last executing test programs: 1m49.918945962s ago: executing program 1 (id=257): memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x80080) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f00000000c0)="06", 0x1, 0xffffffffffffffff) r3 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000200)='asymmetric\x00', 0x0) keyctl$set_timeout(0xf, r2, 0x1) fcntl$getown(r1, 0x9) 1m44.763797422s ago: executing program 1 (id=262): r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x5}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='n'], 0x0, 0x0) 1m38.393420896s ago: executing program 1 (id=267): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) symlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) write(r1, &(0x7f0000000040)="05000000010000", 0x7) 1m34.979608041s ago: executing program 0 (id=270): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x1}, 0x6) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x10) bind$bt_hci(r1, &(0x7f00000002c0)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010000", 0x7) 1m33.263924503s ago: executing program 1 (id=272): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000025300)=""/102392, 0x18ff8) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), r0) sendmsg$IEEE802154_LLSEC_LIST_DEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r1, 0x400, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x8004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r3, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r4 = socket$inet(0x2, 0x80001, 0x84) r5 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r6 = openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) close(r6) execveat$binfmt(0xffffffffffffff9c, r5, 0x0, 0x0, 0x0) bind$inet(r4, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) listen(r4, 0x3) listen(r4, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r7, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x10000000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r8 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f00000001c0)={0x2b, &(0x7f0000000100)=[{0x22, '\x00', @st={0x4, [{0x0, @uvalue=0x5}, {0xc5ab822894872ebb}, {0x3, @svalue=0x4}, {0x3, @svalue=0x5}]}, 0x4}]}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0xb, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xea1, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xb7}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x11}, 0x94) io_uring_enter(r8, 0x2219, 0x7721, 0x16, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 1m26.369265225s ago: executing program 1 (id=277): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2f70000) socket$netlink(0x10, 0x3, 0x15) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) userfaultfd(0x80400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_SERVICE(r4, 0x0, 0x483, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) write$sndseq(r5, 0x0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0001000200"], 0x8) 1m26.254770334s ago: executing program 0 (id=278): writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000007c0)="03e6b107e445a7d8276efefff13dfeff50e9d3d14a90a55ec1b3726eb4c0838db63c3594182fdcdf2fcc333c99c565920c0ac34bb23dcf42331c75af98c268be29e63fe7c43ee3825d016e37c073d8ca13c3dbeca3f6165320dc79", 0x5b}, {&(0x7f00000003c0)="00008287334aec085cd2b316", 0xc}], 0x2) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000840)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x40000000040201, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000000380)={0x1, 0x7, 0x6a, 0x10001, 0x0, 0xffffdffffffffffd, 0x7, 0x0, 0xfffffffffffffffd, 0x10000009, 0x4, 0x1}) 1m24.578593666s ago: executing program 1 (id=281): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r5, 0x0, 0x0, 0x4046040) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x4, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) writev(r5, 0x0, 0x0) r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) setreuid(0x0, 0x0) flock(r6, 0x2) r7 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r7, 0x1) flock(r0, 0x5) 1m24.372285766s ago: executing program 0 (id=282): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04224c05000000000000078005cdbea17fd201ffffffffffff0e0087412bee3d000000000071"], 0x4f) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000001900)={0x2, {0x2, 0xa00, 0xff01, 0x101, 0x100}}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r4 = dup3(0xffffffffffffffff, r3, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) 1m21.874070713s ago: executing program 0 (id=284): close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$key(0xf, 0x3, 0x2) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x4b, 0x0, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc018aec0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x4}]}, 0x98}}, 0x0) 1m19.378627277s ago: executing program 0 (id=286): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000000800000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)=ANY=[], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r1, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) prlimit64(r2, 0xe, &(0x7f0000000100)={0x8, 0x80000100008a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) fsopen(0x0, 0x0) open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)}], 0x1}}], 0x2, 0x30000000) 1m17.201051031s ago: executing program 0 (id=287): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m8.726667652s ago: executing program 32 (id=281): r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r0, 0x2) socket$nl_route(0x10, 0x3, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r5, 0x0, 0x0, 0x4046040) bpf$PROG_LOAD(0x5, &(0x7f0000001780)={0x4, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0xa, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) writev(r5, 0x0, 0x0) r6 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) setreuid(0x0, 0x0) flock(r6, 0x2) r7 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x0) flock(r7, 0x1) flock(r0, 0x5) 1m1.631639259s ago: executing program 33 (id=287): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_vlan\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f00000000c0)="3f03fe7f0302140006001e0089e9aaa911d7c2290f0086dd1327c9167c642b4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0xc9, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 19.167891286s ago: executing program 3 (id=337): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000240)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001800010025bd70000000000002001000fe00ff0900000000060015000400000014001680100008800c0003800500010002"], 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$qrtr(0x2a, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) umount2(0x0, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private1}}, &(0x7f00000002c0)=0xe8) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, r4, &(0x7f0000000300)={0x405b, 0x0, 0x2, 0x6, 0x7, 0x1, 0xfff, 0x7fffffffffffffff, 0x1}) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) 18.82844987s ago: executing program 4 (id=338): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r2 = mq_open(&(0x7f00000000c0)='/dev/userio\x00', 0x800, 0x79, &(0x7f0000000100)={0x10001, 0x8, 0x800, 0x1}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mq_notify(r2, &(0x7f0000000140)={0x0, 0x1e, 0x0, @tid=r3}) prctl$PR_SCHED_CORE(0x48, 0x0, 0x0, 0x1, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000300)={0x0, 0x4, 0x3, 0x8, 0x6, 0xbea6}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) preadv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/63, 0x3f}], 0x20, 0x5, 0x6) 18.740505555s ago: executing program 2 (id=339): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) read$char_usb(r4, 0x0, 0x0) 16.234859833s ago: executing program 2 (id=340): r0 = msgget$private(0x0, 0x0) msgctl$IPC_SET(r0, 0x1, &(0x7f0000258f88)={{0x1, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0xfffffffffffffdc3, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x10000}, 0x50) msgsnd(r0, &(0x7f0000000340)=ANY=[@ANYBLOB='n'], 0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 16.033859483s ago: executing program 4 (id=341): openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r0 = openat$vcs(0xffffff9c, 0x0, 0x50040, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000240)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001800010025bd70000000000002001000fe00ff0900000000060015000400000014001680100008800c0003800500010002"], 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$qrtr(0x2a, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 14.165147202s ago: executing program 4 (id=342): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x48) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) pwrite64(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x2f70000) socket$netlink(0x10, 