last executing test programs: 14.556226404s ago: executing program 4 (id=180): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040010) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x80, 0x8000, 0x6, 0x10000, {{0x2b, 0x4, 0x0, 0x1b, 0xac, 0x68, 0x0, 0xf6, 0x2f, 0x0, @loopback, @empty, {[@cipso={0x86, 0x4f, 0x1, [{0x1, 0xe, "2168f3c6d416bfbf684a0438"}, {0x7, 0x11, "4000339423e63aa1f82946b2655559"}, {0x0, 0x2}, {0x0, 0x3, "fc"}, {0x5, 0x2}, {0x5, 0x12, "048814648444dd0c6daff4e6881d895d"}, {0x1, 0xa, "6bef76409573034c"}, {0x0, 0x7, "98ec25ce77"}]}, @timestamp_addr={0x44, 0x44, 0x9a, 0x1, 0x9, [{@loopback, 0x7}, {@private=0xa010101, 0x540c}, {@remote, 0x3}, {@private=0xa010100}, {@loopback, 0x1}, {@multicast1, 0x5}, {@loopback, 0x5}, {@loopback, 0xffff8000}]}, @ra={0x94, 0x4}, @noop]}}}}}) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESDEC=r4], &(0x7f0000000280)='GPL\x00', 0x6, 0x25, &(0x7f0000000080)=""/37, 0x41000, 0x8, '\x00', r3, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x1, &(0x7f0000000640)=[0xffffffffffffffff, r5], &(0x7f0000000680)=[{0x1, 0x1, 0xb, 0x2}], 0x10, 0xab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) r6 = fsopen(0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(r7, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) fsmount(r6, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r8, r8, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x200000000000000) 9.811265679s ago: executing program 2 (id=194): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) 9.503321974s ago: executing program 4 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0) 9.361003821s ago: executing program 4 (id=199): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000004000000014001a80100004800c"], 0x34}}, 0x60040050) 9.141485603s ago: executing program 4 (id=200): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x3}}, 0x20) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x0, 0x0, 0x8009, 0xd}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000020c0), &(0x7f0000002100)=0x4) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) syz_io_uring_setup(0x1714, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) r3 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='vuto_da_alloc', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r5 = syz_open_procfs(0x0, 0x0) syz_usb_connect(0x7, 0x3d, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0) getdents64(r5, &(0x7f0000000340)=""/79, 0x4f) exit(0x8) getdents(r5, 0x0, 0x3b) read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) 8.928302528s ago: executing program 2 (id=202): r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000005d40)=[{{&(0x7f0000000180)=@can={0x1d, r2}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000200)="af", 0x1}], 0x1}}, {{&(0x7f00000022c0)=@can={0x1d, r2}, 0x80, &(0x7f0000003340)=[{&(0x7f0000002340)='v', 0x5cc}], 0x1}}], 0x2, 0x0) 8.852543123s ago: executing program 3 (id=203): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4b, 0x9, 0x8, 0x0, 0xb}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) listxattr(&(0x7f0000000480)='./file0\x00', &(0x7f0000000540)=""/211, 0xd3) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028014000300e1a0b063bae294fe8f45a9b02fdf068408000240000000010d000100434f4e4e4d41524b000000000900010073797a30000000000900020073797a"], 0x98}}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = fcntl$dupfd(r2, 0x406, r2) ioctl$KVM_IOEVENTFD(r5, 0x4040ae79, &(0x7f0000000240)={0x1, 0xffff0fff, 0x1, r6, 0x1}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0xfffffffffffffffc, 0x40000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000001c0)={0x0, 0x0}) prlimit64(r7, 0xe, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x5c, 0x18, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'pimreg0\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) r9 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14, 0x81800) accept4$packet(r9, 0x0, &(0x7f0000000440), 0x80800) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2000002, 0x42032, 0xffffffffffffffff, 0x80000000) mremap(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1000, 0x0, &(0x7f00008b5000/0x1000)=nil) 8.686106268s ago: executing program 2 (id=204): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="2c0000001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="000000ff000000000c001a8004"], 0x2c}}, 0x0) 8.448534632s ago: executing program 2 (id=206): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x31}}, 0x1c) syz_emit_vhci(0x0, 0x7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b05, &(0x7f00000004c0)={'wlan0\x00'}) keyctl$read(0x1f, 0x0, &(0x7f0000000080)=""/61, 0x3d) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r6, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, r6, 0x3, 0x9, 0x3ffc}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080006000900000014000000451a001400640049836653e6000b32907864010104ffffffff6280bfed92a7069212147efbee989574c6ea7e928da26c29f5ea5162fd83cc899a1878f447fbd661b7c886837edc2e09a87c0f06ea70ec0b3ade82fbbfad2891176d7a0a79e23b46a7ddf8302c3785b47d8274ca1d9c4c095389d2cd37e1ac1eae05444934946d58e08970a5dcab232e7ad6becf456140a44b"], 0x22) 7.662219126s ago: executing program 0 (id=209): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0xffff, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000080)={r1, 0xf7}, &(0x7f00000000c0)=0x8) 6.903241554s ago: executing program 0 (id=210): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000bc0)={{0x12, 0x1, 0x0, 0x44, 0x39, 0xdc, 0x40, 0x1660, 0x1921, 0x1f84, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x3, 0x0, 0x2, 0xf6, 0x62, 0x70, 0x0, [], [{{0x9, 0x5, 0x7, 0x0, 0x10, 0x9, 0x6, 0x8}}, {{0x9, 0x5, 0xd, 0x3, 0x0, 0x68, 0x37, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000280)={0x20, 0x0, 0x1, "f6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000000c0)={0x0, 0x18, 0x9, "dcf3390988dd7cac29"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.440377429s ago: executing program 3 (id=211): r0 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000280)=0x2) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz1\x00', {0x0, 0x6, 0x9, 0x1}, 0x4c, [0x0, 0x8, 0x4, 0x800, 0x486, 0x7, 0x7f, 0x3, 0x4, 0x9, 0x5, 0x10001, 0x9, 0x1000, 0x2, 0x5, 0x3, 0xe6d1, 0x0, 0x4, 0x2, 0x9, 0x2, 0xeaab, 0x7cc, 0x72d, 0x4, 0x8, 0xfff, 0xcc000000, 0x9, 0x2, 0x2, 0x1, 0x9, 0xa, 0x62bdaf8b, 0x5, 0x3, 0x7, 0x1, 0x1, 0x2, 0x0, 0x3, 0xc6, 0x1ff, 0x20, 0x1b8, 0x1, 0x1, 0x2, 0x2, 0x29800000, 0xe, 0x1, 0x8, 0xffffffff, 0x3, 0x8, 0x1ce0, 0x9, 0x81, 0xe], [0x1000, 0xb13d, 0x2, 0x5, 0xcb7b, 0x1, 0x3, 0x3, 0xb0, 0x1000, 0x80000001, 0xfffffffb, 0x0, 0x8, 0x200, 0x200000, 0x8, 0x6, 0x7, 0xfffffffc, 0xb0, 0x5, 0x1, 0x7, 0xb, 0x4e6, 0x2, 0xfff, 0xc36, 0xaef, 0x1, 0x4c, 0x7, 0x5, 0x0, 0x40, 0x10101, 0x1, 0x4, 0x59, 0x9, 0x60, 0x6, 0xfe56, 0xfa3, 0xfffffff6, 0x200, 0x5, 0x8, 0x1000, 0x9, 0x0, 0x0, 0x7, 0x6, 0x2, 0x1, 0x1, 0x1ff, 0x2, 0x9, 0x7f, 0x8001, 0x248], [0x2, 0xffff, 0x2, 0x18000, 0x9, 0x9, 0xddc, 0x3, 0xffff, 0x7, 0x0, 0xfffffff9, 0x40, 0x8, 0x3, 0x4, 0x3, 0x9, 0x4, 0x8d3, 0x40100000, 0x8, 0x4, 0x1, 0x7, 0x40, 0x2005, 0x2, 0x2, 0x8, 0x7ff, 0x1000, 0x8, 0x4, 0x7, 0x7f, 0x3, 0x200, 0x9, 0x8, 0xffff, 0xcb9, 0x800, 0x1, 0x8, 0x0, 0xfffffffd, 0xf5d1, 0x2e88, 0x1, 0x800, 0x9, 0x7, 0x2, 0xac3, 0x7, 0x81, 0x1, 0x53e, 0x1, 0x400006, 0x0, 0x5, 0x8], [0x1ff, 0x80000000, 0x5, 0x4d74, 0x1, 0x7, 0xa, 0x0, 0x32, 0x4, 0x4, 0x7, 0x4, 0x1, 0x0, 0x7fff, 0x3ef, 0x1, 0x8, 0xffffffff, 0xb, 0xa, 0x80000000, 0x0, 0x8, 0xfff, 0x5, 0x4, 0x1007, 0x960, 0x6, 0x3, 0x8, 0x0, 0xa56, 0xf, 0x6, 0x0, 0x0, 0x1, 0xc, 0xfc, 0x9f6057e, 0x8, 0x1000100, 0x9, 0x7fffffff, 0x7, 0x3, 0xcc, 0x5, 0x0, 0x100, 0x4, 0x9, 0xfffffff7, 0x9, 0x80000001, 0xd, 0x2, 0xfffffffc, 0x6, 0x9, 0x5]}, 0x45c) 6.082230994s ago: executing program 3 (id=212): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet6(0xa, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) r3 = socket$pptp(0x18, 0x1, 0x2) connect$pptp(r3, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) io_uring_setup(0x5a20, &(0x7f0000000bc0)={0x0, 0x5818, 0x0, 0x3, 0x201038e, 0x0, r0}) r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r5 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r6 = memfd_create(&(0x7f0000000940)='y\x105\xfb\xf7u\x83%\b\x00\x00\x00\x00\x00\x00\x00\xea_\xccZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x10\x00\x00\x00\x04\x879\xa24\xa9a\b\x00\xb2\xd3\xcbZJ\x7fa\xc4\x1acB\xaa\xc1\xfb Q\x96\xd9xJ2\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea\b\x00\x00\x00\x00\x00\x00\x00\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9V\x01A\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\a\x00\x01vRk\xaabB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\x80\x81\xa0\xa2-g\b\x99\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecn\x02\xc8\xc4\f\x04\x99\xf6\xfc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc8L\xae\x1ff\xcf\xb3\xb65\x12\x89\x02\x82t\x0f\xb0\xe89\x16\fO\x19\x91\xfd\x10\x0e\xa7r\x12\xab\xd4\xd1d\xad\f\x11\xb3\xb3c\xe2\xfe\xcd\x9f7\xa1\x14\xfa\xe2\xdf\x7f\xf4NG\xe3\xeb\x18\xde|\xb3\xf5S\x9a\x04\xb4Lry\xa9\xd6\xfb\xbc\n+N\xf7\xf6\x87\x95\xd9+\xd2sc/\x06\xaa#K3,k\xf3(\xcc\xc7\xb47\xfa\xc3\x1c\x91!