last executing test programs: 6m54.026023265s ago: executing program 3 (id=8): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1b00000000000000a7d265994c071986001863a1c675ed00ce0000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15) syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=@ipv4_newroute={0x34, 0x1a, 0x1, 0x70bd29, 0x0, {0x2, 0x20, 0x20, 0x5, 0x0, 0x3}, [@RTA_SRC={0x8, 0x2, @private=0xa010101}, @RTA_DST={0x8, 0x1, @local}, @RTA_IIF={0x8, 0x3, r8}]}, 0x34}}, 0x0) 6m52.072092293s ago: executing program 3 (id=10): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SNDCTL_DSP_GETFMTS(0xffffffffffffffff, 0x8004500b, &(0x7f0000000a40)=0x6) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000b80)=""/4104, 0x1008}], 0x1}, 0x7}], 0x1, 0x40000021, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b40), 0x2328}}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r7, &(0x7f00000034c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0xcac) fchown(r6, r8, r9) fsetxattr$system_posix_acl(r6, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="020000000100040000000000", @ANYRES32=r9, @ANYBLOB="10000100000080df20"], 0x2c, 0x2) sendmsg$unix(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000300)="a29a5a0e76cc809932179755a86c08e5d70d3acb907e2c30e10fe263be7b0bb36908a08e928a607c619b9eeba4ba7bdc53dd607a1f634f2d1c5467872e6216fbef33a484d28f27448777624b44521e120103435858aee0fd81f39c57523c9e08b6ecd2fbb16a089b5a6dff16eac24d654e4c9239d71cf972272b44f857e5953efda0d03c0e436e0b1978a14de1201d3f0556e95208629381d15193a46b7f5b749cd276835d53855d8639b38017da07", 0xaf}, {&(0x7f0000000180)="d2d47e2bd71af658438cfa09cfe24fc131787cd4635ca6d031f56b5d300879b08f55f89f9b1db3afd48273885b51bd4687126a8f56eccd1c1ac73945e92b979cbf908a8e4a73d0ed13af0f2fc28e8f20af86fcc0b3257f5a8739e04d3cf1191661aa4aab344f23d002ece5be40b0452764d1bf86f43d", 0x76}, {&(0x7f00000003c0)="1715c70d21a7402d8140ef1c08b92a3faef7e672f8bae6078211eca51e9ca8b518c82a010dba01fdbbdbd0b01e00bab96f933956ed7fc5897bc7e89c396032ec0bda96087d5613ad4007e2e844fd18acbd6977f1ace31ac947b4cd9574edf758fc46928c9fb582c6bd64fee16752e649c7e53ee458f7492626b20ae5daaa7e51b4b8aa02b8f080e3d75a0a327b885f66c36ac1e38bd6376580c78bf91b037f1a3cb5392e9155b2765965f908e0c12225522ebdc1771c82594b2f8f505ce75fc1f8fc2ea7c835865d3012c18ff42b42c901eeb93e2e4382c785c026332ced2479998b4567d7c74a5dbec4fe0dff79958487d1df", 0xf3}, {&(0x7f00000004c0)="6a7bd6f3852e2955c6c4c0a9c61b0eb6830e4c9875f4475ffa4714a9bc51b37d8e6e0b9d9b597d049ca4c38b119326c58af9686e01137f26140867ba63840f83868297eef36806c76dc39e46a074217efdf1ba5cd7ca00f7dc3ea075e3379610e1732aa1a381d4e9b794891047d86ccb476af76408341ca24f0e53ec7a37117244aa0b44dc612caba4055bc8e9823cb1a62a24a7a5a63c2ce71d5a6ba47dfe695a897e32c70a49654aaccc12b7541d63f230d7a8f2cff273e9155939550a6b9f98218273de9a56c2e140645884a714807f16db1d8022f5c766ba3594cea52b25880bbab74c75100b054a40a5cb0cefa5165646b097402984", 0xf8}, {&(0x7f0000000240)="a25a28b798f8c2da92285bb3cfaa8befe401e8745a88c073758ea3e1d82a4937480418d8543d9678dcef62c2647ac1815a92e7e9503c1ef999e80f2a6b184bb3f34da022467410f629", 0x49}, {&(0x7f00000005c0)="63b419bdac3aff29658b70833f9252d3c97ce30a26d1c55767d77eed87f1136f0085dcf5fa61e7641398951fd601013a21f10c44de076f18f3f8f07422", 0x3d}, {0x0}, {&(0x7f0000000640)="ecc5f5bfee665586815445ed3d0ca826a33cdd9e5da7a5c8e5025bcd74191b73e0968695ab086065c5e9c7fd6f72c9b4028957e2260a971dd1aab244a99e6d66add1eb7e6a0f5228d39b091cd6f4fdb9ada57904f6b4d3ef02c6ea8a", 0x5c}, {&(0x7f00000006c0)="4566efcc4d5eb26ea83a6ce38d042d7bb03b99c12b6b17c2de1fcd14fc4fe5b1d6f9", 0x22}, {&(0x7f0000000700)}], 0xa, &(0x7f0000000ac0), 0x0, 0x4000}, 0x8000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r10 = syz_open_dev$vim2m(&(0x7f0000000a40), 0x9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r10, 0xc0405602, &(0x7f0000000a80)={0x4000, 0xd, 0x0, "134600cea4dd512d97d4188cbf770637bc747721f37af54dd1dc03030096c337"}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='mnt/encrypted_dir\x00', 0x200) 6m49.493848353s ago: executing program 3 (id=11): getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0xf, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x8000) mkdir(0x0, 0xe8) openat$nvram(0xffffffffffffff9c, 0x0, 0x22000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) keyctl$clear(0x7, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r2 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) io_submit(0x0, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000140)='-3', 0x2}]) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0xfffffffe, 0x3, 0x4}, 0x1000000, 0x200000, 'id1\x00', 'timer1\x00', 0x0, 0x81, 0x1, 0x4, 0x10000000}) syz_open_dev$dri(0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x1, 0x4800003e, r3, 0x0) open(&(0x7f0000000100)='./bus\x00', 0x103bff, 0x111) 6m46.273068435s ago: executing program 3 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_clone3(0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES16=r2], 0x0, 0x40}, 0x28) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) chroot(&(0x7f0000000080)='./file0/file0\x00') 6m44.868917384s ago: executing program 3 (id=15): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4004800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f0000000200), 0x6c6c9c9e, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount(0x0, &(0x7f0000003c40)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x101c008, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x482321cb74c946b6, 0x0) read$msr(r1, &(0x7f000001b5c0)=""/102368, 0x18fe0) r2 = getpid() r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r5}, 0x10) r6 = memfd_secret(0x0) futimesat(r6, 0x0, 0x0) sendmsg$alg(r4, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) write$binfmt_script(r4, &(0x7f0000000600), 0xfec8) recvmmsg(r4, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000400)=""/41, 0x29}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x4, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0) move_pages(r2, 0x1, &(0x7f00000003c0)=[&(0x7f0000ffb000/0x2000)=nil], 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a, 0x2}) 6m38.285200229s ago: executing program 0 (id=20): r0 = socket$inet6(0xa, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000440)={@cgroup, 0xffffffffffffffff, 0x5}, 0x20) r5 = syz_open_procfs(0x0, &(0x7f0000000300)='mounts\x00') mount(0x0, &(0x7f0000000200)='.\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x208904, 0x0) pread64(r5, &(0x7f0000002240)=""/237, 0xed, 0x619) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='net/fib_trie\x00') read$FUSE(r6, &(0x7f0000020940)={0x2020}, 0x2020) preadv(r6, 0x0, 0x0, 0x80000001, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x1}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x3) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f00000000c0)=0x9, 0x4) r7 = socket(0x1d, 0x3, 0x6) ioctl$IMGETVERSION(r7, 0x80044942, &(0x7f0000000000)) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0xb0a82) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 6m38.203407667s ago: executing program 3 (id=22): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000004780)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x33, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f4e230000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) socket$netlink(0x10, 0x3, 0x15) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000580)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r7, 0xae80, 0x0) writev(r1, &(0x7f0000001700)=[{&(0x7f0000000380)="5cadb52ee802b25ae0447e9d951f76d1bc5ff283539cc69b3c842ea5bc3642ddc43e040f48d4a86e90953dc1465e02dad655a1fa9c9bced2715aaf1f9829d1ab1c02904eb05b178a491ea75cecfb5a04a9c3fc55e3a140c079cd5ff8cae4c9ee3ff48fcfaf94e5068b7d6173f22be2a0f3d93b374f8554965647e73717821557db446c96f8360785ba757b05af80e1be36f5fe789547baa12a3f78cda5da302b9b2a819b561f1bef2ea37bd9e04e5909e026", 0xb2}, {&(0x7f0000000480)="abae77051fecc78d535fb29292620b5e8a9fc84a88dcdc91508501e47f709d6d1d38a0c28f5ed9848ad202e8d2f9c9d9155e24c715450791817c1d83763b7805b8f5a5f819519bf664a0d29887e919d9648b1c538d9483561e6ccaeb9e472cf918eae4a1d7c93a16f7b5337050bc004f2d7187ecf1d163e2f7924e2f3ef1519ddc464574810327a446ffc54984cec0242be8f8ca82a5145f50092ad08afe96e8dad3f50dc1b5e34d2c5866c644fde9c23df6729c08a63bcc3faa848dfb72", 0xbe}, {&(0x7f0000000580)="4290e346c93a4c0491aaaa503aaebb2324b189e9db23cbff41cfb8569a2d6b0f0eadddf6fd2abfc4e569df6ad3d833ac64fa3c28be365f67c05256434b8505fdd69ae4cd73548d9d32b4d95fe40ba4d03830650319ad794021760b8ce679606c79b02f3250", 0x65}, {&(0x7f0000001780)="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", 0x10db}, {&(0x7f0000001600)="5a73586c7106c4c268130352b072aa28596c520cf142a8592bfddc753b739c5c6925d4a69ff430a9a6e5aecc802852d103cad2a879e4b54c287aa8fb4e9314efc1f41308972f9a99c1e0a4ae35368b5c6089c1e5fb180172e752247ed78b96a41d85fb0a110062d9d7fe2632e04327d14f4d889bd812c07d5cd3699e9ef77d8a147b222c64594375493c0207959268edd3c1b352e5f84b7dbd3aae94f7a91115c7ee680cc56e8a544846b5f96971b2b7388357361eb5095c4a0cfc7345886db110a8dbaf42b354d204dbf667c7d958f0278acdd04c0f439994e967e32f002562c47a64773fe649bd978fd9f5bbfebf527d6ffefe", 0xf4}], 0x5) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, &(0x7f0000000000)={0xc, r9}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000340)={0x28, 0x2, r9, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r8, 0x3b66, 0x1) 6m34.114965441s ago: executing program 32 (id=22): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000004780)) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x33, @loopback}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d09004beafd0d36020a8429000b4e230f4e230000a2bc5603ca00000f7f89004e002050da742dac0000000101ff05020003000200000000000100000000005839", 0x48}], 0x1) socket$netlink(0x10, 0x3, 0x15) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000140)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r7, 0x4068aea3, &(0x7f0000000580)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r7, 0xae80, 0x0) writev(r1, &(0x7f0000001700)=[{&(0x7f0000000380)="5cadb52ee802b25ae0447e9d951f76d1bc5ff283539cc69b3c842ea5bc3642ddc43e040f48d4a86e90953dc1465e02dad655a1fa9c9bced2715aaf1f9829d1ab1c02904eb05b178a491ea75cecfb5a04a9c3fc55e3a140c079cd5ff8cae4c9ee3ff48fcfaf94e5068b7d6173f22be2a0f3d93b374f8554965647e73717821557db446c96f8360785ba757b05af80e1be36f5fe789547baa12a3f78cda5da302b9b2a819b561f1bef2ea37bd9e04e5909e026", 0xb2}, {&(0x7f0000000480)="abae77051fecc78d535fb29292620b5e8a9fc84a88dcdc91508501e47f709d6d1d38a0c28f5ed9848ad202e8d2f9c9d9155e24c715450791817c1d83763b7805b8f5a5f819519bf664a0d29887e919d9648b1c538d9483561e6ccaeb9e472cf918eae4a1d7c93a16f7b5337050bc004f2d7187ecf1d163e2f7924e2f3ef1519ddc464574810327a446ffc54984cec0242be8f8ca82a5145f50092ad08afe96e8dad3f50dc1b5e34d2c5866c644fde9c23df6729c08a63bcc3faa848dfb72", 0xbe}, {&(0x7f0000000580)="4290e346c93a4c0491aaaa503aaebb2324b189e9db23cbff41cfb8569a2d6b0f0eadddf6fd2abfc4e569df6ad3d833ac64fa3c28be365f67c05256434b8505fdd69ae4cd73548d9d32b4d95fe40ba4d03830650319ad794021760b8ce679606c79b02f3250", 0x65}, {&(0x7f0000001780)="ab2b602c639df3c3ad5b00065cdf1f8537f10e64d7f4b5bf704dc9ab8e01cc63191d4166e85b4b9846cabd75ae199e539269ab9cb4595f16ed7add260a19940910256eddc640720c6bdb714f41ea01422912f7051dd3d0234a35a5241f6eeb406e656ecf47acc3d990fd7a96318d1761c285df21362a6dda59d0fa7ddc8558ddee9f49475cbaf6da5d2691d35df2677bd2149c0921c128c74d3f47457737d00a01f0e290d5498adf60df2cb2193b95fc2329d37bfc57b14c72d50da1732541735b2eca125a43f06864f24f1eb676f81fbcb04da95912cdc27b148f212f4ab3c1dab27d38e43e5e4035251f3964ca9b74d44937efb6c04f106630666c88d322f545d0f6ec4a1c6f5fe40ef8ead37a41c25651069058fec7745e037a1bf68b829b5f1740676db81aa8013af977229421b92ba770a0197aedada3a5545c3df9a17a3024ba319eb185432d57e0b7e5e5a6798881c2dbfbfee0359bcab4f5d913ede91522dbd01b7cf89739903c37a69b8c6eb7a9dd74883c52bbf3e29970fad15fb0e9ab9fb886c146c167ed53519c4950437c35cb4360479f97b22761a8cb1326d8cc8f15eb369249144af83019a8592e6359302fd4e17225d124d56030d9be8294c16cada23b208299453c57b2b5d3754b9d2cb8c9a9421ec45d71b4050104a3508583f54a931b4fc435181d355dfb8a5e4567adf06e22a4a1d1196ce973b0ce2c1e7e99729e72e374c2f01a429054d264c4fd269019b62c7d0dc204f514933e272b35bbd9698baa2c6f9b2c395256f242edb55b8cec73b6f142e5086ccbb032536d050755abbd4b25de09a86e09b739c2f13bb0a0aaff1efff45c8a30b82f6e51a4e9ad2679eec28e909cd011d4f99924db2386b3c4d03b68e5023ccb3872ffa68cf810c6cfd3d59885b05747899925f21a95485312e6d8333b44135d6a30526069ea139183d2530b732376a392cc564feac39532bf06b69349ef1d4f87949a9cc9c8007680a54cb6ce9f6b92bdf1204419a08ee4cca9fadb693fb934380eb064ebe67415849f1c7ceaef4511f8687f7565228c160cbbe29d037c5d946c2e068b4e28f8833af8010580fdcb852408adf155f2fa96c94fbf5549cf928d67d2c72e928e1081d40a1e916f5ce0bb6c0cb3fbd779df14eb374e2640febc5b830617ccf56bee40ca4bb4ec17621f6c366724069ca5f5bd15fbceb256447531412cac7f93e728fbbd195e020dec465eaaf9f1c4a2aa7a0524406321910bb8c69c5794f83b1c8af46cdf783ca3de7a5e60592b2a4dfd982a40bd80783dda0c95412b135617d4c6e6059729068b1bfcf94311a9dbe12bc60e906407efd5271950b77fb66b71c694b0aeb79eef248626c3eb13035146a73c88b2d2604099670f66641da109efb85915a6136a62c9bd90557e88522d99b629d45c2337cea34c9710241e414b057a0ec3a955d02d95349506ee9b915fbc7dfcdaf65fca26dae12da544a69d6e5e039436b64be90492a1814861dd1e655b4b58b9c3f2ce7b032362e2bf105d397eccc472303bfb833e5d341a570e645c34a35c5c626fec8505834b931d0593438536179330f96f90a3708706851490717dba7842b2ea976cc512e25bf2e9211dfa5e83e491cf6dd2bcbe450a1d8e9a82ae97a8776722d0bb22ab4b450f92ac992f545244e78ce25e82e649164d7aee0491c87571e623961d62164bb428b2624ec58f523ffc53f2988ba638ee4a50a3928ff8795981ea1f83f260515f35eab98f4a576d0c5b876be6f0f1af99ff8910bc9e370c6bfb7e47a6a7dd1bfb86d0e9bb18ac48ada7af2eaaf21aef2add7b6d2b0f9aadcdca60e91a1cb2841d9a88385b27bdf37d7f431698c54673eb9664ebb60fede761dfb12752444bd6b9561141094ccf60dc59e06eb86b48355a4b3f86c25b0be3d12d13d8ff009bf2a1485d9ab2842c26965564746d83d009709bcaf6e9367fcce0e3ef4eb96035feefd84d4322008d3b4c4cd07c07c8a6ce4f67a5e4f896d9736f1bdff5add17919c910345a8fee9cd772c31b0ee71d411882ad3498493f2512673fb63f39a3f8178b43faf981ecbac4338a4525a40aa974f6ae1a7705f93f9576805f7484a3436dd545df48dfae1aece538f926c3616cbfb1b96114078ce381aec9dc00a8c1fd86f0c513e02791651e11032585d2c1a3d65e0c30accae6debbd911af9f04d20c6aa6aa93e6dff2a34a5b8468500da043766f319dda7e026445a650e083af00d5acd808386dda6f68028d744a13f010d5a15442a83fdbc075a4bc0091af110502595a798c8b8b3d69ce8d27fe406d3396a1e03cdabd563081071df61f8a4e4eb1764d17393955edcbb5822ccdf4e05ae27d5fccf7b39f6d5847fe3f1a4c7f2b2b888d5fc5de63c55b4ca4aa1763340b059371d774908f324af939e1afa1146b68d4358740771e7f56b94260ae47e2aa2bfe9d9fd36b763b64fc761d22b1ebb6ec0566e0cf3772647c242646ed323142e84e8a63e062f6765691540809b4496fadb2ce4365fb445cde27693aac3b838f0b14d36ab31872ef06d604349a42e7e80d58ff116f7e715a391eb82c03472aaa0bfab5f64e2575d86bfccb45a4ec426df2a2ac59eb2c24d66f70a12ebbc774a0b06fac6218f40c127cd4fe0cbbf0bace2bd128242b63578809224b6c2f3ca12cf42d36d5e6b89a25ea3698ee10185d20b7b43c687435e51324fe86600cb85094c29c0cb202f04842d42d9533541f382c309cd4710e00ff6fcd35a0deaed3b7c86085d3cde588396ea92c7ab7821663d0fda6dcce712714bc59e14e9d551c24e475d870007d2aae9d4b379c32af67a718a81ad7eae3f66b0477b1484799297a91853b6c0cc5c8ce4cd7eb3f063c9b03aa5cb15fbebe6f50934dc9547017f1d28b872f5f02dcaf3a696e46662079e5de7ba69657ce6435042cb439604a5a3e4d915d04061a897577b0f0b09e17a187eb6e18e040943f39d48fc45134c56c684eaf2ca35b0d6ef3b807581d3a7e2f64887227a034bf42408571308dd723918eb25ea58ade58d0f64a3643e233fb0b330eae969ad7c9bcc6aa3d7046bb013e1db8a09626e5d942f3384959cb4e67e4bcb925419aa5451fdc5fb14562a1df4745300ece84de7cb0eac174138a35328dc0d8ba21bbff5f5870c5a33d365378f8f049fa72dde3b78cc85895c377d86e28a46bd55bc3f0aa39d3177a53ce64692790c2899508e7ce9d8263c34b75f162931954a519139b31ea288e29987c95576970a6093ecd89d44f4da29b8c87ab04112b5c3a5fbdb6a079fa2e9122b1a715675c900a7943362b39db7169282a5783fb45f53996c3e4d651fbdaf4d417f68c4ad2cad4bda24420f736a42a2119593e7ab5d7fb62fae7c109b34f972fc158e6b9b2f39486fb0be8d7b4308c4735c271667976c0b6a59b4dd642508354fb0e374336de19a84c9125ef319e16393b8c60ee818baa434280d10667c9a8bafbfa0a2e585d6994edfdbd392cefdc85436e5dd002135bdff6a909df0872ca975ff6646e2feccce85790e518f396b0dad6256390551101aeae4558ec71db7c944ad7e52778392e716775f29a8215eca7e902b88960bdf225697af5cf9cf131f9ec549f354be1b52bece080b9249737561233186dcd41a3b01a9cfafb640afc7ddb2501213510d213d0be34cb28987ac9bfe4567d0f743824512e1921a4dfe81a7171f1ac76d67a7503d0aa9f2047b2e0141d33274e7c26861c61039048c9f2f47689702f4c405f2ac1fcc370441dbdde96e1d2cc982e9a2adec9701edce1e4c6a8801cb0b30bd4c4bdbf24c34ef24133f313afbf2ea5f6fae9e1d153c3c163676e00f8c83c31b74e9e50efc4bf6f21c6f5792a6fb7ca840ac9ad3ffebf9d20695d6600eb8260b8e5bd4f7aff2a3fb6accb5a01977cdd8367bf214dacc23006f696d8638149f5a7289387884b25bb3548e3b1bba1e09e7bc816ad95cefa345a4e49c949fdb96e8c7704e62bdf911105bc2e1ee25f0d0603712a4c39f17fc8d56ea98b2b08b7c7b38193d128c254facd73554a4da58d0b6b95037af807e2a2ec492d290be73f9809410b20cc9c85682a5e0bd4053d566ec7de43fc7cd22d4ae02e766c87a4ce57bbf410f0b05133e3567a9f7b9a9b8c86a01ce16276be9fd5406f85ab492e5ca2a7de6009024b90450a0e1d2b7b62a5eca297a99411209d42c7582a805e82890362983f0ad807f8eee37cc1ac7aae9f3893b235605aa213569ee31edb32dd624b518015b285f42e4ce5562ccecd7a6243175d810b26bc50ad94b2bb039e38759686cff9e5117e4ad86a4183f6c6e50df338eaa8648ef015cd753042eddf14ff493368c5d4e7c1bed6ba9ebda6994c10154e82200dc633525ba964b2938c114cdaef5a0210642c8730a2ab930d1b8119b87561c7ebbe9a9ed18e174b3a71c6dfbb7cd30bf5157b1ccf49d54be5b36ca432be73bb01f0698db66116b2ab0a51ecb747dc6e90efdf6a64a0f2618ed954e57108d6900aec145b2f61329fa09cd0ac5e9a71da152d9f571a9f0054dc2958a295c6f80c7a2aa72b785f7b800fd8f2382062a567533331675022dc755da7acfeb08a7ffa429b20d1eae2590632dcc7eefe6354aff9d19ec0d13434c5f0a8ca0bfd762f4986d061d512128dd6487e80853607d41da5cf74af91e187c56bc2ccdd6c9170b0ca39d540ae40d9427bbf0316c442d73b97284d5f37936ba96d5c97df8453fc1605d2a75fde401705be921cacc9fa0bd19b0cf072080874bfb42a08efcf41ae7c4fbc275d8e273883f68f6477c1e009e94f37e455d41971c807dc51645a849380a1c40faf771e929e95e36ddb30a9c359e6e1817b93739034940b1758ef297129a7826fa83fd24a7e8d97911b98f29ca7b9cd400e28a3b67ced4629db17f49eecd21d0f414364cc2960c369f1abd7d219d916af0f55d76b4f8619da0d28ad72db2226617c477e9848fc017604baa49a70aa93ce04286482d5a0ce684d8f1b44b626b771740040bae00f1e046cb2dbd6394bd160a6df2130b952aa246d27ceb1692ec66cb777e90b0723ed4bd04004d07b89d231c3232a0286bd295f3ba9777738953a3ca3fe1ab246dc4abfe2310469af9bf901f344346ce6d238f55fc3277b16f8575c9e07bac4775deca09f769e3a948dce0700c8d0aa2f49db9c58afac896e78404cb1cb045c5fa81bdb9b97c34968676382e56a15dc3938e1f48229b3cad01f1a34dd24f82623c1a657f2474a2b828ed40a9f4aea6658990fb04a91faba8866536c119d3feef0eeb325e558eaff94014d39df8b19b0b2ddcc689bb01f92d40943a466716c89175ad7069255051b03ca0290c51d3ae0272251e6e80c9034a45cbfeefe655a032271707ac6e800f65ae4c50e8b130094960a67c09a33abe85163f3fcd9065ba2409144e344cfcd36059c602dbdda545f68afd0ecfb5abfff1316aaa31ba67d30346284185e9ffe26710934fa0dd833e0a2efa655bc58604def7ffdce1306d20ab56553be2c66984421e56c07ee7f8e802f3a2aca0c30e64f05cd620eb541a11326ee4cf2619a87e82197c5a0834536aec9bb3ffb5fef94d94f3b0ec26026821b9acc548ebd7c348565dd108d3ce599b7da4ec9952633f6c67a3fb53198c6836e5ce7fe86722b9be40abf4ba8402b0e08f5cc40177f69ec6ba15910fdb1fd1eb845954aa79945737979b58abe37da01a11e227130f5bbc62ec3853aaad09867b96ebeb46c7fdaa838ed729dcd17a11cd7f0699b4c91bb86edc977f30752ef8f0cc5a48e80a47cbb1bee17b1d3936ba09208c1c30e098c04dacd050c7a74bf3a8a040060fea7110d45735cbcc3f9b01b9abfad500de037d4998c6995e31426844ac4427e91bba9703e99123706bcfce32a1e56818e47b48081fe8dbeb9aa09d7761da043cd90b3311d9ed31510fed236f346740a8155ca111478837b1accb01178895568ab2899ff83c9b256e142d27e996c3169377b8db248c373175008da9f48cd4091ed1aeb2a1931eac4282e2378d94b4092fb99f3147458b657fcf79b7c97a10c08cb441c0290e1c73c1ce9e2732444b5484a05d27421a9", 0x10db}, {&(0x7f0000001600)="5a73586c7106c4c268130352b072aa28596c520cf142a8592bfddc753b739c5c6925d4a69ff430a9a6e5aecc802852d103cad2a879e4b54c287aa8fb4e9314efc1f41308972f9a99c1e0a4ae35368b5c6089c1e5fb180172e752247ed78b96a41d85fb0a110062d9d7fe2632e04327d14f4d889bd812c07d5cd3699e9ef77d8a147b222c64594375493c0207959268edd3c1b352e5f84b7dbd3aae94f7a91115c7ee680cc56e8a544846b5f96971b2b7388357361eb5095c4a0cfc7345886db110a8dbaf42b354d204dbf667c7d958f0278acdd04c0f439994e967e32f002562c47a64773fe649bd978fd9f5bbfebf527d6ffefe", 0xf4}], 0x5) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r8, 0x3b88, &(0x7f0000000000)={0xc, r9}) ioctl$IOMMU_IOAS_MAP$PAGES(r8, 0x3b85, &(0x7f0000000340)={0x28, 0x2, r9, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) ioctl$IOMMU_VFIO_SET_IOMMU(r8, 0x3b66, 0x1) 6m34.072302497s ago: executing program 0 (id=25): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x26) write$dsp(0xffffffffffffffff, &(0x7f0000000880), 0x0) io_uring_enter(0xffffffffffffffff, 0x2565, 0x61c, 0x4, &(0x7f0000000000)={[0xe3]}, 0x8) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r1}, 0x18) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f0000000140)=[{0x0}], 0x1, 0xfffffffc, 0x104) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, 0x0) mount(&(0x7f0000000080)=@nullb, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000100)='bfs\x00', 0x4, 0x0) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='devpts\x00', 0x0, 0x0) mount(&(0x7f0000000180)=@filename='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000300)='pvfs2\x00', 0x11, 0x0) umount2(&(0x7f00000000c0)='./file0\x00', 0x4) socket$inet_icmp(0x2, 0x2, 0x1) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) userfaultfd(0x801) syz_open_dev$loop(&(0x7f0000000080), 0x7ff, 0x200000) r4 = socket$alg(0x26, 0x5, 0x0) accept4(r4, 0x0, 0x0, 0x0) 6m28.726571215s ago: executing program 0 (id=32): write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=0x7, 0xfffffffffffffcb2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setlease(r1, 0x400, 0x1) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mount$9p_unix(0x0, &(0x7f0000000040)='.\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={'trans=unix,', {[{@msize}]}}) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 6m28.215440341s ago: executing program 4 (id=34): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00'}) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b0000000800000002009b154ebd9e2902c81cd6bb7d58091100000400000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r5, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000f14c01000000000000eeff0018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r8, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r8, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) gettid() 6m23.340201113s ago: executing program 4 (id=37): madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f00000000c0)=0x6) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00'}) ioctl$UI_SET_LEDBIT(r2, 0x40045569, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x454080, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="201120000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$UI_DEV_DESTROY(r2, 0x5502) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x48000, 0x0) syz_io_uring_setup(0x717d, &(0x7f00000002c0)={0x0, 0x40d382, 0x0, 0x100003, 0x2c1, 0x0, r1}, &(0x7f0000000340)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x114, &(0x7f0000000640)=0x6, 0x0, 0x4) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000280)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a01000000000000000000010000000900010073797a30000000000900020073797a31000000007b0003800800014000000000080002400000e2bf080002400000000048000000160a0101000b000000000000010000000900020073797a31004b00000900010073797a30000000001c000380180003801400010082696d72656700000000000000000000140000001000010000000000000000000000000a"], 0xd8}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000080)=0x3) ioctl$TCFLSH(r7, 0x80047437, 0x10004000000006) r8 = socket(0x10, 0x3, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x52002, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000280)={'sit0\x00', 0x2000}) socket$netlink(0x10, 0x3, 0x0) 6m18.872494956s ago: executing program 4 (id=44): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8aS\x1bZ\xa1\xba\xb4E\xbc', r3) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000180), &(0x7f00000000c0)=@udp6=r2, 0x1}, 0x20) bind$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001680), 0x0, 0x0) recvmmsg(r2, &(0x7f0000001580)=[{{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000980)=""/177, 0xb1}, {0x0}, {&(0x7f0000000dc0)=""/111, 0x6f}, {0x0}, {&(0x7f0000000e40)=""/168, 0xa8}], 0x5}, 0xd0000}, {{&(0x7f0000000400)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f00000010c0)=""/233, 0xe9}, {&(0x7f00000011c0)=""/191, 0xbf}], 0x2, &(0x7f0000001280)=""/210, 0xd2}, 0x7}, {{&(0x7f0000001380)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000240)=[{&(0x7f0000001400)=""/174, 0xae}, {&(0x7f00000014c0)=""/86, 0x56}], 0x2, &(0x7f0000001540)=""/2, 0x2}, 0x170}], 0x3, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) r7 = openat$binfmt(0xffffffffffffff9c, r5, 0x2, 0x0) close(r7) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r5, &(0x7f00000004c0)={[&(0x7f0000000000)='\x00', &(0x7f00000003c0)=')!