0x3, 0x15) kcmp$KCMP_EPOLL_TFD(r1, r1, 0x7, r0, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x1}) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) pipe(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) userfaultfd(0x80400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) r5 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r6, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0001000200"], 0x8) 13.231098584s ago: executing program 2 (id=343): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtclass={0x24, 0x28, 0x5ea11b84c59b353c, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0xa, 0x10}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 11.494727419s ago: executing program 4 (id=344): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) fsopen(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/timers\x00', 0x0, 0x0) read$char_usb(r4, &(0x7f00000001c0)=""/4068, 0xfe4) 10.048541738s ago: executing program 3 (id=345): socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="180900000000000000000000000000001812", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r0, &(0x7f0000000780)}, 0x20) 9.851918928s ago: executing program 2 (id=346): kexec_load(0x3, 0x6, &(0x7f00000005c0)=[{&(0x7f0000000000), 0x0, 0x5, 0xff}, {&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420dbcdea31d52854783d6952a2a7b10f3e45715203107f8ce516d99c8c7db918e0989ef123cc524fa8ae0af5c952de542a26817", 0xcc, 0x5, 0xffffffff}, {0x0, 0x0, 0x5, 0x4}, {0x0, 0x0, 0x7, 0x2}, {0x0, 0x0, 0x6, 0xfffffffffffffffa}, {&(0x7f00000004c0)="fd7cd1d51fb9987e67d12dded82fd30b5e7675f10da30291367bede16a4fe296961baf3caee5bd5c0d76b25c3de77c56ddefc936fa712ec3d7e51f4b16e682d3ee59b2abf6c05927c1edb91d54f6", 0x4e, 0x5, 0x6}], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000880)=@newtfilter={0x3c, 0x2c, 0x300, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x1e}, {0xe, 0xa}, {0xb, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x6}}, @TCA_RATE={0x6, 0x5, {0x8, 0x9}}, @TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000090}, 0x4048010) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000500)="4274aa814c8f6ea8d8db43", 0xb}, {&(0x7f0000000280)="da3b7d7035cdbd35bccc23a2f8164fe26ad17c1668bf60cc412d60d7b02fe70f0d4c385a653d469c0888c116c5e9393ca029e477f71c7707c0e59c992ef8bb", 0x3f}, {&(0x7f0000000740)="747516464293f8e8eec3ccb7dd473a382a0d368ad8a1242abe3b11d915f3eb582e10ff9b8afa9a3d6fa9075032a573688f84e342bf19f200379d5291489fa5151a46ed483044e784cb8f430cbcd5a6145d72a2d2b2b6aa78add2ab0812de906e5545585d6aadca938d5a62632604101886bd45bc15550815c5dcec420b547b43f88b56489e54d47307371d68817c7eca00a16bce0ea949", 0x97}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x5, 0x12) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836c", 0xf90}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 8.323856217s ago: executing program 4 (id=347): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="be", 0xfffffd0c}], 0x1, 0x0, 0x0, 0x4080}, 0x8000) 8.04761221s ago: executing program 3 (id=348): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000003c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000fc0)={{{@in6=@private2, @in6=@private2}}, {{@in6=@mcast1}, 0x0, @in6=@private2}}, &(0x7f0000000280)=0xe8) 6.159818493s ago: executing program 3 (id=349): syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x4e22, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffc, "7b4b143b7461fd777b1c012bd14efbfcdb8f080c26a048a5eab88c82b8af00", "584cb72649a50f2dbc4befb57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x4606, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) fchmod(r1, 0x1c2) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, 0x0, 0x4008014) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9c000000"], 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x4000001) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140), 0x80482, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') socket(0x2b, 0x80801, 0x1) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) pselect6(0x40, &(0x7f00000001c0)={0x3, 0x2, 0x3, 0x1, 0x1, 0x0, 0xffffffffffffff1b, 0x77}, 0x0, &(0x7f0000000280)={0xe2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80000003, 0x1}, 0x0, 0x0) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fcdbdf2507"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x4000010) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000f40), r1) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000564b5aae5ff10bd400180000000400000002000002000000000000000000000d0000000000005f0000000100"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000001000000000000000018000095000a0000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010067bd7000fbdbdf25010000005c00018014000300fe80000000000a0000000000000000bb060001000a00000008000600777272000c0007002e000000050000000800090027150000060002001100000008000b00736970000800080009000000060004"], 0x70}}, 0x20008800) r6 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r6, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x106) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x3, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000020021000000000002000000850000162000000085000000050000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) 5.809972043s ago: executing program 2 (id=350): syz_emit_ethernet(0x56, &(0x7f0000004180)={@broadcast, @multicast, @val={@val, {0x8100, 0x0, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "000001", 0x18, 0x3a, 0xff, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, {[], @ndisc_na={0x88, 0x0, 0x0, 0xc0, '\x00', @empty}}}}}}, 0x0) r0 = syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000000)) r2 = syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_disconnect(r2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) read$char_usb(r1, &(0x7f0000000180)=""/143, 0x8f) syz_usb_disconnect(r0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000003000/0x4000)=nil, 0x4000}) landlock_restrict_self(0xffffffffffffffff, 0x9) 2.074427304s ago: executing program 4 (id=351): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtclass={0x24, 0x28, 0x5ea11b84c59b353c, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0xa, 0x10}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007e40)=[{0x0, 0x0, &(0x7f0000003740)=[{&(0x7f00000000c0)="4789d3aefc1a4d03345aed327be33c", 0xf}], 0x1, 0x0, 0x0, 0x20000000}], 0x1, 0x20040894) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20010840) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004d968119f68f58d94773b9ab884100003c"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x1e0, 0x0, 0x32, 0x1, 0x20, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$FBIOBLANK(r0, 0x4611, 0x3) ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000380)={0xd07, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.212640562s ago: executing program 3 (id=352): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)=[{0x0}], 0x1}, 0x45) recvmsg$unix(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x2082) sendmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000140)="0df5", 0x2}], 0x1, 0x0, 0x0, 0x11d0}, 0x885) 1.211340331s ago: executing program 2 (id=353): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/asound/seq/clients\x00', 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000001c0), &(0x7f0000000240)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000001800010025bd70000000000002001000fe00ff0900000000060015000400000014001680100008800c0003800500010002"], 0x38}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$qrtr(0x2a, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000000c0)={0x0, 0x500, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) umount2(0x0, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@private1}}, &(0x7f00000002c0)=0xe8) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000801, r4, &(0x7f0000000300)={0x405b, 0x0, 0x2, 0x6, 0x7, 0x1, 0xfff, 0x7fffffffffffffff, 0x1}) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f) 0s ago: executing program 3 (id=354): r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) getpid() r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000200)={0x9, 0x2, 0x80000000, 0x5, '\x00', 0x13}) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0xc1105511, &(0x7f0000000040)={0x9, 0x0, 0x40, 0x10000, 'syz1\x00', 0x4000000}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0xc1105511, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000340)={{r3}, 0x0, 0x0, 0x9, 0x0, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='comm\x00') writev(r4, &(0x7f0000001240)=[{&(0x7f0000001380)="a3", 0x1}, {0x0, 0x32}], 0x2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.6' (ED25519) to the list of known hosts. [ 71.889341][ T5589] cgroup: Unknown subsys name 'net' [ 72.150463][ T5589] cgroup: Unknown subsys name 