\xd3\xd2`-\xa2xrR\x1c\x81i\x87u|29Q\xdf\xed\x10\x9b\x930\xa8v\xa0\x88\xa4t\x17\xb2\xca9\x02\x03\xc9P\xcc\xe0\xb7\x9c\x82\xb4\x03\x83e\xee\x95\xccO\x1b\x83\f\n{\xf3\x12\x90\xcf\x10\xb5>\b3\x80\x8d\xb2%7\x10\xeee\xe4\xc3\xb2^\xad\xb6~\xa2\xbdE\xbf\x91\vqt\x81\xbd\x19\xde\x81\tw\xd4p\xd1\x8aNJ\xb3M\a\xc4\xfa\xb0,$\x81j\xb4Hs\x93>\x16U\xd0t\xe4\xca0T\xb7\xf7\x9d4\b\xd9\xdeps\xec\xa0\nJ\xa5\xfe\xda{(\xee\xb5\x11?\xc3I-\x8bc\xc9\xfb\a\xe5\xab\xf8v1\xdc\xc5\x8c\xebs1\x81\xca\x81l\xa12\xff<\xf5\x12\xcc+\xd4\xab\x84\x16\xa4+\x0e\xd4\x02\xe3\xaa1\xeam\x8ce\xb4r\x0eo&3wff\xe6\x91\x7f\xba\xad\x05\xdd\xc0+\"\xa5\x80\'#\xfd\x9dA&\xee \x18\xe5\x17\x1bd\xd0\xb9\x90\xde\xec\xe4M\xe5\x06\x03r\fc\x8c\x10\x99x\xec`e`\xc3F\xdf\xbc\xa8\xff\x05\xe6\xea\xc3u\xd7\t\x88<\"\xf7!\xd6\x0e\xbbE^\xcd\xb0\x15g\xe6\xf2?y1\x9f\xd3\x95\xc4E\xd0\xb4\x16`r\x14\xad\x02\x17\x9a\x86I]\x02f\xd3\xc9\xe1H\xd7c\xcaQ\x8cE7\xcc\xcf=\xf3\xf7\xb9\xf6s\x88\bZi\b*w\xc5;\x88\r\xab\xa1\t\xf1\x02)5\x00\x84', 0xb) ftruncate(r6, 0xffff) fcntl$addseals(r6, 0x409, 0x7) r7 = ioctl$UDMABUF_CREATE(r5, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x8000}) r8 = fcntl$dupfd(r7, 0x0, r7) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r4, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r8}) r9 = socket$unix(0x1, 0x1, 0x0) close(r9) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r9, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r9, &(0x7f0000000080)={0xa002a008}) 5.968718563s ago: executing program 4 (id=213): openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000003c0)) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) writev(r1, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket(0x22, 0x2, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) listen(0xffffffffffffffff, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) sync() ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b"], 0x0) syz_open_dev$midi(0x0, 0x500, 0xc900) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x2, 0x5, 0x7}, 0x50) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000002c0)={{0x9, 0x8}, 'port0\x00', 0x80, 0x80010, 0x9, 0x1, 0x7, 0x5, 0x4, 0x0, 0x2, 0x10}) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000180)=0xf13, 0x4) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r5, &(0x7f0000000300), &(0x7f0000000200)=""/35}, 0x20) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) socket$kcm(0x10, 0x400000002, 0x0) 5.531787204s ago: executing program 1 (id=214): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f00000002c0)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x300) 5.375733702s ago: executing program 2 (id=215): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20040010) bind$alg(0xffffffffffffffff, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000300)={'erspan0\x00', 0x0, 0x80, 0x8000, 0x6, 0x10000, {{0x2f, 0x4, 0x0, 0x1b, 0xbc, 0x68, 0x0, 0xf6, 0x2f, 0x0, @loopback, @empty, {[@lsrr={0x83, 0x13, 0xb1, [@private=0xa010101, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x20}]}, @cipso={0x86, 0x49, 0x1, [{0x1, 0x8, "2168f3c6d416"}, {0x7, 0x11, "4000339423e63aa1f82946b2655559"}, {0x0, 0x2}, {0x0, 0x3, "fc"}, {0x5, 0x2}, {0x5, 0x12, "048814648444dd0c6daff4e6881d895d"}, {0x1, 0xa, "6bef76409573034c"}, {0x0, 0x7, "98ec25ce77"}]}, @timestamp_addr={0x44, 0x44, 0x9a, 0x1, 0x9, [{@loopback, 0x7}, {@private=0xa010101, 0x540c}, {@remote, 0x3}, {@private=0xa010100}, {@loopback, 0x1}, {@multicast1, 0x5}, {@loopback, 0x5}, {@loopback, 0xffff8000}]}, @ra={0x94, 0x4}, @noop]}}}}}) r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./bus\x00', 0x0, 0x8}, 0x18) r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2c0c2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0xf, 0x4, &(0x7f0000000440)=ANY=[@ANYRESDEC=r4], &(0x7f0000000280)='GPL\x00', 0x6, 0x25, &(0x7f0000000080)=""/37, 0x41000, 0x8, '\x00', r3, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r4, 0x1, &(0x7f0000000640)=[0xffffffffffffffff, r5], &(0x7f0000000680)=[{0x1, 0x1, 0xb, 0x2}], 0x10, 0xab}, 0x94) sched_setattr(0x0, &(0x7f0000000000)={0x38, 0x0, 0x4, 0x8001, 0x0, 0xb49, 0x200000000002, 0x7, 0x8, 0x5}, 0x0) syz_genetlink_get_family_id$batadv(0x0, r0) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x71) r6 = fsopen(0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) readlinkat(r7, &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)=""/10, 0xa) fsmount(r6, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r8 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r8, r8, 0x0) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc}, 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x200000000000000) 4.787520663s ago: executing program 1 (id=216): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @local}, 0xc) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @local}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x0) 4.109696162s ago: executing program 1 (id=217): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x10000, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) ioctl$KVM_CLEAR_DIRTY_LOG(r1, 0xc018aec0, &(0x7f0000000300)={0x1, 0x1000000, 0x0, 0x0}) 3.554612503s ago: executing program 0 (id=218): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_getattr(0x0, &(0x7f0000000000)={0x38}, 0x38, 0x0) 3.453761269s ago: executing program 1 (id=219): unshare(0x600) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_CAP_X86_DISABLE_EXITS(r2, 0x4068aea3, 0x0) 3.160919604s ago: executing program 1 (id=220): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x1000000, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 3.160659385s ago: executing program 0 (id=221): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x8000}, 0x4) sendto$packet(r0, 0x0, 0x0, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0xfb, 0x6, @local}, 0x14) 2.90573397s ago: executing program 0 (id=222): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f0000000080)=ANY=[]) ioctl$KVM_GET_VCPU_EVENTS(r2, 0xc048aeca, &(0x7f0000000080)) 2.639283376s ago: executing program 2 (id=223): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000000c0)={0xe, 0x18, 0xfa00, @id_tos={0x0, r1, 0x0, 0x3}}, 0x20) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4}) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x0, 0x0, 0x8009, 0xd}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f00000020c0), &(0x7f0000002100)=0x4) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x2) syz_io_uring_setup(0x1714, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs$pagemap(0x0, 0x0) r3 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='test_dummy_encryption', &(0x7f0000000180)='vuto_da_alloc', 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') r5 = syz_open_procfs(0x0, 0x0) syz_usb_connect(0x7, 0x3d, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0) getdents64(r5, &(0x7f0000000340)=""/79, 0x4f) exit(0x8) getdents(r5, 0x0, 0x3b) read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) 2.494976954s ago: executing program 0 (id=224): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff25, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[], 0x1c0}, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getdents64(0xffffffffffffffff, &(0x7f00000001c0)=""/23, 0x17) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x29, &(0x7f0000000140)=0xfffffffb, 0x4) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x2, 0x5f, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0) r2 = socket$kcm(0x10, 0x2, 0x4) r3 = socket$pptp(0x18, 0x1, 0x2) ioctl$PPPIOCGCHAN(r3, 0x80047437, &(0x7f0000000500)) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000000c0)="48000000140081fb7059ae08060c040002ff0f03f1cd823010a7ce9000000000000ec000006fabca3b4e7d06a6bd7c00000000030000068a562ad6e74703c48f93bc2a0200000046", 0x48}], 0x1}, 0x4000000) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) r4 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r4, 0x80585414, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r5, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r5]) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x8, 