ T7478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.192715][ T7476] team0: Port device team_slave_1 added [ 323.296741][ T7468] team0: Port device team_slave_0 added [ 323.317166][ T7468] team0: Port device team_slave_1 added [ 323.895277][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.910280][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.947755][ T7472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.000920][ T7472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.007937][ T7472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.050796][ T7472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.223096][ T7478] team0: Port device team_slave_0 added [ 324.245730][ T7475] team0: Port device team_slave_0 added [ 324.273130][ T7475] team0: Port device team_slave_1 added [ 324.280151][ T7476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.299792][ T7476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.346198][ T7476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.395756][ T7476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 324.415007][ T7476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.460657][ T7476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.581165][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.588359][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.628598][ T7468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.648494][ T7478] team0: Port device team_slave_1 added [ 325.042519][ T7468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.049537][ T7468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.089648][ T7468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.295386][ T7475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.312209][ T7475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.363397][ T7475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.521795][ T7472] hsr_slave_0: entered promiscuous mode [ 325.541731][ T7472] hsr_slave_1: entered promiscuous mode [ 325.557648][ T7472] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.589447][ T7472] Cannot create hsr debugfs directory [ 325.726917][ T7478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.741193][ T7478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.779893][ T7478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.815202][ T7475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.838167][ T7475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.876558][ T7475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.084060][ T7476] hsr_slave_0: entered promiscuous mode [ 326.101242][ T7476] hsr_slave_1: entered promiscuous mode [ 326.107802][ T7476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.126781][ T7476] Cannot create hsr debugfs directory [ 326.148262][ T7478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.167732][ T7478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.206005][ T7478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.738694][ T7468] hsr_slave_0: entered promiscuous mode [ 326.752792][ T7468] hsr_slave_1: entered promiscuous mode [ 326.769988][ T7468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.778498][ T7468] Cannot create hsr debugfs directory [ 327.342549][ T7478] hsr_slave_0: entered promiscuous mode [ 327.349564][ T7478] hsr_slave_1: entered promiscuous mode [ 327.386006][ T7478] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.400370][ T7478] Cannot create hsr debugfs directory [ 327.460743][ T7475] hsr_slave_0: entered promiscuous mode [ 327.489561][ T7475] hsr_slave_1: entered promiscuous mode [ 327.500142][ T7475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 327.508244][ T7475] Cannot create hsr debugfs directory [ 329.903190][ T7476] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 329.969308][ T7476] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 330.056052][ T7476] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 330.120139][ T7476] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 330.297356][ T7472] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 330.364185][ T7472] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 331.961619][ T5952] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 332.983332][ T7475] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 333.032984][ T7475] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.161238][ T7472] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 333.224005][ T7472] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 333.799282][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.622896][ T7476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.822986][ T7476] 8021q: adding VLAN 0 to HW filter on device team0 [ 334.852615][ T7472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 334.894930][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.902261][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 334.985930][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.993323][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.097289][ T7472] 8021q: adding VLAN 0 to HW filter on device team0 [ 335.205402][ T7457] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.212650][ T7457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 335.362642][ T7457] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.370132][ T7457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.785646][ T7476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.143787][ T7476] veth0_vlan: entered promiscuous mode [ 336.199218][ T7472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 336.247008][ T7476] veth1_vlan: entered promiscuous mode [ 336.426834][ T7476] veth0_macvtap: entered promiscuous mode [ 336.488435][ T7476] veth1_macvtap: entered promiscuous mode [ 336.677798][ T7476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 336.711450][ T7472] veth0_vlan: entered promiscuous mode [ 336.749833][ T7476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 336.826910][ T7472] veth1_vlan: entered promiscuous mode [ 336.864083][ T7476] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.897482][ T7476] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.929480][ T7476] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.947306][ T7476] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.172123][ T5952] usb 3-1: device descriptor read/64, error -110 [ 337.197583][ T7472] veth0_macvtap: entered promiscuous mode [ 337.257597][ T7472] veth1_macvtap: entered promiscuous mode [ 337.412273][ T5952] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 337.439521][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.512084][ T7472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.539047][ T7457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.578034][ T7457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.586800][ T5952] usb 3-1: device descriptor read/64, error -32 [ 337.623792][ T7472] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.651234][ T7472] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.660107][ T7472] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.686823][ T7472] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.712962][ T5952] usb usb3-port1: attempt power cycle [ 337.875943][ T7457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.905423][ T7457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.081483][ T5952] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 338.130576][ T5952] usb 3-1: device descriptor read/8, error -32 [ 338.184715][ T2907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.231847][ T2907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.251275][ T5952] raw-gadget.0 gadget.2: failed to queue suspend event [ 338.277650][ T5952] raw-gadget.0 gadget.2: failed to queue reset event [ 338.379210][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.398378][ T5952] raw-gadget.0 gadget.2: failed to queue resume event [ 338.453143][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.492195][ T5952] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 338.590808][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 338.599608][ T5952] usb 3-1: device descriptor read/8, error -32 [ 338.711042][ T5952] raw-gadget.0 gadget.2: failed to queue suspend event [ 338.751400][ T5952] usb usb3-port1: unable to enumerate USB device [ 338.931143][ T9] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 339.158591][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 339.183246][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 339.218324][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 339.239075][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.280691][ T5952] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 339.454598][ T5952] usb 9-1: Using ep0 maxpacket: 8 [ 339.484452][ T5952] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 339.504364][ T9] usb 10-1: usb_control_msg returned -32 [ 339.510115][ T9] usbtmc 10-1:16.0: can't read capabilities [ 339.517111][ T5952] usb 9-1: config 0 has no interface number 0 [ 339.531069][ T5952] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 339.591964][ T5952] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 339.624596][ T5952] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.661987][ T5952] usb 9-1: config 0 descriptor?? [ 339.716905][ T5952] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 341.792673][ T5965] usb 10-1: USB disconnect, device number 2 [ 342.094763][ T5965] usb 9-1: USB disconnect, device number 2 [ 342.640416][ T5952] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 342.831167][ T5952] usb 9-1: Using ep0 maxpacket: 16 [ 342.848948][ T5952] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 342.880602][ T5952] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 342.912611][ T5952] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 342.993492][ T5952] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 343.021296][ T5952] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.045620][ T5952] usb 9-1: Product: syz [ 343.055539][ T5952] usb 9-1: Manufacturer: syz [ 343.075732][ T5952] usb 9-1: SerialNumber: syz [ 343.621249][ T5952] usb 9-1: 0:2 : does not exist [ 344.326914][ T5952] usb 9-1: USB disconnect, device number 3 [ 345.341207][ T5952] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 345.512965][ T5952] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 345.534759][ T5952] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 345.550683][ T5952] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 345.594130][ T5952] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 345.614985][ T5952] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.642760][ T5952] usb 9-1: config 0 descriptor?? [ 346.108141][ T5952] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 346.181433][ T5952] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 346.481545][ T5952] usb 9-1: USB disconnect, device number 4 [ 347.911258][ T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 348.101407][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 348.118779][ T9] usb 9-1: config 1 has an invalid interface number: 105 but max is 0 [ 348.137743][ T9] usb 9-1: config 1 has no interface number 0 [ 348.145831][ T9] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 348.178809][ T9] usb 9-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 348.199571][ T9] usb 9-1: config 1 interface 105 has no altsetting 0 [ 348.225124][ T9] usb 9-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 348.261255][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.285087][ T9] usb 9-1: Product: syz [ 348.289311][ T9] usb 9-1: Manufacturer: syz [ 348.307545][ T9] usb 9-1: SerialNumber: syz [ 348.327182][ T7550] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 348.340560][ T7550] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 348.825300][ T7550] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 348.846433][ T7550] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 349.340296][ T9] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 349.592080][ T9] aqc111 9-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 349.669540][ T9] aqc111 9-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 20:fc:94:45:3a:41 [ 349.725484][ T9] usb 9-1: USB disconnect, device number 5 [ 349.758207][ T9] aqc111 9-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.8-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 354.490672][ T7448] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 354.672398][ T7448] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 354.700611][ T7448] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 354.726514][ T7448] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 354.746802][ T7448] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 354.794412][ T7448] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 354.830436][ T7448] usb 10-1: Product: syz [ 354.855259][ T7448] usb 10-1: Manufacturer: syz [ 354.860103][ T7448] usb 10-1: SerialNumber: syz [ 354.951719][ T7448] hub 10-1:1.0: bad descriptor, ignoring hub [ 354.958063][ T7448] hub 10-1:1.0: probe with driver hub failed with error -5 [ 355.106399][ T7568] syz_tun: entered allmulticast mode [ 355.208427][ T7568] pimreg: entered allmulticast mode [ 355.231222][ T7448] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 355.396027][ T7566] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.436255][ T7567] syz_tun: left allmulticast mode [ 355.474660][ T7566] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.834441][ T7448] usb 10-1: USB disconnect, device number 3 [ 355.854074][ T7448] usblp0: removed [ 357.310707][ T7582] netlink: 4 bytes leftover after parsing attributes in process `syz.9.401'. [ 366.236269][ T7599] team_slave_0: entered promiscuous mode [ 366.242302][ T7599] team_slave_1: entered promiscuous mode [ 366.262670][ T7599] vlan2: entered promiscuous mode [ 366.277681][ T7599] team0: entered promiscuous mode [ 369.918854][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.928264][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.937524][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 369.946965][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 369.957181][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 372.061216][ T5156] Bluetooth: hci0: command tx timeout [ 372.384163][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 372.393496][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 372.404275][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 372.414298][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 372.427036][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 372.516816][ T5156] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 372.532718][ T5156] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 372.541751][ T5156] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 372.551006][ T5156] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 372.559273][ T5156] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 374.140691][ T5156] Bluetooth: hci0: command tx timeout [ 374.461497][ T5156] Bluetooth: hci4: command tx timeout [ 374.620778][ T5156] Bluetooth: hci7: command tx timeout [ 376.222108][ T5156] Bluetooth: hci0: command tx timeout [ 376.548461][ T5156] Bluetooth: hci4: command tx timeout [ 376.710661][ T5156] Bluetooth: hci7: command tx timeout [ 378.301358][ T5156] Bluetooth: hci0: command tx timeout [ 378.620878][ T5156] Bluetooth: hci4: command tx timeout [ 378.792467][ T5156] Bluetooth: hci7: command tx timeout [ 378.798643][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.821043][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.707536][ T5156] Bluetooth: hci4: command tx timeout [ 380.861788][ T5156] Bluetooth: hci7: command tx timeout [ 381.143471][ T51] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 381.153173][ T51] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 381.162835][ T51] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 381.174269][ T51] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 381.192624][ T51] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 381.581941][ T7608] chnl_net:caif_netlink_parms(): no params data found [ 381.927435][ T7609] chnl_net:caif_netlink_parms(): no params data found [ 382.292253][ T7603] chnl_net:caif_netlink_parms(): no params data found [ 382.941766][ T7608] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.949075][ T7608] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.007472][ T51] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 383.017579][ T51] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 383.026537][ T51] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 383.038813][ T51] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 383.047208][ T51] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 383.080886][ T7608] bridge_slave_0: entered allmulticast mode [ 383.089342][ T7608] bridge_slave_0: entered promiscuous mode [ 383.155253][ T7608] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.189460][ T7608] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.217577][ T7608] bridge_slave_1: entered allmulticast mode [ 383.232864][ T7608] bridge_slave_1: entered promiscuous mode [ 383.261549][ T51] Bluetooth: hci8: command tx timeout [ 383.926018][ T7608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.961539][ T7609] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.968839][ T7609] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.010847][ T7609] bridge_slave_0: entered allmulticast mode [ 384.030638][ T7609] bridge_slave_0: entered promiscuous mode [ 384.078389][ T7608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.132518][ T7609] bridge0: port 2(bridge_slave_1) entered blocking state [ 384.139832][ T7609] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.160827][ T7609] bridge_slave_1: entered allmulticast mode [ 384.181072][ T7609] bridge_slave_1: entered promiscuous mode [ 384.966920][ T7608] team0: Port device team_slave_0 added [ 385.034486][ T7609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 385.069722][ T7609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 385.102794][ T51] Bluetooth: hci9: command tx timeout [ 385.119406][ T7603] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.140973][ T7603] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.148324][ T7603] bridge_slave_0: entered allmulticast mode [ 385.174750][ T7603] bridge_slave_0: entered promiscuous mode [ 385.214857][ T7603] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.241359][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.248704][ T7603] bridge_slave_1: entered allmulticast mode [ 385.274157][ T7603] bridge_slave_1: entered promiscuous mode [ 385.296453][ T7608] team0: Port device team_slave_1 added [ 385.341321][ T51] Bluetooth: hci8: command tx timeout [ 386.023703][ T7609] team0: Port device team_slave_0 added [ 386.195713][ T7608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.210252][ T7608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.267455][ T7608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.326261][ T7609] team0: Port device team_slave_1 added [ 386.514549][ T7603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.541722][ T7608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.548723][ T7608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 386.631501][ T7608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.669214][ T7621] chnl_net:caif_netlink_parms(): no params data found [ 386.843211][ T7603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.928049][ T7609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.950776][ T7609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.004750][ T7609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 387.181267][ T51] Bluetooth: hci9: command tx timeout [ 387.308209][ T7609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 387.334634][ T7609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 387.397734][ T7609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 387.425421][ T51] Bluetooth: hci8: command tx timeout [ 387.602297][ T7603] team0: Port device team_slave_0 added [ 387.956559][ T7603] team0: Port device team_slave_1 added [ 387.998479][ T7608] hsr_slave_0: entered promiscuous mode [ 388.024505][ T7608] hsr_slave_1: entered promiscuous mode [ 388.041580][ T7608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.060558][ T7608] Cannot create hsr debugfs directory [ 388.764942][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.790667][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.901146][ T7603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.944061][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.961006][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.026494][ T7603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 389.202728][ T7609] hsr_slave_0: entered promiscuous mode [ 389.209744][ T7609] hsr_slave_1: entered promiscuous mode [ 389.243631][ T7609] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.264986][ T51] Bluetooth: hci9: command tx timeout [ 389.272532][ T7609] Cannot create hsr debugfs directory [ 389.297405][ T7631] chnl_net:caif_netlink_parms(): no params data found [ 389.501140][ T51] Bluetooth: hci8: command tx timeout [ 390.060065][ T7621] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.082571][ T7621] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.090051][ T7621] bridge_slave_0: entered allmulticast mode [ 390.117612][ T7621] bridge_slave_0: entered promiscuous mode [ 390.139283][ T7621] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.163640][ T7621] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.180979][ T7621] bridge_slave_1: entered allmulticast mode [ 390.201777][ T7621] bridge_slave_1: entered promiscuous mode [ 390.345192][ T7603] hsr_slave_0: entered promiscuous mode [ 390.361783][ T7603] hsr_slave_1: entered promiscuous mode [ 390.385349][ T7603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.400282][ T7603] Cannot create hsr debugfs directory [ 391.219227][ T7621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 391.341235][ T51] Bluetooth: hci9: command tx timeout [ 391.453955][ T7621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.023367][ T7621] team0: Port device team_slave_0 added [ 392.030038][ T7631] bridge0: port 1(bridge_slave_0) entered blocking state [ 392.052331][ T7631] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.059710][ T7631] bridge_slave_0: entered allmulticast mode [ 392.090667][ T7631] bridge_slave_0: entered promiscuous mode [ 392.339405][ T7621] team0: Port device team_slave_1 added [ 392.468246][ T7631] bridge0: port 2(bridge_slave_1) entered blocking state [ 392.483684][ T7631] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.509593][ T7631] bridge_slave_1: entered allmulticast mode [ 392.523010][ T7631] bridge_slave_1: entered promiscuous mode [ 392.805805][ T7621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.820585][ T7621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.890355][ T7621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.178441][ T7621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.200355][ T7621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.270515][ T7621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.332814][ T7631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 393.374496][ T7631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 393.945667][ T7631] team0: Port device team_slave_0 added [ 393.976806][ T7631] team0: Port device team_slave_1 added [ 394.006291][ T7621] hsr_slave_0: entered promiscuous mode [ 394.042383][ T7621] hsr_slave_1: entered promiscuous mode [ 394.049096][ T7621] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.071128][ T7621] Cannot create hsr debugfs directory [ 394.511684][ T7631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 394.518702][ T7631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.641409][ T7631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 394.726200][ T7631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.740369][ T7631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.847228][ T7631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.484887][ T7631] hsr_slave_0: entered promiscuous mode [ 395.514188][ T7631] hsr_slave_1: entered promiscuous mode [ 395.536749][ T7631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 395.550211][ T7631] Cannot create hsr debugfs directory [ 404.849214][ T7460] raw-gadget.0 gadget.2: failed to queue disconnect event [ 411.047479][ T5206] udevd[5206]: worker [7534] /devices/platform/dummy_hcd.8/usb9/9-1 