'cpuset' [ 72.196384][ T5589] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.795425][ T5589] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.046884][ T5604] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.050051][ T5604] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.072825][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.083193][ T5604] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.099025][ T5604] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.099177][ T5604] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.101312][ T5608] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.102178][ T5604] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.102454][ T5604] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.103265][ T5604] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.209039][ T59] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.234416][ T5604] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.244368][ T5604] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.258734][ T5604] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.260737][ T5608] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.288224][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.290914][ T5621] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.315001][ T4917] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.315414][ T4917] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.362559][ T4917] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.371229][ T4917] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.380939][ T5609] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.382458][ T5609] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.396472][ T5609] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.404775][ T59] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.226982][ T59] Bluetooth: hci1: command tx timeout [ 78.226987][ T5604] Bluetooth: hci0: command tx timeout [ 78.386790][ T5604] Bluetooth: hci2: command tx timeout [ 78.415652][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.416031][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.416407][ T5601] bridge_slave_0: entered allmulticast mode [ 78.419547][ T5601] bridge_slave_0: entered promiscuous mode [ 78.428973][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.429080][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.429509][ T5602] bridge_slave_0: entered allmulticast mode [ 78.435281][ T5602] bridge_slave_0: entered promiscuous mode [ 78.472033][ T5604] Bluetooth: hci3: command tx timeout [ 78.472040][ T59] Bluetooth: hci4: command tx timeout [ 78.484073][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.484156][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.484256][ T5601] bridge_slave_1: entered allmulticast mode [ 78.485625][ T5601] bridge_slave_1: entered promiscuous mode [ 78.512691][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.512790][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.512892][ T5602] bridge_slave_1: entered allmulticast mode [ 78.514232][ T5602] bridge_slave_1: entered promiscuous mode [ 78.653745][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.657072][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.676792][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.676910][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.677057][ T5611] bridge_slave_0: entered allmulticast mode [ 78.678800][ T5611] bridge_slave_0: entered promiscuous mode [ 78.699988][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.704127][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.704375][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.704481][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.704614][ T5612] bridge_slave_0: entered allmulticast mode [ 78.708023][ T5612] bridge_slave_0: entered promiscuous mode [ 78.713278][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.713391][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.713536][ T5611] bridge_slave_1: entered allmulticast mode [ 78.715805][ T5611] bridge_slave_1: entered promiscuous mode [ 78.778483][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.778592][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.778940][ T5612] bridge_slave_1: entered allmulticast mode [ 78.781241][ T5612] bridge_slave_1: entered promiscuous mode [ 78.806282][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.806392][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.806851][ T5613] bridge_slave_0: entered allmulticast mode [ 78.812307][ T5613] bridge_slave_0: entered promiscuous mode [ 78.868311][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.868421][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.868878][ T5613] bridge_slave_1: entered allmulticast mode [ 78.870399][ T5613] bridge_slave_1: entered promiscuous mode [ 78.872658][ T5601] team0: Port device team_slave_0 added [ 78.874730][ T5602] team0: Port device team_slave_0 added [ 79.039441][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.057520][ T5601] team0: Port device team_slave_1 added [ 79.059204][ T5602] team0: Port device team_slave_1 added [ 79.061499][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.063667][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.117216][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.136059][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.187578][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.188530][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.188539][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.188553][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.190253][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.190265][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.190288][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.208844][ T5611] team0: Port device team_slave_0 added [ 79.230731][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.230747][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.230772][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.234367][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.234382][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.234406][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.238570][ T5612] team0: Port device team_slave_0 added [ 79.242025][ T5611] team0: Port device team_slave_1 added [ 79.309588][ T5612] team0: Port device team_slave_1 added [ 79.348239][ T5613] team0: Port device team_slave_0 added [ 79.400124][ T5613] team0: Port device team_slave_1 added [ 79.419331][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.419345][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.419368][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.474755][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.474768][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.474781][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.482695][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.482711][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.482734][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.559953][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.559969][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.559993][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.563367][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.563381][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.563404][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.577124][ T5601] hsr_slave_0: entered promiscuous mode [ 79.578501][ T5601] hsr_slave_1: entered promiscuous mode [ 79.589988][ T5602] hsr_slave_0: entered promiscuous mode [ 79.591122][ T5602] hsr_slave_1: entered promiscuous mode [ 79.592006][ T5602] debugfs: 'hsr0' already exists in 'hsr' [ 79.592107][ T5602] Cannot create hsr debugfs directory [ 79.611735][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.611748][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.611772][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.777321][ T5611] hsr_slave_0: entered promiscuous mode [ 79.778060][ T5611] hsr_slave_1: entered promiscuous mode [ 79.778581][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 79.778600][ T5611] Cannot create hsr debugfs directory [ 79.815650][ T5612] hsr_slave_0: entered promiscuous mode [ 79.818592][ T5612] hsr_slave_1: entered promiscuous mode [ 79.819368][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 79.819389][ T5612] Cannot create hsr debugfs directory [ 79.861077][ T5613] hsr_slave_0: entered promiscuous mode [ 79.861979][ T5613] hsr_slave_1: entered promiscuous mode [ 79.862450][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 79.862469][ T5613] Cannot create hsr debugfs directory [ 80.306041][ T5604] Bluetooth: hci1: command tx timeout [ 80.306185][ T59] Bluetooth: hci0: command tx