0x1, 0x0, "9adf66552fb8af2b9f10f35681de96a590d25f2744e043cc1e70c317fd815cee", 0x3131354f}) syz_usb_connect$uac1(0x3, 0xd0, &(0x7f0000000540)=ANY=[], &(0x7f00000004c0)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x7f, 0x1, 0x2, 0x40, 0xff}, 0x5d, &(0x7f0000000540)=ANY=[@ANYBLOB="050400000038100b587bccd8680f4ac8d23d8aa1103377f344c1c58fe80ac589bc4804627cd51c368872c648175b7452a75eb5fae00f8c175ba07d76f9dd06910be6d3ae0c09000c100ab800011a38f7df5ce1903f3737e62b08f89a5d5789253c868a31e3e4e4f716000000"], 0x1, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x42a}}]}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x40c4) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000040)={0x191, 0x140, 0xa0, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x40, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0xfffffffd, 0x0, 0x8, 0x4, 0x0, 0x0, 0xa}) 2.420792465s ago: executing program 3 (id=225): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002a00)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x3, @private2, 0xaec}, 0x1c, &(0x7f0000001700)=[{&(0x7f00000002c0)="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", 0x486}, {0x0}, {0x0}, {0x0}], 0x4}}], 0x1, 0x4000001) 2.193504648s ago: executing program 3 (id=226): r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000080)=""/45, 0x2d) getdents64(r1, 0x0, 0x18) 1.986499878s ago: executing program 3 (id=227): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000004c0)=""/249, 0xf9}], 0x1}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x400) ioctl$SG_IO(r2, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x6, 0x10, @scatter={0x0, 0xcc, 0x0}, &(0x7f0000000240)="238d7acf0800", 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1c}}, 0x0) syz_open_dev$vim2m(0x0, 0x4, 0x2) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4}) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0xfffffd52, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r5, 0xc01c64a3, &(0x7f0000000280)={0x1, r7, 0x1, 0x1, 0xa, 0x1ff, 0x1}) close_range(r4, 0xffffffffffffffff, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r8, 0x114, 0x8, &(0x7f00000001c0), 0x4) 1.88857083s ago: executing program 4 (id=228): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0) close_range(r1, r1, 0x0) 0s ago: executing program 1 (id=229): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_emit_vhci(0x0, 0x7) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x7, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00'}, 0x94) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b05, &(0x7f00000004c0)={'wlan0\x00'}) keyctl$read(0x1f, 0x0, &(0x7f0000000080)=""/61, 0x3d) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r4, 0x404c534a, &(0x7f0000000380)) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000140)={0x28, 0x6, r6, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800}) ioctl$IOMMU_IOAS_COPY(r1, 0x3b83, &(0x7f0000000040)={0x28, 0x5, 0x0, r6, 0x3, 0x9, 0x3ffc}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r7 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="0800080006000900000014000000451a001400640049836653e6000b32907864010104ffffffff6280bfed92a7069212147efbee989574c6ea7e928da26c29f5ea5162fd83cc899a1878f447fbd661b7c886837edc2e09a87c0f06ea70ec0b3ade82fbbfad2891176d7a0a79e23b46a7ddf8302c3785b47d8274ca1d9c4c095389d2cd37e1ac1eae05444934946d58e08970a5dcab232e7ad6becf456140a44b"], 0x22) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.188' (ED25519) to the list of known hosts. syzkaller login: [ 80.868024][ T5852] cgroup: Unknown subsys name 'net' [ 80.978862][ T5852] cgroup: Unknown subsys name 'cpuset' [ 80.988671][ T5852] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.861785][ T5852] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.591171][ T5870] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.602759][ T5870] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.612149][ T5870] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.620306][ T5870] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.628031][ T5870] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.639392][ T5870] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.646804][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.647707][ T5870] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.663902][ T5870] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.665447][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.678472][ T5870] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.685534][ T5876] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.686717][ T5876] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.694589][ T5870] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.701275][ T5876] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.708851][ T5878] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.715207][ T5876] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.721218][ T5878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.728716][ T5876] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.735625][ T5878] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.750264][ T5869] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.759805][ T5876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.761456][ T5878] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.774881][ T5864] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.796628][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.602260][ T5881] chnl_net:caif_netlink_parms(): no params data found [ 86.613836][ T5882] chnl_net:caif_netlink_parms(): no params data found [ 86.687858][ T5880] chnl_net:caif_netlink_parms(): no params data found [ 86.744894][ T5879] chnl_net:caif_netlink_parms(): no params data found [ 86.890212][ T5883] chnl_net:caif_netlink_parms(): no params data found [ 87.204189][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.213466][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.222010][ T5882] bridge_slave_0: entered allmulticast mode [ 87.230313][ T5882] bridge_slave_0: entered promiscuous mode [ 87.298028][ T5881] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.311571][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.319613][ T5881] bridge_slave_0: entered allmulticast mode [ 87.332424][ T5881] bridge_slave_0: entered promiscuous mode [ 87.340371][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.347924][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.355486][ T5882] bridge_slave_1: entered allmulticast mode [ 87.363056][ T5882] bridge_slave_1: entered promiscuous mode [ 87.377347][ T5879] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.385686][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.393443][ T5879] bridge_slave_0: entered allmulticast mode [ 87.402319][ T5879] bridge_slave_0: entered promiscuous mode [ 87.410752][ T5880] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.418542][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.425943][ T5880] bridge_slave_0: entered allmulticast mode [ 87.433669][ T5880] bridge_slave_0: entered promiscuous mode [ 87.441278][ T5881] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.448540][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.457152][ T5881] bridge_slave_1: entered allmulticast mode [ 87.464659][ T5881] bridge_slave_1: entered promiscuous mode [ 87.508573][ T5879] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.516120][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.523657][ T5879] bridge_slave_1: entered allmulticast mode [ 87.531452][ T5879] bridge_slave_1: entered promiscuous mode [ 87.555404][ T5880] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.562622][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.570067][ T5880] bridge_slave_1: entered allmulticast mode [ 87.579848][ T5880] bridge_slave_1: entered promiscuous mode [ 87.680705][ T5881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.694551][ T5881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.709344][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.719780][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.727402][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.734683][ T5883] bridge_slave_0: entered allmulticast mode [ 87.742858][ T5883] bridge_slave_0: entered promiscuous mode [ 87.754046][ T5879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.768429][ T5879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.796104][ T51] Bluetooth: hci2: command tx timeout [ 87.796109][ T5184] Bluetooth: hci1: command tx timeout [ 