}\x00']}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) sync_file_range(r0, 0xffffffffffffa525, 0x65, 0x3) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) 6m18.551483106s ago: executing program 0 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_clone3(0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES16=r2], 0x0, 0x40}, 0x28) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) chroot(&(0x7f0000000080)='./file0/file0\x00') 6m15.400768719s ago: executing program 0 (id=46): ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'syztnl0\x00', 0x0, 0x4, 0x9, 0x6, 0x8, 0x64, @mcast1, @private0, 0x10, 0x8000, 0x379}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xd, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r2, r2, 0x2, r4, r3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r5, 0x0, 0x0) r6 = syz_open_dev$loop(0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, 0x0) close(r6) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 6m11.369274831s ago: executing program 0 (id=52): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x454}, 0x4004054) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', 0x105800, 0x57) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000240)={r3}) syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r6, &(0x7f0000000240)=ANY=[], 0x40000) r7 = accept4$unix(r5, 0x0, 0x0, 0x80800) recvmmsg(r7, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r7, &(0x7f00000008c0)=""/239, 0xf9, 0x42, 0x0, 0x4b) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000100), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x62, 0x109, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xfb, 0xca, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7", 0x2, 0x0, 0x3ff}, 0x50) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) 6m8.927112025s ago: executing program 33 (id=52): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x454}, 0x4004054) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) ioctl$SNAPSHOT_CREATE_IMAGE(0xffffffffffffffff, 0x40043311, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./cgroup\x00', 0x105800, 0x57) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000240)={r3}) syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_linger(r4, 0x1, 0xd, &(0x7f0000000000)={0x1}, 0x8) r5 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r5, 0x0) r6 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r6, &(0x7f0000000240)=ANY=[], 0x40000) r7 = accept4$unix(r5, 0x0, 0x0, 0x80800) recvmmsg(r7, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x807}, {{0x0, 0x0, 0x0}, 0x1ff}], 0x2, 0x20022, 0x0) recvfrom$unix(r7, &(0x7f00000008c0)=""/239, 0xf9, 0x42, 0x0, 0x4b) setsockopt$sock_int(r4, 0x1, 0x21, &(0x7f0000000100), 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x18, 0xe, &(0x7f00000016c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r8, 0x0, 0x62, 0x109, &(0x7f0000000140)="cb74445b7d4c0b24676c6c71ae37efcedaf40242309766deb4e793f90000000000000000dbc856cbc664650634231454ca2d8034c4ca29e0d99c3b6615e91835a600c08f989af45438a54981be310aad92ae545b1c961e5f3762a51fe4c736edec6f", &(0x7f0000000cc0)=""/265, 0xcb95, 0x0, 0xfb, 0xca, &(0x7f0000000980)="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", &(0x7f00000007c0)="4c87fe555ceb79157b1e507ff4d3cc053321e42ae89f596427188b4877ab8f1776c0685784f1174c6401ecc1dd6e2a77bc79238f87ad9215a92ff203a30099e77c543e702b4a4438d358616381745f24f74e585498af129c4b173b242f445b08135f7fa40eb7ba78160ff4f0c80e1b324d0c234cb7f43a3ff9e9535dc16000c797113a039f4508a09144090000009f38a90a24f173b3e68377e4272950a80cfcd3aa6850e917bc7e57370060f5e6db941d67fc98a1e98103830b821657438325578d2af822dd4fc13ea7", 0x2, 0x0, 0x3ff}, 0x50) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000140)="24000000010006", 0x7) 6m8.886908576s ago: executing program 4 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_clone3(0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES16=r2], 0x0, 0x40}, 0x28) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) chroot(&(0x7f0000000080)='./file0/file0\x00') 6m7.589018277s ago: executing program 4 (id=59): bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="dc05ee057ada978f61034835c9655cc8f5553beda9f730e151772060ac74b31cd73d524a83d2278bcacaf9ccf186df9ce51f99f2e19707bd19279dea3a989ab3c0bcffcfba1b5cdd4eb33ba40f0198d12e4108f58d9942e2a7a2efac7ed3d4a8ba0211be34077582823b52cea03ece14b22f2f5754", @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=0x0, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC], 0x20) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) close(r1) bind$llc(r2, &(0x7f0000000040)={0x1a, 0x0, 0x3, 0x54}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000007000000010001000100000001"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @local}, 0xf}, 0x1c) listen(r6, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) close(r2) 6m3.415927014s ago: executing program 4 (id=61): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0xb, &(0x7f0000000380)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0xa}}, 0xffffffffffffffdf) openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r4}, 0x38) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x2, 0x60, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) 6m1.387166949s ago: executing program 34 (id=61): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0xb, &(0x7f0000000380)=ANY=[], 0x0, 0x10000, 0x0, 0x0, 0x40f00, 0xb, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0xa}}, 0xffffffffffffffdf) openat$procfs(0xffffffffffffff9c, &(0x7f0000001300)='/proc/timer_list\x00', 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={&(0x7f0000000180), &(0x7f0000000440)=""/179, &(0x7f0000000500), &(0x7f00000006c0), 0x3, r4}, 0x38) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/mdstat\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000000180)={0x2020}, 0x2020) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x8) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) recvmmsg(r7, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x2, 0x60, 0x0) socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x38}}, 0x0) 5m58.515526176s ago: executing program 1 (id=72): syz_usb_connect(0x3, 0x36, &(0x7f0000002300)={{0x12, 0x1, 0x201, 0x7b, 0x4e, 0x64, 0x8, 0x2294, 0x425b, 0x1a35, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x10, 0x9, 0x50, 0xa, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x70, 0x7e, 0x8c, 0x1a, [], [{{0x9, 0x5, 0xe, 0x0, 0x10, 0x9, 0x2, 0xff}}, {{0x9, 0x5, 0xa, 0x10, 0x20, 0x2, 0x9, 0x87}}]}}]}}]}}, &(0x7f0000002a40)={0x0, 0x0, 0x0, 0x0}) 5m55.87575478s ago: executing program 1 (id=76): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r0, &(0x7f0000006740)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x5c2e, @mcast1, 0x8001}, 0x80, 0x0}}], 0x1, 0x24064044) r1 = syz_open_dev$vim2m(&(0x7f00000000c0), 0x81, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x8000, 0x3000, 0x34343452, 0x4, 0x7, [{0x592e3537, 0x2}, {0xfffffff7, 0x9}, {0x1, 0x9}, {0xe53, 0x7}, {0x7000, 0x8}, {0x7, 0xc}, {0x8, 0x32}, {0x1, 0xfffffff0}], 0xd7, 0x4, 0x3, 0x2, 0x4}}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x2, 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000500)="ccde1b1a4ca56624e9f99b266b90f34996b5e4b40aaac1b1ddf415caac0b1ee33131327d3473a2fc7ae73d68ebfb412583feed906281a0b736206e9c25b3d437212f7a21a90b8e441fb49a7f7912d5ee000515d6460081e527862d3438b5b8ad211e024938fa4cc6f7936a253069707f8066bf967d63384f775e4980cab242bb0eb03f60b95b2ce1b58c5c98bc6230b574a0e6ab905f327e5ab5444e1ad6c1fc4628b1120b13fea9ff6d64075430c3dc77cae3d043", 0xb5}], 0x1}, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x8}) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi1\x00', 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000280)={'pcl812\x00', [0x2f00, 0x5, 0x3, 0x2, 0x0, 0x1, 0x1, 0x9, 0xffe, 0x1, 0xc, 0x1, 0x4, 0x4, 0xffff, 0x6, 0xffffffa7, 0x40000009, 0x832, 0x30000, 0x3ff, 0x9, 0x800, 0xe2df, 0x2, 0x1, 0x80, 0x3, 0x4, 0x7, 0x70f]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) connect$pppl2tp(r5, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r7, 0x4, 0x0, 0x0, 0x0, {0xa, 0x4e23, 0x2, @mcast1, 0x5a89}}}, 0x3a) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r4, 0x100000000) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="041706aaaaaaaaaa12e54b3fcd443f560eb95ff5f70b2b2bf6ecdf05cceb7d5e7e0046025f2758300b9fdf09adaeef5901457f17aca2fccbf1fa7aaaec57f979171331d77806578f7db21dc0b308a31b95340ec3afde72d05bd07a588540372b7037132e5333e4ff000000"], 0x9) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000180)='gfs2\x00', 0x2208004, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0], 0x32600) 5m54.23269795s ago: executing program 1 (id=79): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r0, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f00000003c0)='%pS \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x10, &(0x7f0000000100)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0xe, 0x48000000, &(0x7f0000000300)="40f0538ef047b21fb60068305500", 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) r5 = syz_io_uring_setup(0xe2e, &(0x7f00000000c0)={0x0, 0x10001c2a, 0x10100, 0x0, 0xfffffffd, 0x0, r4}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r8, 0x0, 0x60, 0x0, 0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x1}) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000180)="390000fa461ad7e48489bffa56020013f811186809fc071200000f0000ff3f21396963d43e89b0ee000000170a001700e0da8979d2fc6ca9e48270faf047145bc79e0b9971bcbedac0eeed49dbacf96eeb9b912cc16ce06b8a416e551bbf8c00c774461dfac48219fef1aedf5bc9cb6f6b993cb35bab8014fb3597624155d71ffd4e87d3d3e9e49cd80def51a141e5", 0x8f}], 0x1) r9 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) setreuid(0x0, 0xee00) ioctl$SCSI_IOCTL_SEND_COMMAND(r9, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r9]) io_uring_enter(r5, 0x2ded, 0xef92, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r10 = socket$inet6_udp(0xa, 0x2, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r10, &(0x7f00000002c0)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x6, 0x4, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) connect$pppl2tp(r11, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r10, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x6, @private0}}}, 0x3a) r13 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r13, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x3, @remote}, 0x1, 0x1}}, 0x2e) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r15, 0x0, r14, 0x0, 0x2, 0x0) 5m52.609414305s ago: executing program 1 (id=82): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) syz_clone3(0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6(0xa, 0x2, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYRES16=r2], 0x0, 0x40}, 0x28) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) chroot(&(0x7f0000000080)='./file0/file0\x00') 5m51.450402953s ago: executing program 1 (id=83): socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) fchmod(0xffffffffffffffff, 0x108) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x602102, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYRESDEC], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x27, 0x22, 0x0, &(0x7f0000000440)="f802040b0000001300007f53080002f916d9ec8ce12596d9f8e5d448f6e4b40b990a", 0x0, 0x401, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xb, &(0x7f0000000240)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x8000000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='rpcgss_need_reencode\x00', r2}, 0xffffffb3) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x44080) 5m44.428917252s ago: executing program 1 (id=93): syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe, 0xa1, 0xbd, 0x40, 0x483, 0x3747, 0xdcab, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbc, 0xff, 0x0, 0x1f, 0x4a, 0x74}}]}}]}}, 0x0) 5m44.153813192s ago: executing program 35 (id=93): syz_usb_connect(0x5, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xe, 0xa1, 0xbd, 0x40, 0x483, 0x3747, 0xdcab, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xbc, 0xff, 0x0, 0x1f, 0x4a, 0x74}}]}}]}}, 0x0) 1m46.947965819s ago: executing program 7 (id=595): sendmsg$inet(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x2, 0x4e1f, @rand_addr=0x64010101}, 0x10, 0x0, 0x0, 0x0, 0x28}, 0x4000810) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x560}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1m46.122831822s ago: executing program 8 (id=600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000003500)={0x1c, r1, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x10) 1m45.228722186s ago: executing program 8 (id=602): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40045b17, 0x0) 1m44.957556326s ago: executing program 2 (id=605): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x2}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x5}]}}]}, 0x40}}, 0x0) 1m44.780748656s ago: executing program 2 (id=606): r0 = syz_open_dev$loop(&(0x7f0000000240), 0x3e, 0x6542) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000080)={r1, 0x0, {0x0, 0x0, 0x0, 0x6, 0x4000000000000ffd, 0x0, 0x0, 0x1e, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "67523760fd40f78d2cfc03d81a8ca55ba139c01802c4dae4162e43ac61b7ad33", [0x2, 0x7]}}) sendfile(r1, r0, 0x0, 0x80000001) 1m44.460842146s ago: executing program 2 (id=607): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000980)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000040)={0x34, r1, 0x1, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0xdb}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x34}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}]]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x810) 1m44.124980263s ago: executing program 2 (id=608): socket$kcm(0x11, 0xa, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1m44.032586571s ago: executing program 5 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000640)=ANY=[@ANYBLOB, @ANYRES16], 0x1ec}, 0x1, 0x0, 0x0, 0x4000000}, 0x20004) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) r1 = landlock_create_ruleset(0x0, 0x0, 0x1) landlock_restrict_self(r1, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, 0x0, 0x40810) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000580), 0xa, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, &(0x7f00000003c0)={0x18}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x6) r7 = syz_clone3(&(0x7f00000005c0)={0x11000, &(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0), {0x1b}, &(0x7f0000000400)=""/227, 0xe3, &(0x7f0000000340)=""/116, &(0x7f0000000500)=[0x0], 0x1}, 0x58) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000540)={0x34, r4, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_PID={0x8, 0x1c, r6}, @NL802154_ATTR_PID={0x8, 0x1c, r7}]}, 0x34}}, 0xc084) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]}) 1m43.73192938s ago: executing program 7 (id=609): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0100000000000000000092af000008000300", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m43.046930744s ago: executing program 8 (id=610): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x92) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, &(0x7f0000000080)={{0x0, 0x2, 0x7, 0x1, 0xba}, 0x8c, 0x1}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x12, 0xc, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r6, 0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r7, &(0x7f0000000500), &(0x7f0000000100)=@udp6=r5, 0x1}, 0x20) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) r8 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r8}, &(0x7f0000bbdffc)) syz_emit_ethernet(0x1182, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa9ee12297695f88480000000000000000623f9c4811443b00fc010000000000000000000000000000ff0200000000000000000000000000012f0400000000000005020100c204fffffff80000b54beefcf8b94ceb880e3ab90ae808c6d5844b7cebead2145e6a43c7852dbdab86bf9fef04500e5811ab239cedfa668152dc7aebc446231c4cb8e9f95ef60eb2a5f91f84187ec357e348b3f7201a0219b16a5169bbe4cf7f8286978689ffd887d77697ee85fc179fb87afbf16d9024ebb7a6116c4c573c41c4ea3ca74aef882a1305aba827baafc4f67044b6b2aa41aa22ac3821ea7f5d18141100c2eb19ddca9f31cedceaf1a9b268a65fc09d2e1bc3c76a8599c5f5641c6a8b45daab9153575fa1d5fb8f741d48865df0e2f8834d3560b159f449cb7809f4ea53c1cb6546cdeff9a9eb59e8ba7141840081908c934c791ac3c6991f0d6d5475e21fbd1f9fbf030fe4694ace698fb64d1758cb73412f3711899543780c9c29bdba62b3e2f69c0a36cd0b4f1ba61adf376ea4797b7043ef0ebb09421e98d5f507d21acc99a50755ab102a5d5a4ff9f0adc0c9a41b2a4d260bee63b9b0ef83366318a43f5d8154e8db2cebd30786dffcaa84d3cb15db705f2b74ba234a2fe577d82b2b669b6cc143896824bdfef9650ff02638c697b7e7c53c19c0f65054cce44385fcef1604b04c28b5aba4e6c230fb30f9270b24b2b5fd5a685ce2e240a9c962d7fec7faab535fb2523514abd95d1ccca69c2b95e92cf9e40743c98bc90c0d634095fc86971cab9be807899bbaf18fef8d6cb43c0ae1b41a286fd842540d45e3df9f1befcea9cb720b27657a41a5d7b36ef7fcb1b664c636d79141b45b962bf0f9c949d1cc51aa31e81a46cd344a171ba5fafefb0961207248f298190a25f57281b545cb70e9ffe088cc61fd454e01209076fea2016d39c9c700751bf10d99ff953cdb397cdf981508e61c069b7891711d228d482356d8345717d5a51be5493f72090088c06130fe1a790b32a240909b741df9e9842ed5495de0e5c0323fbaa83815973aa517f230b51b9d91708f736645b692b78227e4ac892c9549ee59f982f823c554458fece662fa711e9e8d50ec9e475973f08bb4bffd31a58c2ffd7950bf7c5219f2403d30b9c8e4bdd387e6b3cf0390b179859107a91383f7126082f5bdb4a5a37dce37b29613510cd11dca96ac301c8d1a894f0815059c3266055efde2f31cd2f24d97062c03042631e5bfd628356bdd715f44c9f85bca5da1db538b4caaf6f41242d818e904c3a721eb6f6b99c3e33f4e969e61047c1e3212cedeaaa85bb05860b01d69b4f122aa4c5f28a2c5354cd3d00584e42e8da63fa7327cc0fb1cb8e4ec8570ccaf6feb085c97a307974763b540b2cbd4726aafe7d287bada0cf2ddc38ea058227069cf4879e22e3ddf9b2d3c7a029846189047886578165262f03a65839702540bb5a04f6d3888def9d14ff0bae1fbad29ec6395dc9d86b6fc8e6e913a88439b85394a65837f51463403024e090944ee7de17d9061ba4a17ae00fcb7bd9e384704047bdfd9f4a02bbe208ba46a78798b12496587207cf728b378d7b8b9b0737b01fa0ddffcf2cf6b0b4634b1cf78e4b3b2c7ec0cafcca0b16618c3d791ad69267e13833935e43061d12f8a960f011181e45c0feb0c9c2d14424c32db3cff4c02283a54af73c72a75d699557aa1327c6f14e5d93df1199373b9e0db46d1cc0ee505a0d599d8c13da2b66d9d6d29b7f55acb90f8b76a5adcf208b8d8dab4e3b3380d3b31af5ced79c8730b881a9fc71c38bb8572b565807ea6ce50b850cac226ee1f4de75f5e0b94fb9ca26244660b5763840ad0195b9fdbc96f9546671687feba4be6619100bdb8cbd3f578f3c010d1a17c6af97ca43d288a5bcc3da766fb39f90a1a73ee20d5208fcd40b77edea14ac1749a4d6a39d377994f8374d133565edc85836804147168956f0decc8446d7070ada7873ddd75428ee85d6026f20da99e7b9684c09396806fb5f6c93d5d23b41339010a9699b7d9ed1576d2086447b3a7953568e008d733d9455fda4d658b086208c46cbbb5d2c40d68f26c47c73838a873190c0b23b1f0bca924bd4ca616950741cffd77742b4c894dad62afb001d0df5f8e371aa3d9c676b5ecf827705244b7b52b6e447d3b9721232463e9cabc31d029de30be158e2243dc1a2389554ea6547cc58c8f91dacc8f1754864ec9d7d807d370132cb1ffa67311d34b8719e15b7124face3419ba97c4beb0b906931933420b4bb3735ed37a07258909b8aafe41528a51a2d9663627828008a63a16e1f6567614e9baa3c2b2706a9e742fb22e0488c9e91844a19a276523de9e27508809f5a9f70c0abc2fbc7792eaac693037fb267ff826e67adead2e70b1ae86db956bb917b5e1e48b3ae2970da11a3d80ded2c5f1fabd885c00ffe7511c1794fdd8070a5c16a468ad843ed0539ca43bc0acebeb706025bbd8c36256d56dfc4ffa0f3c131ac408335ba48c1eb8d74372b1c183b53b6e7a44b6d0ee08c3e8c83426bd556cf109dbe20ba8b06dba789e051b462c45b6031b21d7a902dc24b861f5556434acf5515f6450cf7c82fdb5c2b006be32a397cb287d878ef1af2be9aeff6acd1969ad56a92b2192820ad047ca58ceb051eec77d0118f3dc794958dedad47bd1ed619f72b100e4fa31c425e24c0d466e457a61462e455a7e8b2205b1058ab7b1e9506f2b7a19015966fa5a9bd15f3722298560a374b048e5b91744d092126469310540f3e746bb9a6e7b6f27308d282656df53651f1ab802d3311b81724d94dfba584959fed1fac5956ff43ee45c016d48b4b1e45382def013262db4c39648694a6781f520b9525833174d9eaa5973af227515255ba2ea3491a2958bdfa8b9656918eba44f831be9a934679d352ebf2e1f5d315ec490b5d0b5196026c0663d54efa05ec30e3ed2c865ab00e104070beb6b757bf2c8d3909d58c92f5f6573b2d69e9132cfe5cb574d04a79c23101f52af84ce951c9a2766b9b3a62f34309515ff817bcdf73b16a6162056647c673023222669272b0142dbb08a4919ac3016e41e7518eb7473e04400f19cf650381f6c12230d4b3d5f93d4991e25ab14a265786a6435d11317d383c3eddfa14d883d10a6bbbb57e3cc4d7ce31dee831662466e1e7ccdf43d20c3dc6b733ecf90b1257c98678341629da06c212ab94d936535e40a63f2acbdef10b29a67a510da1df3cd4490ca60a7db9b97ff87a3c9fb2585eede693a2bf609e6dccdcc9f43afc860868c2b5a13a82dac831bd0fb507f313206c7387c74d6c77114f3a009b504618012293f6000847fe602351f3a19fd30fe1748ff863a842524781dbb10a173d21635358cdaffad139c9c4656c78f655737dca71c76d870fea6d017276e1fcd394bdb4145387fe81913bfa9f2440ec571bc9458ce1bba86905112583388fedc5c37d516c20de413f2fb6f36b01d86a450a2ec867cd163f568802657a4ee6d766c7115ca592bb2d22b0baffd0c45bd7b22030efe075b2e08e4b16aaea843d0d023a8b4b399de1423837a41688d79efd51b68d765e9d6aebb7b9ffad21c85551ff29c570e90c396206e37f56bb2ac75a3ec825dff4ad1be47ee9736067af7caf9894eab45bdbca04a10c2e8afffe821b6fd5c3f41e474b412792772198ac53935dc33a04f7bea60c759a6622719cebd799baaea5d90c055203dd13f354d6cd9c356a3ae39bd14ab952610590ac0509c801b8b7b9e4e777e4f302f86457abe65c4931766fc054dd59c01b37785308794df34779fcbe1a4fb8e27ecdb2555f32513cd7da800cd490e835a21ee6a2262e8644f0e0e73a7f5dccadf494974dd4c4197c3a251705512edfe1ccf3adafdd3239d0b817097462623ede8d221d05470c224ac462635672f872f4bbf62d3f8c1ef01e607c72acc84528803c87b330584c928f4877bfb7334140e4f503818f8c899f8846a07bb4361d6adf3f1fbe34b54fafee0fd2919baa2b58b946b7a53f4fe0d2d40f76c2813b2fac00ded2d5beecf79d2dc7af5a7c525d651b2e5499cd3d8589e6bc13e034228a74fd70b40c9cd2aa8db6c69ee7a27f06831bcd5d0c6d81668ff4945821774e80ab57b02de25a9040064e1a117a6f9621fabfbb34a5741cb3e97f799de9f7979249c0d16a7188fe68cf66047a0de2be2287a752921fa606ef05612e4c5a78608cd34a8d23eaa7bc3d5ba7b84449a4da7a2ef667b8f9f3b6cb198cea04a6ee72d83eba5ede661481da15ce9e6c3b6cfc50f3d01a87b1314623633e1409ef45122b518815e18955bf69e4c39bb1e8a37b098448472fe2b518b281acae10df7ccd6297d8f75a7dd07653e06699a3561e7f63302b9a3ef072908d01c02effc3174e8ab993cdd192297c5ce31d5f5ab060728d57e3b4f55bad4dda5943ab4e0df7e73e152f1adb8662228f74a3bc2cfcec7d8481587cd77f27542cd955ec968384ce53756c8f2db4bbda310f14df58a40d414331b7764b2de0ecabafec120e2fc1bae7499d36dcdd51c7b001acb97e95a89d9407d42703ec0e64d5f27a14ba4319f8002654bb45e6e67393247fac01e83bb319ef44401ddfefb1744f045f6239311ccf6d31fedc0095ea13145b0359c4fbbbcc9849f1d7317e9ddfdd5d488b2a55acb533729dccdd0063a7503b189406c3d5fa60f3970c83af8435bed5a472fc57f137b778ecde6db789222ecbd1c51620ab9d5464cc94fa5b02a034a88da317b870be31cd4da734378eb2c7c6228246460fb18f7599eb011e486c7b5399d1f778b5ab1d946b6835a3f9e05991bb6af5313928230a22ac5b12fbc217cb5437e132f9d863c0782b0c2476f40ad9388e323da0170ccc14245d049cbd051e9b91e9ef2ced54108a5bfa0ad879d9778b7c7a721f1ff277f1d0aa0ad751a6bdb099b2b823129188983390beb8f29cc9190c5cc2107b2bf3b1c7a3785cf387b8c7cd7926cc6e719f623278602fb7b25925d9d1df53178f286694402d49d3928de8ed415c9e058d79a463502fd75d45d1d7467dd878245c8614ad72d3ff79188e77730c6740b934ee2781b43fecdfdd6729fe27d6d2203e2f21d6d22482a2bf18d078a388f8da47b33332b98c25286ec314c9001409748e5c550ee88a6af1f0ebc001c758616149a5571340c0882d2007157275728239e354c44e2d4e667b8d07a28ae7c2a3c0f11a64a07cc176dc28a16eaa46509639f3fe0f78ad9ca178c429d8fba570c869aadaadb65dd9518fca54694c025c6c84c10915e60947e521cd74c5896451b0344f1d438832dc9a4bf552eabd76203cb46b1e60176af4eb9248895f9c812b2595e7ab1166838da95c1857117bcaba7a0e15f7ea9013651bdf93d467559b8cb6aca4b60543f617dd5b704c0c8e95eef0a5e9b47d9071c505c9d75a8c2a6075e8ae8917cc0b93f67713e8b4805fbecf812ffd850bf77165b43be43cd9632f44963f523cfb327ccc47a6fdb26295746f558114498a64a1475c0285a75e3f1eacc94ce71c19221f5c31cb2d097fd6c5ad52d254d0a1dac2c4f64702d47a01da66ba39b2d0333205b66085476edcc8bb83500825cdaf6efb8f61ab74a6448662b70ed80741a533b03c5f793ef6ac1f31a53247df44c5aed4a635cce3542660c4b7f77a193c614b89f3284ec378efcaca9d89d34e71b9ae9b2e9ea207598acbf07008a074e3496c3bd1f8e66b711781da313232620bdf7e6b203aae6ab3f8fb5af7a7ce2ea043d4aafbdee5572f40e1d7baacb914a696af4ecd69741930e5cf36b8f1922e81e81e4f2ac79282e056e8ec80f104923aef7f73e0fa0ecca08209868b2e02cf6fc77467a11d76951a16ab32725c256c20400000008000100c910fe880000000000000000000000000001000404000600000000fe8000000000000000000000000000bb2001000000000000000000000000000154a49948c8c4e166697c08c62561abfa4d3ae2cc291e8ac96f868d4b7056698592fae17d78051a45da7bb58f058eb20a7d06e996f449a7c3b9d245c508dce1b2e4054ff087377a3067bed2668066f6cc365c3f8d69bd356f1eadeed7a9e99f07eb5567603c78d6e6e8afda3123660020ab7437603c12c96ba0c9e746be708ed4acd10346cbd0292aaed0d0fc23d47cca00502d3fffb47c77c78d734964d1c901dac6a2cb8a53387fefbc6682ed97bd9196ed6f3ee6bff737d6ca08e9953132ab"], &(0x7f0000000100)={0x1, 0x4, [0x592, 0xb75, 0x569, 0x35e]}) ioctl$SNDCTL_DSP_SUBDIVIDE(r4, 0xc0045009, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) 1m42.828036117s ago: executing program 2 (id=611): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000013c0), 0x82000, 0x0) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000002000)={0xdffe, 0x0, 0x8, 0xffffff81, 0x9b, "48b4299abf3991c75ba98fd2ee13ed2e070619"}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f00000026c0)=0x3d) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0xffffffff, 