timeout [ 80.466283][ T59] Bluetooth: hci2: command tx timeout [ 80.545977][ T59] Bluetooth: hci3: command tx timeout [ 80.557490][ T59] Bluetooth: hci4: command tx timeout [ 80.922503][ T5601] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.978502][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.983892][ T5601] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 81.010270][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.015531][ T5601] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 81.059871][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.079641][ T5601] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 81.120563][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.233534][ T5611] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.261854][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.269111][ T5611] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.299659][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.302873][ T5611] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.339058][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.361885][ T5611] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.399316][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.525289][ T5612] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 81.558373][ T9] cfg80211: failed to load regulatory.db [ 81.589508][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.647071][ T5612] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 81.681550][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.717081][ T5612] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 81.781298][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.830724][ T5612] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 81.859233][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.976894][ T5613] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.004258][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.020620][ T5613] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.060769][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.090258][ T5613] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.130384][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.158553][ T5613] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.189812][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.290597][ T5602] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.320918][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 82.338412][ T5602] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.378290][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 82.383378][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.384598][ T5602] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.386061][ T5604] Bluetooth: hci1: command tx timeout [ 82.386157][ T59] Bluetooth: hci0: command tx timeout [ 82.421999][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 82.428492][ T5602] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.458603][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 82.546025][ T59] Bluetooth: hci2: command tx timeout [ 82.555457][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.558852][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.606482][ T1188] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.606682][ T1188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.626054][ T5604] Bluetooth: hci3: command tx timeout [ 82.626135][ T59] Bluetooth: hci4: command tx timeout [ 82.671586][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.671813][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.701621][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.732351][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.735534][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.750021][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.789719][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.789846][ T1188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.851167][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.889506][ T3719] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.889622][ T3719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.920055][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.946475][ T3719] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.946661][ T3719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.051398][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.091567][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.157901][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.159048][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.228808][ T1188] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.228933][ T1188] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.324921][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.378000][ T3719] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.378959][ T3719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.496739][ T66] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.496810][ T66] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.288770][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.390763][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.466309][ T5604] Bluetooth: hci1: command tx timeout [ 84.466352][ T59] Bluetooth: hci0: command tx timeout [ 84.622421][ T5601] veth0_vlan: entered promiscuous mode [ 84.626066][ T59] Bluetooth: hci2: command tx timeout [ 84.706194][ T5604] Bluetooth: hci3: command tx timeout [ 84.706239][ T59] Bluetooth: hci4: command tx timeout [ 84.735717][ T5611] veth0_vlan: entered promiscuous mode [ 84.752280][ T5601] veth1_vlan: entered promiscuous mode [ 84.781755][ T5611] veth1_vlan: entered promiscuous mode [ 84.982741][ T5601] veth0_macvtap: entered promiscuous mode [ 84.989487][ T5611] veth0_macvtap: entered promiscuous mode [ 85.001535][ T5601] veth1_macvtap: entered promiscuous mode [ 85.012906][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.029285][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.030932][ T5611] veth1_macvtap: entered promiscuous mode [ 85.120234][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.153857][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.179592][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.232161][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.238632][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.251258][ T3533] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.299083][ T3533] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.303809][ T3533] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.310504][ T3533] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.375894][ T3533] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.395133][ T3533] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.407953][ T5613] veth0_vlan: entered promiscuous mode [ 85.408506][ T3533] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.522658][ T3533] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.742304][ T5613] veth1_vlan: entered promiscuous mode [ 85.923864][ T3739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.923888][ T3739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.997965][ T3739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.997981][ T3739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.000856][ T5602] veth0_vlan: entered promiscuous mode [ 86.080015][ T1188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.080034][ T1188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.126464][ T5602] veth1_vlan: entered promiscuous mode [ 86.130770][ T5612] veth0_vlan: entered promiscuous mode [ 86.151282][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.151299][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.164642][ T5613] veth0_macvtap: entered promiscuous mode [ 86.215626][ T5613] veth1_macvtap: entered promiscuous mode [ 86.241736][ T5612] veth1_vlan: entered promiscuous mode [ 86.303726][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.328206][ T5602] veth0_macvtap: entered promiscuous mode [ 86.335463][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.354585][ T5602] veth1_macvtap: entered promiscuous mode [ 86.418748][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.422287][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.443795][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.445207][ T5612] veth0_macvtap: entered promiscuous mode [ 86.480895][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.544359][ T5612] veth1_macvtap: entered promiscuous mode [ 86.599704][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.689791][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.840847][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.860195][ T3533] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.893240][ T3533] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.908093][ T3533] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.943948][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.944021][ T3533] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.175880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.195865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.205877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.215864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.225864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.235880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.245864][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.265860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.275860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 87.285863][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 89.759118][ T5802] Bluetooth: MGMT ver 1.23 [ 89.857851][ T3719] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.877047][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.877065][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.939851][ T3719] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.008393][ T3719] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.056088][ T3719] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.337258][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.337277][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.669570][ T3719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.669589][ T3719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.814214][ T3719] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.814234][ T3719] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.382309][ T152] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.382322][ T152] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.540659][ T3533] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.540679][ T3533] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.910997][ T5824] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 100.798350][ T5846] comedi: No check for data length of config insn id 5 is implemented [ 100.798368][ T5846] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 100.798380][ T5846] comedi: Assuming n=36586 is correct [ 103.976234][ T5603] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.996587][ T5699] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.176010][ T5603] usb 4-1: Using ep0 maxpacket: 16 [ 104.230750][ T5603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 104.284883][ T5603] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 104.284901][ T5603] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.284911][ T5603] usb 4-1: Product: syz [ 104.284918][ T5603] usb 4-1: Manufacturer: syz [ 104.284925][ T5603] usb 4-1: SerialNumber: syz [ 104.453143][ T5699] usb 1-1: Using ep0 maxpacket: 16 [ 104.570478][ T5699] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 104.600142][ T5699] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 104.600159][ T5699] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.600169][ T5699] usb 1-1: Product: syz [ 104.600176][ T5699] usb 1-1: Manufacturer: syz [ 104.600184][ T5699] usb 1-1: SerialNumber: syz [ 104.709068][ T5699] usb 1-1: config 0 descriptor?? [ 104.904348][ T5603] usb 4-1: config 0 descriptor?? [ 104.988155][ T5603] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 104.988195][ T5603] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 104.994414][ T5699] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 104.994454][ T5699] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 105.419249][ T5699] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 106.489129][ T5603] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 106.608292][ C1] raw-gadget.0 gadget.0: ignoring, device is not running [ 106.718859][ T5699] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 106.718890][ T5699] em28xx 1-1:0.0: board has no eeprom [ 106.733739][ T5603] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 106.733766][ T5603] em28xx 4-1:0.0: board has no eeprom [ 106.885919][ T5699] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 106.885957][ T5699] em28xx 1-1:0.0: dvb set to bulk mode. [ 106.887740][ T31] em28xx 1-1:0.0: Binding DVB extension [ 107.130594][ T5603] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 107.130626][ T5603] em28xx 4-1:0.0: dvb set to bulk mode. [ 107.203635][ T5699] usb 1-1: USB disconnect, device number 2 [ 107.219129][ T5699] em28xx 1-1:0.0: Disconnecting em28xx [ 107.301013][ T31] em28xx 1-1:0.0: Registering input extension [ 107.313410][ T992] em28xx 4-1:0.0: Binding DVB extension [ 107.333315][ T5603] usb 4-1: USB disconnect, device number 2 [ 108.899302][ T5603] em28xx 4-1:0.0: Disconnecting em28xx [ 109.024921][ T992] em28xx 4-1:0.0: Registering input extension [ 109.051777][ T5699] em28xx 1-1:0.0: Closing input extension [ 109.052700][ T5603] em28xx 4-1:0.0: Closing input extension [ 110.881768][ T5603] em28xx 4-1:0.0: Freeing device [ 110.935488][ T5699] em28xx 1-1:0.0: Freeing device [ 116.537175][ T5895] syz.3.27 (5895) used greatest stack depth: 18072 bytes left [ 122.286683][ T5932] comedi: No check for data length of config insn id 5 is implemented [ 122.286718][ T5932] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 122.286730][ T5932] comedi: Assuming n=36584 is correct [ 122.296039][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 122.845895][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 122.859848][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 123.091139][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 123.091157][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.091168][ T9] usb 3-1: Product: syz [ 123.091175][ T9] usb 3-1: Manufacturer: syz [ 123.091182][ T9] usb 3-1: SerialNumber: syz [ 123.176196][ T9] usb 3-1: config 0 descriptor?? [ 123.263337][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 123.263365][ T9] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 124.979411][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 125.115972][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 125.294796][ T31] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 125.294825][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.294844][ T31] usb 5-1: Product: syz [ 125.294858][ T31] usb 5-1: Manufacturer: syz [ 125.294865][ T31] usb 5-1: SerialNumber: syz [ 125.377688][ T31] usb 5-1: config 0 descriptor?? [ 125.648999][ T9] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 125.649027][ T9] em28xx 3-1:0.0: board has no eeprom [ 125.755967][ T9] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 125.755993][ T9] em28xx 3-1:0.0: dvb set to bulk mode. [ 125.759643][ T5748] em28xx 3-1:0.0: Binding DVB extension [ 125.795456][ T31] usb 5-1: Firmware: major: 49, minor: 56, hardware type: UNKNOWN (52) [ 125.935121][ T9] usb 3-1: USB disconnect, device number 2 [ 126.000001][ T31] usb 5-1: Firmware: build [ 126.089145][ T5748] em28xx 3-1:0.0: Registering input extension [ 126.126030][ T9] em28xx 3-1:0.0: Disconnecting em28xx [ 126.126050][ T9] em28xx 3-1:0.0: Closing input extension [ 126.228641][ T31] usb 5-1: failed to fetch extended address, random address set [ 126.228736][ T31] usb 5-1: atusb_probe: initialization failed, error = -524 [ 126.254204][ T31] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 126.304675][ T31] usb 5-1: USB disconnect, device number 2 [ 126.450132][ T9] em28xx 3-1:0.0: Freeing device [ 129.980346][ T5968] netlink: 180 bytes leftover after parsing attributes in process `syz.4.44'. [ 132.933841][ T5978] Bluetooth: MGMT ver 1.23 [ 133.174384][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.174476][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.527140][ T59] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 135.531160][ T59] Bluetooth: hci0: command 0x0c1a tx timeout [ 140.506153][ T6010] binder: 6007:6010 ioctl 4018620d 0 returned -22 [ 140.738093][ T5748] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 140.919438][ T5748] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 140.919468][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.919487][ T5748] usb 4-1: Product: syz [ 140.919501][ T5748] usb 4-1: Manufacturer: syz [ 140.919514][ T5748] usb 4-1: SerialNumber: syz [ 141.016413][ T5748] usb 4-1: config 0 descriptor?? [ 141.247459][ T6016] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.61'. [ 141.451960][ T5748] usb 4-1: Firmware: major: 49, minor: 56, hardware type: UNKNOWN (52) [ 142.958859][ T5748] usb 4-1: Firmware: build [ 143.155519][ T5748] usb 4-1: failed to fetch extended address, random address set [ 143.155539][ T5748] usb 4-1: atusb_probe: initialization failed, error = -524 [ 143.159547][ T5748] atusb 4-1:0.0: probe with driver atusb failed with error -524 [ 143.196977][ T5748] usb 4-1: USB disconnect, device number 4 [ 146.957799][ T6033] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 146.957850][ T6033] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 146.957929][ T6033] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 147.298216][ T6033] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 148.423952][ T6033] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 150.598168][ T6064] binder: 6060:6064 ioctl 4018620d 0 returned -22 [ 154.608500][ T6080] binder: 6077:6080 ioctl 4018620d 0 returned -22 [ 155.568676][ T6090] siw: device registration error -23 [ 161.569593][ T6120] binder: 6118:6120 ioctl 4018620d 0 returned -22 [ 163.625975][ T5738] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 163.775939][ T5738] usb 5-1: Using ep0 maxpacket: 16 [ 163.785080][ T5738] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 163.790679][ T5738] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 163.790709][ T5738] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.790729][ T5738] usb 5-1: Product: syz [ 163.790742][ T5738] usb 5-1: Manufacturer: syz [ 163.790756][ T5738] usb 5-1: SerialNumber: syz [ 163.840474][ T5738] usb 5-1: config 0 descriptor?? [ 163.856595][ T5738] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 163.856626][ T5738] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 164.514453][ T5738] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 165.002782][ T5738] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 165.002810][ T5738] em28xx 5-1:0.0: board has no eeprom [ 166.565947][ T5738] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 166.565975][ T5738] em28xx 5-1:0.0: dvb set to bulk mode. [ 166.603682][ T5731] em28xx 5-1:0.0: Binding DVB extension [ 166.646787][ T5738] usb 5-1: USB disconnect, device number 3 [ 166.664152][ T5738] em28xx 5-1:0.0: Disconnecting em28xx [ 166.772004][ T5731] em28xx 5-1:0.0: Registering input extension [ 166.772218][ T5738] em28xx 5-1:0.0: Closing input extension [ 166.950798][ T5738] em28xx 5-1:0.0: Freeing device [ 176.805980][ T5748] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 178.003058][ T5748] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 178.003085][ T5748] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 178.003146][ T5748] usb 4-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x65, changing to 0x5 [ 178.003174][ T5748] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x5 has invalid maxpacket 27439, setting to 1024 [ 178.003200][ T5748] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x5 has invalid maxpacket 1024 [ 178.127788][ T5748] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 178.127806][ T5748] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.127816][ T5748] usb 4-1: Product: syz [ 178.127824][ T5748] usb 4-1: Manufacturer: syz [ 178.127831][ T5748] usb 4-1: SerialNumber: syz [ 178.585505][ T6182] vlan0: entered promiscuous mode [ 179.601245][ T5748] usb 4-1: 0:2 : does not exist [ 181.390739][ T5748] usb 4-1: USB disconnect, device number 5 [ 183.689426][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 186.651275][ T6226] binder: 6224:6226 ioctl 4018620d 0 returned -22 [ 190.729424][ T6247] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.127'. [ 194.925716][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.925756][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.935644][ T6296] Bluetooth: hci1: command 0x0406 tx timeout [ 202.949131][ T6296] Bluetooth: hci2: command 0x0406 tx timeout [ 202.949333][ T6296] Bluetooth: hci0: command 0x0c1a tx timeout [ 202.949356][ T6296] Bluetooth: hci4: command 0x0406 tx timeout [ 202.949505][ T6296] Bluetooth: hci3: command 0x0406 tx timeout [ 206.518084][ T5609] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 206.518826][ T5609] Bluetooth: hci0: command 0x0c1a tx timeout [ 207.691021][ T6322] netlink: 180 bytes leftover after parsing attributes in process `syz.0.141'. [ 228.385865][ T5621] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 228.386152][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 239.686047][ T5730] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 241.314784][ T5730] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 241.314809][ T5730] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 241.314868][ T5730] usb 2-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x65, changing to 0x5 [ 241.314895][ T5730] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x5 has invalid maxpacket 27439, setting to 1024 [ 241.314921][ T5730] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x5 has invalid maxpacket 1024 [ 241.361803][ T5730] usb 2-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 241.361832][ T5730] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.361851][ T5730] usb 2-1: Product: syz [ 241.361864][ T5730] usb 2-1: Manufacturer: syz [ 241.361877][ T5730] usb 2-1: SerialNumber: syz [ 242.410377][ T6427] vlan0: entered promiscuous mode [ 242.769752][ T5730] usb 2-1: 0:2 : does not exist [ 244.662137][ T5730] usb 2-1: USB disconnect, device number 2 [ 249.195413][ T6465] siw: device registration error -23 [ 252.633661][ T6480] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.185'. [ 255.931130][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.931198][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.856271][ T6503] binder: 6500:6503 ioctl 4018620d 0 returned -22 [ 277.116169][ T5748] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 277.268837][ T5748] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.268864][ T5748] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 277.268922][ T5748] usb 3-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x65, changing to 0x5 [ 277.269002][ T5748] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x5 has invalid maxpacket 27439, setting to 1024 [ 277.269028][ T5748] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x5 has invalid maxpacket 1024 [ 277.331294][ T5748] usb 3-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 277.331322][ T5748] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.331341][ T5748] usb 3-1: Product: syz [ 277.331354][ T5748] usb 3-1: Manufacturer: syz [ 277.331367][ T5748] usb 3-1: SerialNumber: syz [ 278.882976][ T6560] vlan0: entered promiscuous mode [ 279.050160][ T5748] usb 3-1: 0:2 : does not exist [ 279.150660][ T5748] usb 3-1: USB disconnect, device number 3 [ 280.760993][ T5826] udevd[5826]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 283.905962][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 284.068145][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 284.068171][ T9] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 284.068229][ T9] usb 1-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x65, changing to 0x5 [ 284.068255][ T9] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x5 has invalid maxpacket 27439, setting to 1024 [ 284.068280][ T9] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x5 has invalid maxpacket 1024 [ 284.129055][ T9] usb 1-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice= 0.40 [ 284.129084][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.129104][ T9] usb 1-1: Product: syz [ 284.129117][ T9] usb 1-1: Manufacturer: syz [ 284.129131][ T9] usb 1-1: SerialNumber: syz [ 287.874754][ T9] usb 1-1: 0:2 : does not exist [ 288.028249][ T6600] process 'syz.3.215' launched './file1' with NULL argv: empty string added [ 288.138315][ T9] usb 1-1: USB disconnect, device number 3 [ 304.037944][ T6654] netlink: 28 bytes leftover after parsing attributes in process `syz.4.232'. [ 304.099461][ T6657] siw: device registration error -23 [ 306.714643][ T6671] siw: device registration error -23 [ 309.085894][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 309.255960][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 309.258313][ T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 309.258338][ T9] usb 5-1: config 0 has no interface number 0 [ 309.258378][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 309.258399][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 309.258422][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 309.258444][ T9] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 309.258482][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 309.258502][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.751917][ T9] usb 5-1: config 0 descriptor?? [ 310.961336][ T9] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 311.317795][ T5738] usb 5-1: USB disconnect, device number 4 [ 311.317966][ C0] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 313.355315][ T5738] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 317.923196][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.923243][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.941500][ T6717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.249'. [ 319.024285][ T6718] siw: device registration error -23 [ 335.546113][ T6772] binder: 6770:6772 ioctl 4018620d 0 returned -22 [ 339.297604][ T6785] netlink: 16 bytes leftover after parsing attributes in process `syz.2.268'. [ 343.976307][ T6795] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.273'. [ 346.318908][ T821] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 346.476870][ T821] usb 4-1: Using ep0 maxpacket: 8 [ 346.478442][ T821] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 346.478457][ T821] usb 4-1: config 0 has no interface number 0 [ 346.478479][ T821] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 346.478492][ T821] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 346.478504][ T821] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 346.478517][ T821] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 346.478538][ T821] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 346.478550][ T821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.545870][ T5609] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 346.545880][ T5621] Bluetooth: hci0: command 0x0c1a tx timeout [ 346.608642][ T821] usb 4-1: config 0 descriptor?? [ 346.630266][ T821] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 347.608882][ T9] usb 4-1: USB disconnect, device number 6 [ 347.608974][ C1] ldusb 4-1:0.55: usb_submit_urb failed (-19) [ 347.651701][ T9] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 347.673592][ T6812] ldusb: No device or device unplugged -19 [ 351.670371][ T6829] binder: 6828:6829 ioctl 4018620d 0 returned -22 [ 367.612961][ T5621] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 367.655215][ T5621] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 367.663568][ T5621] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 367.674401][ T5621] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 367.714679][ T5621] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 369.745960][ T5621] Bluetooth: hci5: command tx timeout [ 369.887618][ T6893] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.292'. [ 371.879734][ T5621] Bluetooth: hci5: command tx timeout [ 373.910356][ T5621] Bluetooth: hci5: command tx timeout [ 374.966289][ T5609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 374.993510][ T5609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 374.998095][ T5609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 374.999310][ T5609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 375.000054][ T5609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 376.525996][ T5609] Bluetooth: hci5: command tx timeout [ 377.955898][ T5609] Bluetooth: hci6: command tx timeout [ 378.488096][ T1337] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.488163][ T1337] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.285805][ T5609] Bluetooth: hci6: command tx timeout [ 380.310835][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.004637][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.431405][ T5609] Bluetooth: hci6: command tx timeout [ 384.476108][ T5609] Bluetooth: hci6: command tx timeout [ 384.804663][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.007582][ T6878] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.007740][ T6878] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.007915][ T6878] bridge_slave_0: entered allmulticast mode [ 385.018947][ T6878] bridge_slave_0: entered promiscuous mode [ 385.104660][ T6878] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.114552][ T6878] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.114774][ T6878] bridge_slave_1: entered allmulticast mode [ 385.139062][ T6878] bridge_slave_1: entered promiscuous mode [ 386.838586][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.148476][ T6878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.207404][ T6878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.938152][ T6878] team0: Port device team_slave_0 added [ 388.984912][ T6878] team0: Port device team_slave_1 added [ 389.573905][ T6878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.573922][ T6878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.573946][ T6878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 389.648579][ T6878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 389.648601][ T6878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 389.648627][ T6878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.643736][ T6995] netlink: 8 bytes leftover after parsing attributes in process `syz.4.309'. [ 391.896463][ T6878] hsr_slave_0: entered promiscuous mode [ 391.900838][ T6878] hsr_slave_1: entered promiscuous mode [ 391.906817][ T6878] debugfs: 'hsr0' already exists in 'hsr' [ 391.906842][ T6878] Cannot create hsr debugfs directory [ 393.843407][ T49] bridge_slave_1: left allmulticast mode [ 393.843557][ T49] bridge_slave_1: left promiscuous mode [ 393.887423][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.082151][ T49] bridge_slave_0: left allmulticast mode [ 394.082173][ T49] bridge_slave_0: left promiscuous mode [ 394.082340][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.746286][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 395.344459][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.2.314'. [ 396.255902][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 396.261629][ T9] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 396.261656][ T9] usb 5-1: config 0 has no interface number 0 [ 396.261704][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 396.261776][ T9] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 396.261802][ T9] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 396.261827][ T9] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 396.261904][ T9] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 396.261927][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.373307][ T9] usb 5-1: config 0 descriptor?? [ 396.487073][ T9] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 397.138106][ T5730] usb 5-1: USB disconnect, device number 5 [ 397.138215][ C1] ldusb 5-1:0.55: usb_submit_urb failed (-19) [ 397.261495][ T5730] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 397.262152][ T7006] ldusb: No device or device unplugged -19 [ 401.697053][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.730683][ T1193] smbdirect: ib_dev[syz1] removed [ 401.837700][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.899032][ T49] bond0 (unregistering): Released all slaves [ 402.240225][ T7036] binder: 7032:7036 ioctl 4018620d 0 returned -22 [ 403.722405][ T7039] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.324'. [ 404.141855][ T7041] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.325'. [ 405.989006][ T6928] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.989118][ T6928] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.989275][ T6928] bridge_slave_0: entered allmulticast mode [ 406.030986][ T6928] bridge_slave_0: entered promiscuous mode [ 406.527021][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 406.582417][ T6928] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.582577][ T6928] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.582800][ T6928] bridge_slave_1: entered allmulticast mode [ 406.612799][ T6928] bridge_slave_1: entered promiscuous mode [ 406.742887][ T9] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 406.742915][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.742934][ T9] usb 3-1: Product: syz [ 406.742947][ T9] usb 3-1: Manufacturer: syz [ 406.742961][ T9] usb 3-1: SerialNumber: syz [ 406.844926][ T9] usb 3-1: config 0 descriptor?? [ 408.272403][ T9] usb 3-1: Firmware version (0.0) predates our first public release. [ 408.272435][ T9] usb 3-1: Please update to version 0.2 or newer [ 408.885263][ T6928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 409.096367][ T6928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 409.132604][ T5263] 8021q: adding VLAN 0 to HW filter on device eth1 [ 409.315591][ T6928] team0: Port device team_slave_0 added [ 409.332991][ T6928] team0: Port device team_slave_1 added [ 409.375485][ T5738] usb 3-1: USB disconnect, device number 4 [ 411.052969][ T49] hsr_slave_0: left promiscuous mode [ 411.093541][ T49] hsr_slave_1: left promiscuous mode [ 411.100450][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.100581][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.349366][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.349425][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.609038][ T49] veth1_macvtap: left promiscuous mode [ 411.610052][ T49] veth0_macvtap: left promiscuous mode [ 411.612300][ T49] veth1_vlan: left promiscuous mode [ 411.716482][ T7091] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.333'. [ 