87.818173][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.828207][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.837630][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.847008][ T5883] bridge_slave_1: entered allmulticast mode [ 87.854467][ T5883] bridge_slave_1: entered promiscuous mode [ 87.875438][ T5184] Bluetooth: hci4: command tx timeout [ 87.875967][ T51] Bluetooth: hci3: command tx timeout [ 87.881696][ T5184] Bluetooth: hci0: command tx timeout [ 87.898955][ T5880] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.969744][ T5880] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.998869][ T5881] team0: Port device team_slave_0 added [ 88.034799][ T5879] team0: Port device team_slave_0 added [ 88.061218][ T5880] team0: Port device team_slave_0 added [ 88.070152][ T5881] team0: Port device team_slave_1 added [ 88.093838][ T5882] team0: Port device team_slave_0 added [ 88.105260][ T5882] team0: Port device team_slave_1 added [ 88.114549][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.126979][ T5879] team0: Port device team_slave_1 added [ 88.136727][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.148387][ T5880] team0: Port device team_slave_1 added [ 88.230793][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.238371][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.265510][ T5881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.338986][ T5881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.347132][ T5881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.374331][ T5881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.396350][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.403765][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.431008][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.444926][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.453192][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.480671][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.492904][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.500980][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.529652][ T5879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.546304][ T5883] team0: Port device team_slave_0 added [ 88.553406][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.560624][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.588611][ T5880] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.603276][ T5880] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.610822][ T5880] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.639333][ T5880] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.679166][ T5879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.686828][ T5879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.716301][ T5879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.736961][ T5883] team0: Port device team_slave_1 added [ 88.840032][ T5880] hsr_slave_0: entered promiscuous mode [ 88.847943][ T5880] hsr_slave_1: entered promiscuous mode [ 88.877787][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.885555][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.912939][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.950542][ T5881] hsr_slave_0: entered promiscuous mode [ 88.957764][ T5881] hsr_slave_1: entered promiscuous mode [ 88.964686][ T5881] debugfs: 'hsr0' already exists in 'hsr' [ 88.976210][ T5881] Cannot create hsr debugfs directory [ 89.024323][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.031882][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.058834][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.133600][ T5882] hsr_slave_0: entered promiscuous mode [ 89.142240][ T5882] hsr_slave_1: entered promiscuous mode [ 89.149149][ T5882] debugfs: 'hsr0' already exists in 'hsr' [ 89.155215][ T5882] Cannot create hsr debugfs directory [ 89.188371][ T5879] hsr_slave_0: entered promiscuous mode [ 89.195435][ T5879] hsr_slave_1: entered promiscuous mode [ 89.202608][ T5879] debugfs: 'hsr0' already exists in 'hsr' [ 89.208834][ T5879] Cannot create hsr debugfs directory [ 89.383843][ T5883] hsr_slave_0: entered promiscuous mode [ 89.390845][ T5883] hsr_slave_1: entered promiscuous mode [ 89.398368][ T5883] debugfs: 'hsr0' already exists in 'hsr' [ 89.404157][ T5883] Cannot create hsr debugfs directory [ 89.875249][ T5184] Bluetooth: hci1: command tx timeout [ 89.875257][ T51] Bluetooth: hci2: command tx timeout [ 89.932920][ T5880] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.952919][ T5880] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.962574][ T5184] Bluetooth: hci3: command tx timeout [ 89.962631][ T5184] Bluetooth: hci4: command tx timeout [ 89.965156][ T5184] Bluetooth: hci0: command tx timeout [ 89.989971][ T5880] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.014253][ T5880] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.097744][ T5879] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.131626][ T5879] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.148912][ T5879] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.194179][ T5879] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.267811][ T5881] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.281693][ T5881] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.309586][ T5881] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.323794][ T5881] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.438974][ T5882] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.460209][ T5882] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.474632][ T5882] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.499436][ T5882] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.620621][ T5880] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.690619][ T5883] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.728241][ T5883] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 90.739941][ T5883] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 90.750932][ T5883] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 90.814074][ T5880] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.863497][ T5879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.881615][ T3006] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.889586][ T3006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.960174][ T5879] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.988402][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.995885][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.012781][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.020622][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.040817][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.048141][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.128980][ T5881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.169542][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.234640][ T5881] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.292231][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.299564][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.317129][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.330569][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.363853][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.371261][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.404251][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.411460][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.424914][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.432221][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.464761][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.531309][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.538724][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.568459][ T5880] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.589110][ T5879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.601571][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.608787][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.814314][ T5880] veth0_vlan: entered promiscuous mode [ 91.848804][ T5879] veth0_vlan: entered promiscuous mode [ 91.883335][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.908863][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.920556][ T5879] veth1_vlan: entered promiscuous mode [ 91.929202][ T5880] veth1_vlan: entered promiscuous mode [ 91.955830][ T5184] Bluetooth: hci2: command tx timeout [ 91.955838][ T51] Bluetooth: hci1: command tx timeout [ 92.028893][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.046506][ T5184] Bluetooth: hci0: command tx timeout [ 92.046613][ T51] Bluetooth: hci4: command tx timeout [ 92.052521][ T5184] Bluetooth: hci3: command tx timeout [ 92.067140][ T92] cfg80211: failed to load regulatory.db [ 92.088955][ T5880] veth0_macvtap: entered promiscuous mode [ 92.118929][ T5879] veth0_macvtap: entered promiscuous mode [ 92.132615][ T5879] veth1_macvtap: entered promiscuous mode [ 92.173062][ T5880] veth1_macvtap: entered promiscuous mode [ 92.188322][ T5882] veth0_vlan: entered promiscuous mode [ 92.199766][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.223700][ T5881] veth0_vlan: entered promiscuous mode [ 92.263097][ T5879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.292930][ T5881] veth1_vlan: entered promiscuous mode [ 92.326836][ T5882] veth1_vlan: entered promiscuous mode [ 92.341330][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.356844][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.384960][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.394659][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.434814][ T5883] veth0_vlan: entered promiscuous mode [ 92.444337][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.472703][ T5880] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.513318][ T4580] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.524157][ T4580] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.535809][ T5883] veth1_vlan: entered promiscuous mode [ 92.550501][ T4580] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.559655][ T4580] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.622338][ T5882] veth0_macvtap: entered promiscuous mode [ 92.641651][ T5882] veth1_macvtap: entered promiscuous mode [ 92.657377][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.669596][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.703479][ T5881] veth0_macvtap: entered promiscuous mode [ 92.782732][ T5881] veth1_macvtap: entered promiscuous mode [ 92.807629][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.811338][ T5883] veth0_macvtap: entered promiscuous mode [ 92.825982][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.853141][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.866826][ T5883] veth1_macvtap: entered promiscuous mode [ 92.906291][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.928102][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.942404][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.981662][ T5879] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.007474][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.040906][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.082213][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.100346][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.119755][ T5881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.131480][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.132009][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.149106][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.165532][ T4580] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.184446][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.218553][ T155] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.281746][ T155] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.295531][ T155] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.304597][ T155] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.339716][ T155] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.359804][ T3006] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.431052][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.455871][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.533211][ T5967] IPv6: addrconf: prefix option has invalid lifetime [ 93.717296][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.821232][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.860503][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.887194][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.036432][ T5184] Bluetooth: hci1: command tx timeout [ 94.042183][ T5864] Bluetooth: hci2: command tx timeout [ 94.116448][ T5184] Bluetooth: hci4: command tx timeout [ 94.122232][ T5864] Bluetooth: hci0: command tx timeout [ 94.122604][ T51] Bluetooth: hci3: command tx timeout [ 94.205645][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.213703][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.717697][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.750317][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.766127][ T5915] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 94.785357][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.796844][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.927073][ T5915] usb 4-1: Using ep0 maxpacket: 32 [ 94.943328][ T5915] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 94.975258][ T5915] usb 4-1: config 0 has no interface number 0 [ 94.988166][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.024510][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.025164][ T5915] usb 4-1: config 0 interface 85 has no altsetting 0 [ 95.117626][ T5915] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 95.151543][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.158254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 95.173810][ T5915] usb 4-1: Product: syz [ 95.185289][ T5915] usb 4-1: Manufacturer: syz [ 95.190674][ T5915] usb 4-1: SerialNumber: syz [ 95.208639][ T5915] usb 4-1: config 0 descriptor?? [ 95.262181][ T5915] appletouch 4-1:0.85: Could not find int-in endpoint [ 95.464676][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 95.509633][ T5915] appletouch 4-1:0.85: probe with driver appletouch failed with error -5 [ 95.552875][ T5915] usbhid 4-1:0.85: couldn't find an input interrupt endpoint [ 95.585968][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 95.629124][ T92] IPVS: starting estimator thread 0... [ 95.781605][ T5915] usb 4-1: USB disconnect, device number 2 [ 95.891774][ T5983] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.055672][ T5986] IPVS: using max 26 ests per chain, 62400 per kthread [ 96.181253][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.192204][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.208770][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.285325][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 96.488386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 96.498814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 96.591057][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 97.006110][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.014471][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.469080][ T6001] bridge_slave_1: left allmulticast mode [ 97.476106][ T6001] bridge_slave_1: left promiscuous mode [ 97.484396][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.742645][ T6001] bridge_slave_0: left allmulticast mode [ 97.749294][ T6001] bridge_slave_0: left promiscuous mode [ 97.773550][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.562516][ T6006] netlink: 'syz.4.12': attribute type 5 has an invalid length. [ 99.745111][ T5930] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.059580][ T5930] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 100.158472][ T5930] usb 4-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 100.244423][ T5930] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 100.354397][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.170103][ T6028] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 101.315336][ T6038] netlink: 'syz.4.18': attribute type 27 has an invalid length. [ 101.523635][ T6036] netlink: 348 bytes leftover after parsing attributes in process `syz.2.17'. [ 101.817919][ T30] audit: type=1326 audit(1754458053.939:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85bbf8eb69 code=0x7ffc0000 [ 102.048377][ T5915] usb 4-1: USB disconnect, device number 3 [ 102.056271][ T6017] delete_channel: no stack [ 102.101218][ T30] audit: type=1326 audit(1754458053.939:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85bbf8eb69 code=0x7ffc0000 [ 102.169608][ T6039] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 102.248819][ T30] audit: type=1326 audit(1754458053.939:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f85bbf8eb69 code=0x7ffc0000 [ 102.314849][ T5955] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 102.345377][ T6027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.16'. [ 102.387224][ T30] audit: type=1326 audit(1754458053.939:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85bbf8eb69 code=0x7ffc0000 [ 102.479624][ T30] audit: type=1326 audit(1754458053.939:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f85bbf8d4d0 code=0x7ffc0000 [ 