0xee3, 0x9, 0x7fff, 0xe, "99212c010700ec6d00138cf0000062b016d5a9"}) 1m42.827134747s ago: executing program 7 (id=612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)={0x54, r1, 0x101, 0x70bd2a, 0xfffffffe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x4}, @NL80211_KEY_DEFAULT={0x4}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4044014}, 0x48000) 1m42.820681058s ago: executing program 5 (id=613): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$kcm(0x2a, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8918, 0x0) 1m42.566933823s ago: executing program 7 (id=614): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000002400)={0x1, 0x0, [{0x4b564d02, 0x0, 0x40000}]}) 1m42.55133169s ago: executing program 2 (id=615): write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=0x7, 0xfffffffffffffcb2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) 1m42.44023411s ago: executing program 5 (id=616): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f00000002c0)="259a53f271a76d2608fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) read(r0, &(0x7f0000000000)=""/149, 0xaa) 1m42.073898517s ago: executing program 8 (id=617): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)={0x48, r2, 0x1, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x2}]}, @NL80211_ATTR_IE={0x20, 0x2a, [@ht={0x2d, 0x1a, {0xc, 0x2, 0x1, 0x0, {0x0, 0x1, 0x0, 0x80, 0x0, 0x1, 0x1}, 0x1, 0x7fffffff, 0xdd}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x24004084}, 0x44080) 1m41.928977946s ago: executing program 7 (id=618): syz_usb_connect(0x5, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x110, 0x9, 0x28, 0xfc, 0x10, 0x5ac, 0x291, 0x4325, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x40, 0x0, [{{0x9, 0x4, 0x84, 0x0, 0x0, 0x3, 0xe1, 0x2}}]}}]}}, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000140)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) 1m41.782937232s ago: executing program 8 (id=619): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x3, 0x34, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x6071, 0x0, 0xe7, {[@generic={0x8, 0xa, "376767e803a8361f"}]}}}}}}}, 0x0) 1m22.999523754s ago: executing program 8 (id=620): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 1m16.322068852s ago: executing program 7 (id=621): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x4, 0x8, 0x5}, &(0x7f00000001c0)=0x10) 1m9.35860726s ago: executing program 36 (id=615): write$FUSE_OPEN(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)=0x7, 0xfffffffffffffcb2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r0, &(0x7f0000000000), 0x0}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0) ioctl$AUTOFS_IOC_FAIL(r5, 0x4c80, 0x7000000) 55.443045548s ago: executing program 37 (id=616): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x5, 0x14, 0x0, &(0x7f00000002c0)="259a53f271a76d2608fff74588a80a3888a82f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) read(r0, &(0x7f0000000000)=""/149, 0xaa) 18.437792584s ago: executing program 38 (id=620): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="d8000000180081054e81f782db4cb904021d0800fe00fe05e8fe55a10a0015000600142603600e1208000f007f370301a8001600a40002400f000100035c0461c1d67f6f94007134cf6edb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090014d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00350db798262f3d40fad95667e006dcdf63951f215c3f8b6ad2cba0e2375ee535e3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9a941", 0xd8}], 0x1}, 0x0) 0s ago: executing program 39 (id=621): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x4, 0x8, 0x5}, &(0x7f00000001c0)=0x10) kernel console output (not intermixed with test programs): mentation/mm/remap_file_pages.rst. [ 187.937656][ T5153] Bluetooth: hci5: command tx timeout [ 188.565398][ T6510] autofs: Bad value for 'fd' [ 188.629750][ T5153] Bluetooth: hci3: unexpected event 0x04 length: 14 > 10 [ 188.629771][ T5153] Bluetooth: unknown link type 48 [ 188.629829][ T5153] Bluetooth: hci3: connection err: -111 [ 188.928339][ T6358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.928355][ T6358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.928378][ T6358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.991244][ T6358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.991260][ T6358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.991284][ T6358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.037739][ T5923] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 189.198037][ T5923] usb 3-1: Using ep0 maxpacket: 8 [ 189.201817][ T5923] usb 3-1: unable to get BOS descriptor or descriptor too short [ 189.204291][ T5923] usb 3-1: config 0 has an invalid interface number: 88 but max is 0 [ 189.204314][ T5923] usb 3-1: config 0 has no interface number 0 [ 189.204360][ T5923] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 189.204383][ T5923] usb 3-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 189.204404][ T5923] usb 3-1: config 0 interface 88 has no altsetting 0 [ 189.236646][ T5923] usb 3-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 189.236674][ T5923] usb 3-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 189.236694][ T5923] usb 3-1: Product: syz [ 189.236707][ T5923] usb 3-1: Manufacturer: syz [ 189.236731][ T5923] usb 3-1: SerialNumber: syz [ 189.304517][ T5923] usb 3-1: config 0 descriptor?? [ 189.566293][ T5923] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.88/input/input7 [ 189.676542][ T5923] usb 3-1: USB disconnect, device number 8 [ 189.794239][ T5896] udevd[5896]: Error opening device "/dev/input/event4": No such file or directory [ 189.794360][ T5896] udevd[5896]: Unable to EVIOCGABS device "/dev/input/event4" [ 189.794482][ T5896] udevd[5896]: Unable to EVIOCGABS device "/dev/input/event4" [ 189.874863][ T6358] hsr_slave_0: entered promiscuous mode [ 189.876173][ T6358] hsr_slave_1: entered promiscuous mode [ 189.877039][ T6358] debugfs: 'hsr0' already exists in 'hsr' [ 189.877062][ T6358] Cannot create hsr debugfs directory [ 190.008041][ T5153] Bluetooth: hci5: command tx timeout [ 190.043849][ T172] bridge_slave_1: left allmulticast mode [ 190.043965][ T172] bridge_slave_1: left promiscuous mode [ 190.044205][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.112569][ T172] bridge_slave_0: left allmulticast mode [ 190.112601][ T172] bridge_slave_0: left promiscuous mode [ 190.112852][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.215145][ T172] bridge_slave_1: left allmulticast mode [ 190.215168][ T172] bridge_slave_1: left promiscuous mode [ 190.215324][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.275397][ T6520] netlink: 'syz.2.143': attribute type 1 has an invalid length. [ 190.275418][ T6520] netlink: 224 bytes leftover after parsing attributes in process `syz.2.143'. [ 190.324239][ T172] bridge_slave_0: left allmulticast mode [ 190.324261][ T172] bridge_slave_0: left promiscuous mode [ 190.324429][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.409048][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.478708][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.522352][ T172] bond0 (unregistering): Released all slaves [ 194.099776][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 194.158683][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 194.183327][ T172] bond0 (unregistering): Released all slaves [ 194.417901][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.121335][ T6463] chnl_net:caif_netlink_parms(): no params data found [ 195.920575][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.166199][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.651331][ T6220] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 196.875121][ T6220] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 197.216818][ T6220] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 197.404684][ T6220] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 198.190806][ T6463] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.191073][ T6463] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.191308][ T6463] bridge_slave_0: entered allmulticast mode [ 198.196304][ T6463] bridge_slave_0: entered promiscuous mode [ 198.244243][ T6463] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.244396][ T6463] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.244643][ T6463] bridge_slave_1: entered allmulticast mode [ 198.257848][ T6463] bridge_slave_1: entered promiscuous mode [ 198.504580][ C1] vkms_vblank_simulate: vblank timer overrun [ 198.546878][ T5153] Bluetooth: hci3: Malformed LE Event: 0x1b [ 198.677882][ T172] hsr_slave_0: left promiscuous mode [ 198.738014][ T172] hsr_slave_1: left promiscuous mode [ 198.743974][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.744050][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.906399][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.913951][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.448523][ T172] hsr_slave_0: left promiscuous mode [ 199.505839][ T172] hsr_slave_1: left promiscuous mode [ 199.525306][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.527849][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.591157][ T172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.591188][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.753596][ T6545] autofs: Bad value for 'fd' [ 199.783355][ T172] veth1_macvtap: left promiscuous mode [ 199.783478][ T172] veth0_macvtap: left promiscuous mode [ 199.783771][ T172] veth1_vlan: left promiscuous mode [ 199.783975][ T172] veth0_vlan: left promiscuous mode [ 200.101183][ C1] vkms_vblank_simulate: vblank timer overrun [ 200.507505][ C1] vkms_vblank_simulate: vblank timer overrun [ 201.148653][ T172] veth1_macvtap: left promiscuous mode [ 201.148778][ T172] veth0_macvtap: left promiscuous mode [ 201.152662][ T172] veth1_vlan: left promiscuous mode [ 201.152885][ T172] veth0_vlan: left promiscuous mode [ 202.716972][ T5153] Bluetooth: hci3: command tx timeout [ 203.430026][ T6561] ieee802154 phy0 wpan0: encryption failed: -22 [ 208.131807][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.143104][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 208.144242][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 208.145367][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 208.146475][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.356752][ T6587] genirq: Flags mismatch irq 5. 00202000 (dt2814) vs. 00202000 (pcl812) [ 210.504015][ T5153] Bluetooth: hci1: command tx timeout [ 210.856349][ T6594] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 210.856406][ T6594] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 210.856500][ T6594] comedi comedi3: 8255: I/O port conflict (0x21,4) [ 210.856558][ T6594] comedi comedi3: 8255: I/O port conflict (0x8,4) [ 210.856686][ T6594] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 210.856735][ T6594] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 211.358483][ T172] team0 (unregistering): Port device team_slave_1 removed [ 211.886047][ T5153] Bluetooth: hci3: command 0x0406 tx timeout [ 212.040367][ T172] team0 (unregistering): Port device team_slave_0 removed [ 212.568010][ T5838] Bluetooth: hci1: command tx timeout [ 213.086649][ T6607] hub 9-0:1.0: USB hub found [ 213.110255][ T6607] hub 9-0:1.0: 1 port detected [ 214.559310][ T5153] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 214.565058][ T5153] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 214.571387][ T5153] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 214.572915][ T5153] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 214.573627][ T5153] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 214.650006][ T5153] Bluetooth: hci1: command tx timeout [ 216.727871][ T5838] Bluetooth: hci6: command tx timeout [ 216.728161][ T5153] Bluetooth: hci1: command tx timeout [ 217.348888][ T172] team0 (unregistering): Port device team_slave_1 removed [ 217.589532][ T172] team0 (unregistering): Port device team_slave_0 removed [ 218.808062][ T5838] Bluetooth: hci6: command tx timeout [ 220.262813][ T6463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.343445][ T6463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.887820][ T5838] Bluetooth: hci6: command tx timeout [ 220.891614][ T6463] team0: Port device team_slave_0 added [ 221.738313][ T6463] team0: Port device team_slave_1 added [ 222.968392][ T5838] Bluetooth: hci6: command tx timeout [ 225.413763][ T6638] block nbd2: Attempted send on invalid socket [ 225.413865][ T6638] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 225.415244][ T6638] ADFS-fs (nbd2): error: unable to read block 3, try 0 [ 225.940709][ T6463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.940725][ T6463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.940749][ T6463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.051523][ T6463] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.051539][ T6463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.051563][ T6463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.158618][ T6358] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 226.363170][ T6358] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 226.427792][ T6358] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 226.650206][ T6358] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 227.626532][ T6463] hsr_slave_0: entered promiscuous mode [ 227.643795][ T6463] hsr_slave_1: entered promiscuous mode [ 227.644882][ T6463] debugfs: 'hsr0' already exists in 'hsr' [ 227.644906][ T6463] Cannot create hsr debugfs directory [ 227.988071][ T6671] netlink: 20 bytes leftover after parsing attributes in process `syz.2.176'. [ 229.420114][ T6575] chnl_net:caif_netlink_parms(): no params data found [ 229.864415][ T6610] chnl_net:caif_netlink_parms(): no params data found [ 231.772301][ T5153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 231.792176][ T5153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 231.811285][ T5153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 231.826928][ T5153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 231.832101][ T5153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 231.904575][ T6728] ieee802154 phy0 wpan0: encryption failed: -22 [ 231.989088][ T6575] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.989240][ T6575] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.989506][ T6575] bridge_slave_0: entered allmulticast mode [ 231.992329][ T6575] bridge_slave_0: entered promiscuous mode [ 232.291510][ T6730] netlink: 320 bytes leftover after parsing attributes in process `syz.2.191'. [ 232.435708][ T6575] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.437906][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.438164][ T6575] bridge_slave_1: entered allmulticast mode [ 232.440794][ T6575] bridge_slave_1: entered promiscuous mode [ 232.527055][ T6610] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.527203][ T6610] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.527404][ T6610] bridge_slave_0: entered allmulticast mode [ 232.535089][ T6610] bridge_slave_0: entered promiscuous mode [ 232.631797][ T6610] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.631934][ T6610] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.632171][ T6610] bridge_slave_1: entered allmulticast mode [ 232.636960][ T6610] bridge_slave_1: entered promiscuous mode [ 233.223806][ T6575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.700660][ T6575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.737335][ T6610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.794659][ T6761] random: crng reseeded on system resumption [ 233.827460][ T6761] Unrecognized hibernate image header format! [ 233.827473][ T6761] PM: hibernation: Image mismatch: architecture specific data [ 233.847987][ T5153] Bluetooth: hci2: command tx timeout [ 233.908553][ T6763] No control pipe specified [ 233.910427][ T6763] overlayfs: failed to resolve './file0': -2 [ 234.033104][ T6610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 235.565630][ T6575] team0: Port device team_slave_0 added [ 235.711866][ T6575] team0: Port device team_slave_1 added [ 235.892080][ T6610] team0: Port device team_slave_0 added [ 235.929250][ T5153] Bluetooth: hci2: command tx timeout [ 236.042268][ T6610] team0: Port device team_slave_1 added [ 236.221393][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.221409][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.221440][ T6575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.354874][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.354885][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.354898][ T6575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.413057][ T6610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.413073][ T6610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.413097][ T6610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.479937][ T6610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.479953][ T6610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.479977][ T6610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.018288][ T6463] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 237.090510][ T6575] hsr_slave_0: entered promiscuous mode [ 237.091937][ T6575] hsr_slave_1: entered promiscuous mode [ 237.092956][ T6575] debugfs: 'hsr0' already exists in 'hsr' [ 237.092979][ T6575] Cannot create hsr debugfs directory [ 237.207282][ T6463] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 237.266521][ T6610] hsr_slave_0: entered promiscuous mode [ 237.268740][ T6610] hsr_slave_1: entered promiscuous mode [ 237.269694][ T6610] debugfs: 'hsr0' already exists in 'hsr' [ 237.269716][ T6610] Cannot create hsr debugfs directory [ 237.333072][ T6463] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 237.382249][ T6463] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 238.008530][ T5153] Bluetooth: hci2: command tx timeout [ 238.459376][ T6722] chnl_net:caif_netlink_parms(): no params data found [ 239.561375][ T6722] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.565010][ T6722] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.565284][ T6722] bridge_slave_0: entered allmulticast mode [ 239.573083][ T6722] bridge_slave_0: entered promiscuous mode [ 239.608864][ T6722] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.609009][ T6722] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.609271][ T6722] bridge_slave_1: entered allmulticast mode [ 239.612930][ T6722] bridge_slave_1: entered promiscuous mode [ 240.087885][ T5153] Bluetooth: hci2: command tx timeout [ 240.202569][ T6722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.256826][ T6722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.559877][ T172] bridge_slave_1: left allmulticast mode [ 240.559910][ T172] bridge_slave_1: left promiscuous mode [ 240.560174][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.609247][ T172] bridge_slave_0: left allmulticast mode [ 240.609280][ T172] bridge_slave_0: left promiscuous mode [ 240.612282][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.696182][ T172] bridge_slave_1: left allmulticast mode [ 240.696217][ T172] bridge_slave_1: left promiscuous mode [ 240.696492][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.772212][ T172] bridge_slave_0: left allmulticast mode [ 240.772247][ T172] bridge_slave_0: left promiscuous mode [ 240.772568][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.843677][ T172] bridge_slave_1: left allmulticast mode [ 240.843712][ T172] bridge_slave_1: left promiscuous mode [ 240.843960][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.899537][ T172] bridge_slave_0: left allmulticast mode [ 240.899558][ T172] bridge_slave_0: left promiscuous mode [ 240.899740][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.263458][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.370644][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.446750][ T172] bond0 (unregistering): Released all slaves [ 241.798782][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 241.907354][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 241.907954][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 241.931418][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 241.935688][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 241.948096][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 241.948829][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.012450][ T172] bond0 (unregistering): Released all slaves [ 242.288535][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.368821][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.434938][ T172] bond0 (unregistering): Released all slaves [ 242.494936][ T6722] team0: Port device team_slave_0 added [ 242.776026][ T6722] team0: Port device team_slave_1 added [ 243.141236][ T6722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.141251][ T6722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.141275][ T6722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.431970][ T6722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.431986][ T6722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.432010][ T6722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.833228][ T172] hsr_slave_0: left promiscuous mode [ 243.849251][ T172] hsr_slave_1: left promiscuous mode [ 243.850251][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.896140][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.008027][ T5153] Bluetooth: hci0: command tx timeout [ 244.056185][ T172] hsr_slave_0: left promiscuous mode [ 244.107959][ T172] hsr_slave_1: left promiscuous mode [ 244.108913][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.140539][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.298048][ T172] hsr_slave_0: left promiscuous mode [ 244.317944][ T172] hsr_slave_1: left promiscuous mode [ 244.318931][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.367220][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.217311][ T172] team0 (unregistering): Port device team_slave_1 removed [ 245.338671][ T172] team0 (unregistering): Port device team_slave_0 removed [ 246.097643][ T5153] Bluetooth: hci0: command tx timeout [ 246.657190][ T172] team0 (unregistering): Port device team_slave_1 removed [ 246.818585][ T172] team0 (unregistering): Port device team_slave_0 removed [ 248.148257][ T172] team0 (unregistering): Port device team_slave_1 removed [ 248.174988][ T5153] Bluetooth: hci0: command tx timeout [ 248.298759][ T172] team0 (unregistering): Port device team_slave_0 removed [ 249.195961][ T6722] hsr_slave_0: entered promiscuous mode [ 249.197372][ T6722] hsr_slave_1: entered promiscuous mode [ 250.252165][ T5153] Bluetooth: hci0: command tx timeout [ 250.252255][ T6575] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 250.310547][ T6575] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 250.364009][ T6575] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 250.502380][ T6575] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 250.547775][ T6797] chnl_net:caif_netlink_parms(): no params data found [ 251.093867][ T6610] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 251.507284][ T6610] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 251.709393][ T6610] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 252.078283][ T6610] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 252.109579][ T6797] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.109725][ T6797] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.109971][ T6797] bridge_slave_0: entered allmulticast mode [ 252.113714][ T6797] bridge_slave_0: entered promiscuous mode [ 252.146386][ T6797] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.146610][ T6797] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.146881][ T6797] bridge_slave_1: entered allmulticast mode [ 252.151032][ T6797] bridge_slave_1: entered promiscuous mode [ 252.676312][ T6797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.741831][ T6797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.164823][ T6797] team0: Port device team_slave_0 added [ 253.185323][ T6797] team0: Port device team_slave_1 added [ 253.434551][ T6797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.434567][ T6797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.434590][ T6797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.492136][ T6797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.492150][ T6797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.492174][ T6797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.513259][ T6797] hsr_slave_0: entered promiscuous mode [ 254.529413][ T6797] hsr_slave_1: entered promiscuous mode [ 254.530335][ T6797] debugfs: 'hsr0' already exists in 'hsr' [ 254.530358][ T6797] Cannot create hsr debugfs directory [ 254.754563][ T6722] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 254.859908][ T6722] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 255.000395][ T6722] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 255.330565][ T6722] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 255.795201][ T6575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.858550][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.126376][ T6575] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.185047][ T6610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.189630][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.189781][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.194020][ T172] bridge_slave_1: left allmulticast mode [ 256.194048][ T172] bridge_slave_1: left promiscuous mode [ 256.194285][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.279301][ T172] bridge_slave_0: left allmulticast mode [ 256.279334][ T172] bridge_slave_0: left promiscuous mode [ 256.279579][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.403166][ T172] bridge_slave_1: left allmulticast mode [ 256.403199][ T172] bridge_slave_1: left promiscuous mode [ 256.403441][ T172] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.521049][ T172] bridge_slave_0: left allmulticast mode [ 256.521083][ T172] bridge_slave_0: left promiscuous mode [ 256.521332][ T172] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.414630][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.498773][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.562129][ T172] bond0 (unregistering): Released all slaves [ 258.048688][ T172] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.108693][ T172] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.174391][ T172] bond0 (unregistering): Released all slaves [ 258.438620][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.438781][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.620099][ T6610] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.779553][ T172] hsr_slave_0: left promiscuous mode [ 258.798018][ T172] hsr_slave_1: left promiscuous mode [ 258.800124][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.859709][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.028137][ T172] hsr_slave_0: left promiscuous mode [ 259.049931][ T172] hsr_slave_1: left promiscuous mode [ 259.050853][ T172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.100325][ T172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.908940][ T172] team0 (unregistering): Port device team_slave_1 removed [ 260.048764][ T172] team0 (unregistering): Port device team_slave_0 removed [ 261.442321][ T172] team0 (unregistering): Port device team_slave_1 removed [ 261.581901][ T172] team0 (unregistering): Port device team_slave_0 removed [ 262.377335][ T6095] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.377697][ T6095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.423442][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.424094][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.674128][ T6722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 262.842941][ T6722] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.926444][ T6177] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.926578][ T6177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.114896][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.115117][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.343909][ T6797] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 263.458043][ T6797] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 263.592480][ T6797] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 263.684275][ T6575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.695586][ T6797] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 263.930094][ T6610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.554339][ T6797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.684730][ T6797] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.733739][ T5967] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.733955][ T5967] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.783247][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.783453][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.886841][ T6722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.439691][ T6575] veth0_vlan: entered promiscuous mode [ 265.544931][ T6575] veth1_vlan: entered promiscuous mode [ 265.625513][ T6610] veth0_vlan: entered promiscuous mode [ 265.690361][ T6610] veth1_vlan: entered promiscuous mode [ 265.809613][ T6575] veth0_macvtap: entered promiscuous mode [ 265.848414][ T6575] veth1_macvtap: entered promiscuous mode [ 265.957258][ T6610] veth0_macvtap: entered promiscuous mode [ 265.994725][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.012662][ T6610] veth1_macvtap: entered promiscuous mode [ 266.032983][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.064986][ T6722] veth0_vlan: entered promiscuous mode [ 266.098895][ T5967] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.404414][ T5967] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.417299][ T5967] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.616250][ T69] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.665830][ T5967] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.671433][ T6797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.679931][ T6610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.699702][ T6722] veth1_vlan: entered promiscuous mode [ 266.833307][ T6610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.046737][ T69] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.552529][ T69] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.641799][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.662723][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.669114][ T995] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.682784][ T995] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.819060][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 267.827934][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 267.872913][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 267.895957][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 267.896885][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.105809][ T69] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.541581][ T6722] veth0_macvtap: entered promiscuous mode [ 268.680657][ T6722] veth1_macvtap: entered promiscuous mode [ 268.873768][ T6176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.873788][ T6176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.049761][ T6722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.188032][ T6722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.205890][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.205909][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.246494][ T69] bridge_slave_1: left allmulticast mode [ 269.246528][ T69] bridge_slave_1: left promiscuous mode [ 269.246808][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.333521][ T69] bridge_slave_0: left allmulticast mode [ 269.333553][ T69] bridge_slave_0: left promiscuous mode [ 269.333816][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.021351][ T5153] Bluetooth: hci4: command tx timeout [ 271.218405][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.307039][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.342162][ T69] bond0 (unregistering): Released all slaves [ 271.566615][ T995] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.572767][ T995] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.574847][ T6797] veth0_vlan: entered promiscuous mode [ 271.576919][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.607047][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.089632][ T5153] Bluetooth: hci4: command tx timeout [ 272.586435][ T6978] block nbd7: Attempted send on invalid socket [ 272.586461][ T6978] I/O error, dev nbd7, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 272.588238][ T6978] ADFS-fs (nbd7): error: unable to read block 3, try 0 [ 273.434894][ T6981] ieee802154 phy0 wpan0: encryption failed: -22 [ 273.700787][ T6797] veth1_vlan: entered promiscuous mode [ 274.167963][ T5153] Bluetooth: hci4: command tx timeout [ 274.248047][ T6988] netlink: 132 bytes leftover after parsing attributes in process `syz.2.206'. [ 274.527094][ T6955] chnl_net:caif_netlink_parms(): no params data found [ 274.733684][ T69] hsr_slave_0: left promiscuous mode [ 274.916586][ T69] hsr_slave_1: left promiscuous mode [ 274.972018][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.972050][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.225616][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.227291][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.603593][ T69] veth1_macvtap: left promiscuous mode [ 275.603718][ T69] veth0_macvtap: left promiscuous mode [ 275.603995][ T69] veth1_vlan: left promiscuous mode [ 275.604203][ T69] veth0_vlan: left promiscuous mode [ 276.247940][ T5153] Bluetooth: hci4: command tx timeout [ 277.825660][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.178549][ T69] team0 (unregistering): Port device team_slave_1 removed [ 278.378774][ T69] team0 (unregistering): Port device team_slave_0 removed [ 280.684692][ T6176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.684713][ T6176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.867670][ T31] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 280.970735][ C0] vkms_vblank_simulate: vblank timer overrun [ 281.017667][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 281.020466][ T31] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 281.024972][ T31] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 281.025000][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.025018][ T31] usb 3-1: Product: syz [ 281.025032][ T31] usb 3-1: Manufacturer: syz [ 281.025045][ T31] usb 3-1: SerialNumber: syz [ 281.032702][ T31] usb 3-1: config 0 descriptor?? [ 281.081299][ T31] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 281.081374][ T31] usb 3-1: setting power ON [ 281.081900][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 281.198607][ T31] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 281.212556][ T31] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 281.212638][ T31] usb 3-1: media controller created [ 281.253548][ T31] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 281.275363][ T7020] dvb-usb: bulk message failed: -22 (3/0) [ 281.421070][ T31] usb 3-1: selecting invalid altsetting 6 [ 281.421096][ T31] usb 3-1: digital interface selection failed (-22) [ 281.421110][ T31] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 281.424039][ T31] usb 3-1: setting power OFF [ 281.424281][ T31] dvb-usb: bulk message failed: -22 (2/0) [ 281.424298][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 281.424310][ T31] (NULL device *): no alternate interface [ 281.601314][ T31] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 281.649670][ T31] usb 3-1: USB disconnect, device number 9 [ 281.736283][ T6176] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.736303][ T6176] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.780926][ T6955] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.781070][ T6955] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.781311][ T6955] bridge_slave_0: entered allmulticast mode [ 281.784201][ T6955] bridge_slave_0: entered promiscuous mode [ 281.798334][ T6797] veth0_macvtap: entered promiscuous mode [ 281.873536][ T6955] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.873653][ T6955] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.873876][ T6955] bridge_slave_1: entered allmulticast mode [ 281.889338][ T6955] bridge_slave_1: entered promiscuous mode [ 281.927350][ T6797] veth1_macvtap: entered promiscuous mode [ 282.416882][ T6955] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.427802][ T5924] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 282.445031][ T6955] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.502108][ T7060] genirq: Flags mismatch irq 5. 00202000 (pcl812) vs. 00202000 (pcl812) [ 282.547705][ T5910] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 282.578432][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 282.598587][ T5924] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db01, bcdDevice=e9.9b [ 282.598617][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.598635][ T5924] usb 3-1: Product: syz [ 282.598649][ T5924] usb 3-1: Manufacturer: syz [ 282.598662][ T5924] usb 3-1: SerialNumber: syz [ 282.636369][ T5924] usb 3-1: config 0 descriptor?? [ 282.718935][ T5910] usb 9-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5 [ 282.718964][ T5910] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.718984][ T5910] usb 9-1: Product: syz [ 282.718997][ T5910] usb 9-1: Manufacturer: syz [ 282.719011][ T5910] usb 9-1: SerialNumber: syz [ 282.739376][ T5924] dvb-usb: found a 'DViCO FusionHDTV DVB-T USB (LGZ201)' in warm state. [ 282.739439][ T5924] dvb-usb: bulk message failed: -22 (2/0) [ 282.756421][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 282.765359][ T5910] usb 9-1: config 0 descriptor?? [ 282.775329][ T5924] dvbdev: DVB: registering new adapter (DViCO FusionHDTV DVB-T USB (LGZ201)) [ 282.775456][ T5924] usb 3-1: media controller created [ 282.804918][ T5910] gspca_main: sq905c-2.14.0 probing 2770:9052 [ 282.886194][ T7053] dvb-usb: bulk message failed: -22 (4/0) [ 282.886217][ T7053] cxusb: i2c read failed [ 282.955977][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 283.015012][ T6955] team0: Port device team_slave_0 added [ 283.034009][ T5910] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 283.034027][ T5910] sq905c 9-1:0.0: Get version command failed [ 283.034113][ T5910] sq905c 9-1:0.0: probe with driver sq905c failed with error -71 [ 283.085044][ T5910] usb 9-1: USB disconnect, device number 2 [ 283.129235][ T5924] cxusb: set interface failed [ 283.129253][ T5924] dvb-usb: bulk message failed: -22 (1/0) [ 283.190518][ T5924] DVB: Unable to find symbol mt352_attach() [ 283.190534][ T5924] dvb-usb: no frontend was attached by 'DViCO FusionHDTV DVB-T USB (LGZ201)' [ 283.305660][ T5924] rc_core: IR keymap rc-dvico-portable not found [ 283.305683][ T5924] Registered IR keymap rc-empty [ 283.328318][ T6797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.336212][ T5924] rc rc0: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0 [ 283.344799][ T6955] team0: Port device team_slave_1 added [ 283.365258][ T5924] input: DViCO FusionHDTV DVB-T USB (LGZ201) as /devices/platform/dummy_hcd.2/usb3/3-1/rc/rc0/input8 [ 283.401382][ T5924] dvb-usb: schedule remote query interval to 100 msecs. [ 283.401403][ T5924] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully initialized and connected. [ 283.469852][ T5924] usb 3-1: USB disconnect, device number 10 [ 285.021305][ T5924] dvb-usb: DViCO FusionHDTV DVB-T USB (LGZ201) successfully deinitialized and disconnected. [ 285.436183][ T69] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.673120][ T6797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.722111][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.722127][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.722150][ T6955] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.764252][ T6955] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.764268][ T6955] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.764291][ T6955] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.296369][ T69] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.402879][ T7100] tipc: Started in network mode [ 286.402909][ T7100] tipc: Node identity ac141441, cluster identity 4711 [ 286.453148][ T7100] tipc: Enabled bearer , priority 10 [ 286.454147][ T6176] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.476085][ T6176] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.480701][ T6176] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.708773][ T69] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.885847][ T6176] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.474513][ T69] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.560594][ T5925] tipc: Node number set to 2886997057 [ 287.593454][ T6955] hsr_slave_0: entered promiscuous mode [ 287.596226][ T6955] hsr_slave_1: entered promiscuous mode [ 287.606841][ T6955] debugfs: 'hsr0' already exists in 'hsr' [ 287.606868][ T6955] Cannot create hsr debugfs directory [ 290.181394][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 290.181415][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 290.471299][ T69] bridge_slave_1: left allmulticast mode [ 290.471331][ T69] bridge_slave_1: left promiscuous mode [ 290.471588][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.562283][ T69] bridge_slave_0: left allmulticast mode [ 290.562316][ T69] bridge_slave_0: left promiscuous mode [ 290.562648][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.288149][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.351674][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.400872][ T69] bond0 (unregistering): Released all slaves [ 296.903229][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 296.903248][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 297.051006][ T69] hsr_slave_0: left promiscuous mode [ 297.102640][ T69] hsr_slave_1: left promiscuous mode [ 297.103624][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.103651][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.173406][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.173437][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.124048][ T69] veth1_macvtap: left promiscuous mode [ 298.155085][ T69] veth0_macvtap: left promiscuous mode [ 298.186620][ T69] veth1_vlan: left promiscuous mode [ 298.210853][ T69] veth0_vlan: left promiscuous mode [ 298.434713][ T5153] Bluetooth: hci3: unexpected event for opcode 0x0c1c [ 300.741393][ T7241] random: crng reseeded on system resumption [ 302.473402][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 302.528956][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 302.541789][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 302.543031][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 302.552319][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 302.660047][ T69] team0 (unregistering): Port device team_slave_1 removed [ 302.858533][ T5923] IPVS: starting estimator thread 0... [ 302.941349][ T69] team0 (unregistering): Port device team_slave_0 removed [ 302.952076][ T7261] IPVS: using max 7 ests per chain, 16800 per kthread [ 304.648549][ T5153] Bluetooth: hci1: command tx timeout [ 305.636995][ T7222] warning: `syz.7.280' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 305.659929][ T7265] netlink: 'syz.2.292': attribute type 29 has an invalid length. [ 306.794176][ T5153] Bluetooth: hci1: command tx timeout [ 307.838420][ T7297] netlink: 100 bytes leftover after parsing attributes in process `syz.7.303'. [ 307.990157][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz.8.304'. [ 308.065785][ T7296] mkiss: ax0: crc mode is auto. [ 308.714805][ T7313] netlink: 8 bytes leftover after parsing attributes in process `syz.7.309'. [ 308.893910][ T5153] Bluetooth: hci1: command tx timeout [ 309.350478][ T6955] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 309.467322][ T6955] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 309.622549][ T6955] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 309.772938][ T6955] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 309.997731][ T7351] can0: slcan on ptm0. [ 310.639013][ T7350] can0 (unregistered): slcan off ptm0. [ 310.968067][ T5153] Bluetooth: hci1: command tx timeout [ 311.135240][ T69] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.891040][ T7401] block nbd8: Attempted send on invalid socket [ 311.891424][ T7401] I/O error, dev nbd8, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 311.891528][ T7401] ADFS-fs (nbd8): error: unable to read block 3, try 0 [ 313.169071][ T7254] chnl_net:caif_netlink_parms(): no params data found [ 313.566175][ T69] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.668011][ T7416] binder: 7415:7416 ioctl c0306201 0 returned -14 [ 313.668496][ T7416] binder: 7415:7416 ioctl c0109414 0 returned -22 [ 313.679115][ T31] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 313.828234][ T31] usb 8-1: Using ep0 maxpacket: 16 [ 313.830947][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.830977][ T31] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.831014][ T31] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 313.831036][ T31] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.839308][ T31] usb 8-1: config 0 descriptor?? [ 314.027626][ T5923] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 314.465967][ T69] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.944057][ T5923] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 314.944107][ T5923] usb 3-1: New USB device found, idVendor=17ef, idProduct=60a3, bcdDevice= 0.00 [ 314.944130][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.001464][ T31] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 315.001507][ T31] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 315.001533][ T31] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 315.001556][ T31] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 315.001582][ T31] savu 0003:1E7D:2D5A.0001: unknown main item tag 0x0 [ 315.058764][ T31] savu 0003:1E7D:2D5A.