last executing test programs: 51.776688667s ago: executing program 1 (id=222): ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r1 = fcntl$dupfd(r0, 0x0, r0) r2 = ioctl$USERFAULTFD_IOC_NEW(r1, 0xaa00) ioctl$UFFDIO_COPY(r2, 0xc028aa03, &(0x7f0000000080)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x3000, 0x1}) r3 = socket$rds(0x15, 0x5, 0x0) syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) r4 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) dup2(r4, r4) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = io_uring_setup(0x16b1, &(0x7f0000000100)={0x0, 0xcba9, 0x40, 0xfffffffe, 0x31b}) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_register$IORING_REGISTER_FILES(r5, 0x2, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1) io_uring_register$IORING_REGISTER_FILES_UPDATE(r5, 0x6, &(0x7f000000aa80)={0x80002, 0x0, &(0x7f0000000040)=[0xffffffffffffffff]}, 0x1) ioctl$UFFDIO_WRITEPROTECT(r4, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={0x0, 0x0, 0x0}, 0x0) 51.464166463s ago: executing program 1 (id=224): socket(0x200000000000011, 0x2, 0xd) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x212241, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000180)={0xc0000, 0x0, {[0x7, 0x1ff, 0x76, 0x2947, 0xb, 0xccb4, 0x6, 0x7fff]}}) sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000000000007000000940400"], 0x18}}], 0x1, 0x44008004) write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000019c0)={'#! ', './file1/../file0'}, 0x14) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000004ff6943b80000000800000014f200000000861f4104bfeacd", 0x20, 0xfffffffffffffffb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xd6, 0x5e, 0x3e, 0x8, 0x711, 0x920, 0xd5b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0xd, 0x80, 0x2, [{{0x9, 0x4, 0x99, 0x80, 0x1, 0x8f, 0xce, 0xef, 0x6, [], [{{0x9, 0x5, 0x5, 0x2, 0x400, 0x1, 0x8, 0x8}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 46.960214219s ago: executing program 1 (id=230): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfec8d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) getpid() setns(0xffffffffffffffff, 0x24020000) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) syz_clone(0x16040000, 0x0, 0x0, 0x0, 0x0, 0x0) 42.338332306s ago: executing program 1 (id=232): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215, 0x10fe0f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0x402, 0x1cc) set_mempolicy(0x4005, &(0x7f0000000300)=0x4, 0x6) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xfffffcebfff, 0x1000, 0x0, 0x1}, 0x20) read$FUSE(r1, 0x0, 0x0) 42.279116493s ago: executing program 1 (id=233): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x7d}}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r5 = fanotify_init(0xf00, 0x0) fanotify_mark(r5, 0x105, 0x40009975, r4, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1) r6 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x80, 0x0}, 0x4000) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480) ioctl$VIDIOC_QUERYMENU(r7, 0xc008561c, &(0x7f0000000000)={0x980900, 0x81, @value=0x327}) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x6040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = getpid() ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'gretap0\x00', 0x0}) r10 = syz_pidfd_open(r9, 0x0) ioctl$VIDIOC_QBUF(r10, 0xc058ff0b, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x10, 0x200, {}, {0x5, 0x8, 0xe, 0x9f, 0x0, 0x7b, "c16599e2"}, 0xabdb, 0x1, {}, 0xbaa}) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES16=r11, @ANYBLOB="000428bd7000ffdbdf25010000000500020002000000050004000500000004000500050002000200000008000800e000000208000b00", @ANYRES32=0x0, @ANYBLOB="0500f73e120b5d24f3c1a8"], 0x48}, 0x1, 0x0, 0x0, 0x4000854}, 0x1) 39.199797846s ago: executing program 1 (id=242): r0 = syz_open_dev$evdev(&(0x7f0000000500), 0x0, 0x200) ioctl$EVIOCSREP(r0, 0x40084503, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0xab, @loopback, 0x10001}, 0x1c) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @loopback, 0x23}, 0x1c) r2 = dup(r1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[], 0x78}, 0x1, 0x0, 0x0, 0x4080}, 0x8080) write$binfmt_script(r2, &(0x7f00000004c0)={'#! ', './file1', [], 0xa, "63c39ca527956af877b295954bf0e0b3752ad1ca36c8"}, 0x21) r3 = socket(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0x4000002}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000280)={@random="cfb14e407d33", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, 'z&-', 0x30, 0x3a, 0xfe, @ipv4={'\x00', '\xff\xff', @multicast2}, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x8001, {0x2, 0x6, "081331", 0x9, 0xff, 0x0, @empty, @loopback}}}}}}}, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0xffffffffffffffa0, 0xfa00, {0xffffffffffffffff, 0x10c}}, 0xfffffd88) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) 29.87004717s ago: executing program 2 (id=267): socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0020000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/hardlockup_count', 0x20040, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0xb, &(0x7f00000002c0)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r1}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xff}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @ldst={0x2, 0x2, 0x1, 0x0, 0xa, 0x30, 0x4}], &(0x7f00000001c0)='syzkaller\x00', 0xfffffff9, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x1a, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0x6, 0x0, 0xffff}, 0x10, 0x2e8c4, r1, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r0, r4], 0x0, 0x10, 0x1}, 0x94) socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x168) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r5 = getpid() sched_setscheduler(r5, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x3a, &(0x7f0000000480)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x1, 0x1}}}}}}, 0x0) 26.297004402s ago: executing program 2 (id=269): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000110b0008850000007000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0x36, 0x0, &(0x7f0000000ac0)="c1188e19b95d02ff4284860186dda8c999e8255322b775ba16c38ff11c5f39cce727174ff2c8d74d8f98015d3197d5506d2f7655eb7c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000002c0)={0x20, r2, 0x1, 0x70bd2a, 0x0, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x20}}, 0x20000000) r3 = fsopen(&(0x7f0000000140)='hfsplus\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) 25.424090387s ago: executing program 2 (id=270): r0 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x28, r0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IE={0x6, 0x2a, [@random={0xdd}]}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x28}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x35) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_io_uring_setup(0x2042, &(0x7f0000001300)={0x0, 0xf948, 0x4, 0x2, 0x283}, &(0x7f0000000000), 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000440), 0x8001, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r2, 0x40045109, &(0x7f0000001280)) syz_80211_inject_frame(0x0, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) 24.208378672s ago: executing program 2 (id=275): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/ipc\x00') r1 = fsopen(&(0x7f00000002c0)='tmpfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x240, 0xc000, 0x0, 0xc1}) socket$inet(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @loopback}], 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x1e0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x148, 0x2a8, 0x2a8, 0x148, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x4}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x526, 0x6, 0x3, 0x0, 0x80, 0x613c7e17, 0x9, 0x5]}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x240) pipe(&(0x7f0000000000)) io_uring_enter(r3, 0x2219, 0xcf74, 0x16, 0x0, 0x0) close(r0) 23.830628131s ago: executing program 2 (id=277): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8d40, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000001200000024000000080000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x90e7d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r4 = dup(r3) read$FUSE(r4, &(0x7f0000005540)={0x2020}, 0x2020) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f046}) sendmsg$nl_generic(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20042800}, 0x20000000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) 19.864271756s ago: executing program 2 (id=283): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103603, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req={0x9570, 0x1ffffd, 0x8, 0x1}, 0x10) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r1, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$I2C_SLAVE(r0, 0x703, 0x2d0) 15.631644399s ago: executing program 3 (id=288): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0xa, 0x4}, 0x3f) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000240)=0xffe, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 15.314895253s ago: executing program 3 (id=289): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x7d}}}, 0xb8}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = fanotify_init(0xf00, 0x0) fanotify_mark(r3, 0x105, 0x40009975, r2, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x8001420, 0x1) r4 = socket$kcm(0x11, 0x2, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0x14, &(0x7f0000000000), 0x4) sendmsg$kcm(r4, &(0x7f0000000080)={&(0x7f0000000280)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x80, 0x0}, 0x4000) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x6d6b, 0x480) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f0000000000)={0x980900, 0x81, @value=0x327}) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x6040, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000001c0)={'gretap0\x00', 0x0}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058ff0b, &(0x7f0000000200)=@mmap={0x1, 0x1, 0x4, 0x10, 0x200, {}, {0x5, 0x8, 0xe, 0x9f, 0x0, 0x7b, "c16599e2"}, 0xabdb, 0x1, {}, 0xbaa}) r7 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="000428bd7000ffdbdf25010000000500020002000000050004000500000004000500050002000200000008000800e000000208000b00", @ANYRES32=0x0, @ANYBLOB="0500f73e120b5d24f3c1a8"], 0x48}, 0x1, 0x0, 0x0, 0x4000854}, 0x1) 11.716039871s ago: executing program 0 (id=294): socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x2, 0xda48, 0x470d, 0xcc40, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0020000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/hardlockup_count', 0x20040, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0xb, &(0x7f00000002c0)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r1}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xff}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ldst={0x2, 0x2, 0x1, 0x0, 0xa, 0x30, 0x4}], &(0x7f00000001c0)='syzkaller\x00', 0xfffffff9, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x1a, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0x6, 0x0, 0xffff}, 0x10, 0x2e8c4, r1, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r0, r5], 0x0, 0x10, 0x1}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x168) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = syz_open_procfs(0x0, &(0x7f0000002400)='net/netstat\x00') read$FUSE(r10, &(0x7f0000002500)={0x2020}, 0x2020) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x3}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r0, 0x2f}, 0x20) 10.530449532s ago: executing program 0 (id=295): socket(0x200000000000011, 0x2, 0xd) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x212241, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000180)={0xc0000, 0x0, {[0x7, 0x1ff, 0x76, 0x2947, 0xb, 0xccb4, 0x6, 0x7fff]}}) sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000000000007000000940400"], 