is taking a long time [ 430.664980][ T5156] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 430.677964][ T5156] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 430.693196][ T5156] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 430.704753][ T5156] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 430.713899][ T5156] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 431.487992][ T7652] chnl_net:caif_netlink_parms(): no params data found [ 432.009218][ T7652] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.031201][ T7652] bridge0: port 1(bridge_slave_0) entered disabled state [ 432.038764][ T7652] bridge_slave_0: entered allmulticast mode [ 432.079899][ T7652] bridge_slave_0: entered promiscuous mode [ 432.092583][ T7652] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.123333][ T7652] bridge0: port 2(bridge_slave_1) entered disabled state [ 432.134568][ T7652] bridge_slave_1: entered allmulticast mode [ 432.164166][ T7652] bridge_slave_1: entered promiscuous mode [ 432.594311][ T7652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 432.693647][ T7652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 432.780947][ T5156] Bluetooth: hci10: command tx timeout [ 433.113354][ T7652] team0: Port device team_slave_0 added [ 433.179242][ T7652] team0: Port device team_slave_1 added [ 433.643943][ T51] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 433.659924][ T7652] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 433.669336][ T51] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 433.680717][ T51] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 433.701072][ T51] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 433.711629][ T51] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 433.754579][ T7652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 433.841687][ T5156] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 433.853603][ T5156] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 433.866982][ T5156] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 433.892323][ T5156] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 433.904466][ T5156] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 433.980729][ T7652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.023207][ T7652] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.042443][ T7652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.114327][ T7652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.578795][ T7652] hsr_slave_0: entered promiscuous mode [ 434.591969][ T7652] hsr_slave_1: entered promiscuous mode [ 434.610811][ T7652] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 434.630827][ T7652] Cannot create hsr debugfs directory [ 434.861876][ T5156] Bluetooth: hci10: command tx timeout [ 435.820725][ T7668] Bluetooth: hci11: command tx timeout [ 435.959609][ T7664] chnl_net:caif_netlink_parms(): no params data found [ 435.994639][ T7668] Bluetooth: hci12: command tx timeout [ 436.278408][ T7663] chnl_net:caif_netlink_parms(): no params data found [ 436.790739][ T7664] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.797968][ T7664] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.832070][ T7664] bridge_slave_0: entered allmulticast mode [ 436.851759][ T7664] bridge_slave_0: entered promiscuous mode [ 436.890550][ T7664] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.897831][ T7664] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.912774][ T7664] bridge_slave_1: entered allmulticast mode [ 436.940060][ T7664] bridge_slave_1: entered promiscuous mode [ 436.946851][ T7668] Bluetooth: hci10: command tx timeout [ 437.183531][ T7668] Bluetooth: hci1: command 0x0406 tx timeout [ 437.189817][ T7668] Bluetooth: hci2: command 0x0406 tx timeout [ 437.202170][ T7668] Bluetooth: hci3: command 0x0406 tx timeout [ 437.208371][ T7668] Bluetooth: hci5: command 0x0406 tx timeout [ 437.216351][ T7668] Bluetooth: hci6: command 0x0406 tx timeout [ 437.229272][ T7664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.574732][ T7664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.723316][ T7663] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.742265][ T7663] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.769442][ T7663] bridge_slave_0: entered allmulticast mode [ 437.793087][ T7663] bridge_slave_0: entered promiscuous mode [ 437.901350][ T7666] Bluetooth: hci11: command tx timeout [ 437.919138][ T7664] team0: Port device team_slave_0 added [ 437.942488][ T7663] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.949703][ T7663] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.981884][ T7663] bridge_slave_1: entered allmulticast mode [ 438.000673][ T7663] bridge_slave_1: entered promiscuous mode [ 438.061511][ T7666] Bluetooth: hci12: command tx timeout [ 438.124511][ T7664] team0: Port device team_slave_1 added [ 438.607162][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 438.630301][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.697638][ T7664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 438.736305][ T7663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 438.761535][ T7664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 438.768540][ T7664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 438.829144][ T7664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 438.888378][ T7663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.021236][ T7666] Bluetooth: hci10: command tx timeout [ 439.191983][ T7663] team0: Port device team_slave_0 added [ 439.322266][ T7663] team0: Port device team_slave_1 added [ 439.735480][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.752326][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.810633][ T7663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.863921][ T7664] hsr_slave_0: entered promiscuous mode [ 439.882147][ T7664] hsr_slave_1: entered promiscuous mode [ 439.888967][ T7664] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 439.911236][ T7664] Cannot create hsr debugfs directory [ 439.921804][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 439.928882][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.982644][ T7666] Bluetooth: hci11: command tx timeout [ 440.005562][ T7663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.142127][ T7666] Bluetooth: hci12: command tx timeout [ 440.237539][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.244336][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.793898][ T7663] hsr_slave_0: entered promiscuous mode [ 440.826490][ T7663] hsr_slave_1: entered promiscuous mode [ 440.863048][ T7663] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.891044][ T7663] Cannot create hsr debugfs directory [ 441.414992][ T5838] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 441.428884][ T5838] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 441.443812][ T5838] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 441.456022][ T5838] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 441.464639][ T5838] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 442.070004][ T5838] Bluetooth: hci11: command tx timeout [ 442.221686][ T5838] Bluetooth: hci12: command tx timeout [ 442.998069][ T7684] chnl_net:caif_netlink_parms(): no params data found [ 443.437112][ T7666] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 443.447349][ T7666] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 443.459988][ T7666] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 443.468968][ T7666] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 443.481345][ T7666] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 443.505127][ T51] Bluetooth: hci13: command tx timeout [ 443.812475][ T7684] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.819695][ T7684] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.860968][ T7684] bridge_slave_0: entered allmulticast mode [ 443.890624][ T7684] bridge_slave_0: entered promiscuous mode [ 443.974553][ T7684] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.991882][ T7684] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.012326][ T7684] bridge_slave_1: entered allmulticast mode [ 444.031078][ T7684] bridge_slave_1: entered promiscuous mode [ 444.315844][ T7684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.372128][ T7684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.642583][ T7684] team0: Port device team_slave_0 added [ 444.676749][ T7684] team0: Port device team_slave_1 added [ 445.128300][ T7684] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.139277][ T7684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.200922][ T7684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.252420][ T7684] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.259432][ T7684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.345140][ T7684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.581740][ T51] Bluetooth: hci14: command tx timeout [ 445.588260][ T51] Bluetooth: hci13: command tx timeout [ 445.802459][ T7684] hsr_slave_0: entered promiscuous mode [ 445.822625][ T7684] hsr_slave_1: entered promiscuous mode [ 445.831285][ T7684] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.859882][ T7684] Cannot create hsr debugfs directory [ 446.276553][ T7694] chnl_net:caif_netlink_parms(): no params data found [ 447.120406][ T7694] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.127639][ T7694] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.151027][ T7694] bridge_slave_0: entered allmulticast mode [ 447.175261][ T7694] bridge_slave_0: entered promiscuous mode [ 447.211325][ T7694] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.220764][ T7694] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.228142][ T7694] bridge_slave_1: entered allmulticast mode [ 447.261540][ T7694] bridge_slave_1: entered promiscuous mode [ 447.503983][ T7694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.545835][ T7694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 447.661901][ T51] Bluetooth: hci13: command tx timeout [ 447.668114][ T51] Bluetooth: hci14: command tx timeout [ 447.801382][ T7694] team0: Port device team_slave_0 added [ 447.824412][ T7694] team0: Port device team_slave_1 added [ 448.069413][ T7694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.101368][ T7694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.156597][ T7694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.184343][ T7694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.220623][ T7694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.271327][ T7694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.726985][ T7694] hsr_slave_0: entered promiscuous mode [ 448.757189][ T7694] hsr_slave_1: entered promiscuous mode [ 448.771502][ T7694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.782293][ T7694] Cannot create hsr debugfs directory [ 449.743271][ T51] Bluetooth: hci14: command tx timeout [ 449.749024][ T51] Bluetooth: hci13: command tx timeout [ 451.820971][ T51] Bluetooth: hci14: command tx timeout [ 491.255169][ T5838] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 491.270599][ T5838] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 491.284979][ T5838] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 491.294523][ T5838] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 491.310080][ T5838] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 492.063164][ T31] INFO: task kworker/u8:2:36 blocked for more than 143 seconds. [ 492.080297][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 492.088083][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 492.140761][ T31] task:kworker/u8:2 state:D stack:21160 pid:36 tgid:36 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 492.165784][ T7706] chnl_net:caif_netlink_parms(): no params data found [ 492.211330][ T31] Workqueue: netns cleanup_net [ 492.216185][ T31] Call Trace: [ 492.219502][ T31] [ 492.311123][ T31] __schedule+0x16f5/0x4d00 [ 492.315826][ T31] ? __lock_acquire+0xa91/0xd20 [ 492.428514][ T31] ? schedule+0x165/0x360 [ 492.470730][ T31] ? __pfx___schedule+0x10/0x10 [ 492.475704][ T31] ? schedule+0x91/0x360 [ 492.480082][ T31] schedule+0x165/0x360 [ 492.516839][ T31] schedule_preempt_disabled+0x13/0x30 [ 492.540623][ T31] __mutex_lock+0x724/0xe80 [ 492.545195][ T31] ? __mutex_lock+0x51b/0xe80 [ 492.549913][ T31] ? rcu_barrier+0x4c/0x570 [ 492.603425][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 492.608631][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 492.630751][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 492.660466][ T31] rcu_barrier+0x4c/0x570 [ 492.664907][ T31] netdev_run_todo+0x327/0xea0 [ 492.669745][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 492.692040][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 492.697411][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 492.732480][ T31] ? nsim_destroy+0x3ec/0x670 [ 492.737252][ T31] ? kfree+0x18e/0x440 [ 492.761087][ T31] nsim_destroy+0x40c/0x670 [ 492.765705][ T31] __nsim_dev_port_del+0x14d/0x1b0 [ 492.783309][ T31] nsim_dev_reload_destroy+0x288/0x490 [ 492.789036][ T31] nsim_dev_reload_down+0x8a/0xc0 [ 492.810404][ T31] devlink_reload+0x1b6/0x8d0 [ 492.815171][ T31] ? xa_get_mark+0x67/0x7b0 [ 492.819808][ T31] ? __pfx_devlink_reload+0x10/0x10 [ 492.845482][ T31] ? xa_get_mark+0x70f/0x7b0 [ 492.860981][ T31] devlink_pernet_pre_exit+0x1d9/0x3d0 [ 492.866647][ T31] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 492.881227][ T31] ? class_remove_file_ns+0x121/0x160 [ 492.886685][ T31] ops_undo_list+0x184/0x990 [ 492.911228][ T31] ? __pfx_ops_undo_list+0x10/0x10 [ 492.916438][ T31] cleanup_net+0x4c5/0x800 [ 492.934747][ T31] ? __pfx_cleanup_net+0x10/0x10 [ 492.939766][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 492.971257][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 492.977069][ T31] ? process_scheduled_works+0x9ef/0x17b0 [ 492.990292][ T31] process_scheduled_works+0xae1/0x17b0 [ 492.995948][ T31] ? __pfx_process_scheduled_works+0x10/0x10 [ 493.020991][ T31] worker_thread+0x8a0/0xda0 [ 493.025703][ T31] kthread+0x70e/0x8a0 [ 493.029825][ T31] ? __pfx_worker_thread+0x10/0x10 [ 493.062330][ T31] ? __pfx_kthread+0x10/0x10 [ 493.067011][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 493.082620][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.088007][ T31] ? __pfx_kthread+0x10/0x10 [ 493.113231][ T31] ret_from_fork+0x3f9/0x770 [ 493.117920][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 493.130754][ T31] ? __switch_to_asm+0x39/0x70 [ 493.135582][ T31] ? __switch_to_asm+0x33/0x70 [ 493.160462][ T31] ? __pfx_kthread+0x10/0x10 [ 493.165136][ T31] ret_from_fork_asm+0x1a/0x30 [ 493.169964][ T31] [ 493.190782][ T31] INFO: task syz.0.361:7404 blocked for more than 144 seconds. [ 493.232362][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 493.240073][ T31] Blocked by coredump. [ 493.264595][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 493.301742][ T31] task:syz.0.361 state:D stack:25128 pid:7404 tgid:7404 ppid:5840 task_flags:0x40044c flags:0x20004006 [ 493.341119][ T51] Bluetooth: hci15: command tx timeout [ 493.355730][ T31] Call Trace: [ 493.359092][ T31] [ 493.380632][ T31] __schedule+0x16f5/0x4d00 [ 493.385409][ T31] ? __lock_acquire+0xa91/0xd20 [ 493.410657][ T31] ? schedule+0x165/0x360 [ 493.415086][ T31] ? __pfx___schedule+0x10/0x10 [ 493.420003][ T31] ? schedule+0x91/0x360 [ 493.470550][ T31] schedule+0x165/0x360 [ 493.474788][ T31] schedule_preempt_disabled+0x13/0x30 [ 493.504892][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 493.520452][ T31] __mutex_lock+0x724/0xe80 [ 493.525030][ T31] ? __mutex_lock+0x51b/0xe80 [ 493.529753][ T31] ? rcu_barrier+0x4c/0x570 [ 493.580836][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 493.586029][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 493.611779][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 493.617859][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 493.650292][ T31] rcu_barrier+0x4c/0x570 [ 493.654706][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 493.691307][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 493.696548][ T31] netdev_run_todo+0x327/0xea0 [ 493.741176][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 493.746899][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 493.773464][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 493.778859][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 493.811109][ T31] ? netdev_state_change+0x1ca/0x220 [ 493.816483][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 493.860685][ T31] tun_chr_close+0x13c/0x1c0 [ 493.883079][ T31] __fput+0x44c/0xa70 [ 493.887157][ T31] task_work_run+0x1d1/0x260 [ 493.920240][ T31] ? __pfx_task_work_run+0x10/0x10 [ 493.925451][ T31] ? kmem_cache_free+0x18f/0x400 [ 493.950448][ T31] do_exit+0x6ad/0x22e0 [ 493.954698][ T31] ? do_raw_spin_lock+0x121/0x290 [ 493.959800][ T31] ? __pfx_do_exit+0x10/0x10 [ 494.010534][ T31] do_group_exit+0x21c/0x2d0 [ 494.015218][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.040747][ T31] get_signal+0x1286/0x1340 [ 494.045370][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 494.090266][ T31] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 494.096446][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 494.150258][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 494.156662][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 494.211673][ T31] exit_to_user_mode_loop+0x75/0x110 [ 494.217587][ T31] __do_fast_syscall_32+0x1f4/0x2b0 [ 494.260392][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 494.265690][ T31] do_fast_syscall_32+0x34/0x80 [ 494.304503][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 494.320542][ T31] RIP: 0023:0xf708e539 [ 494.324679][ T31] RSP: 002b:00000000f754fadc EFLAGS: 00000206 ORIG_RAX: 00000000000001b4 [ 494.354140][ T31] RAX: 0000000000000000 RBX: 0000000000000003 RCX: 000000000000001e [ 494.385913][ T31] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 494.400869][ T31] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 494.408904][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 494.444316][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 494.460046][ T31] [ 494.473258][ T31] INFO: task syz-executor:7468 blocked for more than 145 seconds. [ 494.544844][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 494.574047][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 494.600449][ T31] task:syz-executor state:D stack:21800 pid:7468 tgid:7468 ppid:1 task_flags:0x400140 flags:0x20004004 [ 494.634861][ T31] Call Trace: [ 494.638223][ T31] [ 494.653761][ T31] __schedule+0x16f5/0x4d00 [ 494.658350][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 494.682030][ T31] ? __lock_acquire+0xa91/0xd20 [ 494.701391][ T31] ? schedule+0x165/0x360 [ 494.706258][ T31] ? __pfx___schedule+0x10/0x10 [ 494.720754][ T31] ? schedule+0x91/0x360 [ 494.725087][ T31] schedule+0x165/0x360 [ 494.729290][ T31] schedule_preempt_disabled+0x13/0x30 [ 494.761394][ T31] __mutex_lock+0x724/0xe80 [ 494.766000][ T31] ? __mutex_lock+0x51b/0xe80 [ 494.781082][ T31] ? del_device_store+0xd1/0x360 [ 494.800358][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 494.805451][ T31] ? __lock_acquire+0xab9/0xd20 [ 494.821146][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 494.826090][ T31] del_device_store+0xd1/0x360 [ 494.840394][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 494.845419][ T31] ? __pfx_del_device_store+0x10/0x10 [ 494.870772][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 494.875883][ T31] ? sysfs_kf_write+0x166/0x260 [ 494.901611][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 494.906887][ T31] kernfs_fop_write_iter+0x375/0x4f0 [ 494.930442][ T31] vfs_write+0x548/0xa90 [ 494.934802][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 494.950330][ T31] ? __pfx_vfs_write+0x10/0x10 [ 494.955292][ T31] ? do_sys_openat2+0x154/0x1c0 [ 494.980648][ T31] ksys_write+0x145/0x250 [ 494.985069][ T31] ? __pfx_ksys_write+0x10/0x10 [ 494.989972][ T31] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 495.031307][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.036628][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 495.050529][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.055817][ T31] do_fast_syscall_32+0x34/0x80 [ 495.074745][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.091504][ T31] RIP: 0023:0xf706e539 [ 495.113019][ T31] RSP: 002b:00000000f752f490 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 495.130222][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f752f4d0 [ 495.138263][ T31] RDX: 0000000000000001 RSI: 00000000f73d2ff4 RDI: 0000000000000000 [ 495.170565][ T31] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 495.178612][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 495.211661][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 495.219920][ T31] [ 495.246229][ T31] INFO: task syz-executor:7478 blocked for more than 146 seconds. [ 495.271211][ T31] Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 [ 495.279010][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.306491][ T31] task:syz-executor state:D stack:21784 pid:7478 tgid:7478 ppid:1 task_flags:0x400140 flags:0x20004004 [ 495.342391][ T31] Call Trace: [ 495.345750][ T31] [ 495.348730][ T31] __schedule+0x16f5/0x4d00 [ 495.370459][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 495.375768][ T31] ? __lock_acquire+0xa91/0xd20 [ 495.391035][ T31] ? schedule+0x165/0x360 [ 495.395464][ T31] ? __pfx___schedule+0x10/0x10 [ 495.413880][ T31] ? schedule+0x91/0x360 [ 495.418303][ T31] schedule+0x165/0x360 [ 495.424189][ T5838] Bluetooth: hci15: command tx timeout [ 495.444610][ T31] schedule_preempt_disabled+0x13/0x30 [ 495.462278][ T31] __mutex_lock+0x724/0xe80 [ 495.466853][ T31] ? __mutex_lock+0x51b/0xe80 [ 495.491360][ T31] ? del_device_store+0xd1/0x360 [ 495.496402][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 495.507046][ T31] ? __lock_acquire+0xab9/0xd20 [ 495.524448][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 495.529442][ T31] del_device_store+0xd1/0x360 [ 495.553688][ T31] ? sysfs_file_kobj+0x1a/0x230 [ 495.558656][ T31] ? __pfx_del_device_store+0x10/0x10 [ 495.581514][ T31] ? sysfs_file_kobj+0x1e4/0x230 [ 495.586605][ T31] ? sysfs_kf_write+0x166/0x260 [ 495.600195][ T31] ? __pfx_sysfs_kf_write+0x10/0x10 [ 495.621464][ T31] kernfs_fop_write_iter+0x375/0x4f0 [ 495.626847][ T31] vfs_write+0x548/0xa90 [ 495.642895][ T31] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 495.648791][ T31] ? __pfx_vfs_write+0x10/0x10 [ 495.673144][ T31] ? do_sys_openat2+0x154/0x1c0 [ 495.678132][ T31] ksys_write+0x145/0x250 [ 495.690808][ T31] ? __pfx_ksys_write+0x10/0x10 [ 495.695724][ T31] ? syscall_enter_from_user_mode_prepare+0x7f/0xe0 [ 495.720323][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.725625][ T31] __do_fast_syscall_32+0xb6/0x2b0 [ 495.749421][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 495.770628][ T31] do_fast_syscall_32+0x34/0x80 [ 495.775566][ T31] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 495.790977][ T31] RIP: 0023:0xf7fd3539 [ 495.795114][ T31] RSP: 002b:00000000f75bf490 EFLAGS: 00000206 ORIG_RAX: 0000000000000004 [ 495.821737][ T31] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00000000f75bf4d0 [ 495.829781][ T31] RDX: 0000000000000001 RSI: 00000000f7462ff4 RDI: 0000000000000000 [ 495.860811][ T31] RBP: 0000000000000005 R08: 0000000000000000 R09: 0000000000000000 [ 495.868880][ T31] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 495.901610][ T31] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 495.909696][ T31] [ 495.941406][ T31] [ 495.941406][ T31] Showing all locks held in the system: [ 495.949187][ T31] 6 locks held by kworker/0:0/9: [ 495.971187][ T31] #0: ffff888021698148 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 496.005251][ T31] #1: ffffc900000e7bc0 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 496.031485][ T31] #2: ffff888028252198 (&dev->mutex){....}-{4:4}, at: hub_event+0x184/0x4a00 [ 496.052074][ T31] #3: ffff88805c12b198 (&dev->mutex){....