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 315.076788][ T5923] usb 3-1: config 0 descriptor?? [ 315.136718][ T31] usb 8-1: USB disconnect, device number 2 [ 315.446271][ T7432] fido_id[7432]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 315.578352][ T5923] lenovo 0003:17EF:60A3.0002: hidraw0: USB HID v0.00 Device [HID 17ef:60a3] on usb-dummy_hcd.2-1/input0 [ 315.687418][ T69] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.743278][ T5924] usb 3-1: USB disconnect, device number 11 [ 315.825900][ T7441] fido_id[7441]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 316.081894][ T7254] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.083035][ T7254] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.083272][ T7254] bridge_slave_0: entered allmulticast mode [ 316.085976][ T7254] bridge_slave_0: entered promiscuous mode [ 316.144615][ T7254] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.144759][ T7254] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.144946][ T7254] bridge_slave_1: entered allmulticast mode [ 316.167973][ T7254] bridge_slave_1: entered promiscuous mode [ 317.154637][ T6222] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 317.362884][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.803217][ T6222] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 317.803312][ T6222] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.803628][ T6222] usb 9-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 317.803705][ T6222] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.920983][ T6222] usb 9-1: config 0 descriptor?? [ 317.994969][ T7254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.051833][ T7254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.336106][ T6222] bigben 0003:146B:0902.0003: unexpected rdesc, please submit for review [ 318.417700][ T6222] bigben 0003:146B:0902.0003: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.8-1/input0 [ 318.417734][ T6222] bigben 0003:146B:0902.0003: not enough fields in HID_OUTPUT_REPORT 0 [ 318.417750][ T6222] bigben 0003:146B:0902.0003: no output report found [ 318.547976][ T10] usb 9-1: USB disconnect, device number 3 [ 318.641554][ T7254] team0: Port device team_slave_0 added [ 318.663939][ T7254] team0: Port device team_slave_1 added [ 318.981770][ T7254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.981785][ T7254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.981809][ T7254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.986837][ T7254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.986852][ T7254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.986874][ T7254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.411995][ T69] bridge_slave_1: left allmulticast mode [ 322.412026][ T69] bridge_slave_1: left promiscuous mode [ 322.412377][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.589079][ T7496] netlink: 104 bytes leftover after parsing attributes in process `syz.2.369'. [ 322.614296][ T69] bridge_slave_0: left allmulticast mode [ 322.614330][ T69] bridge_slave_0: left promiscuous mode [ 322.614612][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.839845][ T7505] netlink: 'syz.8.373': attribute type 10 has an invalid length. [ 325.723297][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 325.798434][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 325.822663][ T69] bond0 (unregistering): Released all slaves [ 328.353521][ T7546] program syz.8.385 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 328.566349][ T7254] hsr_slave_0: entered promiscuous mode [ 328.601592][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 328.630422][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 328.657161][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 328.732772][ T7254] hsr_slave_1: entered promiscuous mode [ 328.733780][ T7254] debugfs: 'hsr0' already exists in 'hsr' [ 328.733802][ T7254] Cannot create hsr debugfs directory [ 328.776391][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 328.786645][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 329.887809][ T6222] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 329.967775][ T5924] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 330.114609][ T6222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.114642][ T6222] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.114663][ T6222] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 330.114704][ T6222] usb 3-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 330.114726][ T6222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.148776][ T6222] usb 3-1: config 0 descriptor?? [ 330.423562][ T5924] usb 8-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.423655][ T5924] usb 8-1: config 0 interface 0 has no altsetting 0 [ 330.423691][ T5924] usb 8-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 330.423713][ T5924] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.462290][ T5924] usb 8-1: config 0 descriptor?? [ 330.699404][ T6222] viewsonic 0003:2133:0018.0004: hidraw0: USB HID v0.00 Device [HID 2133:0018] on usb-dummy_hcd.2-1/input0 [ 330.849441][ T5925] usb 3-1: USB disconnect, device number 12 [ 330.887995][ T5838] Bluetooth: hci0: command tx timeout [ 330.998664][ T5924] nti 0003:0757:0A00.0005: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.7-1/input0 [ 331.035528][ T7572] fido_id[7572]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 331.108324][ T5925] usb 8-1: USB disconnect, device number 3 [ 331.189624][ T69] hsr_slave_0: left promiscuous mode [ 331.228038][ T69] hsr_slave_1: left promiscuous mode [ 331.229003][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.229031][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.283771][ T7574] fido_id[7574]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 331.306669][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.306698][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.459257][ T69] veth1_macvtap: left promiscuous mode [ 331.459338][ T69] veth0_macvtap: left promiscuous mode [ 331.459544][ T69] veth1_vlan: left promiscuous mode [ 331.459709][ T69] veth0_vlan: left promiscuous mode [ 331.987680][ T5924] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 332.157745][ T5924] usb 3-1: Using ep0 maxpacket: 16 [ 332.160555][ T5924] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.160588][ T5924] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.160609][ T5924] usb 3-1: config 0 interface 0 has no altsetting 0 [ 332.160643][ T5924] usb 3-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 332.160665][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.222461][ T5924] usb 3-1: config 0 descriptor?? [ 332.651619][ T6222] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 332.738969][ T5924] hid (null): report_id 0 is invalid [ 332.738992][ T5924] hid (null): global environment stack underflow [ 332.739019][ T5924] hid (null): unknown global tag 0x34 [ 332.739033][ T5924] hid (null): global environment stack underflow [ 332.739051][ T5924] hid (null): unknown global tag 0xd [ 332.796328][ T5924] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 332.796368][ T5924] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 332.796396][ T5924] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 332.796421][ T5924] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 332.796446][ T5924] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 332.796471][ T5924] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 332.796494][ T5924] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 332.796519][ T5924] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 332.796544][ T5924] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 332.796571][ T5924] cougar 0003:060B:500A.0006: unknown main item tag 0x0 [ 332.827634][ T5924] cougar 0003:060B:500A.0006: unexpected long global item [ 332.828458][ T5924] cougar 0003:060B:500A.0006: parse failed [ 332.828556][ T5924] cougar 0003:060B:500A.0006: probe with driver cougar failed with error -22 [ 332.842017][ T6222] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 332.842055][ T6222] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 332.842092][ T6222] usb 8-1: New USB device found, idVendor=056a, idProduct=00f4, bcdDevice= 0.00 [ 332.842113][ T6222] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 332.888450][ T6222] usb 8-1: config 0 descriptor?? [ 332.955892][ T5924] usb 3-1: USB disconnect, device number 13 [ 332.969535][ T5838] Bluetooth: hci0: command tx timeout [ 333.311046][ T6222] hid (null): usage index exceeded [ 333.350840][ T6222] wacom 0003:056A:00F4.0007: ignoring exceeding usage max [ 333.352177][ T6222] wacom 0003:056A:00F4.0007: ignoring exceeding usage max [ 333.352192][ T6222] wacom 0003:056A:00F4.0007: usage index exceeded [ 333.352205][ T6222] wacom 0003:056A:00F4.0007: item 0 1 2 2 parsing failed [ 333.353045][ T6222] wacom 0003:056A:00F4.0007: parse failed [ 333.353145][ T6222] wacom 0003:056A:00F4.0007: probe with driver wacom failed with error -22 [ 333.543149][ T10] usb 8-1: USB disconnect, device number 4 [ 335.047656][ T5838] Bluetooth: hci0: command tx timeout [ 335.210930][ T5924] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 335.387706][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 335.390642][ T5924] usb 3-1: config index 0 descriptor too short (expected 30, got 18) [ 335.393940][ T5924] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 335.393967][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.393986][ T5924] usb 3-1: Product: syz [ 335.394000][ T5924] usb 3-1: Manufacturer: syz [ 335.394014][ T5924] usb 3-1: SerialNumber: syz [ 335.400552][ T5924] usb 3-1: config 0 descriptor?? [ 335.406255][ T5924] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 335.406302][ T5924] usb 3-1: setting power ON [ 335.406320][ T5924] dvb-usb: bulk message failed: -22 (2/0) [ 335.493763][ T5924] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 335.496944][ T5924] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 335.497000][ T5924] usb 3-1: media controller created [ 335.620000][ T5924] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 335.653156][ T7605] dvb-usb: bulk message failed: -22 (3/0) [ 335.653181][ T7605] dvb-usb: bulk message failed: -22 (3/0) [ 335.721921][ T5924] usb 3-1: selecting invalid altsetting 6 [ 335.721944][ T5924] usb 3-1: digital interface selection failed (-22) [ 335.721958][ T5924] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 335.723327][ T5924] usb 3-1: setting power OFF [ 335.723346][ T5924] dvb-usb: bulk message failed: -22 (2/0) [ 335.723363][ T5924] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 335.723374][ T5924] (NULL device *): no alternate interface [ 335.843428][ T5924] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 335.884594][ T5924] usb 3-1: USB disconnect, device number 14 [ 336.758113][ T985] IPVS: starting estimator thread 0... [ 336.847780][ T7615] IPVS: using max 9 ests per chain, 21600 per kthread [ 337.008633][ T69] team0 (unregistering): Port device team_slave_1 removed [ 337.129367][ T5838] Bluetooth: hci0: command tx timeout [ 337.295089][ T69] team0 (unregistering): Port device team_slave_0 removed [ 337.387795][ T985] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 337.547808][ T985] usb 8-1: Using ep0 maxpacket: 32 [ 337.550382][ T985] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 337.550409][ T985] usb 8-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 337.550431][ T985] usb 8-1: config 0 interface 0 has no altsetting 0 [ 337.554262][ T985] usb 8-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 337.554289][ T985] usb 8-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 337.554308][ T985] usb 8-1: Product: syz [ 337.554321][ T985] usb 8-1: Manufacturer: syz [ 337.554334][ T985] usb 8-1: SerialNumber: syz [ 337.580501][ T985] usb 8-1: config 0 descriptor?? [ 338.062393][ T985] gs_usb 8-1:0.0: Configuring for 1 interfaces [ 338.477865][ T985] gs_usb 8-1:0.0: Couldn't get extended bit timing const for channel 0 (-EPROTO) [ 338.478584][ T985] gs_usb 8-1:0.0: probe with driver gs_usb failed with error -71 [ 338.519689][ T985] usb 8-1: USB disconnect, device number 5 [ 339.877043][ T5838] Bluetooth: hci6: command 0x0406 tx timeout [ 342.347705][ T985] usb 3-1: new full-speed USB device number 15 using dummy_hcd [ 342.610313][ T985] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 342.610340][ T985] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 342.610393][ T985] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 342.610416][ T985] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.615752][ T985] usb 3-1: config 0 descriptor?? [ 342.671947][ T985] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 342.676163][ T985] dvb-usb: bulk message failed: -22 (3/0) [ 342.736002][ T985] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 342.736923][ T985] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 342.736977][ T985] usb 3-1: media controller created [ 342.763027][ T985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 342.829781][ T985] dvb-usb: bulk message failed: -22 (6/0) [ 342.829897][ T985] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 342.833392][ T7633] dibusb: i2c wr: len=64 is too big! [ 342.833392][ T7633] [ 342.864232][ T985] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input9 [ 342.898022][ T985] dvb-usb: schedule remote query interval to 150 msecs. [ 342.898044][ T985] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 342.923635][ T985] usb 3-1: USB disconnect, device number 15 [ 343.385396][ T985] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 343.517793][ T5924] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 343.673245][ T5924] usb 8-1: Using ep0 maxpacket: 32 [ 343.675740][ T5924] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 343.682901][ T5924] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 343.682927][ T5924] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 343.682946][ T5924] usb 8-1: Product: syz [ 343.682959][ T5924] usb 8-1: Manufacturer: syz [ 343.682972][ T5924] usb 8-1: SerialNumber: syz [ 343.713396][ T5924] usb 8-1: config 0 descriptor?? [ 343.714573][ T7645] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 343.726756][ T5924] hub 8-1:0.0: bad descriptor, ignoring hub [ 343.726794][ T5924] hub 8-1:0.0: probe with driver hub failed with error -5 [ 343.967686][ T985] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 344.078192][ T10] usb 8-1: USB disconnect, device number 6 [ 344.137861][ T985] usb 3-1: Using ep0 maxpacket: 16 [ 344.142372][ T985] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 344.142398][ T985] usb 3-1: config 0 has no interface number 0 [ 344.142444][ T985] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 344.142468][ T985] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 344.193719][ T985] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 344.193749][ T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.193768][ T985] usb 3-1: Product: syz [ 344.193782][ T985] usb 3-1: Manufacturer: syz [ 344.193795][ T985] usb 3-1: SerialNumber: syz [ 344.269508][ T985] usb 3-1: config 0 descriptor?? [ 344.271583][ T7647] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 344.271772][ T7647] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 344.499723][ T7647] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 344.500566][ T7647] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 344.669777][ T10] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 344.786649][ T7551] chnl_net:caif_netlink_parms(): no params data found [ 344.838513][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 344.842756][ T10] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 344.880324][ T10] usb 8-1: string descriptor 0 read error: -22 [ 344.881442][ T10] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 344.881682][ T10] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 344.911302][ T985] asix 3-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver [ 344.911605][ T985] asix 3-1:0.251: probe with driver asix failed with error -524 [ 345.076471][ T10] usb 8-1: config 0 descriptor?? [ 345.083980][ T7645] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 345.145338][ T5836] usb 3-1: USB disconnect, device number 16 [ 345.163430][ T10] hub 8-1:0.0: bad descriptor, ignoring hub [ 345.163468][ T10] hub 8-1:0.0: probe with driver hub failed with error -5 [ 345.330910][ T10] usb 8-1: USB disconnect, device number 7 [ 345.847849][ T5836] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 345.967756][ T985] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 346.000035][ T5836] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 346.000063][ T5836] usb 9-1: config 0 has no interface number 0 [ 346.000111][ T5836] usb 9-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 346.000133][ T5836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.005640][ T5836] usb 9-1: config 0 descriptor?? [ 346.016505][ T5836] usb 9-1: selecting invalid altsetting 1 [ 346.021006][ T5836] dvb_ttusb_budget: ttusb_init_controller: error [ 346.021024][ T5836] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 346.147676][ T985] usb 3-1: Using ep0 maxpacket: 16 [ 346.168670][ T5836] DVB: Unable to find symbol cx22700_attach() [ 346.186095][ T985] usb 3-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 346.186123][ T985] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.186143][ T985] usb 3-1: Product: syz [ 346.186156][ T985] usb 3-1: Manufacturer: syz [ 346.186168][ T985] usb 3-1: SerialNumber: syz [ 346.239514][ T985] usb 3-1: config 0 descriptor?? [ 346.244521][ T985] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 346.317980][ T5836] DVB: Unable to find symbol tda10046_attach() [ 346.317995][ T5836] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 346.322043][ T5836] usb 9-1: USB disconnect, device number 4 [ 346.457646][ T985] gp8psk: usb in 128 operation failed. [ 346.458260][ T985] gp8psk: usb in 137 operation failed. [ 346.458274][ T985] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 346.459043][ T985] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 346.459092][ T985] usb 3-1: media controller created [ 346.518850][ T985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 346.561175][ T985] gp8psk_fe: Frontend revision 1 attached [ 346.561896][ T985] usb 3-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 346.562739][ T985] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 346.694929][ T6222] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 346.843533][ T6222] usb 8-1: config 0 has no interfaces? [ 346.846574][ T6222] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.846602][ T6222] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.846620][ T6222] usb 8-1: Product: syz [ 346.846633][ T6222] usb 8-1: Manufacturer: syz [ 346.846646][ T6222] usb 8-1: SerialNumber: syz [ 346.860275][ T6222] usb 8-1: config 0 descriptor?? [ 346.890211][ T985] gp8psk: usb in 137 operation failed. [ 346.890228][ T985] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 346.890240][ T985] gp8psk: found Genpix USB device pID = 201 (hex) [ 346.893592][ T985] usb 3-1: USB disconnect, device number 17 [ 347.177777][ T985] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 347.273269][ T6222] usb 8-1: USB disconnect, device number 8 [ 347.328170][ T5924] IPVS: starting estimator thread 0... [ 347.417725][ T7669] IPVS: using max 6 ests per chain, 14400 per kthread [ 347.515603][ T7551] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.515755][ T7551] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.515984][ T7551] bridge_slave_0: entered allmulticast mode [ 347.545168][ T7551] bridge_slave_0: entered promiscuous mode [ 347.561321][ T7551] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.574870][ T7551] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.575119][ T7551] bridge_slave_1: entered allmulticast mode [ 347.595264][ T7551] bridge_slave_1: entered promiscuous mode [ 347.897679][ T6222] usb 3-1: new full-speed USB device number 18 using dummy_hcd [ 348.077188][ T6222] usb 3-1: config 0 has an invalid interface number: 32 but max is 0 [ 348.077216][ T6222] usb 3-1: config 0 has no interface number 0 [ 348.077266][ T6222] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 348.077339][ T6222] usb 3-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 348.077411][ T6222] usb 3-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00 [ 348.077743][ T6222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.387767][ T6222] usb 3-1: config 0 descriptor?? [ 350.086975][ T6222] uclogic 0003:256C:006E.0008: interface is invalid, ignoring [ 350.422789][ T6222] usb 3-1: USB disconnect, device number 18 [ 352.195577][ T7254] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 352.252918][ T7551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 352.269448][ T7254] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 352.350990][ T7551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 352.368391][ T7254] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 352.581075][ T7254] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 352.647840][ T5924] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 352.731045][ T10] usb 9-1: new full-speed USB device number 5 using dummy_hcd [ 352.746978][ T7551] team0: Port device team_slave_0 added [ 352.797911][ T5924] usb 8-1: Using ep0 maxpacket: 16 [ 352.800207][ T5924] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 352.800235][ T5924] usb 8-1: config 0 has no interface number 0 [ 352.800302][ T5924] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 352.800328][ T5924] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 352.802594][ T5924] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 352.802621][ T5924] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 352.802639][ T5924] usb 8-1: Product: syz [ 352.802651][ T5924] usb 8-1: SerialNumber: syz [ 352.843533][ T7551] team0: Port device team_slave_1 added [ 352.886435][ T5924] usb 8-1: config 0 descriptor?? [ 352.894446][ T10] usb 9-1: config 9 has an invalid interface number: 88 but max is 1 [ 352.894471][ T10] usb 9-1: config 9 contains an unexpected descriptor of type 0x2, skipping [ 352.894491][ T10] usb 9-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 352.894508][ T10] usb 9-1: config 9 has no interface number 1 [ 352.894561][ T10] usb 9-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 352.894582][ T10] usb 9-1: config 9 interface 88 altsetting 9 has an invalid descriptor for endpoint zero, skipping [ 352.894603][ T10] usb 9-1: config 9 interface 88 altsetting 9 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 352.894629][ T10] usb 9-1: config 9 interface 88 has no altsetting 0 [ 352.929455][ T10] usb 9-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=50.80 [ 352.929484][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.929503][ T10] usb 9-1: Product: syz [ 352.929517][ T10] usb 9-1: Manufacturer: syz [ 352.929530][ T10] usb 9-1: SerialNumber: syz [ 352.992944][ T5924] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 353.045741][ T5924] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input10 [ 353.211035][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.215234][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.215477][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.215843][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.216115][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.216339][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.216622][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.216760][ T6222] usb 8-1: USB disconnect, device number 9 [ 353.216843][ C1] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 353.216859][ C1] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 353.397864][ T10] qmi_wwan 9-1:9.88: skipping garbage [ 353.398154][ T10] qmi_wwan 9-1:9.88: probe with driver qmi_wwan failed with error -22 [ 353.519233][ T6222] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 353.529081][ T10] usb 9-1: Could not set interface, error -71 [ 353.580720][ T10] usb 9-1: USB disconnect, device number 5 [ 353.910514][ T7551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.910530][ T7551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.910553][ T7551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.007047][ T7551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.007063][ T7551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.007089][ T7551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.381434][ T69] bridge_slave_1: left allmulticast mode [ 354.381465][ T69] bridge_slave_1: left promiscuous mode [ 354.384050][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.946372][ T69] bridge_slave_0: left allmulticast mode [ 354.946406][ T69] bridge_slave_0: left promiscuous mode [ 354.946677][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.230828][ T5153] Bluetooth: hci2: command 0x0406 tx timeout [ 355.289231][ T5836] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 355.441154][ T5836] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 355.441187][ T5836] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 355.441243][ T5836] usb 9-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00 [ 355.441266][ T5836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.447164][ T5836] usb 9-1: config 0 descriptor?? [ 355.867680][ T5924] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 355.923225][ T5836] hid-led 0003:1294:1320.0009: item fetching failed at offset 0/3 [ 355.924345][ T5836] hid-led 0003:1294:1320.0009: probe with driver hid-led failed with error -22 [ 356.024101][ T5924] usb 8-1: config 0 has an invalid interface number: 52 but max is 0 [ 356.024129][ T5924] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 356.024148][ T5924] usb 8-1: config 0 has no interface number 0 [ 356.024219][ T5924] usb 8-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 356.024244][ T5924] usb 8-1: config 0 interface 52 altsetting 1 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 356.024270][ T5924] usb 8-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 356.024319][ T5924] usb 8-1: config 0 interface 52 has no altsetting 0 [ 356.026582][ T5924] usb 8-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 356.026597][ T5924] usb 8-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 356.026608][ T5924] usb 8-1: Product: syz [ 356.026615][ T5924] usb 8-1: SerialNumber: syz [ 356.035622][ T5924] usb 8-1: config 0 descriptor?? [ 356.136760][ T10] usb 9-1: USB disconnect, device number 6 [ 356.261932][ T5924] input: syz (Stick) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.52/input/input11 [ 356.284759][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.405730][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.486931][ T5924] usb 8-1: USB disconnect, device number 10 [ 356.486933][ C0] synaptics_usb 8-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 356.523506][ T69] bond0 (unregistering): Released all slaves [ 356.789916][ T7551] hsr_slave_0: entered promiscuous mode [ 356.791055][ T7551] hsr_slave_1: entered promiscuous mode [ 356.791829][ T7551] debugfs: 'hsr0' already exists in 'hsr' [ 356.791850][ T7551] Cannot create hsr debugfs directory [ 356.811424][ T7731] : renamed from veth1_vlan (while UP) [ 356.987622][ T10] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 357.158109][ T69] hsr_slave_0: left promiscuous mode [ 357.161354][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 357.161385][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.161424][ T10] usb 3-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 357.161447][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.172754][ T10] usb 3-1: config 0 descriptor?? [ 357.219445][ T69] hsr_slave_1: left promiscuous mode [ 357.220577][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.271698][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.660361][ T10] elo 0003:04E7:0030.000A: hidraw0: USB HID v0.00 Device [HID 04e7:0030] on usb-dummy_hcd.2-1/input0 [ 357.869514][ T10] usb 3-1: USB disconnect, device number 19 [ 358.250843][ T69] team0 (unregistering): Port device team_slave_1 removed [ 358.368465][ T69] team0 (unregistering): Port device team_slave_0 removed [ 360.744451][ T7737] bridge0: entered promiscuous mode [ 360.744746][ T7737] macsec1: entered allmulticast mode [ 360.744759][ T7737] bridge0: entered allmulticast mode [ 360.849582][ T5836] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 360.978864][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.7.459'. [ 360.978897][ T7755] netlink: 8 bytes leftover after parsing attributes in process `syz.7.459'. [ 360.997842][ T5836] usb 3-1: Using ep0 maxpacket: 16 [ 361.000645][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 361.000676][ T5836] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 361.000717][ T5836] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 361.000739][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.014600][ T5836] usb 3-1: config 0 descriptor?? [ 361.227735][ T5836] usbhid 3-1:0.0: can't add hid device: -71 [ 361.227865][ T5836] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 361.729834][ T5836] usb 3-1: USB disconnect, device number 20 [ 363.378802][ T5836] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 363.438477][ T7771] netlink: 8 bytes leftover after parsing attributes in process `syz.7.465'. [ 363.547701][ T5836] usb 9-1: Using ep0 maxpacket: 16 [ 363.552010][ T5836] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 363.552036][ T5836] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 363.552055][ T5836] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 363.599772][ T5836] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 363.599801][ T5836] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.599822][ T5836] usb 9-1: Product: syz [ 363.599835][ T5836] usb 9-1: Manufacturer: syz [ 363.599848][ T5836] usb 9-1: SerialNumber: syz [ 363.918670][ T5836] usb 9-1: 0:2 : does not exist [ 364.096373][ T5153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 364.112365][ T5153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 364.114751][ T5153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 364.116071][ T5153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 364.118634][ T5153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 364.337176][ T5836] usb 9-1: USB disconnect, device number 7 [ 364.747189][ T7779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 365.197593][ T5836] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 365.207872][ T985] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 365.361618][ T5836] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 365.361650][ T5836] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.367224][ T5836] usb 9-1: config 0 descriptor?? [ 365.370281][ T985] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA4, changing to 0x84 [ 365.370312][ T985] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 365.370355][ T985] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 365.370377][ T985] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.462808][ T985] usb 8-1: config 0 descriptor?? [ 365.587022][ T5836] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 365.695635][ T985] ath6kl: Failed to submit usb control message: -71 [ 365.695685][ T985] ath6kl: unable to send the bmi data to the device: -71 [ 365.695700][ T985] ath6kl: Unable to send get target info: -71 [ 365.740975][ T985] ath6kl: Failed to init ath6kl core: -71 [ 365.742663][ T985] ath6kl_usb 8-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 365.804853][ T985] usb 8-1: USB disconnect, device number 11 [ 365.996527][ T5836] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 2 [ 365.996572][ T5836] [drm] Initialized udl on minor 2 [ 366.019675][ T5836] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed [ 366.022293][ T5836] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 366.227658][ T5924] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 366.244041][ T6222] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 366.248280][ T5838] Bluetooth: hci4: command tx timeout [ 366.250403][ T5836] usb 9-1: USB disconnect, device number 8 [ 366.289434][ T6222] udl 9-1:0.0: [drm] Cannot find any crtc or sizes [ 366.389712][ T5924] usb 3-1: Using ep0 maxpacket: 8 [ 366.394226][ T5924] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 366.394255][ T5924] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 366.394274][ T5924] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 366.394287][ T5924] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 366.394312][ T5924] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 366.394324][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.896162][ T5924] usb 3-1: GET_CAPABILITIES returned 0 [ 366.896980][ T5924] usbtmc 3-1:16.0: can't read capabilities [ 367.408143][ T5924] usb 3-1: USB disconnect, device number 21 [ 367.617080][ T7801] overlay: filesystem on ./bus not supported [ 368.156608][ T7815] netlink: 12 bytes leftover after parsing attributes in process `syz.8.481'. [ 368.327633][ T5838] Bluetooth: hci4: command tx timeout [ 368.617574][ T5836] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 368.777776][ T5836] usb 3-1: Using ep0 maxpacket: 32 [ 368.780162][ T5836] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 368.780194][ T5836] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 368.783740][ T5836] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 368.783766][ T5836] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 368.783787][ T5836] usb 3-1: Product: syz [ 368.783800][ T5836] usb 3-1: Manufacturer: syz [ 368.803023][ T5836] hub 3-1:4.0: USB hub found [ 369.028142][ T5836] hub 3-1:4.0: config failed, hub doesn't have any ports! (err -19) [ 369.127734][ T5923] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 369.151037][ T7551] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 369.264109][ T7551] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 369.277905][ T5923] usb 9-1: Using ep0 maxpacket: 8 [ 369.281504][ T5923] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 369.281537][ T5923] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 369.281563][ T5923] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 369.281588][ T5923] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 369.281648][ T5923] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 369.281673][ T5923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.359953][ T5836] usb 3-1: USB disconnect, device number 22 [ 369.500076][ T7551] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 370.215708][ T7551] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 370.280376][ T5923] usb 9-1: GET_CAPABILITIES returned 0 [ 370.280433][ T5923] usbtmc 9-1:16.0: can't read capabilities [ 370.407695][ T5838] Bluetooth: hci4: command tx timeout [ 370.411091][ T7774] chnl_net:caif_netlink_parms(): no params data found [ 370.484810][ T7828] usbtmc 9-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 370.516409][ T31] usb 9-1: USB disconnect, device number 9 [ 370.657714][ T5923] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 370.717758][ T5924] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 370.819618][ T5923] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 370.819647][ T5923] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.825823][ T5923] usb 3-1: config 0 descriptor?? [ 370.866780][ T5923] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 370.878081][ T5924] usb 8-1: Using ep0 maxpacket: 32 [ 370.880356][ T5924] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 370.880380][ T5924] usb 8-1: config 0 has no interface number 0 [ 370.880426][ T5924] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.880451][ T5924] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.880488][ T5924] usb 8-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 370.880509][ T5924] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.896899][ T5924] usb 8-1: config 0 descriptor?? [ 371.055808][ T5923] gp8psk: usb in 128 operation failed. [ 371.258405][ T5923] gp8psk: FW Version = 244.249.196 (0xf4f9c4) Build 2015/223/09 [ 371.359479][ T69] bridge_slave_1: left allmulticast mode [ 371.359574][ T69] bridge_slave_1: left promiscuous mode [ 371.360152][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.430419][ T69] bridge_slave_0: left allmulticast mode [ 371.430508][ T69] bridge_slave_0: left promiscuous mode [ 371.430913][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.461805][ T5923] gp8psk: usb in 149 operation failed. [ 371.461824][ T5923] gp8psk: failed to get FPGA version [ 371.462224][ T5923] gp8psk: usb in 138 operation failed. [ 371.462237][ T5923] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 371.462276][ T5923] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 371.508278][ T5923] usb 3-1: USB disconnect, device number 23 [ 371.539551][ T5924] uclogic 0003:28BD:0094.000B: pen parameters not found [ 371.539575][ T5924] uclogic 0003:28BD:0094.000B: interface is invalid, ignoring [ 371.748374][ T5924] usb 8-1: USB disconnect, device number 12 [ 372.293479][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.387896][ T6222] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 372.390085][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.452187][ T69] bond0 (unregistering): Released all slaves [ 372.488364][ T7774] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.488494][ T7774] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.488717][ T7774] bridge_slave_0: entered allmulticast mode [ 372.491923][ T7774] bridge_slave_0: entered promiscuous mode [ 372.498035][ T5838] Bluetooth: hci4: command tx timeout [ 372.568579][ T7855] netlink: 'syz.7.494': attribute type 2 has an invalid length. [ 372.602781][ T6222] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 372.602812][ T6222] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.613271][ T7774] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.613405][ T7774] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.613649][ T7774] bridge_slave_1: entered allmulticast mode [ 372.622970][ T6222] usb 3-1: config 0 descriptor?? [ 372.623260][ T7774] bridge_slave_1: entered promiscuous mode [ 373.908262][ T6222] ath6kl: mismatched byte count 0 vs. expected 12 [ 373.964885][ T6222] ath6kl: Failed to init ath6kl core: -22 [ 373.967739][ T6222] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 374.082520][ T7864] netlink: 8 bytes leftover after parsing attributes in process `syz.7.497'. [ 374.122526][ T6222] usb 3-1: USB disconnect, device number 24 [ 374.274694][ T7774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.590625][ T69] hsr_slave_0: left promiscuous mode [ 375.622594][ T7878] netlink: 32 bytes leftover after parsing attributes in process `syz.8.501'. [ 375.668755][ T69] hsr_slave_1: left promiscuous mode [ 375.669704][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.708468][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.207613][ T6222] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 376.367548][ T6222] usb 8-1: Using ep0 maxpacket: 16 [ 376.375157][ T6222] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 376.375190][ T6222] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 376.408061][ T6222] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 376.408090][ T6222] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.408110][ T6222] usb 8-1: Product: syz [ 376.408123][ T6222] usb 8-1: Manufacturer: syz [ 376.408137][ T6222] usb 8-1: SerialNumber: syz [ 376.457673][ T6222] usb 8-1: config 0 descriptor?? [ 376.487423][ T6222] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 376.487899][ T6222] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 376.978278][ T69] team0 (unregistering): Port device team_slave_1 removed [ 377.135262][ T6222] em28xx 8-1:0.0: chip ID is em2874 [ 377.223323][ T69] team0 (unregistering): Port device team_slave_0 removed [ 377.342042][ T6222] usb 8-1: USB disconnect, device number 13 [ 377.343296][ T6222] em28xx 8-1:0.0: Disconnecting em28xx [ 377.375497][ T6222] em28xx 8-1:0.0: Freeing device [ 378.062352][ T7774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.598224][ T7774] team0: Port device team_slave_0 added [ 378.610373][ T7774] team0: Port device team_slave_1 added [ 378.734868][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.974935][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.974952][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.974976][ T7774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.071107][ T7774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.071123][ T7774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.071148][ T7774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.307616][ T5923] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 379.648385][ T5923] usb 9-1: Using ep0 maxpacket: 8 [ 379.650365][ T5923] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 379.650391][ T5923] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 379.650415][ T5923] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 379.650446][ T5923] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.650484][ T5923] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 379.650505][ T5923] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.893891][ T5923] usb 9-1: GET_CAPABILITIES returned 0 [ 379.893939][ T5923] usbtmc 9-1:16.0: can't read capabilities [ 379.992138][ T7774] hsr_slave_0: entered promiscuous mode [ 379.993447][ T7774] hsr_slave_1: entered promiscuous mode [ 379.994356][ T7774] debugfs: 'hsr0' already exists in 'hsr' [ 379.994378][ T7774] Cannot create hsr debugfs directory [ 380.095948][ T5836] usb 9-1: USB disconnect, device number 10 [ 380.503983][ T7925] netlink: 8 bytes leftover after parsing attributes in process `syz.7.522'. [ 380.552431][ T7925] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 380.552620][ T7925] macvlan2: entered allmulticast mode [ 380.553242][ T7925] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 380.713767][ T7930] syz.7.525 (7930): /proc/7928/oom_adj is deprecated, please use /proc/7928/oom_score_adj instead. [ 381.461635][ T7551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.062867][ T7551] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.093599][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.095862][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.132485][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.132677][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.211785][ T985] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 382.279283][ T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 382.367786][ T985] usb 8-1: Using ep0 maxpacket: 32 [ 382.370159][ T985] usb 8-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 382.370187][ T985] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.375461][ T985] usb 8-1: config 0 descriptor?? [ 382.428921][ T985] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 382.447657][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 382.450377][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 382.450462][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 382.450487][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 382.450510][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 382.450552][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 382.450631][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 382.908432][ T5924] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 382.931820][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 382.932289][ T10] usbtmc 3-1:16.0: can't read capabilities [ 383.063914][ T5924] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 383.063935][ T5924] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.097632][ T5924] usb 9-1: config 0 descriptor?? [ 383.112349][ T5924] cp210x 9-1:0.0: cp210x converter detected [ 383.224262][ T5836] usb 3-1: USB disconnect, device number 25 [ 383.274159][ T985] gspca_nw80x: reg_r err -71 [ 383.274250][ T985] nw80x 8-1:0.0: probe with driver nw80x failed with error -71 [ 383.312248][ T985] usb 8-1: USB disconnect, device number 14 [ 383.556865][ T5924] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 383.676073][ T5924] usb 9-1: cp210x converter now attached to ttyUSB0 [ 383.750906][ T7551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.782042][ T5924] usb 9-1: USB disconnect, device number 11 [ 383.833378][ T5924] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 383.991680][ T5924] cp210x 9-1:0.0: device disconnected [ 384.080163][ T7774] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 384.171637][ T7774] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 384.360364][ T7774] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 385.370262][ T7774] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 386.307669][ T5924] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 386.468698][ T5924] usb 3-1: Using ep0 maxpacket: 32 [ 386.475678][ T5924] usb 3-1: unable to get BOS descriptor or descriptor too short [ 386.477257][ T5924] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 386.482635][ T5924] usb 3-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec [ 386.482665][ T5924] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.482685][ T5924] usb 3-1: Product: syz [ 386.482698][ T5924] usb 3-1: Manufacturer: syz [ 386.482712][ T5924] usb 3-1: SerialNumber: syz [ 386.502599][ T5924] usb 3-1: config 0 descriptor?? [ 386.528838][ T5836] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 386.642393][ T7774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 386.680089][ T5836] usb 8-1: Using ep0 maxpacket: 8 [ 386.693775][ T5836] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 386.693804][ T5836] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 386.693828][ T5836] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 386.693851][ T5836] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 386.693891][ T5836] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 386.693913][ T5836] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.774399][ T5923] usb 3-1: USB disconnect, device number 26 [ 386.824094][ T7774] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.889837][ T5924] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 386.916818][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.917049][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.980072][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.980239][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 387.040987][ T5924] usb 9-1: config 0 has an invalid interface number: 128 but max is 0 [ 387.041015][ T5924] usb 9-1: config 0 has no interface number 0 [ 387.061168][ T5924] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 387.061258][ T5924] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.061278][ T5924] usb 9-1: Product: syz [ 387.061291][ T5924] usb 9-1: Manufacturer: syz [ 387.061305][ T5924] usb 9-1: SerialNumber: syz [ 387.064020][ T5836] usb 8-1: GET_CAPABILITIES returned 0 [ 387.064063][ T5836] usbtmc 8-1:16.0: can't read capabilities [ 387.129187][ T5924] usb 9-1: config 0 descriptor?? [ 387.192392][ T7551] veth0_vlan: entered promiscuous mode [ 387.283502][ T5923] usb 8-1: USB disconnect, device number 15 [ 387.595278][ T5924] usb 9-1: Firmware: major: 0, minor: 43, hardware type: ATUSB (0) [ 387.796537][ T5924] usb 9-1: failed to fetch extended address, random address set [ 388.013574][ T5924] usb 9-1: USB disconnect, device number 12 [ 388.445967][ T7774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.877731][ T1238] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 389.027556][ T1238] usb 8-1: Using ep0 maxpacket: 8 [ 389.030095][ T1238] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 389.030128][ T1238] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 389.030153][ T1238] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 389.030175][ T1238] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 389.030218][ T1238] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 389.030240][ T1238] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.171247][ T5153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 389.197589][ T5924] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 389.200911][ T5153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 389.202746][ T5153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 389.208124][ T5153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 389.240487][ T5153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 389.343840][ T1238] usb 8-1: GET_CAPABILITIES returned 0 [ 389.343889][ T1238] usbtmc 8-1:16.0: can't read capabilities [ 389.352103][ T5924] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 389.352130][ T5924] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 389.353615][ T5924] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 389.353640][ T5924] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 389.353659][ T5924] usb 3-1: SerialNumber: syz [ 389.601386][ T1238] usb 8-1: USB disconnect, device number 16 [ 389.881523][ T5924] usb 3-1: 0:2 : does not exist [ 390.658220][ T5924] usb 3-1: USB disconnect, device number 27 [ 390.907756][ T8051] netlink: 'syz.2.550': attribute type 13 has an invalid length. [ 391.017673][ T7541] udevd[7541]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 391.217618][ T8051] macvtap0: entered promiscuous mode [ 391.288907][ T5838] Bluetooth: hci0: command tx timeout [ 391.310828][ T8051] macvtap0: refused to change device tx_queue_len [ 391.676559][ T5924] hid-generic 0005:15C2:8002.000C: collection stack underflow [ 391.676592][ T5924] hid-generic 0005:15C2:8002.000C: item 0 0 0 12 parsing failed [ 391.677366][ T5924] hid-generic 0005:15C2:8002.000C: probe with driver hid-generic failed with error -22 [ 392.307636][ T5910] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 392.313422][ T7774] veth0_vlan: entered promiscuous mode [ 392.466647][ T5910] usb 8-1: Using ep0 maxpacket: 8 [ 392.477158][ T5910] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 392.492296][ T5910] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 392.492330][ T5910] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 392.492367][ T5910] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 392.496632][ T5910] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 392.496661][ T5910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.496681][ T5910] usb 8-1: Product: syz [ 392.496694][ T5910] usb 8-1: Manufacturer: syz [ 392.496708][ T5910] usb 8-1: SerialNumber: syz [ 392.812132][ T5910] usb 8-1: 2:1 : no or invalid class specific endpoint descriptor [ 392.812166][ T5910] usb 8-1: 2:1 : format type 0 is detected, processed as PCM [ 392.812183][ T5910] usb 8-1: 2:1 : sample bitwidth 16 in over sample bytes 1 [ 392.812246][ T5910] usb 8-1: 2:1 : invalid channels 0 [ 392.966212][ T5910] usb 8-1: USB disconnect, device number 17 [ 392.971124][ T7774] veth1_vlan: entered promiscuous mode [ 393.214190][ T7541] udevd[7541]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 393.367591][ T5838] Bluetooth: hci0: command tx timeout [ 393.777682][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.568'. [ 393.777806][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.568'. [ 393.777829][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.2.568'. [ 393.782732][ T8102] netlink: 28 bytes leftover after parsing attributes in process `syz.2.568'. [ 393.782759][ T8102] netlink: 'syz.2.568': attribute type 6 has an invalid length. [ 394.006047][ T8036] chnl_net:caif_netlink_parms(): no params data found [ 394.347638][ T5910] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 394.503302][ T5910] usb 8-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 394.503334][ T5910] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 394.503354][ T5910] usb 8-1: Product: syz [ 394.503368][ T5910] usb 8-1: Manufacturer: syz [ 394.503381][ T5910] usb 8-1: SerialNumber: syz [ 394.551591][ T5910] usb 8-1: config 0 descriptor?? [ 394.569267][ T7774] veth0_macvtap: entered promiscuous mode [ 394.995076][ T1174] bridge_slave_1: left allmulticast mode [ 394.995108][ T1174] bridge_slave_1: left promiscuous mode [ 394.995487][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.017351][ T5910] usb 8-1: ignoring: probably an ADSL modem [ 395.114038][ T1174] bridge_slave_0: left allmulticast mode [ 395.116198][ T1174] bridge_slave_0: left promiscuous mode [ 395.117645][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.403826][ T5910] cxacru 8-1:0.0: usbatm_usb_probe: bind failed: -19! [ 395.450544][ T5838] Bluetooth: hci0: command tx timeout [ 395.616418][ T5983] usb 8-1: USB disconnect, device number 18 [ 396.419095][ T8146] netlink: 'syz.7.573': attribute type 8 has an invalid length. [ 396.480429][ T8149] netlink: 36 bytes leftover after parsing attributes in process `syz.8.574'. [ 397.548633][ T5838] Bluetooth: hci0: command tx timeout [ 398.108397][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.168741][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.202935][ T1174] bond0 (unregistering): Released all slaves [ 398.278204][ T7774] veth1_macvtap: entered promiscuous