412.091298][ T7093] netlink: 260 bytes leftover after parsing attributes in process `syz.2.334'. [ 417.707678][ T49] team0 (unregistering): Port device team_slave_1 removed [ 417.777696][ T49] team0 (unregistering): Port device team_slave_0 removed [ 418.027931][ T7117] siw: device registration error -23 [ 420.498487][ T6928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.498503][ T6928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.498528][ T6928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.585587][ T6928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.585603][ T6928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 420.585628][ T6928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.228283][ T7107] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 422.228306][ T7107] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 422.228344][ T7107] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 422.344928][ T7107] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 422.768957][ T6878] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 422.832889][ T6878] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.902612][ T6878] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 422.959921][ T6878] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 423.115519][ T6928] hsr_slave_0: entered promiscuous mode [ 423.152190][ T6928] hsr_slave_1: entered promiscuous mode [ 423.163922][ T6878] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 423.308886][ T6878] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.333262][ T6878] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 423.425433][ T6878] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.745592][ T7148] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.343'. [ 423.843487][ T5263] 8021q: adding VLAN 0 to HW filter on device eth2 [ 425.937215][ T5621] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 425.973131][ T5621] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 425.979873][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 425.981726][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 425.982573][ T5621] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 428.146286][ T5609] Bluetooth: hci0: command tx timeout [ 428.213727][ T147] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.546354][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 428.695843][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 428.698164][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 428.698189][ T9] usb 3-1: config 0 has no interface number 0 [ 428.698231][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 428.698254][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 428.698279][ T9] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 428.698304][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 428.698342][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 428.698365][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.789684][ T9] usb 3-1: config 0 descriptor?? [ 428.823255][ T9] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 428.906762][ T5263] 8021q: adding VLAN 0 to HW filter on device eth3 [ 429.600748][ T5730] usb 3-1: USB disconnect, device number 5 [ 429.600945][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 429.693329][ T147] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.908884][ T7196] netlink: 260 bytes leftover after parsing attributes in process `syz.3.349'. [ 430.162200][ T5730] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 430.225779][ T5609] Bluetooth: hci0: command tx timeout [ 432.305860][ T5609] Bluetooth: hci0: command tx timeout [ 432.532175][ T147] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.680499][ T6928] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 432.811879][ T6928] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 432.980705][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 433.027500][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 433.030277][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 433.034536][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 433.035373][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 433.512692][ T147] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.079827][ T5609] ================================================================== [ 434.079838][ T5609] BUG: KASAN: vmalloc-out-of-bounds in __list_del_entry_valid_or_report+0xb5/0x190 [ 434.079864][ T5609] Read of size 8 at addr ffffc9000f439008 by task kworker/u9:4/5609 [ 434.079873][ T5609] [ 434.079888][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 434.079902][ T5609] Tainted: [L]=SOFTLOCKUP [ 434.079906][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 434.079912][ T5609] Workqueue: hci4 hci_rx_work [ 434.079942][ T5609] Call Trace: [ 434.079946][ T5609] [ 434.079951][ T5609] dump_stack_lvl+0xe8/0x150 [ 434.079963][ T5609] print_address_description+0x55/0x1e0 [ 434.079975][ T5609] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 434.079994][ T5609] print_report+0x58/0x70 [ 434.080003][ T5609] kasan_report+0x117/0x150 [ 434.080015][ T5609] ? rt_spin_lock+0x20e/0x400 [ 434.080027][ T5609] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 434.080041][ T5609] __list_del_entry_valid_or_report+0xb5/0x190 [ 434.080054][ T5609] kcov_remote_start+0x2af/0x710 [ 434.080065][ T5609] hci_rx_work+0x10f/0x1040 [ 434.080079][ T5609] ? process_scheduled_works+0xa70/0x1860 [ 434.080090][ T5609] process_scheduled_works+0xb5d/0x1860 [ 434.080105][ T5609] ? __pfx_process_scheduled_works+0x10/0x10 [ 434.080116][ T5609] ? assign_work+0x3d5/0x5e0 [ 434.080127][ T5609] worker_thread+0xa53/0xfc0 [ 434.080142][ T5609] kthread+0x388/0x470 [ 434.080154][ T5609] ? __pfx_worker_thread+0x10/0x10 [ 434.080164][ T5609] ? __pfx_kthread+0x10/0x10 [ 434.080175][ T5609] ret_from_fork+0x514/0xb70 [ 434.080187][ T5609] ? __pfx_ret_from_fork+0x10/0x10 [ 434.080197][ T5609] ? __switch_to+0xc79/0x1410 [ 434.080211][ T5609] ? __pfx_kthread+0x10/0x10 [ 434.080223][ T5609] ret_from_fork_asm+0x1a/0x30 [ 434.080238][ T5609] [ 434.080242][ T5609] [ 434.080244][ T5609] The buggy address belongs to a vmalloc virtual mapping [ 434.080254][ T5609] Memory state around the buggy address: [ 434.080260][ T5609] ffffc9000f438f00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 434.080266][ T5609] ffffc9000f438f80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 434.080272][ T5609] >ffffc9000f439000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 434.080277][ T5609] ^ [ 434.080282][ T5609] ffffc9000f439080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 434.080288][ T5609] ffffc9000f439100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 434.080292][ T5609] ================================================================== [ 434.080304][ T5609] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 434.080312][ T5609] CPU: 0 UID: 0 PID: 5609 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 434.080325][ T5609] Tainted: [L]=SOFTLOCKUP [ 434.080328][ T5609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 434.080334][ T5609] Workqueue: hci4 hci_rx_work [ 434.080346][ T5609] Call Trace: [ 434.080350][ T5609] [ 434.080353][ T5609] vpanic+0x56c/0xa60 [ 434.080365][ T5609] ? __pfx_vpanic+0x10/0x10 [ 434.080378][ T5609] panic+0xc5/0xd0 [ 434.080388][ T5609] ? __pfx_panic+0x10/0x10 [ 434.080400][ T5609] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 434.080414][ T5609] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 434.080426][ T5609] check_panic_on_warn+0x89/0xb0 [ 434.080439][ T5609] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 434.080451][ T5609] end_report+0x73/0x170 [ 434.080462][ T5609] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 434.080473][ T5609] kasan_report+0x128/0x150 [ 434.080488][ T5609] ? rt_spin_lock+0x20e/0x400 [ 434.080499][ T5609] ? __list_del_entry_valid_or_report+0xb5/0x190 [ 434.080512][ T5609] __list_del_entry_valid_or_report+0xb5/0x190 [ 434.080525][ T5609] kcov_remote_start+0x2af/0x710 [ 434.080535][ T5609] hci_rx_work+0x10f/0x1040 [ 434.080549][ T5609] ? process_scheduled_works+0xa70/0x1860 [ 434.080559][ T5609] process_scheduled_works+0xb5d/0x1860 [ 434.080575][ T5609] ? __pfx_process_scheduled_works+0x10/0x10 [ 434.080586][ T5609] ? assign_work+0x3d5/0x5e0 [ 434.080599][ T5609] worker_thread+0xa53/0xfc0 [ 434.080614][ T5609] kthread+0x388/0x470 [ 434.080626][ T5609] ? __pfx_worker_thread+0x10/0x10 [ 434.080635][ T5609] ? __pfx_kthread+0x10/0x10 [ 434.080647][ T5609] ret_from_fork+0x514/0xb70 [ 434.080658][ T5609] ? __pfx_ret_from_fork+0x10/0x10 [ 434.080667][ T5609] ? __switch_to+0xc79/0x1410 [ 434.080681][ T5609] ? __pfx_kthread+0x10/0x10 [ 434.080693][ T5609] ret_from_fork_asm+0x1a/0x30 [ 434.080707][ T5609] [ 434.081080][ T5609] Kernel Offset: disabled