0x18}}], 0x1, 0x44008004) write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000019c0)={'#! ', './file1/../file0'}, 0x14) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000004ff6943b80000000800000014f200000000861f4104bfeacd", 0x20, 0xfffffffffffffffb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xd6, 0x5e, 0x3e, 0x8, 0x711, 0x920, 0xd5b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0xd, 0x80, 0x2, [{{0x9, 0x4, 0x99, 0x80, 0x1, 0x8f, 0xce, 0xef, 0x6, [], [{{0x9, 0x5, 0x5, 0x2, 0x400, 0x1, 0x8, 0x8}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 10.270437141s ago: executing program 3 (id=296): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000140)={0xc}) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 8.792006378s ago: executing program 4 (id=297): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000140)={0xc}) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 7.487287663s ago: executing program 3 (id=298): socket(0x200000000000011, 0x2, 0xd) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x212241, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000180)={0xc0000, 0x0, {[0x7, 0x1ff, 0x76, 0x2947, 0xb, 0xccb4, 0x6, 0x7fff]}}) sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000000000007000000940400"], 0x18}}], 0x1, 0x44008004) write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000019c0)={'#! ', './file1/../file0'}, 0x14) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000004ff6943b80000000800000014f200000000861f4104bfeacd", 0x20, 0xfffffffffffffffb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xd6, 0x5e, 0x3e, 0x8, 0x711, 0x920, 0xd5b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0xd, 0x80, 0x2, [{{0x9, 0x4, 0x99, 0x80, 0x1, 0x8f, 0xce, 0xef, 0x6, [], [{{0x9, 0x5, 0x5, 0x2, 0x400, 0x1, 0x8, 0x8}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 7.165167073s ago: executing program 0 (id=299): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xe, 0x4, 0x4, 0xa, 0x4}, 0x3f) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000240)=0xffe, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 7.057257286s ago: executing program 0 (id=300): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a0000080480020009"], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") 6.095455913s ago: executing program 4 (id=301): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000140)={0xc}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x13a8, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) 5.342380402s ago: executing program 0 (id=302): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, &(0x7f0000000100)={0xc}) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000140)={0xc}) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x0) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) 4.6478231s ago: executing program 32 (id=283): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x103603, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req={0x9570, 0x1ffffd, 0x8, 0x1}, 0x10) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r1, 0x0) syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$I2C_SLAVE(r0, 0x703, 0x2d0) 4.626483929s ago: executing program 4 (id=304): r0 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(r0, 0x3b88, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r0, 0x3b88, &(0x7f0000000140)={0xc}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x13a8, 0x3180, 0x8000, 0x400246}, &(0x7f0000000340)=0x0, &(0x7f00000006c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r3, 0x0, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000000180)={0x20, r1, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000200)={0xc, r1}) ioctl$IOMMU_VFIO_GET_API_VERSION(r0, 0x3b64) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, 0xffffffffffffffff, 0x2000) 4.280735094s ago: executing program 3 (id=305): socket(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x2, 0xda48, 0x470d, 0xcc40, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x3, 0x2}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0020000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000340)=0xffffffffffffffff, 0x4) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/kernel/hardlockup_count', 0x20040, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0xb, &(0x7f00000002c0)=@raw=[@map_fd={0x18, 0x7, 0x1, 0x0, r1}, @map_val={0x18, 0x2, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0xff}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @ldst={0x2, 0x2, 0x1, 0x0, 0xa, 0x30, 0x4}], &(0x7f00000001c0)='syzkaller\x00', 0xfffffff9, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x1a, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x1, 0x6, 0x0, 0xffff}, 0x10, 0x2e8c4, r1, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, r0, r5], 0x0, 0x10, 0x1}, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) mkdir(0x0, 0x168) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = syz_open_procfs(0x0, &(0x7f0000002400)='net/netstat\x00') read$FUSE(r10, &(0x7f0000002500)={0x2020}, 0x2020) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x3, 0x3}}}}}}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r1, r0, 0x2f}, 0x20) 2.278229681s ago: executing program 3 (id=306): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000400)='kfree\x00'}, 0x18) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000340)={0x1000005c}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x2, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0x0, 0x101, 0x3, 0x1], 0xffff1000, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b750009058389b5"], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040016000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a010000000000000000000100000009"], 0xfc}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4008084}, 0x24040010) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001440), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffffffffffd}}, 0x10) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa85, 0xf) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000280)={0x2, 0x0, @local}, 0x10) connect$inet(r8, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000340)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x17, 0xb, 0x35}, 0x2c) pipe2$9p(&(0x7f0000000240), 0x80880) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140), 0x2800018, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES64, @ANYBLOB='0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080), 0x0, 0x2) r4 = dup(r3) read$FUSE(r4, &(0x7f0000005540)={0x2020}, 0x2020) ioctl$VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000000)={0xf0f046}) sendmsg$nl_generic(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20042800}, 0x20000000) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) 312.802433ms ago: executing program 0 (id=309): socket(0x200000000000011, 0x2, 0xd) r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x212241, 0x4) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f0000000180)={0xc0000, 0x0, {[0x7, 0x1ff, 0x76, 0x2947, 0xb, 0xccb4, 0x6, 0x7fff]}}) sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="14000000000000000000000007000000940400"], 0x18}}], 0x1, 0x44008004) write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000019c0)={'#! ', './file1/../file0'}, 0x14) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000140)="0000000000000004ff6943b80000000800000014f200000000861f4104bfeacd", 0x20, 0xfffffffffffffffb) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0xd6, 0x5e, 0x3e, 0x8, 0x711, 0x920, 0xd5b6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x3, 0xd, 0x80, 0x2, [{{0x9, 0x4, 0x99, 0x80, 0x1, 0x8f, 0xce, 0xef, 0x6, [], [{{0x9, 0x5, 0x5, 0x2, 0x400, 0x1, 0x8, 0x8}}]}}]}}]}}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 4 (id=310): r0 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905"], 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000") kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.164' (ED25519) to the list of known hosts. [ 74.917718][ T5800] cgroup: Unknown subsys name 'net' [ 75.158394][ T5800] cgroup: Unknown subsys name 'cpuset' [ 75.214421][ T5800] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.866898][ T5800] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.727621][ T5812] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.731298][ T5812] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.732195][ T5812] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.752420][ T5821] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.754279][ T5130] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.755029][ T5130] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.780204][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.780723][ T5822] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.789737][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.791939][ T5822] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.803853][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.814187][ T5822] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.827563][ T5821] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.835848][ T5821] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.836695][ T5821] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.992267][ T5821] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.998258][ T5821] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.999131][ T5821] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.000304][ T5821] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 80.001324][ T5821] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 80.082172][ T5820] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.092482][ T5820] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 80.097271][ T5820] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 80.101569][ T5820] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 80.102729][ T5820] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 80.813576][ T5815] chnl_net:caif_netlink_parms(): no params data found [ 80.913543][ T5814] chnl_net:caif_netlink_parms(): no params data found [ 81.039929][ T5810] chnl_net:caif_netlink_parms(): no params data found [ 81.046039][ T5825] chnl_net:caif_netlink_parms(): no params data found [ 81.154759][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 81.594983][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.596059][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.596419][ T5815] bridge_slave_0: entered allmulticast mode [ 81.598124][ T5815] bridge_slave_0: entered promiscuous mode [ 81.675810][ T993] cfg80211: failed to load regulatory.db [ 81.726917][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.727031][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.727216][ T5815] bridge_slave_1: entered allmulticast mode [ 81.729907][ T5815] bridge_slave_1: entered promiscuous mode [ 81.906826][ T5821] Bluetooth: hci0: command tx timeout [ 81.907260][ T5823] Bluetooth: hci2: command tx timeout [ 81.907387][ T5820] Bluetooth: hci1: command tx timeout [ 82.064006][ T5821] Bluetooth: hci3: command tx timeout [ 82.126924][ T5814] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.127069][ T5814] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.127328][ T5814] bridge_slave_0: entered allmulticast mode [ 82.129906][ T5814] bridge_slave_0: entered promiscuous mode [ 82.143956][ T5821] Bluetooth: hci4: command tx timeout [ 82.334748][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.334890][ T5814] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.335081][ T5814] bridge_slave_1: entered allmulticast mode [ 82.336858][ T5814] bridge_slave_1: entered promiscuous mode [ 82.438564][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.438799][ T5810] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.438939][ T5810] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.439105][ T5810] bridge_slave_0: entered allmulticast mode [ 82.440811][ T5810] bridge_slave_0: entered promiscuous mode [ 82.442987][ T5825] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.443108][ T5825] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.443267][ T5825] bridge_slave_0: entered allmulticast mode [ 82.456427][ T5825] bridge_slave_0: entered promiscuous mode [ 82.587214][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.587496][ T5810] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.587623][ T5810] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.587755][ T5810] bridge_slave_1: entered allmulticast mode [ 82.589239][ T5810] bridge_slave_1: entered promiscuous mode [ 82.590314][ T5825] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.590384][ T5825] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.590485][ T5825] bridge_slave_1: entered allmulticast mode [ 82.591978][ T5825] bridge_slave_1: entered promiscuous mode [ 82.665045][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.665168][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.665335][ T5829] bridge_slave_0: entered allmulticast mode [ 82.667089][ T5829] bridge_slave_0: entered promiscuous mode [ 82.887318][ T5814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.887566][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.887696][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.887853][ T5829] bridge_slave_1: entered allmulticast mode [ 82.889657][ T5829] bridge_slave_1: entered promiscuous mode [ 83.247389][ T5814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.306048][ T5815] team0: Port device team_slave_0 added [ 83.309600][ T5810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.312505][ T5825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.486940][ T5815] team0: Port device team_slave_1 added [ 83.489265][ T5810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.491281][ T5825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.587770][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.776075][ T5814] team0: Port device team_slave_0 added [ 83.778655][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.967084][ T5814] team0: Port device team_slave_1 added [ 83.983918][ T5821] Bluetooth: hci0: command tx timeout [ 83.983949][ T5821] Bluetooth: hci1: command tx timeout [ 83.983970][ T5821] Bluetooth: hci2: command tx timeout [ 84.035571][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.035582][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.035598][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.039039][ T5810] team0: Port device team_slave_0 added [ 84.041889][ T5825] team0: Port device team_slave_0 added [ 84.143946][ T5820] Bluetooth: hci3: command tx timeout [ 84.223964][ T5820] Bluetooth: hci4: command tx timeout [ 84.445217][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.445233][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.445256][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.447382][ T5810] team0: Port device team_slave_1 added [ 84.448875][ T5825] team0: Port device team_slave_1 added [ 84.564558][ T5829] team0: Port device team_slave_0 added [ 84.685306][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.685317][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.685331][ T5814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.688880][ T5829] team0: Port device team_slave_1 added [ 84.835538][ T5814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.835554][ T5814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.835577][ T5814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.915047][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.915058][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.915071][ T5810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.916155][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.916168][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.916192][ T5825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.125376][ T5810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.125393][ T5810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.125414][ T5810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.126416][ T5825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.126429][ T5825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.126442][ T5825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.295324][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.295340][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.295364][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.394498][ T5815] hsr_slave_0: entered promiscuous mode [ 85.395391][ T5815] hsr_slave_1: entered promiscuous mode [ 85.397034][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.397043][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.397056][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.819340][ T5814] hsr_slave_0: entered promiscuous mode [ 85.820098][ T5814] hsr_slave_1: entered promiscuous mode [ 85.820855][ T5814] debugfs: 'hsr0' already exists in 'hsr' [ 85.820937][ T5814] Cannot create hsr debugfs directory [ 86.049657][ T5810] hsr_slave_0: entered promiscuous mode [ 86.050428][ T5810] hsr_slave_1: entered promiscuous mode [ 86.051000][ T5810] debugfs: 'hsr0' already exists in 'hsr' [ 86.051016][ T5810] Cannot create hsr debugfs directory [ 86.058060][ T5825] hsr_slave_0: entered promiscuous mode [ 86.059243][ T5825] hsr_slave_1: entered promiscuous mode [ 86.060087][ T5825] debugfs: 'hsr0' already exists in 'hsr' [ 86.060109][ T5825] Cannot create hsr debugfs directory [ 86.066201][ T5821] Bluetooth: hci1: command tx timeout [ 86.066228][ T5821] Bluetooth: hci0: command tx timeout [ 86.066332][ T5820] Bluetooth: hci2: command tx timeout [ 86.224032][ T5823] Bluetooth: hci3: command tx timeout [ 86.303971][ T5823] Bluetooth: hci4: command tx timeout [ 86.350787][ T5829] hsr_slave_0: entered promiscuous mode [ 86.351545][ T5829] hsr_slave_1: entered promiscuous mode [ 86.352140][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 86.352157][ T5829] Cannot create hsr debugfs directory [ 87.776181][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.802096][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.838697][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.889856][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.999337][ T5810] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.031150][ T5810] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.068299][ T5810] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.126487][ T5810] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.143843][ T5823] Bluetooth: hci2: command tx timeout [ 88.143873][ T5823] Bluetooth: hci0: command tx timeout [ 88.143895][ T5823] Bluetooth: hci1: command tx timeout [ 88.235822][ T5814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.273015][ T5814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.303906][ T5820] Bluetooth: hci3: command tx timeout [ 88.309898][ T5814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.343953][ T5814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.384300][ T5820] Bluetooth: hci4: command tx timeout [ 88.456114][ T5825] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.518633][ T5825] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.565253][ T5825] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.612872][ T5825] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.731921][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.741768][ T5829] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.770700][ T5829] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.812134][ T5829] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.852592][ T5829] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.930978][ T5815] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.977677][ T3009] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.978173][ T3009] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.982025][ T5810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.018473][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.018553][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.070904][ T5810] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.097202][ T5814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.115171][ T3708] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.115378][ T3708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.146969][ T3708] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.147207][ T3708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.200164][ T5814] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.233438][ T5825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.248085][ T1286] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.248206][ T1286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.288032][ T3009] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.288294][ T3009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.366586][ T5825] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.388510][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.411725][ T3720] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.411998][ T3720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.459186][ T3708] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.459360][ T3708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.548793][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.601850][ T3720] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.602119][ T3720] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.667124][ T3708] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.667689][ T3708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.750144][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.893308][ T5810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.018636][ T5815] veth0_vlan: entered promiscuous mode [ 90.067442][ T5814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.081685][ T5815] veth1_vlan: entered promiscuous mode [ 90.139415][ T5810] veth0_vlan: entered promiscuous mode [ 90.193279][ T5810] veth1_vlan: entered promiscuous mode [ 90.293548][ T5815] veth0_macvtap: entered promiscuous mode [ 90.331890][ T5815] veth1_macvtap: entered promiscuous mode [ 90.340920][ T5814] veth0_vlan: entered promiscuous mode [ 90.372594][ T5825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.382795][ T5810] veth0_macvtap: entered promiscuous mode [ 90.399668][ T5814] veth1_vlan: entered promiscuous mode [ 90.416015][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.432107][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.435667][ T5810] veth1_macvtap: entered promiscuous mode [ 90.467772][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.507480][ T3708] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.526341][ T3708] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.528990][ T3708] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.542734][ T3708] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.548341][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.617209][ T5810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.692533][ T4750] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.693190][ T5814] veth0_macvtap: entered promiscuous mode [ 90.718953][ T4750] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.761495][ T4750] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.779284][ T4750] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.789930][ T5814] veth1_macvtap: entered promiscuous mode [ 90.850944][ T5829] veth0_vlan: entered promiscuous mode [ 90.985199][ T3720] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.985223][ T3720] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.001377][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.005539][ T5829] veth1_vlan: entered promiscuous mode [ 91.049510][ T5814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.090151][ T1286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.090168][ T1286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.112397][ T3009] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.137047][ T3009] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.142608][ T3009] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.166505][ T3009] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.190576][ T3009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.190595][ T3009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.227062][ T5825] veth0_vlan: entered promiscuous mode [ 91.325209][ T3708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.325228][ T3708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.394508][ T5829] veth0_macvtap: entered promiscuous mode [ 91.426070][ T5825] veth1_vlan: entered promiscuous mode [ 91.446572][ T5829] veth1_macvtap: entered promiscuous mode [ 91.515625][ T1286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.515644][ T1286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.592245][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.701252][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.739884][ T3720] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.739903][ T3720] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.763712][ T5825] veth0_macvtap: entered promiscuous mode [ 91.784766][ T3720] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.789036][ T1286] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.793591][ T1286] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.804375][ T5825] veth1_macvtap: entered promiscuous mode [ 91.813867][ T1286] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.053755][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.243742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.623736][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 92.822848][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.923448][ T5825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.073520][ T57] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.096612][ T1286] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.097665][ T1286] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.104372][ T1286] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.122672][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.122689][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.516852][ T5903] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 94.662838][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.662855][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.378861][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.378894][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.378933][ T5903] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 95.378955][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.535902][ T5903] usb 2-1: config 0 descriptor?? [ 96.579979][ T5903] usbhid 2-1:0.0: can't add hid device: -71 [ 96.580102][ T5903] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 96.619006][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.619024][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.654465][ T5903] usb 2-1: USB disconnect, device number 2 [ 97.227968][ T3708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.227988][ T3708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.444036][ T5960] mmap: syz.3.10 (5960) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 97.623811][ T5198] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 97.786322][ T5198] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 97.811812][ T5198] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 97.833191][ T5198] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 97.833219][ T5198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.833238][ T5198] usb 1-1: Product: syz [ 97.833251][ T5198] usb 1-1: Manufacturer: syz [ 97.833264][ T5198] usb 1-1: SerialNumber: syz [ 97.922640][ T5198] usb 1-1: ucan: probing device on interface #0 [ 97.922668][ T5198] usb 1-1: ucan: invalid EP count (0) [ 97.922682][ T5198] usb 1-1: ucan: probe failed; try to update the device firmware [ 98.213944][ T5894] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 98.609035][ T5894] usb 5-1: config 9 has no interfaces? [ 98.609072][ T5894] usb 5-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 98.609094][ T5894] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.999801][ T5985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.013597][ T5985] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.732640][ T5894] usb 5-1: string descriptor 0 read error: -71 [ 102.755045][ T5894] usb 5-1: USB disconnect, device number 2 [ 102.993796][ T5198] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 103.158230][ T5198] usb 3-1: unable to get BOS descriptor or descriptor too short [ 103.159049][ T5198] usb 3-1: not running at top speed; connect to a high speed hub [ 103.166739][ T5198] usb 3-1: config 3 has an invalid interface number: 153 but max is 0 [ 103.166764][ T5198] usb 3-1: config 3 has no interface number 0 [ 103.166808][ T5198] usb 3-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 103.166833][ T5198] usb 3-1: config 3 interface 153 has no altsetting 0 [ 103.177778][ T5198] usb 3-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 103.177804][ T5198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.177822][ T5198] usb 3-1: Product: syz [ 103.177835][ T5198] usb 3-1: Manufacturer: syz [ 103.177848][ T5198] usb 3-1: SerialNumber: syz [ 103.231515][ T5993] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 105.715609][ T5198] sisusb 3-1:3.153: Invalid USB2VGA device [ 105.715644][ T5198] sisusb 3-1:3.153: probe with driver sisusb failed with error -22 [ 105.827784][ T5198] usb 3-1: USB disconnect, device number 2 [ 105.934735][ T6014] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.963479][ T10] usb 1-1: USB disconnect, device number 2 [ 107.573733][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 110.539057][ T6042] vivid-004: kernel_thread() failed [ 115.150753][ T6074] vivid-004: kernel_thread() failed [ 118.359249][ T5198] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 118.646085][ T5198] usb 4-1: device descriptor read/all, error -61 [ 118.883799][ T6104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 118.891898][ T6104] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.665970][ T5198] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 119.858139][ T5903] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 125.148611][ T6145] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.513818][ T5903] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 126.665168][ T5903] usb 1-1: Using ep0 maxpacket: 8 [ 126.669533][ T5903] usb 1-1: config 0 has an invalid interface number: 244 but max is 1 [ 126.669558][ T5903] usb 1-1: config 0 has an invalid descriptor of length 164, skipping remainder of the config [ 126.669577][ T5903] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 126.669597][ T5903] usb 1-1: config 0 has no interface number 0 [ 126.669628][ T5903] usb 1-1: config 0 interface 244 has no altsetting 0 [ 127.019263][ T5903] usb 1-1: New USB device found, idVendor=0df6, idProduct=003d, bcdDevice=65.d5 [ 127.019293][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.019312][ T5903] usb 1-1: Product: syz [ 127.019325][ T5903] usb 1-1: SerialNumber: syz [ 127.223712][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.283710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 127.317442][ T5903] usb 1-1: config 0 descriptor?? [ 127.319775][ T5903] usb 1-1: can't set config #0, error -71 [ 127.322139][ T5903] usb 1-1: USB disconnect, device number 4 [ 127.773769][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 130.533852][ T5198] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 130.923734][ T5198] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 130.923788][ T5198] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 130.925880][ T5901] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 130.928906][ T5198] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 130.928931][ T5198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.928948][ T5198] usb 5-1: Product: syz [ 130.928962][ T5198] usb 5-1: Manufacturer: syz [ 130.928975][ T5198] usb 5-1: SerialNumber: syz [ 131.015673][ T5198] usb 5-1: ucan: probing device on interface #0 [ 131.015696][ T5198] usb 5-1: ucan: invalid EP count (0) [ 131.015711][ T5198] usb 5-1: ucan: probe failed; try to update the device firmware [ 131.405983][ T5901] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 131.406011][ T5901] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.406029][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 131.406076][ T5901] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 131.411483][ T5901] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 131.411510][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 131.411528][ T5901] usb 3-1: Product: syz [ 131.411541][ T5901] usb 3-1: Manufacturer: syz [ 131.457892][ T5901] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 131.654980][ T5901] usb 3-1: USB disconnect, device number 3 [ 132.874740][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.874830][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.280022][ T5198] usb 5-1: USB disconnect, device number 3 [ 137.383866][ T5198] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 137.728233][ T5198] usb 2-1: unable to get BOS descriptor or descriptor too short [ 137.728926][ T5198] usb 2-1: not running at top speed; connect to a high speed hub [ 137.730531][ T5198] usb 2-1: config 3 has an invalid interface number: 153 but max is 0 [ 137.730554][ T5198] usb 2-1: config 3 has no interface number 0 [ 137.730600][ T5198] usb 2-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 137.730626][ T5198] usb 2-1: config 3 interface 153 has no altsetting 0 [ 137.734724][ T5198] usb 2-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 137.734750][ T5198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.734767][ T5198] usb 2-1: Product: syz [ 137.734780][ T5198] usb 2-1: Manufacturer: syz [ 137.734793][ T5198] usb 2-1: SerialNumber: syz [ 137.794026][ T6226] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 137.903799][ T5990] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 138.061583][ T5990] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 138.061612][ T5990] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.061629][ T5990] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 138.061679][ T5990] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 138.487753][ T5990] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 138.487784][ T5990] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 138.487804][ T5990] usb 4-1: Product: syz [ 138.487817][ T5990] usb 4-1: Manufacturer: syz [ 138.667031][ T5990] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 138.963130][ T5818] usb 4-1: USB disconnect, device number 4 [ 139.458467][ T6252] random: crng reseeded on system resumption [ 140.311453][ T5198] sisusb 2-1:3.153: Invalid USB2VGA device [ 140.311486][ T5198] sisusb 2-1:3.153: probe with driver sisusb failed with error -22 [ 140.349323][ T5198] usb 2-1: USB disconnect, device number 3 [ 140.658677][ T6261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.679185][ T6261] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.914782][ T6266] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 141.554246][ T5903] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 