}-{4:4}, at: usb_disconnect+0xf8/0x910 [ 496.080688][ T31] #4: ffff8880387d8160 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 496.114386][ T31] #5: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 496.140485][ T31] 1 lock held by khungtaskd/31: [ 496.145579][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 496.171699][ T31] 6 locks held by kworker/u8:2/36: [ 496.176882][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 496.228338][ T31] #1: ffffc90000ac7bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 496.251457][ T31] #2: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 496.270369][ T31] #3: ffff88807d63d0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 496.304569][ T31] #4: ffff88807d463250 (&devlink->lock_key#2){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 496.334254][ T31] #5: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 496.360368][ T31] 3 locks held by kworker/1:1/43: [ 496.365662][ T31] 2 locks held by kworker/u8:6/3509: [ 496.380870][ T31] 2 locks held by getty/5600: [ 496.385603][ T31] #0: ffff88814ce5d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 496.418446][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 496.450306][ T31] 5 locks held by kworker/1:5/5920: [ 496.455566][ T31] 3 locks held by kworker/1:6/5927: [ 496.471696][ T31] 2 locks held by kworker/1:7/5960: [ 496.477042][ T31] 3 locks held by kworker/0:6/5965: [ 496.502395][ T31] #0: ffff88805c0e7548 ((wq_completion)wg-kex-wg0#18){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 496.532039][ T31] #1: ffffc90004a7fbc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 496.637536][ T31] #2: ffff888035c42ad8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x36/0xbd0 [ 496.670665][ T31] 1 lock held by syz.0.361/7404: [ 496.675767][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 496.710590][ T31] 2 locks held by kworker/1:9/7466: [ 496.715851][ T31] 4 locks held by syz-executor/7468: [ 496.730330][ T31] #0: ffff888030076428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 496.762370][ T31] #1: ffff88803318f088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 496.791079][ T31] #2: ffff8881447c64b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 496.811114][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 496.837528][ T31] 7 locks held by syz-executor/7475: [ 496.854262][ T31] #0: ffff888030076428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 496.872825][ T31] #1: ffff8880116c7888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 496.901478][ T31] #2: ffff8881447c64b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 496.920273][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 496.950551][ T31] #4: ffff88807d79a0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 496.981057][ T31] #5: ffff88807d79b250 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 497.010635][ T31] #6: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 497.042790][ T31] 4 locks held by syz-executor/7478: [ 497.048154][ T31] #0: ffff888030076428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 497.074191][ T31] #1: ffff888027220488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 497.102398][ T31] #2: ffff8881447c64b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 497.134739][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 497.161567][ T31] 4 locks held by udevd/7534: [ 497.166496][ T31] #0: ffff888046d33540 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xb7/0xe10 [ 497.201087][ T31] #1: ffff888061fe6488 (&of->mutex#2){+.+.}-{4:4}, at: kernfs_seq_start+0x55/0x3c0 [ 497.220206][ T31] #2: ffff88805e8015a8 (kn->active#27){++++}-{0:0}, at: kernfs_seq_start+0x75/0x3c0 [ 497.229903][ T31] #3: ffff88805c12b198 (&dev->mutex){....}-{4:4}, at: manufacturer_show+0x26/0xa0 [ 497.271957][ T31] 1 lock held by syz.9.403/7588: [ 497.276980][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 497.310383][ T31] 2 locks held by syz.8.406/7599: [ 497.315473][ T31] #0: ffffffff8fa30d70 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 497.340844][ T31] #1: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 497.370318][ T31] 4 locks held by syz-executor/7603: [ 497.375753][ T31] #0: ffff888030076428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 497.410807][ T31] #1: ffff888082d73488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 497.430251][ T31] #2: ffff8881447c64b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 497.460091][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 497.491394][ T31] 4 locks held by syz-executor/7608: [ 497.496749][ T31] #0: ffff888030076428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 497.520522][ T31] #1: ffff888082711c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 497.550397][ T31] #2: ffff8881447c64b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 497.580799][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 497.601739][ T31] 4 locks held by syz-executor/7609: [ 497.607094][ T31] #0: ffff888030076428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 497.640549][ T31] #1: ffff888082d06088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 497.662156][ T31] #2: ffff8881447c64b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 497.687840][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 497.712804][ T31] 4 locks held by syz-executor/7621: [ 497.718231][ T31] #0: ffff888030076428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 497.750970][ T31] #1: ffff888083493088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 497.780812][ T31] #2: ffff8881447c64b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 497.800448][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 497.824511][ T31] 4 locks held by syz-executor/7631: [ 497.829859][ T31] #0: ffff888030076428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 497.862099][ T31] #1: ffff88806e32cc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 497.891001][ T31] #2: ffff8881447c64b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 497.910400][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 497.940399][ T31] 4 locks held by syz-executor/7652: [ 497.945787][ T31] #0: ffff888030076428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 497.980877][ T31] #1: ffff888088539c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 498.000516][ T31] #2: ffff8881447c64b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 498.020736][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 498.051201][ T31] 4 locks held by syz-executor/7663: [ 498.056569][ T31] #0: ffff888030076428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 498.090561][ T31] #1: ffff888042931c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 498.111254][ T31] #2: ffff8881447c64b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 498.141503][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 498.160656][ T31] 4 locks held by syz-executor/7664: [ 498.184123][ T31] #0: ffff888030076428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 498.200718][ T31] #1: ffff88808d60fc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 498.221257][ T31] #2: ffff8881447c64b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 498.250962][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 498.280478][ T31] 4 locks held by syz-executor/7684: [ 498.285841][ T31] #0: ffff888030076428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 498.321011][ T31] #1: ffff888090c12888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 498.343779][ T31] #2: ffff8881447c64b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 498.375384][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 498.400901][ T31] 4 locks held by syz-executor/7694: [ 498.406243][ T31] #0: ffff888030076428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 498.430998][ T31] #1: ffff88808af3d488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 498.453668][ T31] #2: ffff8881447c64b8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 498.481589][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 498.510774][ T31] 5 locks held by syz-executor/7706: [ 498.516147][ T31] #0: ffff8880303f8d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 498.551389][ T31] #1: ffff8880303f8078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 498.570402][ T31] #2: ffffffff8f678328 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 498.600207][ T31] #3: ffff88802c5e8b38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 498.609640][ T31] #4: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 498.632308][ T7665] Bluetooth: hci4: command 0x0406 tx timeout [ 498.638393][ T7665] Bluetooth: hci7: command 0x0406 tx timeout [ 498.675176][ T31] [ 498.715030][ T31] ============================================= [ 498.715030][ T31] [ 498.741282][ T31] NMI backtrace