mode [ 399.608222][ T5910] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 399.760374][ T5910] usb 9-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad [ 399.760393][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.795928][ T5910] usb 9-1: config 0 descriptor?? [ 399.955773][ T5910] gspca_main: spca508-2.14.0 probing 8086:0110 [ 400.047151][ T5910] gspca_spca508: reg_read err -32 [ 400.054153][ T5910] gspca_spca508: reg_read err -32 [ 400.109744][ T1174] hsr_slave_0: left promiscuous mode [ 400.147754][ T1174] hsr_slave_1: left promiscuous mode [ 400.148661][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 400.209035][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 400.257035][ T5910] gspca_spca508: reg_read err -71 [ 400.259286][ T5910] gspca_spca508: reg_read err -71 [ 400.259720][ T5910] gspca_spca508: reg write: error -71 [ 400.259807][ T5910] spca508 9-1:0.0: probe with driver spca508 failed with error -71 [ 400.297778][ T5910] usb 9-1: USB disconnect, device number 13 [ 400.432333][ T1174] veth0_vlan: left promiscuous mode [ 403.448854][ T1174] team0 (unregistering): Port device team_slave_1 removed [ 403.719814][ T1174] team0 (unregistering): Port device team_slave_0 removed [ 406.029259][ T8036] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.029466][ T8036] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.029629][ T8036] bridge_slave_0: entered allmulticast mode [ 406.031136][ T8036] bridge_slave_0: entered promiscuous mode [ 406.082262][ T8036] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.082445][ T8036] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.082678][ T8036] bridge_slave_1: entered allmulticast mode [ 406.085408][ T8036] bridge_slave_1: entered promiscuous mode [ 406.096130][ T7774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 406.477658][ T985] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 406.523807][ T8036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.536807][ T7774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 406.555244][ T8036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.657579][ T985] usb 8-1: Using ep0 maxpacket: 16 [ 406.660052][ T985] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.660084][ T985] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.660105][ T985] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 406.660148][ T985] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 406.660170][ T985] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 406.687152][ T985] usb 8-1: config 0 descriptor?? [ 406.708009][ T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 406.887688][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 406.904041][ T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 406.904070][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 406.904174][ T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 406.904198][ T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 406.904241][ T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 406.904751][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.086282][ T8036] team0: Port device team_slave_0 added [ 407.086919][ T6176] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.111645][ T6176] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.114377][ T8036] team0: Port device team_slave_1 added [ 407.115273][ T6176] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.115776][ T6176] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.176832][ T985] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 407.188544][ T985] microsoft 0003:045E:07DA.000D: ignoring exceeding usage max [ 407.188564][ T985] microsoft 0003:045E:07DA.000D: usage index exceeded [ 407.188790][ T985] microsoft 0003:045E:07DA.000D: item 0 0 2 2 parsing failed [ 407.191351][ T985] microsoft 0003:045E:07DA.000D: parse failed [ 407.191671][ T985] microsoft 0003:045E:07DA.000D: probe with driver microsoft failed with error -22 [ 407.235951][ T10] usb 3-1: GET_CAPABILITIES returned 0 [ 407.236116][ T10] usbtmc 3-1:16.0: can't read capabilities [ 407.416581][ T5924] usb 3-1: USB disconnect, device number 28 [ 407.428824][ T1238] usb 8-1: USB disconnect, device number 19 [ 407.840567][ T8036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.840583][ T8036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.840617][ T8036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.929492][ T8036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.929509][ T8036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.929534][ T8036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.377183][ T8268] ipvlan2: entered promiscuous mode [ 408.377224][ T8268] ipvlan2: entered allmulticast mode [ 408.377231][ T8268] hsr0: entered allmulticast mode [ 408.377238][ T8268] hsr_slave_0: entered allmulticast mode [ 408.377249][ T8268] hsr_slave_1: entered allmulticast mode [ 408.669027][ T8271] Bluetooth: MGMT ver 1.23 [ 408.829576][ T8036] hsr_slave_0: entered promiscuous mode [ 408.837422][ T8036] hsr_slave_1: entered promiscuous mode [ 408.868216][ T8036] debugfs: 'hsr0' already exists in 'hsr' [ 408.868244][ T8036] Cannot create hsr debugfs directory [ 409.839740][ T6176] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.839760][ T6176] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.997584][ T5925] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 410.138648][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.138667][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.177640][ T5925] usb 9-1: Using ep0 maxpacket: 8 [ 410.184548][ T5925] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 410.184579][ T5925] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 410.184603][ T5925] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 410.184627][ T5925] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 410.184670][ T5925] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 410.184691][ T5925] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.258118][ T8292] loop2: detected capacity change from 0 to 7 [ 410.312191][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.312422][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 410.351326][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 410.354685][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.354717][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 410.362199][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.362242][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 410.377371][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.377405][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 410.382000][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.382032][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 410.385363][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.385395][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 410.385661][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.385687][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 410.388186][ T8292] ldm_validate_partition_table(): Disk read failed. [ 410.388427][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.388454][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 410.388728][ C1] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 410.388752][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 410.389019][ C1] Buffer I/O error on dev loop2, logical block 0, async page read [ 410.389434][ T8292] Dev loop2: unable to read RDB block 0 [ 410.390875][ T8292] loop2: unable to read partition table [ 410.391121][ T8292] loop2: partition table beyond EOD, truncated [ 410.391169][ T8292] loop_reread_partitions: partition scan of loop2 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 410.563788][ T5925] usb 9-1: GET_CAPABILITIES returned 0 [ 410.563836][ T5925] usbtmc 9-1:16.0: can't read capabilities [ 410.752762][ T5836] usb 9-1: USB disconnect, device number 14 [ 420.797512][ C1] sched: DL replenish lagged too much [ 464.452429][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 478.749091][ T985] page_pool_release_retry() stalled pool shutdown: id 84, 25 inflight 65 sec [ 482.694723][ T5153] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 504.369681][ T5838] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 507.067111][ T8037] Bluetooth: hci4: command tx timeout [ 507.067193][ T8387] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 512.625399][ T8395] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 516.081901][ T8395] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 518.984537][ T8395] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 522.822989][ T8393] Bluetooth: hci5: Opcode 0x1005 failed: -110 [ 522.851421][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 529.814678][ T8037] Bluetooth: hci0: command 0x0406 tx timeout [ 564.675448][ T8409] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 565.955321][ T8409] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 567.242462][ T8409] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 567.501498][ T8409] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 567.502767][ T8409] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 570.126566][ T8409] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 570.197626][ T8409] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 570.202104][ T8409] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 570.203380][ T8409] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 570.236670][ T8409] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 571.882663][ T8037] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 572.604227][ T8037] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 572.604710][ T8037] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 572.608405][ T8037] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 572.610009][ T8037] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 576.792365][ T8409] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 577.202460][ T8409] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 577.727178][ T8409] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 579.678512][ T8409] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 579.679320][ T8409] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 589.635370][ T8418] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 589.821039][ T8418] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 589.828703][ T8418] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 591.957601][ T8417] Bluetooth: hci7: Opcode 0x0c03 failed: -110 [ 595.593400][ T5838] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 595.839971][ T5838] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 596.867016][ T5838] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 598.030549][ T5838] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 598.031342][ T5838] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 611.155233][ T8037] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 611.736482][ T8037] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 611.736908][ T8037] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 612.149692][ T8037] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 612.150501][ T8037] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 628.419265][ T1324] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.399806][ T5838] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 634.687511][ T38] INFO: task kworker/0:6:5983 blocked for more than 143 seconds. [ 634.687541][ T38] Not tainted syzkaller #0 [ 634.687552][ T38] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 634.687565][ T38] task:kworker/0:6 state:D stack:20872 pid:5983 tgid:5983 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 634.687621][ T38] Workqueue: events_power_efficient reg_check_chans_work [ 634.687667][ T38] Call Trace: [ 634.687673][ T38] [ 634.687688][ T38] __schedule+0x16f3/0x4c20 [ 634.687731][ T38] ? __lock_acquire+0xab9/0xd20 [ 634.687766][ T38] ? __pfx___schedule+0x10/0x10 [ 634.687815][ T38] rt_mutex_schedule+0x77/0xf0 [ 634.687834][ T38] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 634.687870][ T38] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 634.687896][ T38] rt_mutex_slowlock+0x2b1/0x6e0 [ 634.687920][ T38] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 634.687942][ T38] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 634.687962][ T38] ? __lock_acquire+0xab9/0xd20 [ 634.687996][ T38] ? reg_check_chans_work+0x164/0xf30 [ 634.688023][ T38] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 634.688049][ T38] ? __lock_acquire+0xab9/0xd20 [ 634.688078][ T38] ? reg_check_chans_work+0x164/0xf30 [ 634.688102][ T38] mutex_lock_nested+0x16a/0x1d0 [ 634.688122][ T38] ? reg_check_chans_work+0x95/0xf30 [ 634.688152][ T38] reg_check_chans_work+0x164/0xf30 [ 634.688183][ T38] ? __lock_acquire+0xab9/0xd20 [ 634.688214][ T38] ? __pfx_reg_check_chans_work+0x10/0x10 [ 634.688240][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 634.688269][ T38] ? _raw_spin_unlock_irq+0x23/0x50 [ 634.688293][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 634.688314][ T38] ? process_scheduled_works+0x9ef/0x17b0 [ 634.688336][ T38] process_scheduled_works+0xade/0x17b0 [ 634.688388][ T38] ? __pfx_process_scheduled_works+0x10/0x10 [ 634.688428][ T38] worker_thread+0x8a0/0xda0 [ 634.688479][ T38] kthread+0x70e/0x8a0 [ 634.688508][ T38] ? __pfx_worker_thread+0x10/0x10 [ 634.688530][ T38] ? __pfx_kthread+0x10/0x10 [ 634.688560][ T38] ? __pfx_kthread+0x10/0x10 [ 634.688592][ T38] ret_from_fork+0x439/0x7d0 [ 634.688618][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 634.688647][ T38] ? __switch_to_asm+0x39/0x70 [ 634.688665][ T38] ? __switch_to_asm+0x33/0x70 [ 634.688681][ T38] ? __pfx_kthread+0x10/0x10 [ 634.688707][ T38] ret_from_fork_asm+0x1a/0x30 [ 634.688742][ T38] [ 634.688805][ T38] [ 634.688805][ T38] Showing all locks held in the system: [ 634.688813][ T38] 2 locks held by init/1: [ 634.688824][ T38] #0: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 634.688869][ T38] #1: ffff88801d2ae858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 634.688912][ T38] 2 locks held by kthreadd/2: [ 634.688922][ T38] #0: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 634.688965][ T38] #1: ffff88801d2ae858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 634.689009][ T38] 4 locks held by kworker/0:0/9: [ 634.689019][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.689065][ T38] #1: ffffc900000e7bc0 ((work_completion)(&(&tbl->gc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.689111][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.689156][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.689201][ T38] 4 locks held by kworker/0:1/10: [ 634.689212][ T38] #0: ffff888036971d38 ((wq_completion)wg-crypt-wg2#5){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.689262][ T38] #1: ffffc900000f7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.689322][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.689366][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.689411][ T38] 6 locks held by kworker/u8:1/13: [ 634.689422][ T38] #0: ffff888036288938 ((wq_completion)wg-kex-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.689472][ T38] #1: ffffc90000127bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.689518][ T38] #2: ffff8880364615f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 634.689565][ T38] #3: ffff8880343d9928 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 634.689616][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.689660][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.689706][ T38] 2 locks held by ksoftirqd/0/15: [ 634.689716][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.689761][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.689806][ T38] 6 locks held by rcuc/0/20: [ 634.689818][ T38] 2 locks held by rcuc/1/28: [ 634.689827][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.689871][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.689917][ T38] 2 locks held by ksoftirqd/1/30: [ 634.689927][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.689971][ T38] #1: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.690017][ T38] 3 locks held by kworker/1:0/31: [ 634.690028][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.690073][ T38] #1: ffffc90000a5fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.690118][ T38] #2: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 634.690162][ T38] 1 lock held by khungtaskd/38: [ 634.690172][ T38] #0: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 634.690215][ T38] 3 locks held by kworker/u8:2/43: [ 634.690226][ T38] #0: ffff88814d3a3138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.690271][ T38] #1: ffffc90000b47bc0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.690317][ T38] #2: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 634.690363][ T38] 7 locks held by kworker/u8:3/57: [ 634.690374][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.690419][ T38] #1: ffffc9000123fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.690466][ T38] #2: ffff888033b88300 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 634.690521][ T38] #3: ffff888027ed6d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 634.690570][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 634.690619][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.690662][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.690706][ T38] 7 locks held by kworker/u8:5/69: [ 634.690716][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.690756][ T38] #1: ffffc9000155fbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.690799][ T38] #2: ffff88803dc6f300 (&devlink->lock_key){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 634.690845][ T38] #3: ffff88803424a520 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 634.690893][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 634.690937][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.690980][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.691031][ T38] 5 locks held by kworker/u8:6/172: [ 634.691041][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.691087][ T38] #1: ffffc90003aefbc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.691132][ T38] #2: ffff888060180898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 634.691181][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.691225][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.691273][ T38] 8 locks held by kworker/u8:7/995: [ 634.691286][ T38] 5 locks held by kworker/u8:8/1174: [ 634.691296][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.691339][ T38] #1: ffffc90005047bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.691385][ T38] #2: ffff88805f600898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 634.691449][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.691493][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.691540][ T38] 2 locks held by aoe_tx0/1324: [ 634.691550][ T38] #0: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.691600][ T38] #1: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.691662][ T38] 4 locks held by kworker/u9:1/5153: [ 634.691673][ T38] #0: ffff8880339af938 ((wq_completion)hci4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.691718][ T38] #1: ffffc9000fe07bc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.691764][ T38] #2: ffff88805711ce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 634.691809][ T38] #3: ffff88805711c0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 634.691857][ T38] 3 locks held by udevd/5204: [ 634.691867][ T38] #0: ffffffff8e0b08f0 (tomoyo_ss){.+.+}-{0:0}, at: tomoyo_check_open_permission+0x16a/0x3b0 [ 634.691912][ T38] #1: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 634.691955][ T38] #2: ffff88801d2ae858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 634.691998][ T38] 1 lock held by dhcpcd/5499: [ 634.692008][ T38] 2 locks held by getty/5599: [ 634.692019][ T38] #0: ffff88823bf480a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 634.692068][ T38] #1: ffffc90003e832e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1410 [ 634.692114][ T38] 3 locks held by syz-executor/5824: [ 634.692124][ T38] #0: ffff888025bbc050 (sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_recvmsg+0xd3/0x560 [ 634.692171][ T38] #1: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.692215][ T38] #2: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.692261][ T38] 3 locks held by syz-executor/5846: [ 634.692271][ T38] #0: ffff88805be28e80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 634.692336][ T38] #1: ffff88805be280a8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 634.692382][ T38] #2: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 634.692425][ T38] 4 locks held by kworker/1:4/5848: [ 634.692435][ T38] #0: ffff888019899138 ((wq_completion)events_long){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.692481][ T38] #1: ffffc90004ba7bc0 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.692528][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.692579][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.692626][ T38] 4 locks held by kworker/0:3/5904: [ 634.692636][ T38] #0: ffff888034e07d38 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.692696][ T38] #1: ffffc90005067bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.692756][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.692800][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.692846][ T38] 5 locks held by kworker/1:6/5924: [ 634.692856][ T38] #0: ffff88804ad9a538 ((wq_completion)wg-kex-wg0#15){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.692906][ T38] #1: ffffc90005207bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.692966][ T38] #2: ffff8880343da3c0 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 634.693011][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.693056][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.693102][ T38] 5 locks held by kworker/u8:11/5965: [ 634.693112][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.693156][ T38] #1: ffffc900053e7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.693201][ T38] #2: ffff88804d060898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 634.693248][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.693293][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.693338][ T38] 5 locks held by kworker/u8:12/5966: [ 634.693348][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.693394][ T38] #1: ffffc900053f7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.693439][ T38] #2: ffff88805eed0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 634.693486][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.693530][ T38] #4: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.693582][ T38] 4 locks held by kworker/u8:13/5967: [ 634.693593][ T38] #0: ffff88814d686938 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.693638][ T38] #1: ffffc90005407bc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.693684][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.693729][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.693775][ T38] 4 locks held by kworker/0:6/5983: [ 634.693785][ T38] #0: ffff888019899938 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.693831][ T38] #1: ffffc900054a7bc0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.693876][ T38] #2: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: reg_check_chans_work+0x95/0xf30 [ 634.693924][ T38] #3: ffff88805eed0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: reg_check_chans_work+0x164/0xf30 [ 634.693973][ T38] 5 locks held by kworker/u8:15/6096: [ 634.693983][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.694029][ T38] #1: ffffc90005cb7bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.694074][ T38] #2: ffff88804bae0898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 634.694121][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.694165][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.694211][ T38] 5 locks held by kworker/u8:17/6176: [ 634.694222][ T38] 5 locks held by kworker/u8:18/6177: [ 634.694233][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.694278][ T38] #1: ffffc90005e57bc0 ((work_completion)(&rdev->wiphy_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.694324][ T38] #2: ffff888067490898 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_wiphy_work+0xc4/0x470 [ 634.694369][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.694413][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.694458][ T38] 5 locks held by kworker/1:7/6222: [ 634.694469][ T38] #0: ffff88805f1e6138 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.694518][ T38] #1: ffffc90005307bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.694583][ T38] #2: ffff88805e2a83f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_begin_session+0x38/0xbe0 [ 634.694628][ T38] #3: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 634.694671][ T38] #4: ffff88801d2ae858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 634.694718][ T38] 4 locks held by kworker/u8:20/7429: [ 634.694729][ T38] #0: ffff88803399f138 ((wq_completion)wg-kex-wg0#10){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.694779][ T38] #1: ffffc90004b07bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.694825][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.694869][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.694915][ T38] 7 locks held by kworker/u8:21/7686: [ 634.694925][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.694971][ T38] #1: ffffc900040afbc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.695017][ T38] #2: ffff8880369a1300 (&devlink->lock_key#12){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 634.695070][ T38] #3: ffff888032e91d20 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 634.695120][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 634.695164][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.695209][ T38] #6: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.695256][ T38] 4 locks held by kworker/1:8/8004: [ 634.695266][ T38] #0: ffff88803df89138 ((wq_completion)wg-crypt-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.695316][ T38] #1: ffffc9000441fbc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.695362][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.695407][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.695452][ T38] 4 locks held by kworker/u9:0/8037: [ 634.695462][ T38] #0: ffff888030a01938 ((wq_completion)krxrpcd){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.695507][ T38] #1: ffffc90004c07bc0 ((work_completion)(&rxnet->peer_keepalive_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.695554][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.695603][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.695652][ T38] 4 locks held by kworker/0:7/8263: [ 634.695662][ T38] #0: ffff88805eaf4d38 ((wq_completion)wg-crypt-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.695712][ T38] #1: ffffc90005c37bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.695758][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.695802][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.695848][ T38] 6 locks held by kworker/u8:22/8346: [ 634.695858][ T38] #0: ffff8880371b6938 ((wq_completion)wg-kex-wg0#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.695909][ T38] #1: ffffc90005c17bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.695960][ T38] #2: ffff88803a3695f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 634.696005][ T38] #3: ffff88803dda83f8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 634.696049][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.696093][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.696139][ T38] 4 locks held by kworker/0:8/8347: [ 634.696150][ T38] #0: ffff88804ad9a538 ((wq_completion)wg-kex-wg0#15){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.696200][ T38] #1: ffffc90005cf7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.696259][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.696303][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.696349][ T38] 5 locks held by kworker/0:10/8350: [ 634.696360][ T38] 7 locks held by kworker/u8:25/8355: [ 634.696370][ T38] #0: ffff888019881138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.696415][ T38] #1: ffffc90005db7bc0 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.696462][ T38] #2: ffff88802924d300 (&devlink->lock_key#18){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xbc0 [ 634.696515][ T38] #3: ffff8880368df920 (&nsim_trap_data->trap_lock){+.+.}-{3:3}, at: nsim_dev_trap_report_work+0x1ad/0xbc0 [ 634.696564][ T38] #4: ffffffff8d9a8d80 (rcu_read_lock){....}-{1:3}, at: rt_spin_lock+0x1bb/0x2c0 [ 634.696613][ T38] #5: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.696657][ T38] #6: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.696703][ T38] 5 locks held by kworker/u8:28/8371: [ 634.696714][ T38] 4 locks held by kworker/0:11/8373: [ 634.696724][ T38] #0: ffff88805f0ca138 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.696774][ T38] #1: ffffc90005e77bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.696833][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.696877][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.696923][ T38] 4 locks held by kworker/0:12/8374: [ 634.696933][ T38] #0: ffff88803df89138 ((wq_completion)wg-crypt-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.696983][ T38] #1: ffffc90005e87bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.697042][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.697086][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.697133][ T38] 4 locks held by kworker/0:14/8376: [ 634.697143][ T38] #0: ffff88803df89938 ((wq_completion)wg-kex-wg0#13){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.697193][ T38] #1: ffffc900060b7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.697251][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.697294][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.697386][ T38] 4 locks held by kworker/0:15/8377: [ 634.697396][ T38] #0: ffff88805f1e6138 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.697438][ T38] #1: ffffc900060c7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.697488][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.697527][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.697582][ T38] 4 locks held by kworker/0:16/8382: [ 634.697593][ T38] #0: ffff88803df89138 ((wq_completion)wg-crypt-wg0#6){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.697642][ T38] #1: ffffc900060e7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.697701][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.697746][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.697792][ T38] 4 locks held by kworker/u8:31/8384: [ 634.697802][ T38] #0: ffff88803621d138 ((wq_completion)wg-kex-wg0#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.697851][ T38] #1: ffffc90005da7bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.697897][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.697942][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.697988][ T38] 6 locks held by kworker/u9:3/8389: [ 634.697998][ T38] #0: ffff88805d8af138 ((wq_completion)hci0){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.698043][ T38] #1: ffffc9000410fbc0 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.698089][ T38] #2: ffff888061cbce80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d4/0x3a0 [ 634.698132][ T38] #3: ffff888061cbc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0x242/0xe30 [ 634.698179][ T38] #4: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_failed+0x165/0x310 [ 634.698227][ T38] #5: ffff88805db3bb58 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 634.698280][ T38] 2 locks held by kworker/1:12/8394: [ 634.698291][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.698335][ T38] #1: ffffc90005e67bc0 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.698380][ T38] 4 locks held by kworker/u9:4/8395: [ 634.698391][ T38] #0: ffff888027a6f138 ((wq_completion)hci5#4){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.698440][ T38] #1: ffffc90003a1fbc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.698486][ T38] #2: ffff88804d9dc0a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 634.698530][ T38] #3: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 634.698581][ T38] 4 locks held by kworker/1:13/8398: [ 634.698591][ T38] #0: ffff888034e07d38 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.698641][ T38] #1: ffffc90006157bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.698701][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.698745][ T38] #3: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.698790][ T38] 6 locks held by kworker/u8:32/8400: [ 634.698800][ T38] #0: ffff88805cf71138 ((wq_completion)wg-kex-wg1#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.698850][ T38] #1: ffffc90003fefbc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.698897][ T38] #2: ffff88805ce8d5f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x10a/0x7e0 [ 634.698942][ T38] #3: ffff8880343d8e90 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x11b/0x7e0 [ 634.698986][ T38] #4: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.699031][ T38] #5: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.699077][ T38] 1 lock held by dhcpcd/8402: [ 634.699087][ T38] #0: ffff888024b7c350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 634.699133][ T38] 3 locks held by kworker/0:17/8403: [ 634.699143][ T38] #0: ffff888019898538 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.699189][ T38] #1: ffffc90005ce7bc0 (drain_vmap_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.699233][ T38] #2: ffffffff8daa9ff8 (vmap_purge_lock){+.+.}-{4:4}, at: drain_vmap_area_work+0x17/0x40 [ 634.699277][ T38] 1 lock held by syz-executor/8405: [ 634.699288][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 634.699331][ T38] 4 locks held by kworker/0:19/8406: [ 634.699341][ T38] #0: ffff88801989a938 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.699386][ T38] #1: ffffc90006137bc0 ((work_completion)(&sdp->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.699431][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.699475][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.699521][ T38] 5 locks held by kworker/1:14/8407: [ 634.699531][ T38] #0: ffff88805f0ca138 ((wq_completion)wg-kex-wg1#12){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.699588][ T38] #1: ffffc900054b7bc0 ((work_completion)(&({ do { const void *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ({ unsigned long __ptr; __ptr = (unsigned long) ((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))); (typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker))))) (__ptr + (((__per_cpu_offset[(cpu)])))); }); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.699647][ T38] #2: ffff8880272455f8 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_consume_response+0x1c7/0xb00 [ 634.699693][ T38] #3: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.699738][ T38] #4: ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.699784][ T38] 4 locks held by kworker/u9:5/8409: [ 634.699794][ T38] #0: ffff88804b638138 ((wq_completion)hci1#3){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.699843][ T38] #1: ffffc90005497bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.699889][ T38] #2: ffff888058ba40a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 634.699933][ T38] #3: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 634.699979][ T38] 1 lock held by syz-executor/8410: [ 634.699989][ T38] #0: ffffffff8ecd3538 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 634.700032][ T38] 1 lock held by dhcpcd/8413: [ 634.700042][ T38] #0: ffff888028f12350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 634.700087][ T38] 4 locks held by kworker/0:20/8414: [ 634.700097][ T38] #0: ffff88805eaf7d38 ((wq_completion)wg-crypt-wg2#7){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.700146][ T38] #1: ffffc900052f7bc0 ((work_completion)(&peer->transmit_packet_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.700186][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.700228][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.700273][ T38] 5 locks held by syz-executor/8415: [ 634.700284][ T38] #0: ffffffff8da61950 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x131/0x4b0 [ 634.700329][ T38] #1: ffff88803830c5d0 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x12e/0x1a90 [ 634.700376][ T38] #2: ffff88803830af50 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x217/0x1a90 [ 634.700429][ T38] #3: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 634.700472][ T38] #4: ffff88801d2ae858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 634.700515][ T38] 5 locks held by syz-executor/8419: [ 634.700525][ T38] #0: ffffffff8da61950 (dup_mmap_sem){.+.+}-{0:0}, at: copy_mm+0x131/0x4b0 [ 634.700569][ T38] #1: ffff8880368ba410 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x12e/0x1a90 [ 634.700623][ T38] #2: ffff888019875c50 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x217/0x1a90 [ 634.700675][ T38] #3: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 634.700717][ T38] #4: ffff88801d2ae858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 634.700760][ T38] 4 locks held by kworker/u9:6/8418: [ 634.700769][ T38] #0: ffff888049ff2938 ((wq_completion)hci8#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.700819][ T38] #1: ffffc90005397bc0 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.700864][ T38] #2: ffff88803a3140a8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x8e0 [ 634.700908][ T38] #3: ffffffff8ee3b018 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x516/0x8e0 [ 634.700954][ T38] 1 lock held by dhcpcd/8422: [ 634.700964][ T38] #0: ffff88801f6d8350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 634.701008][ T38] 1 lock held by dhcpcd/8423: [ 634.701019][ T38] #0: ffff88801cb18350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 634.701062][ T38] 1 lock held by dhcpcd/8424: [ 634.701072][ T38] #0: ffff88801cb1c350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 634.701117][ T38] 2 locks held by syz-executor/8426: [ 634.701127][ T38] #0: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 634.701170][ T38] #1: ffff88801d2ae858 (&n->list_lock){+.+.}-{3:3}, at: __put_partials+0x5f/0x1a0 [ 634.701211][ T38] 4 locks held by kworker/u8:34/8430: [ 634.701221][ T38] #0: ffff888023382938 ((wq_completion)wg-kex-wg0#14){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 634.701271][ T38] #1: ffffc90004e67bc0 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 634.701316][ T38] #2: ffffffff8d84a960 (local_bh){.+.+}-{1:3}, at: __local_bh_disable_ip+0xa1/0x400 [ 634.701356][ T38] #3: ffff8880b8823d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 634.701398][ T38] 1 lock held by dhcpcd/8431: [ 634.701407][ T38] #0: ffff88805c998350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 634.701451][ T38] 4 locks held by syz-executor/8432: [ 634.701461][ T38] #0: ffff8880372dd188 (&data->open_mutex){+.+.}-{4:4}, at: vhci_create_device+0x34/0x660 [ 634.701506][ T38] #1: ffff88805e7f3f58 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: simple_start_creating+0x98/0x1e0 [ 634.701559][ T38] #2: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 634.701609][ T38] #3: ffff88801d2ae858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 634.701651][ T38] 3 locks held by syz-executor/8433: [ 634.701662][ T38] 1 lock held by dhcpcd/8434: [ 634.701672][ T38] #0: ffff88803d842350 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0 [ 634.701716][ T38] 2 locks held by udevd/8435: [ 634.701726][ T38] #0: ffffffff8dac55a8 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 634.701768][ T38] #1: ffff88801d2ae858 (&n->list_lock){+.+.}-{3:3}, at: __slab_free+0x19e/0x390 [ 634.701812][ T38] [ 634.701818][ T38] ============================================= [ 634.701818][ T38] [ 634.701839][ T38] NMI backtrace for cpu 0 [ 634.701865][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 634.701886][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 634.701897][ T38] Call Trace: [ 634.701904][ T38] [ 634.701912][ T38] dump_stack_lvl+0x189/0x250 [ 634.701941][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 634.701965][ T38] ? __pfx__printk+0x10/0x10 [ 634.701996][ T38] nmi_cpu_backtrace+0x39e/0x3d0 [ 634.702022][ T38] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 634.702046][ T38] ? __pfx__printk+0x10/0x10 [ 634.702069][ T38] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 634.702094][ T38] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 634.702119][ T38] watchdog+0xf93/0xfe0 [ 634.702147][ T38] ? watchdog+0x1de/0xfe0 [ 634.702174][ T38] kthread+0x70e/0x8a0 [ 634.702202][ T38] ? __pfx_watchdog+0x10/0x10 [ 634.702223][ T38] ? __pfx_kthread+0x10/0x10 [ 634.702253][ T38] ? __pfx_kthread+0x10/0x10 [ 634.702279][ T38] ret_from_fork+0x439/0x7d0 [ 634.702304][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 634.702330][ T38] ? __switch_to_asm+0x39/0x70 [ 634.702346][ T38] ? __switch_to_asm+0x33/0x70 [ 634.702361][ T38] ? __pfx_kthread+0x10/0x10 [ 634.702387][ T38] ret_from_fork_asm+0x1a/0x30 [ 634.702419][ T38] [ 634.702426][ T38] Sending NMI from CPU 0 to CPUs 1: [ 634.702454][ C1] NMI backtrace for cpu 1 [ 634.702468][ C1] CPU: 1 UID: 0 PID: 1034 Comm: irq/29-virtio0- Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 634.702486][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 634.702501][ C1] RIP: 0010:match_held_lock+0x78/0xc0 [ 634.702523][ C1] Code: 00 00 48 c7 c2 f0 f2 9e 92 48 29 d0 48 c1 f8 03 48 ba 29 5c 8f c2 f5 28 5c 8f 48 0f af d0 bb 01 00 00 00 48 39 ca 74 02 31 db <89> d8 5b 41 5e e9 4e a8 03 00 cc 90 e8 87 9c bd f9 85 c0 74 22 83 [ 634.702536][ C1] RSP: 0018:ffffc90004b16938 EFLAGS: 00000046 [ 634.702550][ C1] RAX: 0000000000000006 RBX: 0000000000000001 RCX: 9730ce76b0930800 [ 634.702560][ C1] RDX: ffffc90004b16a01 RSI: ffffffff8d9a8d80 RDI: ffff888025d7e528 [ 634.702572][ C1] RBP: ffff888025d7e528 R08: ffffc90004b17c10 R09: 0000000000000000 [ 634.702583][ C1] R10: ffffc90004b16ad8 R11: fffff52000962d5d R12: 0000000000000005 [ 634.702594][ C1] R13: 0000000000000005 R14: ffffffff8d9a8d80 R15: ffff888025d7d940 [ 634.702605][ C1] FS: 0000000000000000(0000) GS:ffff8881269bc000(0000) knlGS:0000000000000000 [ 634.702618][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 634.702629][ C1] CR2: 000055823fb7baf0 CR3: 000000006d9e6000 CR4: 00000000003526f0 [ 634.702643][ C1] Call Trace: [ 634.702649][ C1] [ 634.702655][ C1] lock_release+0x127/0x3e0 [ 634.702674][ C1] ? unwind_next_frame+0xa5/0x2390 [ 634.702694][ C1] ? unwind_next_frame+0xa5/0x2390 [ 634.702711][ C1] unwind_next_frame+0x19a9/0x2390 [ 634.702732][ C1] ? unwind_next_frame+0xa5/0x2390 [ 634.702751][ C1] ? __local_bh_enable_ip+0x179/0x270 [ 634.702769][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 634.702786][ C1] arch_stack_walk+0x11c/0x150 [ 634.702807][ C1] ? irq_forced_thread_fn+0xe9/0x120 [ 634.702828][ C1] stack_trace_save+0x9c/0xe0 [ 634.702843][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 634.702857][ C1] ? kasan_save_free_info+0x46/0x50 [ 634.702871][ C1] ? consume_skb+0x9e/0xf0 [ 634.702890][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 634.702905][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 634.702922][ C1] ? __lock_acquire+0xab9/0xd20 [ 634.702939][ C1] kasan_save_track+0x3e/0x80 [ 634.702955][ C1] ? kasan_save_track+0x3e/0x80 [ 634.702970][ C1] ? kasan_save_free_info+0x46/0x50 [ 634.702983][ C1] ? __kasan_slab_free+0x5b/0x80 [ 634.702998][ C1] ? kmem_cache_free+0x195/0x510 [ 634.703016][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 634.703031][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 634.703045][ C1] ? nft_do_chain+0x409/0x1920 [ 634.703059][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 634.703074][ C1] ? nf_hook_slow+0xc2/0x220 [ 634.703091][ C1] ? NF_HOOK+0x206/0x3a0 [ 634.703108][ C1] ? NF_HOOK+0x30c/0x3a0 [ 634.703124][ C1] ? __netif_receive_skb+0x143/0x380 [ 634.703141][ C1] ? process_backlog+0x31e/0x900 [ 634.703158][ C1] ? __napi_poll+0xb3/0x540 [ 634.703173][ C1] ? net_rx_action+0x707/0xe00 [ 634.703189][ C1] ? handle_softirqs+0x22f/0x710 [ 634.703205][ C1] ? __local_bh_enable_ip+0x179/0x270 [ 634.703237][ C1] kasan_save_free_info+0x46/0x50 [ 634.703251][ C1] __kasan_slab_free+0x5b/0x80 [ 634.703267][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 634.703281][ C1] kmem_cache_free+0x195/0x510 [ 634.703301][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 634.703317][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 634.703340][ C1] ? nf_ip_checksum+0x13c/0x510 [ 634.703356][ C1] nft_synproxy_do_eval+0x345/0x570 [ 634.703375][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 634.703391][ C1] ? __pfx___ip_vs_conn_in_get+0x10/0x10 [ 634.703412][ C1] nft_do_chain+0x409/0x1920 [ 634.703433][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 634.703450][ C1] ? __pfx_ip_vs_conn_out_get_proto+0x10/0x10 [ 634.703474][ C1] ? ip_vs_out_hook+0x9b5/0xef0 [ 634.703491][ C1] ? __pfx_ip_vs_in_hook+0x10/0x10 [ 634.703510][ C1] nft_do_chain_inet+0x25d/0x340 [ 634.703525][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 634.703545][ C1] ? NF_HOOK+0x9a/0x3a0 [ 634.703563][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 634.703578][ C1] nf_hook_slow+0xc2/0x220 [ 634.703599][ C1] NF_HOOK+0x206/0x3a0 [ 634.703617][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 634.703635][ C1] ? NF_HOOK+0x9a/0x3a0 [ 634.703652][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 634.703669][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 634.703689][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 634.703709][ C1] ? skb_dst+0x4f/0xd0 [ 634.703726][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 634.703746][ C1] NF_HOOK+0x30c/0x3a0 [ 634.703763][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 634.703781][ C1] ? NF_HOOK+0x9a/0x3a0 [ 634.703798][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 634.703816][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 634.703838][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 634.703855][ C1] __netif_receive_skb+0x143/0x380 [ 634.703872][ C1] ? rt_spin_unlock+0x65/0x80 [ 634.703890][ C1] ? process_backlog+0x27b/0x900 [ 634.703907][ C1] process_backlog+0x31e/0x900 [ 634.703929][ C1] __napi_poll+0xb3/0x540 [ 634.703947][ C1] net_rx_action+0x707/0xe00 [ 634.703971][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 634.703988][ C1] ? do_raw_spin_lock+0x121/0x290 [ 634.704005][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 634.704027][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 634.704039][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 634.704065][ C1] handle_softirqs+0x22f/0x710 [ 634.704086][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 634.704107][ C1] __local_bh_enable_ip+0x179/0x270 [ 634.704123][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 634.704143][ C1] ? irq_finalize_oneshot+0x54/0x3d0 [ 634.704162][ C1] ? __pfx_virtscsi_req_done+0x10/0x10 [ 634.704177][ C1] ? vring_interrupt+0x221/0x380 [ 634.704196][ C1] ? __pfx_vring_interrupt+0x10/0x10 [ 634.704216][ C1] irq_forced_thread_fn+0xe9/0x120 [ 634.704234][ C1] ? irq_forced_thread_fn+0x2b/0x120 [ 634.704253][ C1] irq_thread+0x427/0x690 [ 634.704270][ C1] ? irq_thread+0x17b/0x690 [ 634.704290][ C1] ? __pfx_irq_forced_thread_fn+0x10/0x10 [ 634.704309][ C1] ? __pfx_irq_thread+0x10/0x10 [ 634.704335][ C1] ? __kthread_parkme+0x7b/0x200 [ 634.704352][ C1] ? __pfx_irq_thread_dtor+0x10/0x10 [ 634.704370][ C1] ? __kthread_parkme+0x1a1/0x200 [ 634.704390][ C1] kthread+0x70e/0x8a0 [ 634.704410][ C1] ? __pfx_irq_thread+0x10/0x10 [ 634.704427][ C1] ? __pfx_kthread+0x10/0x10 [ 634.704449][ C1] ? __pfx_kthread+0x10/0x10 [ 634.704467][ C1] ret_from_fork+0x439/0x7d0 [ 634.704486][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 634.704505][ C1] ? __switch_to_asm+0x39/0x70 [ 634.704518][ C1] ? __switch_to_asm+0x33/0x70 [ 634.704531][ C1] ? __pfx_kthread+0x10/0x10 [ 634.704550][ C1] ret_from_fork_asm+0x1a/0x30 [ 634.704570][ C1] [ 634.705457][ T38] Kernel panic - not syncing: hung_task: blocked tasks [ 634.705471][ T38] CPU: 0 UID: 0 PID: 38 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 634.705492][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 634.705502][ T38] Call Trace: [ 634.705509][ T38] [ 634.705517][ T38] dump_stack_lvl+0x99/0x250 [ 634.705543][ T38] ? __asan_memcpy+0x40/0x70 [ 634.705562][ T38] ? __pfx_dump_stack_lvl+0x10/0x10 [ 634.705593][ T38] ? __pfx__printk+0x10/0x10 [ 634.705625][ T38] vpanic+0x281/0x750 [ 634.705652][ T38] ? __pfx_vpanic+0x10/0x10 [ 634.705674][ T38] ? __x2apic_send_IPI_mask+0x1e4/0x260 [ 634.705693][ T38] ? lockdep_hardirqs_on+0x9c/0x150 [ 634.705728][ T38] panic+0xb9/0xc0 [ 634.705751][ T38] ? __pfx_panic+0x10/0x10 [ 634.705778][ T38] ? irq_work_queue+0xc3/0x140 [ 634.705805][ T38] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 634.705829][ T38] watchdog+0xfd2/0xfe0 [ 634.705856][ T38] ? watchdog+0x1de/0xfe0 [ 634.705883][ T38] kthread+0x70e/0x8a0 [ 634.705911][ T38] ? __pfx_watchdog+0x10/0x10 [ 634.705932][ T38] ? __pfx_kthread+0x10/0x10 [ 634.705961][ T38] ? __pfx_kthread+0x10/0x10 [ 634.705987][ T38] ret_from_fork+0x439/0x7d0 [ 634.706012][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 634.706040][ T38] ? __switch_to_asm+0x39/0x70 [ 634.706056][ T38] ? __switch_to_asm+0x33/0x70 [ 634.706072][ T38] ? __pfx_kthread+0x10/0x10 [ 634.706098][ T38] ret_from_fork_asm+0x1a/0x30 [ 634.706130][ T38] [ 634.706433][ T38] Kernel Offset: disabled