141.928585][ T5903] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 141.928614][ T5903] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 141.928633][ T5903] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 141.928681][ T5903] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 141.928714][ T5903] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 141.931016][ T5903] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 141.931040][ T5903] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 141.931058][ T5903] usb 1-1: Product: syz [ 141.931071][ T5903] usb 1-1: Manufacturer: syz [ 141.965142][ T5903] cdc_wdm 1-1:1.0: skipping garbage [ 141.965160][ T5903] cdc_wdm 1-1:1.0: skipping garbage [ 142.422269][ T5903] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 142.422300][ T5903] cdc_wdm 1-1:1.0: Unknown control protocol [ 142.682201][ T5901] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 143.355318][ T5901] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 143.355397][ T5901] usb 5-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 143.360370][ T5901] usb 5-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 143.360398][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.360416][ T5901] usb 5-1: Product: syz [ 143.360430][ T5901] usb 5-1: Manufacturer: syz [ 143.360444][ T5901] usb 5-1: SerialNumber: syz [ 143.504215][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.685117][ T5901] usb 5-1: ucan: probing device on interface #0 [ 143.685140][ T5901] usb 5-1: ucan: invalid EP count (0) [ 143.685155][ T5901] usb 5-1: ucan: probe failed; try to update the device firmware [ 143.983719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 143.993727][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 145.020896][ T5198] usb 1-1: USB disconnect, device number 5 [ 145.209791][ T5901] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 145.363779][ T5901] usb 3-1: Using ep0 maxpacket: 8 [ 145.368290][ T5901] usb 3-1: config 0 has an invalid interface number: 244 but max is 1 [ 145.368315][ T5901] usb 3-1: config 0 has an invalid descriptor of length 164, skipping remainder of the config [ 145.368333][ T5901] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 145.368351][ T5901] usb 3-1: config 0 has no interface number 0 [ 145.368385][ T5901] usb 3-1: config 0 interface 244 has no altsetting 0 [ 145.372875][ T5901] usb 3-1: New USB device found, idVendor=0df6, idProduct=003d, bcdDevice=65.d5 [ 145.372901][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.372919][ T5901] usb 3-1: Product: syz [ 145.372932][ T5901] usb 3-1: SerialNumber: syz [ 145.463952][ T5901] usb 3-1: config 0 descriptor?? [ 146.032808][ T5990] usb 5-1: USB disconnect, device number 4 [ 147.097127][ T5818] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 147.263077][ T5901] usb 3-1: USB disconnect, device number 4 [ 147.426448][ T5818] usb 2-1: unable to get BOS descriptor or descriptor too short [ 147.427276][ T5818] usb 2-1: not running at top speed; connect to a high speed hub [ 147.428739][ T5818] usb 2-1: config 3 has an invalid interface number: 153 but max is 0 [ 147.428762][ T5818] usb 2-1: config 3 has no interface number 0 [ 147.428807][ T5818] usb 2-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 147.428832][ T5818] usb 2-1: config 3 interface 153 has no altsetting 0 [ 147.432610][ T5818] usb 2-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 147.432635][ T5818] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.432653][ T5818] usb 2-1: Product: syz [ 147.432666][ T5818] usb 2-1: Manufacturer: syz [ 147.432678][ T5818] usb 2-1: SerialNumber: syz [ 147.522435][ T6298] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 148.160507][ T6310] random: crng reseeded on system resumption [ 149.016916][ T5818] sisusb 2-1:3.153: Invalid USB2VGA device [ 149.016951][ T5818] sisusb 2-1:3.153: probe with driver sisusb failed with error -22 [ 149.069477][ T5818] usb 2-1: USB disconnect, device number 4 [ 149.618677][ T6326] random: crng reseeded on system resumption [ 150.282555][ T6324] vivid-008: kernel_thread() failed [ 152.758481][ T6335] random: crng reseeded on system resumption [ 153.893995][ T5901] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 154.907677][ T993] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 155.871662][ T993] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 155.871716][ T993] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 155.896012][ T993] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41 [ 155.896041][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.896059][ T993] usb 1-1: Product: syz [ 155.896071][ T993] usb 1-1: Manufacturer: syz [ 155.896085][ T993] usb 1-1: SerialNumber: syz [ 155.956799][ T993] usb 1-1: ucan: probing device on interface #0 [ 155.956822][ T993] usb 1-1: ucan: invalid EP count (0) [ 155.956836][ T993] usb 1-1: ucan: probe failed; try to update the device firmware [ 156.384246][ T6371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.411587][ T6371] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.716821][ T6374] random: crng reseeded on system resumption [ 157.698207][ T6384] random: crng reseeded on system resumption [ 160.649800][ T5901] usb 1-1: USB disconnect, device number 6 [ 160.928675][ T6398] random: crng reseeded on system resumption [ 161.525036][ T6397] vivid-004: kernel_thread() failed [ 161.882056][ T6401] 9pnet_fd: Insufficient options for proto=fd [ 161.893860][ T6401] capability: warning: `syz.2.118' uses 32-bit capabilities (legacy support in use) [ 163.684016][ T5198] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 164.691779][ T5198] usb 2-1: unable to get BOS descriptor or descriptor too short [ 164.692233][ T5198] usb 2-1: not running at top speed; connect to a high speed hub [ 164.693203][ T5198] usb 2-1: config 3 has an invalid interface number: 153 but max is 0 [ 164.693224][ T5198] usb 2-1: config 3 has no interface number 0 [ 164.693265][ T5198] usb 2-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 164.693279][ T5198] usb 2-1: config 3 interface 153 has no altsetting 0 [ 164.743024][ T5198] usb 2-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 164.743041][ T5198] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.743051][ T5198] usb 2-1: Product: syz [ 164.743058][ T5198] usb 2-1: Manufacturer: syz [ 164.743065][ T5198] usb 2-1: SerialNumber: syz [ 164.777554][ T6408] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 164.956502][ T5198] sisusb 2-1:3.153: Invalid USB2VGA device [ 164.956537][ T5198] sisusb 2-1:3.153: probe with driver sisusb failed with error -22 [ 164.990855][ T5198] usb 2-1: USB disconnect, device number 5 [ 165.072389][ T993] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 165.094964][ T5902] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 165.226765][ T993] usb 1-1: unable to get BOS descriptor or descriptor too short [ 165.227470][ T993] usb 1-1: not running at top speed; connect to a high speed hub [ 165.228886][ T993] usb 1-1: config 3 has an invalid interface number: 153 but max is 0 [ 165.228909][ T993] usb 1-1: config 3 has no interface number 0 [ 165.228954][ T993] usb 1-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 165.228979][ T993] usb 1-1: config 3 interface 153 has no altsetting 0 [ 165.232182][ T993] usb 1-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 165.232207][ T993] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.232225][ T993] usb 1-1: Product: syz [ 165.232342][ T993] usb 1-1: Manufacturer: syz [ 165.232356][ T993] usb 1-1: SerialNumber: syz [ 165.258798][ T5902] usb 3-1: unable to get BOS descriptor or descriptor too short [ 165.259368][ T5902] usb 3-1: not running at top speed; connect to a high speed hub [ 165.260595][ T5902] usb 3-1: config 3 has an invalid interface number: 153 but max is 0 [ 165.260616][ T5902] usb 3-1: config 3 has no interface number 0 [ 165.260661][ T5902] usb 3-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 165.260686][ T5902] usb 3-1: config 3 interface 153 has no altsetting 0 [ 165.263030][ T5902] usb 3-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 165.263054][ T5902] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.263071][ T5902] usb 3-1: Product: syz [ 165.263084][ T5902] usb 3-1: Manufacturer: syz [ 165.263097][ T5902] usb 3-1: SerialNumber: syz [ 166.528729][ T6417] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 166.550971][ T6413] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 167.469370][ T6442] random: crng reseeded on system resumption [ 168.314660][ T6439] random: crng reseeded on system resumption [ 168.590337][ T5902] sisusb 3-1:3.153: Invalid USB2VGA device [ 168.590373][ T5902] sisusb 3-1:3.153: probe with driver sisusb failed with error -22 [ 169.603773][ T5902] usb 3-1: USB disconnect, device number 5 [ 169.753794][ T31] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 169.848482][ T6453] 9pnet_fd: Insufficient options for proto=fd [ 170.130469][ T31] usb 2-1: unable to get BOS descriptor or descriptor too short [ 170.131156][ T31] usb 2-1: not running at top speed; connect to a high speed hub [ 170.133018][ T31] usb 2-1: config 3 has an invalid interface number: 153 but max is 0 [ 170.133041][ T31] usb 2-1: config 3 has no interface number 0 [ 170.133094][ T31] usb 2-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 170.133121][ T31] usb 2-1: config 3 interface 153 has no altsetting 0 [ 170.136153][ T31] usb 2-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 170.136180][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.136198][ T31] usb 2-1: Product: syz [ 170.136211][ T31] usb 2-1: Manufacturer: syz [ 170.136225][ T31] usb 2-1: SerialNumber: syz [ 170.141014][ T993] sisusb 1-1:3.153: Invalid USB2VGA device [ 170.141044][ T993] sisusb 1-1:3.153: probe with driver sisusb failed with error -22 [ 170.187075][ T993] usb 1-1: USB disconnect, device number 7 [ 170.446914][ T6456] lo: entered promiscuous mode [ 170.514429][ T6456] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.556631][ T31] usb 2-1: can't set config #3, error -71 [ 170.570044][ T31] usb 2-1: USB disconnect, device number 6 [ 170.874044][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.894848][ T6460] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.295632][ T6470] Mount JFS Failure: -5 [ 172.295649][ T6470] jfs_mount failed w/return code = -5 [ 174.926272][ T6484] Mount JFS Failure: -5 [ 174.926287][ T6484] jfs_mount failed w/return code = -5 [ 177.813829][ T31] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 177.966420][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 177.967107][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 177.968519][ T31] usb 3-1: config 3 has an invalid interface number: 153 but max is 0 [ 177.968541][ T31] usb 3-1: config 3 has no interface number 0 [ 177.968595][ T31] usb 3-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 177.968621][ T31] usb 3-1: config 3 interface 153 has no altsetting 0 [ 177.971418][ T31] usb 3-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 177.971442][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.971460][ T31] usb 3-1: Product: syz [ 177.971474][ T31] usb 3-1: Manufacturer: syz [ 177.971487][ T31] usb 3-1: SerialNumber: syz [ 178.092585][ T6496] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 178.341198][ T6508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.371677][ T6508] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 179.127274][ T6513] random: crng reseeded on system resumption [ 179.392865][ T31] sisusb 3-1:3.153: Invalid USB2VGA device [ 179.392900][ T31] sisusb 3-1:3.153: probe with driver sisusb failed with error -22 [ 179.462426][ T31] usb 3-1: USB disconnect, device number 6 [ 185.223877][ T31] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 185.375675][ T31] usb 5-1: unable to get BOS descriptor or descriptor too short [ 185.376160][ T31] usb 5-1: not running at top speed; connect to a high speed hub [ 185.377096][ T31] usb 5-1: config 3 has an invalid interface number: 153 but max is 0 [ 185.377109][ T31] usb 5-1: config 3 has no interface number 0 [ 185.377136][ T31] usb 5-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 185.377150][ T31] usb 5-1: config 3 interface 153 has no altsetting 0 [ 185.379011][ T31] usb 5-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 185.379026][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.379035][ T31] usb 5-1: Product: syz [ 185.379042][ T31] usb 5-1: Manufacturer: syz [ 185.379049][ T31] usb 5-1: SerialNumber: syz [ 185.470109][ T6548] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 185.766629][ T6552] 9pnet_fd: Insufficient options for proto=fd [ 186.973755][ T993] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 187.029222][ T31] sisusb 5-1:3.153: Invalid USB2VGA device [ 187.029244][ T31] sisusb 5-1:3.153: probe with driver sisusb failed with error -22 [ 187.068104][ T31] usb 5-1: USB disconnect, device number 6 [ 187.159897][ T993] usb 3-1: unable to get BOS descriptor or descriptor too short [ 187.161829][ T993] usb 3-1: not running at top speed; connect to a high speed hub [ 187.163269][ T993] usb 3-1: config 3 has an invalid interface number: 153 but max is 0 [ 187.163292][ T993] usb 3-1: config 3 has no interface number 0 [ 187.163338][ T993] usb 3-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 187.163363][ T993] usb 3-1: config 3 interface 153 has no altsetting 0 [ 187.217425][ T993] usb 3-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 187.217444][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 187.217453][ T993] usb 3-1: Product: syz [ 187.217460][ T993] usb 3-1: Manufacturer: syz [ 187.217467][ T993] usb 3-1: SerialNumber: syz [ 187.438465][ T6556] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 188.507155][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.513293][ T6561] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.811074][ T57] Bluetooth: hci5: Frame reassembly failed (-84) [ 188.823209][ T57] Bluetooth: hci5: Frame reassembly failed (-84) [ 188.832862][ T57] Bluetooth: hci5: Frame reassembly failed (-84) [ 188.833107][ T57] Bluetooth: hci5: Frame reassembly failed (-84) [ 188.838618][ T57] Bluetooth: hci5: Frame reassembly failed (-84) [ 189.649021][ T993] sisusb 3-1:3.153: Invalid USB2VGA device [ 189.649056][ T993] sisusb 3-1:3.153: probe with driver sisusb failed with error -22 [ 190.572229][ T993] usb 3-1: USB disconnect, device number 7 [ 191.744292][ T5820] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 193.893736][ T5902] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 194.086686][ T5902] usb 2-1: config 9 has no interfaces? [ 194.086723][ T5902] usb 2-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 194.086745][ T5902] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.311938][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.311982][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.629058][ T6597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 194.633331][ T6597] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.731445][ T6598] 9pnet_fd: Insufficient options for proto=fd [ 196.187549][ T6603] Mount JFS Failure: -5 [ 196.187567][ T6603] jfs_mount failed w/return code = -5 [ 196.883333][ T5902] usb 2-1: string descriptor 0 read error: -71 [ 196.904009][ T5902] usb 2-1: USB disconnect, device number 7 [ 198.454490][ T993] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 198.665134][ T993] usb 5-1: unable to get BOS descriptor or descriptor too short [ 198.675111][ T993] usb 5-1: not running at top speed; connect to a high speed hub [ 198.708151][ T993] usb 5-1: config 3 has an invalid interface number: 153 but max is 0 [ 198.708177][ T993] usb 5-1: config 3 has no interface number 0 [ 198.708223][ T993] usb 5-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 198.708250][ T993] usb 5-1: config 3 interface 153 has no altsetting 0 [ 198.743355][ T993] usb 5-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 198.743373][ T993] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.743382][ T993] usb 5-1: Product: syz [ 198.743389][ T993] usb 5-1: Manufacturer: syz [ 198.743396][ T993] usb 5-1: SerialNumber: syz [ 198.814022][ T6623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 199.271592][ T6627] random: crng reseeded on system resumption [ 201.221677][ T993] sisusb 5-1:3.153: Invalid USB2VGA device [ 201.221698][ T993] sisusb 5-1:3.153: probe with driver sisusb failed with error -22 [ 201.265931][ T993] usb 5-1: USB disconnect, device number 7 [ 201.752202][ T1286] Bluetooth: hci5: Frame reassembly failed (-84) [ 201.846213][ T5902] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 202.006245][ T5902] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 202.006272][ T5902] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 202.006290][ T5902] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 202.006336][ T5902] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 202.006358][ T5902] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 202.009823][ T5902] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 202.009849][ T5902] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 202.009868][ T5902] usb 2-1: Product: syz [ 202.009881][ T5902] usb 2-1: Manufacturer: syz [ 202.038721][ T5902] cdc_wdm 2-1:1.0: skipping garbage [ 202.038740][ T5902] cdc_wdm 2-1:1.0: skipping garbage [ 202.054052][ T5902] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 202.054071][ T5902] cdc_wdm 2-1:1.0: Unknown control protocol [ 203.652337][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 6 bytes [ 203.833919][ T5823] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 203.873729][ T993] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 204.025881][ T993] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 204.025900][ T993] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.025909][ T993] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 204.025948][ T993] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 204.027797][ T993] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 204.027812][ T993] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 204.027821][ T993] usb 4-1: Product: syz [ 204.027831][ T993] usb 4-1: Manufacturer: syz [ 204.127698][ T993] cdc_wdm 4-1:1.0: skipping garbage [ 204.127717][ T993] cdc_wdm 4-1:1.0: skipping garbage [ 204.127751][ T993] cdc_wdm 4-1:1.0: probe with driver cdc_wdm failed with error -22 [ 204.349406][ T993] usb 4-1: USB disconnect, device number 5 [ 204.938320][ T5902] usb 2-1: USB disconnect, device number 8 [ 207.578919][ T61] Bluetooth: hci2: command 0x0406 tx timeout [ 207.580022][ T61] Bluetooth: hci0: command 0x0406 tx timeout [ 207.581216][ T61] Bluetooth: hci1: command 0x0406 tx timeout [ 207.581891][ T61] Bluetooth: hci3: command 0x0406 tx timeout [ 207.581916][ T61] Bluetooth: hci4: command 0x0406 tx timeout [ 210.753859][ T5901] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 212.349034][ T6702] random: crng reseeded on system resumption [ 212.380206][ T5901] usb 3-1: device descriptor read/all, error -71 [ 215.113788][ T5901] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 215.145637][ T6718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.166054][ T6718] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 215.276630][ T5901] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 215.276659][ T5901] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 215.276674][ T5901] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 215.276719][ T5901] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 215.280883][ T5901] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 215.280911][ T5901] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 215.280930][ T5901] usb 3-1: Product: syz [ 215.280944][ T5901] usb 3-1: Manufacturer: syz [ 215.317516][ T6721] Mount JFS Failure: -5 [ 215.317531][ T6721] jfs_mount failed w/return code = -5 [ 216.215571][ T5901] cdc_wdm 3-1:1.0: skipping garbage [ 216.215589][ T5901] cdc_wdm 3-1:1.0: skipping garbage [ 216.215623][ T5901] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 216.446046][ T5198] usb 3-1: USB disconnect, device number 9 [ 219.093910][ T5198] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 220.738486][ T6749] random: crng reseeded on system resumption [ 221.888269][ T5198] usb 5-1: device not accepting address 8, error -71 [ 226.381449][ T993] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 226.617399][ T44] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 226.773455][ T44] usb 1-1: unable to get BOS descriptor or descriptor too short [ 226.777277][ T44] usb 1-1: not running at top speed; connect to a high speed hub [ 226.791610][ T44] usb 1-1: config 3 has an invalid interface number: 153 but max is 0 [ 226.791637][ T44] usb 1-1: config 3 has no interface number 0 [ 226.791688][ T44] usb 1-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 226.791715][ T44] usb 1-1: config 3 interface 153 has no altsetting 0 [ 226.832154][ T44] usb 1-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 226.832183][ T44] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.832202][ T44] usb 1-1: Product: syz [ 226.832215][ T44] usb 1-1: Manufacturer: syz [ 226.832237][ T44] usb 1-1: SerialNumber: syz [ 226.880927][ T6768] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 227.238306][ T44] sisusb 1-1:3.153: Invalid USB2VGA device [ 227.238350][ T44] sisusb 1-1:3.153: probe with driver sisusb failed with error -22 [ 227.892771][ T44] usb 1-1: USB disconnect, device number 8 [ 228.600019][ T6787] Mount JFS Failure: -5 [ 228.600036][ T6787] jfs_mount failed w/return code = -5 [ 228.643784][ T31] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 228.796599][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 228.797622][ T31] usb 3-1: not running at top speed; connect to a high speed hub [ 228.799038][ T31] usb 3-1: config 3 has an invalid interface number: 153 but max is 0 [ 228.799060][ T31] usb 3-1: config 3 has no interface number 0 [ 228.799105][ T31] usb 3-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 228.799131][ T31] usb 3-1: config 3 interface 153 has no altsetting 0 [ 228.802053][ T31] usb 3-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 228.802077][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.802095][ T31] usb 3-1: Product: syz [ 228.802108][ T31] usb 3-1: Manufacturer: syz [ 228.802122][ T31] usb 3-1: SerialNumber: syz [ 228.833885][ T44] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 228.910907][ T6783] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 229.020056][ T44] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 229.020084][ T44] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.020102][ T44] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 229.020210][ T44] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 229.914687][ T44] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 229.914841][ T44] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 229.914861][ T44] usb 1-1: Product: syz [ 229.914874][ T44] usb 1-1: Manufacturer: syz [ 230.014184][ T44] cdc_wdm 1-1:1.0: skipping garbage [ 230.014202][ T44] cdc_wdm 1-1:1.0: skipping garbage [ 230.014292][ T44] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 230.231182][ T5901] usb 1-1: USB disconnect, device number 9 [ 232.723227][ T31] sisusb 3-1:3.153: Invalid USB2VGA device [ 232.723263][ T31] sisusb 3-1:3.153: probe with driver sisusb failed with error -22 [ 232.755956][ T31] usb 3-1: USB disconnect, device number 10 [ 232.863752][ T5903] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 234.087911][ T6816] random: crng reseeded on system resumption [ 234.205810][ T993] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 234.524071][ T5903] usb 2-1: unable to get BOS descriptor or descriptor too short [ 234.526065][ T5903] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 234.526101][ T5903] usb 2-1: can't read configurations, error -71 [ 234.858557][ T993] usb 1-1: config 9 has no interfaces? [ 234.858628][ T993] usb 1-1: New USB device found, idVendor=22d4, idProduct=1503, bcdDevice= 0.00 [ 234.858651][ T993] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.034629][ T6830] Mount JFS Failure: -5 [ 237.034644][ T6830] jfs_mount failed w/return code = -5 [ 239.833650][ T6834] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.834202][ T6834] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 240.396164][ T993] usb 1-1: string descriptor 0 read error: -32 [ 240.453898][ T31] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 240.739511][ T993] usb 1-1: USB disconnect, device number 10 [ 241.060658][ T6852] FAULT_INJECTION: forcing a failure. [ 241.060658][ T6852] name failslab, interval 1, probability 0, space 0, times 1 [ 241.060703][ T6852] CPU: 1 UID: 0 PID: 6852 Comm: syz.2.237 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 241.060725][ T6852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 241.060743][ T6852] Call Trace: [ 241.060751][ T6852] [ 241.060762][ T6852] dump_stack_lvl+0x189/0x250 [ 241.060802][ T6852] ? __pfx____ratelimit+0x10/0x10 [ 241.060826][ T6852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.060852][ T6852] ? __pfx__printk+0x10/0x10 [ 241.060880][ T6852] ? __pfx___might_resched+0x10/0x10 [ 241.060906][ T6852] should_fail_ex+0x46c/0x600 [ 241.060935][ T6852] should_failslab+0xa8/0x100 [ 241.060964][ T6852] __kmalloc_noprof+0xcc/0x7d0 [ 241.060988][ T6852] ? kfree+0x51/0x950 [ 241.061012][ T6852] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 241.061039][ T6852] tomoyo_realpath_from_path+0xe3/0x5d0 [ 241.061061][ T6852] ? tomoyo_domain+0xda/0x130 [ 241.061088][ T6852] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 241.061114][ T6852] tomoyo_path_number_perm+0x1e8/0x5a0 [ 241.061143][ T6852] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 241.061174][ T6852] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 241.061198][ T6852] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.061228][ T6852] ? __lock_acquire+0xab9/0xd20 [ 241.061275][ T6852] ? __fget_files+0x2a/0x420 [ 241.061303][ T6852] ? __fget_files+0x2a/0x420 [ 241.061326][ T6852] ? __fget_files+0x3a6/0x420 [ 241.061349][ T6852] ? __fget_files+0x2a/0x420 [ 241.061377][ T6852] security_file_ioctl+0xcb/0x2d0 [ 241.061406][ T6852] __se_sys_ioctl+0x47/0x170 [ 241.061430][ T6852] do_syscall_64+0xfa/0x3b0 [ 241.061453][ T6852] ? lockdep_hardirqs_on+0x9c/0x150 [ 241.061475][ T6852] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.061494][ T6852] ? clear_bhb_loop+0x60/0xb0 [ 241.061517][ T6852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.061535][ T6852] RIP: 0033:0x7f545cefeec9 [ 241.061555][ T6852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.061571][ T6852] RSP: 002b:00007f545b166038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 241.061599][ T6852] RAX: ffffffffffffffda RBX: 00007f545d155fa0 RCX: 00007f545cefeec9 [ 241.061613][ T6852] RDX: 0000000000000000 RSI: 0000000000003b71 RDI: 0000000000000003 [ 241.061624][ T6852] RBP: 00007f545b166090 R08: 0000000000000000 R09: 0000000000000000 [ 241.061636][ T6852] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.061648][ T6852] R13: 00007f545d156038 R14: 00007f545d155fa0 R15: 00007ffece9e0808 [ 241.061679][ T6852] [ 241.061687][ T6852] ERROR: Out of memory at tomoyo_realpath_from_path. [ 242.130261][ T5903] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 242.130405][ T5902] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 242.331334][ T5903] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 242.331369][ T5903] usb 1-1: can't read configurations, error -61 [ 242.344072][ T5902] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 242.344099][ T5902] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.344116][ T5902] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 242.344162][ T5902] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 242.346201][ T5902] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 242.346225][ T5902] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 242.346243][ T5902] usb 5-1: Product: syz [ 242.346256][ T5902] usb 5-1: Manufacturer: syz [ 242.368499][ T5902] cdc_wdm 5-1:1.0: skipping garbage [ 242.368517][ T5902] cdc_wdm 5-1:1.0: skipping garbage [ 242.368527][ T5902] cdc_wdm 5-1:1.0: skipping garbage [ 242.368560][ T5902] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 242.483796][ T5903] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 242.567612][ T5990] usb 5-1: USB disconnect, device number 10 [ 242.646932][ T5903] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 242.646970][ T5903] usb 1-1: can't read configurations, error -61 [ 242.647336][ T5903] usb usb1-port1: attempt power cycle [ 242.983735][ T5903] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 243.010628][ T5903] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 243.010671][ T5903] usb 1-1: can't read configurations, error -61 [ 243.166456][ T5903] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 243.202377][ T5903] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 243.202416][ T5903] usb 1-1: can't read configurations, error -61 [ 243.203772][ T5903] usb usb1-port1: unable to enumerate USB device [ 244.504614][ T5130] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 244.508210][ T5130] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 244.509519][ T5130] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 244.546121][ T5130] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 244.555398][ T5130] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 244.687700][ T6315] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.383749][ T31] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 245.539402][ T31] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 245.539431][ T31] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 245.539448][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 245.539505][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 245.539530][ T31] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 245.542781][ T31] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 245.542809][ T31] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 245.542827][ T31] usb 1-1: Product: syz [ 245.542839][ T31] usb 1-1: Manufacturer: syz [ 245.554452][ T993] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 245.707868][ T31] cdc_wdm 1-1:1.0: skipping garbage [ 245.707887][ T31] cdc_wdm 1-1:1.0: skipping garbage [ 245.720247][ T31] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 245.720268][ T31] cdc_wdm 1-1:1.0: Unknown control protocol [ 245.786729][ T993] usb 3-1: unable to get BOS descriptor or descriptor too short [ 245.787466][ T993] usb 3-1: not running at top speed; connect to a high speed hub [ 245.788886][ T993] usb 3-1: config 3 has an invalid interface number: 153 but max is 0 [ 245.788908][ T993] usb 3-1: config 3 has no interface number 0 [ 245.788952][ T993] usb 3-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 245.788978][ T993] usb 3-1: config 3 interface 153 has no altsetting 0 [ 245.791903][ T993] usb 3-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 245.791927][ T993] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.791945][ T993] usb 3-1: Product: syz [ 245.791959][ T993] usb 3-1: Manufacturer: syz [ 245.791972][ T993] usb 3-1: SerialNumber: syz [ 245.802744][ T6894] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 246.038226][ T6315] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.655985][ T5130] Bluetooth: hci2: command tx timeout [ 246.879573][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 7 bytes [ 247.675517][ T6315] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.478506][ T993] sisusb 3-1:3.153: Invalid USB2VGA device [ 248.478543][ T993] sisusb 3-1:3.153: probe with driver sisusb failed with error -22 [ 248.551382][ T993] usb 3-1: USB disconnect, device number 12 [ 248.703786][ T5130] Bluetooth: hci2: command tx timeout [ 248.773504][ T31] usb 1-1: USB disconnect, device number 15 [ 250.759380][ T6929] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 250.783703][ T5130] Bluetooth: hci2: command tx timeout [ 250.917739][ T6315] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.200235][ T6877] chnl_net:caif_netlink_parms(): no params data found [ 251.788692][ T6952] fuse: Bad value for 'fd' [ 255.473812][ T5130] Bluetooth: hci2: command tx timeout [ 255.884723][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.884795][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.606131][ T6980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.648314][ T6979] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.249350][ T6315] bridge_slave_1: left allmulticast mode [ 257.251359][ T6315] bridge_slave_1: left promiscuous mode [ 257.253258][ T6315] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.851683][ T6315] bridge_slave_0: left allmulticast mode [ 257.851713][ T6315] bridge_slave_0: left promiscuous mode [ 257.851950][ T6315] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.926347][ T6991] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 261.177040][ T5198] usb 5-1: new full-speed USB device number 11 using dummy_hcd [ 262.405988][ T5198] usb 5-1: unable to get BOS descriptor or descriptor too short [ 262.412143][ T5198] usb 5-1: not running at top speed; connect to a high speed hub [ 262.446957][ T5198] usb 5-1: config 3 has an invalid interface number: 153 but max is 0 [ 262.447039][ T5198] usb 5-1: config 3 has no interface number 0 [ 262.447394][ T5198] usb 5-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 262.447468][ T5198] usb 5-1: config 3 interface 153 has no altsetting 0 [ 262.846196][ T7024] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.282'. [ 262.889371][ T7024] Driver unsupported XDP return value 0 on prog (id 46) dev N/A, expect packet loss! [ 262.959147][ T5198] usb 5-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 262.959176][ T5198] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.988924][ T5198] usb 5-1: can't set config #3, error -71 [ 262.991886][ T5198] usb 5-1: USB disconnect, device number 11 [ 263.588018][ T5990] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 263.736080][ T5990] usb 4-1: unable to get BOS descriptor or descriptor too short [ 263.736659][ T5990] usb 4-1: not running at top speed; connect to a high speed hub [ 263.737975][ T5990] usb 4-1: config 3 has an invalid interface number: 153 but max is 0 [ 263.737998][ T5990] usb 4-1: config 3 has no interface number 0 [ 263.738039][ T5990] usb 4-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 263.738064][ T5990] usb 4-1: config 3 interface 153 has no altsetting 0 [ 263.752026][ T5990] usb 4-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 263.752055][ T5990] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.752073][ T5990] usb 4-1: Product: syz [ 263.752087][ T5990] usb 4-1: Manufacturer: syz [ 263.752100][ T5990] usb 4-1: SerialNumber: syz [ 263.839804][ T7028] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 264.952285][ T7032] netlink: 72 bytes leftover after parsing attributes in process `syz.0.286'. [ 266.163908][ T5990] sisusb 4-1:3.153: Invalid USB2VGA device [ 266.163945][ T5990] sisusb 4-1:3.153: probe with driver sisusb failed with error -22 [ 266.192978][ T5990] usb 4-1: USB disconnect, device number 7 [ 272.244525][ T5894] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 