for cpu 0 [ 498.741305][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 498.741329][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 498.741341][ T31] Call Trace: [ 498.741349][ T31] [ 498.741359][ T31] dump_stack_lvl+0x189/0x250 [ 498.741393][ T31] ? __wake_up_klogd+0xd9/0x110 [ 498.741430][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 498.741458][ T31] ? __pfx__printk+0x10/0x10 [ 498.741491][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 498.741520][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 498.741541][ T31] ? _printk+0xcf/0x120 [ 498.741566][ T31] ? __pfx__printk+0x10/0x10 [ 498.741588][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 498.741616][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 498.741643][ T31] watchdog+0xfee/0x1030 [ 498.741670][ T31] ? watchdog+0x1de/0x1030 [ 498.741702][ T31] kthread+0x70e/0x8a0 [ 498.741727][ T31] ? __pfx_watchdog+0x10/0x10 [ 498.741750][ T31] ? __pfx_kthread+0x10/0x10 [ 498.741772][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.741798][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.741823][ T31] ? __pfx_kthread+0x10/0x10 [ 498.741845][ T31] ret_from_fork+0x3f9/0x770 [ 498.741874][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 498.741906][ T31] ? __switch_to_asm+0x39/0x70 [ 498.741924][ T31] ? __switch_to_asm+0x33/0x70 [ 498.741942][ T31] ? __pfx_kthread+0x10/0x10 [ 498.741965][ T31] ret_from_fork_asm+0x1a/0x30 [ 498.742001][ T31] [ 498.742008][ T31] Sending NMI from CPU 0 to CPUs 1: [ 498.912774][ C1] NMI backtrace for cpu 1 [ 498.912793][ C1] CPU: 1 UID: 0 PID: 7466 Comm: kworker/1:9 Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 498.912813][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 498.912823][ C1] Workqueue: wg-crypt-wg1 wg_packet_tx_worker [ 498.912851][ C1] RIP: 0010:validate_chain+0x2d4/0x2140 [ 498.912869][ C1] Code: 01 00 00 00 65 48 8b 0d 2a 75 fe 10 48 3b 8c 24 d8 00 00 00 0f 85 43 1c 00 00 48 81 c4 e0 00 00 00 5b 41 5c 41 5d 41 5e 41 5f <5d> e9 06 ae ca 09 cc 41 83 fe 03 ba 02 00 00 00 41 0f 43 d6 8d 42 [ 498.912882][ C1] RSP: 0018:ffffc90000a08698 EFLAGS: 00000082 [ 498.912896][ C1] RAX: 0000000000000001 RBX: 0000000000000003 RCX: 14c80b3e88853a00 [ 498.912906][ C1] RDX: 0000000000000000 RSI: ffff88802d30c768 RDI: ffff88802d30bc00 [ 498.912917][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81729af5 [ 498.912927][ C1] R10: ffffc90000a088f8 R11: ffffffff81acf690 R12: 00000000762cb430 [ 498.912939][ C1] R13: ffff88802d30c6f0 R14: ffff88802d30c768 R15: 8254f670159718c0 [ 498.912950][ C1] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 498.912963][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 498.912973][ C1] CR2: 00007fc4de0c9440 CR3: 000000000df38000 CR4: 00000000003526f0 [ 498.912990][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 498.912999][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 498.913009][ C1] Call Trace: [ 498.913015][ C1] [ 498.913022][ C1] __lock_acquire+0xab9/0xd20 [ 498.913045][ C1] ? unwind_next_frame+0xa5/0x2390 [ 498.913065][ C1] lock_acquire+0x120/0x360 [ 498.913083][ C1] ? unwind_next_frame+0xa5/0x2390 [ 498.913105][ C1] ? unwind_next_frame+0xa5/0x2390 [ 498.913125][ C1] ? worker_thread+0x8a0/0xda0 [ 498.913138][ C1] ? unwind_next_frame+0xa5/0x2390 [ 498.913158][ C1] unwind_next_frame+0xc2/0x2390 [ 498.913178][ C1] ? unwind_next_frame+0xa5/0x2390 [ 498.913199][ C1] ? unwind_next_frame+0xa5/0x2390 [ 498.913218][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 498.913240][ C1] ? rcu_core+0xc34/0x1710 [ 498.913258][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 498.913274][ C1] arch_stack_walk+0x11c/0x150 [ 498.913290][ C1] ? worker_thread+0x8a0/0xda0 [ 498.913305][ C1] stack_trace_save+0x9c/0xe0 [ 498.913320][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 498.913337][ C1] ? __lock_acquire+0xab9/0xd20 [ 498.913356][ C1] kasan_save_track+0x3e/0x80 [ 498.913376][ C1] ? kasan_save_track+0x3e/0x80 [ 498.913395][ C1] ? kasan_save_free_info+0x46/0x50 [ 498.913411][ C1] ? __kasan_slab_free+0x62/0x70 [ 498.913424][ C1] ? slab_free_after_rcu_debug+0x129/0x2a0 [ 498.913443][ C1] ? rcu_core+0xca5/0x1710 [ 498.913460][ C1] ? handle_softirqs+0x286/0x870 [ 498.913480][ C1] ? do_softirq+0xec/0x180 [ 498.913506][ C1] ? __local_bh_enable_ip+0x17d/0x1c0 [ 498.913524][ C1] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 498.913544][ C1] ? wg_packet_tx_worker+0x1c8/0x7c0 [ 498.913562][ C1] ? process_scheduled_works+0xae1/0x17b0 [ 498.913581][ C1] ? worker_thread+0x8a0/0xda0 [ 498.913608][ C1] kasan_save_free_info+0x46/0x50 [ 498.913625][ C1] __kasan_slab_free+0x62/0x70 [ 498.913638][ C1] slab_free_after_rcu_debug+0x129/0x2a0 [ 498.913657][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 498.913675][ C1] ? rcu_core+0xc34/0x1710 [ 498.913693][ C1] rcu_core+0xca5/0x1710 [ 498.913718][ C1] ? __pfx_rcu_core+0x10/0x10 [ 498.913739][ C1] ? scsi_end_request+0x339/0x830 [ 498.913760][ C1] ? scsi_end_request+0x339/0x830 [ 498.913782][ C1] ? scsi_io_completion+0x13e/0x390 [ 498.913804][ C1] handle_softirqs+0x286/0x870 [ 498.913824][ C1] ? do_softirq+0xec/0x180 [ 498.913845][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 498.913867][ C1] ? wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 498.913888][ C1] do_softirq+0xec/0x180 [ 498.913907][ C1] [ 498.913912][ C1] [ 498.913918][ C1] ? __pfx_do_softirq+0x10/0x10 [ 498.913940][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 498.913959][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 498.913978][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 498.914001][ C1] ? do_raw_read_unlock+0x3d/0x80 [ 498.914018][ C1] wg_socket_send_skb_to_peer+0x16b/0x1d0 [ 498.914040][ C1] wg_packet_tx_worker+0x1c8/0x7c0 [ 498.914059][ C1] ? wg_packet_tx_worker+0x24a/0x7c0 [ 498.914079][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 498.914100][ C1] process_scheduled_works+0xae1/0x17b0 [ 498.914129][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 498.914155][ C1] worker_thread+0x8a0/0xda0 [ 498.914176][ C1] kthread+0x70e/0x8a0 [ 498.914194][ C1] ? __pfx_worker_thread+0x10/0x10 [ 498.914213][ C1] ? __pfx_kthread+0x10/0x10 [ 498.914229][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 498.914249][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 498.914269][ C1] ? __pfx_kthread+0x10/0x10 [ 498.914284][ C1] ret_from_fork+0x3f9/0x770 [ 498.914304][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 498.914324][ C1] ? __switch_to_asm+0x39/0x70 [ 498.914340][ C1] ? __switch_to_asm+0x33/0x70 [ 498.914353][ C1] ? __pfx_kthread+0x10/0x10 [ 498.914369][ C1] ret_from_fork_asm+0x1a/0x30 [ 498.914389][ C1] [ 499.938743][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 499.945675][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00087-g24770983ccfe #0 PREEMPT(full) [ 499.957699][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 499.967888][ T31] Call Trace: [ 499.971201][ T31] [ 499.974168][ T31] dump_stack_lvl+0x99/0x250 [ 499.978804][ T31] ? __asan_memcpy+0x40/0x70 [ 499.983523][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 499.988766][ T31] ? __pfx__printk+0x10/0x10 [ 499.993413][ T31] panic+0x2db/0x790 [ 499.997351][ T31] ? __pfx_panic+0x10/0x10 [ 500.001809][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 500.007658][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 500.013072][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 500.019285][ T31] watchdog+0x102d/0x1030 [ 500.023655][ T31] ? watchdog+0x1de/0x1030 [ 500.028117][ T31] kthread+0x70e/0x8a0 [ 500.032223][ T31] ? __pfx_watchdog+0x10/0x10 [ 500.036934][ T31] ? __pfx_kthread+0x10/0x10 [ 500.041559][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 500.046799][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 500.052035][ T31] ? __pfx_kthread+0x10/0x10 [ 500.056658][ T31] ret_from_fork+0x3f9/0x770 [ 500.061304][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 500.066548][ T31] ? __switch_to_asm+0x39/0x70 [ 500.071341][ T31] ? __switch_to_asm+0x33/0x70 [ 500.076134][ T31] ? __pfx_kthread+0x10/0x10 [ 500.080757][ T31] ret_from_fork_asm+0x1a/0x30 [ 500.085655][ T31] [ 500.089013][ T31] Kernel Offset: disabled [ 500.093389][ T31] Rebooting in 86400 seconds..