272.440098][ T5894] usb 1-1: unable to get BOS descriptor or descriptor too short [ 272.566637][ T5894] usb 1-1: not running at top speed; connect to a high speed hub [ 272.569269][ T5894] usb 1-1: config 3 has an invalid interface number: 153 but max is 0 [ 272.569293][ T5894] usb 1-1: config 3 has no interface number 0 [ 272.569336][ T5894] usb 1-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 272.569362][ T5894] usb 1-1: config 3 interface 153 has no altsetting 0 [ 272.572234][ T5894] usb 1-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 272.572259][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.572278][ T5894] usb 1-1: Product: syz [ 272.572291][ T5894] usb 1-1: Manufacturer: syz [ 272.572304][ T5894] usb 1-1: SerialNumber: syz [ 272.656776][ T7072] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 273.267568][ T6315] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.334598][ T6315] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.363544][ T6315] bond0 (unregistering): Released all slaves [ 273.425423][ T6877] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.425546][ T6877] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.425756][ T6877] bridge_slave_0: entered allmulticast mode [ 273.428159][ T6877] bridge_slave_0: entered promiscuous mode [ 273.493983][ T6877] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.494128][ T6877] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.494345][ T6877] bridge_slave_1: entered allmulticast mode [ 273.496698][ T6877] bridge_slave_1: entered promiscuous mode [ 273.823858][ T5130] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 274.034397][ T6877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.060691][ T6877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.634944][ T5894] sisusb 1-1:3.153: Invalid USB2VGA device [ 274.634978][ T5894] sisusb 1-1:3.153: probe with driver sisusb failed with error -22 [ 274.642913][ T5894] usb 1-1: USB disconnect, device number 16 [ 274.943797][ T5903] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 275.000296][ T6877] team0: Port device team_slave_0 added [ 275.008600][ T6877] team0: Port device team_slave_1 added [ 275.096813][ T5903] usb 4-1: unable to get BOS descriptor or descriptor too short [ 275.097343][ T5903] usb 4-1: not running at top speed; connect to a high speed hub [ 275.098823][ T5903] usb 4-1: config 3 has an invalid interface number: 153 but max is 0 [ 275.098846][ T5903] usb 4-1: config 3 has no interface number 0 [ 275.098895][ T5903] usb 4-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 275.098917][ T5903] usb 4-1: config 3 interface 153 has no altsetting 0 [ 275.101055][ T5903] usb 4-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 275.101071][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.101081][ T5903] usb 4-1: Product: syz [ 275.101088][ T5903] usb 4-1: Manufacturer: syz [ 275.101095][ T5903] usb 4-1: SerialNumber: syz [ 275.114624][ T7077] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 275.183729][ T5821] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 275.253831][ T5894] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 275.298273][ T6877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.298290][ T6877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 275.298312][ T6877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.433328][ T5894] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 275.433357][ T5894] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 275.433374][ T5894] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 275.433421][ T5894] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 275.476312][ T5894] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 275.476330][ T5894] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 275.476348][ T5894] usb 1-1: Product: syz [ 275.476361][ T5894] usb 1-1: Manufacturer: syz [ 275.517236][ T5894] cdc_wdm 1-1:1.0: skipping garbage [ 275.517256][ T5894] cdc_wdm 1-1:1.0: skipping garbage [ 275.517268][ T5894] cdc_wdm 1-1:1.0: skipping garbage [ 275.517303][ T5894] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22 [ 275.548520][ T6315] hsr_slave_0: left promiscuous mode [ 275.585044][ T6315] hsr_slave_1: left promiscuous mode [ 275.588431][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.589319][ T6315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.628733][ T6315] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.628761][ T6315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.728887][ T993] usb 1-1: USB disconnect, device number 17 [ 275.829159][ T6315] veth1_macvtap: left promiscuous mode [ 275.832671][ T6315] veth0_macvtap: left promiscuous mode [ 275.836601][ T6315] veth1_vlan: left promiscuous mode [ 275.841097][ T6315] veth0_vlan: left promiscuous mode [ 278.548285][ T5903] sisusb 4-1:3.153: Invalid USB2VGA device [ 278.548316][ T5903] sisusb 4-1:3.153: probe with driver sisusb failed with error -22 [ 278.570771][ T5903] usb 4-1: USB disconnect, device number 8 [ 279.125892][ T5130] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 280.090237][ T5821] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 280.106210][ T5821] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 280.107325][ T5821] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 280.109009][ T5821] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 280.109863][ T5821] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 280.414782][ T5903] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 281.633033][ T5903] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4 [ 281.638100][ T5903] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 281.638126][ T5903] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 281.638144][ T5903] usb 4-1: Product: syz [ 281.638158][ T5903] usb 4-1: Manufacturer: syz [ 281.638171][ T5903] usb 4-1: SerialNumber: syz [ 281.647161][ T5903] usb 4-1: config 0 descriptor?? [ 281.651288][ T5903] hub 4-1:0.0: bad descriptor, ignoring hub [ 281.651324][ T5903] hub 4-1:0.0: probe with driver hub failed with error -5 [ 281.662180][ T5903] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 282.224819][ T5821] Bluetooth: hci5: command tx timeout [ 282.512660][ T31] usb 1-1: new full-speed USB device number 18 using dummy_hcd [ 282.655466][ T7102] netlink: 56 bytes leftover after parsing attributes in process `syz.3.306'. [ 282.780653][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 282.781299][ T31] usb 1-1: not running at top speed; connect to a high speed hub [ 282.782604][ T31] usb 1-1: config 3 has an invalid interface number: 153 but max is 0 [ 282.782627][ T31] usb 1-1: config 3 has no interface number 0 [ 282.782669][ T31] usb 1-1: config 3 interface 153 altsetting 128 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 282.782694][ T31] usb 1-1: config 3 interface 153 has no altsetting 0 [ 282.785552][ T31] usb 1-1: New USB device found, idVendor=0711, idProduct=0920, bcdDevice=d5.b6 [ 282.785578][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.785597][ T31] usb 1-1: Product: syz [ 282.785611][ T31] usb 1-1: Manufacturer: syz [ 282.785625][ T31] usb 1-1: SerialNumber: syz [ 282.842300][ T7116] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 282.944397][ T5817] IPVS: starting estimator thread 0... [ 282.959934][ [ 282.959934][ T5903] 1024-page vmalloc region starting at 0xffffc9000dd3a000 allocated at kcov_ioctl+0x58/0x650 [ 282.959980][ T5903] list_del corruption. next->prev should be ffffc9001ad95000, but was 0000000000000000. (next=ffffc9000dd3a000) [ 282.960518][ T5903] ------------[ cut here ]------------ [ 282.960526][ T5903] kernel BUG at lib/list_debug.c:67! [ 282.960579][ T5903] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 282.960600][ T5903] CPU: 0 UID: 0 PID: 5903 Comm: kworker/0:6 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 282.960620][ T5903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 282.960631][ T5903] Workqueue: usb_hub_wq hub_event [ 282.960654][ T5903] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 282.960677][ T5903] Code: 2c 7e 7e fd 43 80 3c 2c 00 74 08 4c 89 ff e8 bd 7c 9e fd 49 8b 56 08 48 c7 c7 80 d5 1d 8b 48 89 de 4c 89 f1 e8 07 f1 a6 fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 282.960693][ T5903] RSP: 0018:ffffc90005207738 EFLAGS: 00010246 [ 282.960707][ T5903] RAX: 000000000000006d RBX: ffffc9001ad95000 RCX: 228d3126c8056200 [ 282.960720][ T5903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.960731][ T5903] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 282.960742][ T5903] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff92001ba7401 [ 282.960755][ T5903] R13: dffffc0000000000 R14: ffffc9000dd3a000 R15: ffffc9000dd3a008 [ 282.960768][ T5903] FS: 0000000000000000(0000) GS:ffff888127020000(0000) knlGS:0000000000000000 [ 282.960783][ T5903] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.960794][ T5903] CR2: 0000560d33a4ede8 CR3: 0000000010696000 CR4: 00000000003526f0 [ 282.960810][ T5903] Call Trace: [ 282.960818][ T5903] [ 282.960826][ T5903] kcov_remote_start+0x2b0/0x6f0 [ 282.960853][ T5903] hub_event+0x158/0x4a20 [ 282.960872][ T5903] ? cpuacct_charge+0x117/0x320 [ 282.960901][ T5903] ? do_raw_spin_lock+0x121/0x290 [ 282.960921][ T5903] ? look_up_lock_class+0x74/0x170 [ 282.960945][ T5903] ? register_lock_class+0x51/0x320 [ 282.960971][ T5903] ? __lock_acquire+0xab9/0xd20 [ 282.960997][ T5903] ? __pfx_hub_event+0x10/0x10 [ 282.961017][ T5903] ? process_scheduled_works+0x9ef/0x17b0 [ 282.961041][ T5903] ? _raw_spin_unlock_irq+0x23/0x50 [ 282.961062][ T5903] ? process_scheduled_works+0x9ef/0x17b0 [ 282.961083][ T5903] ? process_scheduled_works+0x9ef/0x17b0 [ 282.961106][ T5903] process_scheduled_works+0xae1/0x17b0 [ 282.961139][ T5903] ? __pfx_process_scheduled_works+0x10/0x10 [ 282.961168][ T5903] worker_thread+0x8a0/0xda0 [ 282.961191][ T5903] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 282.961217][ T5903] ? __kthread_parkme+0x7b/0x200 [ 282.961250][ T5903] kthread+0x711/0x8a0 [ 282.961266][ T5903] ? __pfx_worker_thread+0x10/0x10 [ 282.961289][ T5903] ? __pfx_kthread+0x10/0x10 [ 282.961303][ T5903] ? rt_spin_unlock+0x150/0x200 [ 282.961329][ T5903] ? rt_spin_unlock+0x161/0x200 [ 282.961345][ T5903] ? __pfx_kthread+0x10/0x10 [ 282.961362][ T5903] ret_from_fork+0x436/0x7d0 [ 282.961385][ T5903] ? __pfx_ret_from_fork+0x10/0x10 [ 282.961409][ T5903] ? __switch_to_asm+0x39/0x70 [ 282.961426][ T5903] ? __switch_to_asm+0x33/0x70 [ 282.961443][ T5903] ? __pfx_kthread+0x10/0x10 [ 282.961459][ T5903] ret_from_fork_asm+0x1a/0x30 [ 282.961482][ T5903] [ 282.961488][ T5903] Modules linked in: [ 282.961507][ T5903] ---[ end trace 0000000000000000 ]--- [ 282.961519][ T5903] RIP: 0010:__list_del_entry_valid_or_report+0x18a/0x190 [ 282.961540][ T5903] Code: 2c 7e 7e fd 43 80 3c 2c 00 74 08 4c 89 ff e8 bd 7c 9e fd 49 8b 56 08 48 c7 c7 80 d5 1d 8b 48 89 de 4c 89 f1 e8 07 f1 a6 fc 90 <0f> 0b cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 282.961555][ T5903] RSP: 0018:ffffc90005207738 EFLAGS: 00010246 [ 282.961570][ T5903] RAX: 000000000000006d RBX: ffffc9001ad95000 RCX: 228d3126c8056200 [ 282.961582][ T5903] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 282.961593][ T5903] RBP: 0000000000100000 R08: 0000000000000000 R09: 0000000000000000 [ 282.961604][ T5903] R10: dffffc0000000000 R11: ffffed101710487b R12: 1ffff92001ba7401 [ 282.961618][ T5903] R13: dffffc0000000000 R14: ffffc9000dd3a000 R15: ffffc9000dd3a008 [ 282.961632][ T5903] FS: 0000000000000000(0000) GS:ffff888127020000(0000) knlGS:0000000000000000 [ 282.961647][ T5903] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 282.961659][ T5903] CR2: 0000560d33a4ede8 CR3: 0000000010696000 CR4: 00000000003526f0 [ 282.961677][ T5903] Kernel panic - not syncing: Fatal exception [ 282.961949][ T5903] Kernel Offset: disabled