102.535095][ T5955] usb 5-1: Using ep0 maxpacket: 16 [ 102.810711][ T5955] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.829265][ T5955] usb 5-1: config 0 has no interface number 0 [ 102.880257][ T30] audit: type=1326 audit(1754458053.939:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85bbf8eb69 code=0x7ffc0000 [ 102.958695][ T5955] usb 5-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 102.978750][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.024912][ T5955] usb 5-1: Product: syz [ 103.029059][ T30] audit: type=1326 audit(1754458053.939:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85bbf8eb69 code=0x7ffc0000 [ 103.150965][ T5955] usb 5-1: Manufacturer: syz [ 103.153189][ T30] audit: type=1326 audit(1754458053.939:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85bbf8eb69 code=0x7ffc0000 [ 103.235344][ T5955] usb 5-1: SerialNumber: syz [ 103.257401][ T30] audit: type=1326 audit(1754458053.939:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f85bbf8eb69 code=0x7ffc0000 [ 103.264668][ T5955] usb 5-1: config 0 descriptor?? [ 103.343617][ T5955] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 103.387321][ T30] audit: type=1326 audit(1754458053.939:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6029 comm="syz.2.17" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f85bbf8eb69 code=0x7ffc0000 [ 103.954743][ T5955] gspca_spca1528: reg_w err -110 [ 104.139888][ T5955] spca1528 5-1:0.1: probe with driver spca1528 failed with error -110 [ 104.268812][ T6038] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.277728][ T6038] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.156500][ T6038] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.212262][ T6038] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.635420][ T92] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 105.990293][ T4580] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.272169][ T92] usb 4-1: config 0 has no interfaces? [ 106.303883][ T92] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 106.339428][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.345317][ T4580] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.565106][ T92] usb 4-1: Product: syz [ 106.575783][ T48] usb 5-1: USB disconnect, device number 2 [ 106.592259][ T92] usb 4-1: Manufacturer: syz [ 106.610222][ T92] usb 4-1: SerialNumber: syz [ 106.656514][ T6068] warning: `syz.2.22' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 106.692633][ T92] usb 4-1: config 0 descriptor?? [ 106.775487][ T4580] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.820076][ T4580] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.980594][ T6079] syzkaller1: entered promiscuous mode [ 106.986356][ T6079] syzkaller1: entered allmulticast mode [ 107.093165][ T6056] program syz.3.21 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 107.105206][ T6056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 107.115606][ T6056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 107.436288][ T6070] syz.1.23 (6070) used greatest stack depth: 19784 bytes left [ 107.845253][ T6084] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 109.566969][ T6098] netlink: 8 bytes leftover after parsing attributes in process `syz.0.27'. [ 109.582956][ T6098] fuse: Unknown parameter '0xffffffffffffffff017777777777777777777770000000000000000000000000000000000000000' [ 111.038030][ T5930] usb 4-1: USB disconnect, device number 4 [ 111.894954][ T6115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28'. [ 112.157885][ T6118] random: crng reseeded on system resumption [ 113.006274][ T6126] process 'syz.1.29' launched './file1' with NULL argv: empty string added [ 114.672874][ T6149] random: crng reseeded on system resumption [ 116.383685][ T6172] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 116.392649][ T6172] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 116.485341][ T92] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 116.529485][ T6172] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 116.565884][ T6172] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.575747][ T6172] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 116.606087][ T6172] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 116.618426][ T6172] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 116.625234][ T6172] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 116.637737][ T6172] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 116.651572][ T6172] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.658485][ T6172] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 116.671199][ T6172] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 116.683767][ T6172] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 116.691549][ T6172] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 116.707042][ T6172] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 117.050661][ T92] usb 2-1: config 0 has no interfaces? [ 117.061183][ T92] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 117.072086][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.095339][ T92] usb 2-1: Product: syz [ 117.099735][ T92] usb 2-1: Manufacturer: syz [ 117.127435][ T92] usb 2-1: SerialNumber: syz [ 117.193598][ T92] usb 2-1: config 0 descriptor?? [ 117.506437][ T6171] program syz.1.39 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.528932][ T6171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.572832][ T6171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 118.356778][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.484847][ T6181] syzkaller1: entered promiscuous mode [ 118.494915][ T6181] syzkaller1: entered allmulticast mode [ 118.598580][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.675303][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.681491][ T5184] Bluetooth: hci3: command 0x0c1a tx timeout [ 118.757617][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 120.388043][ T5930] usb 2-1: USB disconnect, device number 2 [ 120.437475][ T51] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.675281][ T51] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.767206][ T51] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.773381][ T51] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.842205][ T5184] Bluetooth: hci4: command 0x0c1a tx timeout [ 120.923668][ T6201] random: crng reseeded on system resumption [ 121.246109][ T6206] block device autoloading is deprecated and will be removed. [ 121.266160][ T6206] syz.1.44: attempt to access beyond end of device [ 121.266160][ T6206] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 122.560348][ T5184] Bluetooth: hci0: command 0x0c1a tx timeout [ 122.776173][ T5184] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.862154][ T5184] Bluetooth: hci3: command 0x0c1a tx timeout [ 122.868395][ T5184] Bluetooth: hci2: command 0x0c1a tx timeout [ 122.915955][ T51] Bluetooth: hci4: command 0x0c1a tx timeout [ 126.551840][ T6255] netlink: 348 bytes leftover after parsing attributes in process `syz.1.55'. [ 127.408906][ T5955] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 128.415175][ T5955] usb 5-1: Using ep0 maxpacket: 16 [ 128.426340][ T5955] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 128.515990][ T5955] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 128.625028][ T5955] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1023 [ 128.822716][ T5955] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 128.832310][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.842349][ T5955] usb 5-1: Product: syz [ 128.850970][ T5955] usb 5-1: Manufacturer: syz [ 128.885209][ T5955] usb 5-1: SerialNumber: syz [ 128.919272][ T5955] usb 5-1: config 0 descriptor?? [ 129.895205][ T10] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 130.180150][ T10] usb 3-1: config 0 has no interfaces? [ 130.283786][ T10] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 130.315249][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.539524][ T5955] usb 5-1: can't set config #0, error -71 [ 130.579265][ T10] usb 3-1: Product: syz [ 130.597345][ T5955] usb 5-1: USB disconnect, device number 3 [ 130.605069][ T10] usb 3-1: Manufacturer: syz [ 130.686191][ T10] usb 3-1: SerialNumber: syz [ 130.806831][ T10] usb 3-1: config 0 descriptor?? [ 130.830010][ T6275] syzkaller1: entered promiscuous mode [ 130.857212][ T6275] syzkaller1: entered allmulticast mode [ 130.990472][ T6278] netlink: 'syz.4.58': attribute type 10 has an invalid length. [ 131.080530][ T6274] program syz.2.56 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 131.108141][ T6274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.118151][ T6274] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.284375][ T6278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.301269][ T6278] team0: Port device bond0 added [ 131.633692][ T6287] syz.1.60: attempt to access beyond end of device [ 131.633692][ T6287] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 132.659360][ T6287] mmap: syz.1.60 (6287) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 133.030300][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.041995][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.562786][ T5955] usb 3-1: USB disconnect, device number 2 [ 135.073853][ T6311] netlink: 8 bytes leftover after parsing attributes in process `syz.1.65'. [ 135.779162][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 135.779178][ T30] audit: type=1326 audit(1754458088.119:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ae18eb69 code=0x7ffc0000 [ 135.998338][ T30] audit: type=1326 audit(1754458088.119:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ae18eb69 code=0x7ffc0000 [ 136.147028][ T30] audit: type=1326 audit(1754458088.119:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f42ae18eb69 code=0x7ffc0000 [ 136.169098][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.453656][ T6329] netlink: 40 bytes leftover after parsing attributes in process `syz.1.67'. [ 136.464814][ T6327] netdevsim netdevsim2: Direct firmware load for þ failed with error -2 [ 136.508230][ T6327] netdevsim netdevsim2: Falling back to sysfs fallback for: þ [ 136.682837][ T30] audit: type=1326 audit(1754458088.119:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ae18eb69 code=0x7ffc0000 [ 136.823552][ T30] audit: type=1326 audit(1754458088.119:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f42ae18eb69 code=0x7ffc0000 [ 136.860749][ T30] audit: type=1326 audit(1754458088.119:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ae18eb69 code=0x7ffc0000 [ 137.160617][ T30] audit: type=1326 audit(1754458088.119:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f42ae18eb69 code=0x7ffc0000 [ 137.284709][ T6340] random: crng reseeded on system resumption [ 137.407204][ T30] audit: type=1326 audit(1754458088.609:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ae18eb69 code=0x7ffc0000 [ 137.456754][ T30] audit: type=1326 audit(1754458088.609:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42ae18eb69 code=0x7ffc0000 [ 137.503484][ T30] audit: type=1326 audit(1754458088.799:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.3.66" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f42ae18eb69 code=0x7ffc0000 [ 137.662534][ T6348] netlink: 'syz.4.71': attribute type 21 has an invalid length. [ 138.837755][ T6355] openvswitch: netlink: Key 13 has unexpected len 20 expected 24 [ 139.785076][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 139.945276][ T24] usb 3-1: Using ep0 maxpacket: 8 [ 139.986196][ T24] usb 3-1: unable to get BOS descriptor or descriptor too short [ 140.003732][ T24] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 140.026388][ T24] usb 3-1: can't read configurations, error -71 [ 140.362048][ T6367] syzkaller1: entered promiscuous mode [ 140.368485][ T6367] syzkaller1: entered allmulticast mode [ 142.065179][ T92] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 142.215208][ T92] usb 3-1: Using ep0 maxpacket: 32 [ 142.224395][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.265918][ T92] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.305730][ T92] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 142.365414][ T92] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.420799][ T92] usb 3-1: config 0 descriptor?? [ 142.472062][ T92] hub 3-1:0.0: USB hub found [ 142.691815][ T92] hub 3-1:0.0: config failed, can't read hub descriptor (err -90) [ 143.028508][ T92] usbhid 3-1:0.0: can't add hid device: -71 [ 143.045450][ T92] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 143.064350][ T6414] netlink: 60 bytes leftover after parsing attributes in process `syz.4.93'. [ 143.081720][ T6412] netlink: 60 bytes leftover after parsing attributes in process `syz.4.93'. [ 143.099030][ T92] usb 3-1: USB disconnect, device number 5 [ 143.135551][ T6416] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.378608][ T6438] random: crng reseeded on system resumption [ 148.054551][ T6484] syz.2.109: attempt to access beyond end of device [ 148.054551][ T6484] nbd0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 148.195491][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 148.534310][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 148.544363][ T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 148.597154][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 148.687827][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 148.708410][ T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 148.732492][ T6495] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 148.749325][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.086117][ T92] usb 1-1: new low-speed USB device number 2 using dummy_hcd [ 149.109478][ T10] usb 2-1: config 0 descriptor?? [ 149.124465][ T6481] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 149.264898][ T10] hub 2-1:0.0: USB hub found [ 149.277658][ T92] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 149.317031][ T92] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 149.395292][ T92] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 149.431946][ T92] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 149.435107][ T10] hub 2-1:0.0: 2 ports detected [ 149.500175][ T92] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 149.782034][ T92] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 149.873977][ T10] hub 2-1:0.0: set hub depth failed [ 149.913117][ T10] usb 2-1: USB disconnect, device number 3 [ 149.934640][ T92] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 150.684636][ T92] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 150.951999][ T92] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 150.993456][ T92] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 151.200055][ T92] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 151.277569][ T92] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 151.371862][ T92] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 151.435498][ T92] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 151.485203][ T92] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 152.184797][ T92] usb 1-1: string descriptor 0 read error: -71 [ 152.197991][ T92] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 152.242609][ T92] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.317240][ T92] usb 1-1: can't set config #168, error -71 [ 152.348811][ T92] usb 1-1: USB disconnect, device number 2 [ 152.842618][ T6537] "syz.4.128" (6537) uses obsolete ecb(arc4) skcipher [ 153.135462][ T10] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 153.486281][ T10] usb 1-1: config 0 has no interfaces? [ 153.516953][ T10] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 153.551739][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.634863][ T10] usb 1-1: Product: syz [ 153.664745][ T10] usb 1-1: Manufacturer: syz [ 153.765396][ T10] usb 1-1: SerialNumber: syz [ 153.786478][ T6567] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.855273][ T6569] random: crng reseeded on system resumption [ 153.966055][ T10] usb 1-1: config 0 descriptor?? [ 154.058102][ T121] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 154.248679][ T121] usb 4-1: Using ep0 maxpacket: 32 [ 154.287295][ T121] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 154.319222][ T121] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.385606][ T6544] program syz.0.129 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.403437][ T6544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.413963][ T6544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.494167][ T121] usb 4-1: config 0 descriptor?? [ 154.532672][ T121] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 154.681290][ T6586] random: crng reseeded on system resumption [ 155.401061][ T121] gspca_vc032x: reg_w err -71 [ 155.417042][ T121] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.427615][ T121] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.445609][ T121] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.460623][ T121] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.531869][ T121] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.543738][ T121] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.556653][ T121] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.589801][ T121] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.601752][ T121] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.616402][ T121] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.703618][ T121] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.709702][ T121] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.725933][ T121] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.740271][ T121] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.757053][ T121] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.770532][ T121] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.825042][ T121] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.845662][ T121] gspca_vc032x: I2c Bus Busy Wait 00 [ 155.875002][ T121] gspca_vc032x: Unknown sensor... [ 155.896450][ T121] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 155.949663][ T121] usb 4-1: USB disconnect, device number 5 [ 157.047485][ T10] usb 1-1: USB disconnect, device number 3 [ 157.176297][ T6620] netlink: 136 bytes leftover after parsing attributes in process `syz.0.153'. [ 157.427928][ T6629] syz.3.151: attempt to access beyond end of device [ 157.427928][ T6629] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 157.472647][ T6625] kvm_intel: kvm [6624]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0x1 [ 157.568996][ T6635] random: crng reseeded on system resumption [ 157.750950][ T6630] syzkaller1: entered promiscuous mode [ 157.759117][ T6630] syzkaller1: entered allmulticast mode [ 159.912089][ T6657] random: crng reseeded on system resumption [ 161.436794][ T92] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 161.448566][ T48] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 161.609236][ T92] usb 3-1: config 0 has no interfaces? [ 161.620529][ T92] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 161.631719][ T92] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.670871][ T92] usb 3-1: Product: syz [ 161.682470][ T92] usb 3-1: Manufacturer: syz [ 161.692952][ T48] usb 5-1: config 0 has no interfaces? [ 161.710288][ T48] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 161.722570][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 161.733505][ T92] usb 3-1: SerialNumber: syz [ 161.741264][ T48] usb 5-1: Product: syz [ 161.756918][ T48] usb 5-1: Manufacturer: syz [ 161.762181][ T92] usb 3-1: config 0 descriptor?? [ 161.775339][ T48] usb 5-1: SerialNumber: syz [ 161.816372][ T48] usb 5-1: config 0 descriptor?? [ 162.315974][ T6678] program syz.4.164 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 162.350514][ T6678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 162.360035][ T6678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.550674][ T6686] macvtap1: entered allmulticast mode [ 162.570141][ T6686] veth0_macvtap: entered allmulticast mode [ 164.180077][ T10] usb 3-1: USB disconnect, device number 6 [ 164.463116][ T6704] snd_dummy snd_dummy.0: control 1:1:3:syz1:9 is already present [ 164.763290][ T6707] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 165.269907][ T9] usb 5-1: USB disconnect, device number 4 [ 165.509005][ T6716] netlink: 8 bytes leftover after parsing attributes in process `syz.4.178'. [ 165.568186][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.179'. [ 165.941145][ T6726] netdevsim netdevsim2: Firmware load for 'nel/address_bits0/../file0' refused, path contains '..' component [ 166.019411][ T6728] random: crng reseeded on system resumption [ 167.852068][ T6758] syzkaller1: entered promiscuous mode [ 167.883785][ T6758] syzkaller1: entered allmulticast mode [ 169.060788][ T6771] syzkaller1: entered promiscuous mode [ 169.066468][ T6771] syzkaller1: entered allmulticast mode [ 171.051202][ T6777] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.092264][ T6813] syzkaller1: entered promiscuous mode [ 172.097981][ T6813] syzkaller1: entered allmulticast mode [ 172.278426][ T6817] random: crng reseeded on system resumption [ 172.572950][ T6824] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 173.605285][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 173.766836][ T10] usb 1-1: config 0 has an invalid interface number: 3 but max is 0 [ 173.796737][ T10] usb 1-1: config 0 has no interface number 0 [ 173.812610][ T10] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0xD has an invalid bInterval 104, changing to 10 [ 173.828158][ T10] usb 1-1: config 0 interface 3 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 173.844674][ T10] usb 1-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84 [ 173.882708][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.909975][ T10] usb 1-1: Product: syz [ 173.916892][ T10] usb 1-1: Manufacturer: syz [ 173.921625][ T10] usb 1-1: SerialNumber: syz [ 173.941132][ T10] usb 1-1: config 0 descriptor?? [ 174.207489][ T10] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state. [ 174.241334][ T10] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 174.286360][ T10] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB) [ 174.335190][ T10] usb 1-1: media controller created [ 174.615498][ T92] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 174.652520][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 174.852198][ T92] usb 4-1: config 0 has no interfaces? [ 174.865140][ T92] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 174.915600][ T121] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 174.938953][ T92] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.989554][ T10] DVB: Unable to find symbol dib7000p_attach() [ 175.000633][ T10] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB' [ 175.000660][ T92] usb 4-1: Product: syz [ 175.012969][ T92] usb 4-1: Manufacturer: syz [ 175.089102][ T92] usb 4-1: SerialNumber: syz [ 175.118448][ T121] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 175.134540][ T121] usb 5-1: config 27 has 0 interfaces, different from the descriptor's value: 1 [ 175.167465][ T6853] random: crng reseeded on system resumption [ 175.249002][ T121] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 175.270309][ T121] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.295730][ T10] rc_core: IR keymap rc-dib0700-rc5 not found [ 175.310814][ T92] usb 4-1: config 0 descriptor?? [ 175.349117][ T10] Registered IR keymap rc-empty [ 175.521844][ T10] dvb-usb: could not initialize remote control. [ 175.585063][ T6859] tipc: Started in network mode [ 175.595732][ T6859] tipc: Node identity ac1414aa, cluster identity 4711 [ 175.610677][ T10] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected. [ 175.621652][ T6859] tipc: Enabled bearer , priority 10 [ 175.667318][ T6843] delete_channel: no stack [ 175.689281][ T92] usb 5-1: USB disconnect, device number 5 [ 175.697905][ T10] dib0700: There's no endpoint for remote controller [ 175.927228][ T92] usb 1-1: USB disconnect, device number 4 [ 175.984713][ T92] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected. [ 176.616550][ T92] tipc: Node number set to 2886997162 [ 177.617526][ T92] usb 4-1: USB disconnect, device number 6 [ 178.155215][ T24] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 178.402585][ T24] usb 1-1: config 0 has no interfaces? [ 178.522368][ T24] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 178.564075][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.625449][ T92] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 178.680081][ T24] usb 1-1: Product: syz [ 179.061121][ T24] usb 1-1: Manufacturer: syz [ 179.416294][ T24] usb 1-1: SerialNumber: syz [ 179.425857][ T24] usb 1-1: config 0 descriptor?? [ 179.505143][ T92] usb 5-1: Using ep0 maxpacket: 16 [ 179.523427][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 179.633452][ T6875] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized [ 179.672725][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 179.722754][ T6882] program syz.0.224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.731983][ T92] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 179.732043][ T92] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 179.745202][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.748158][ T92] usb 5-1: config 0 descriptor?? [ 179.869668][ T6882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.031599][ T6882] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.226532][ T92] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 180.226601][ T92] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 180.226628][ T92] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 180.226654][ T92] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 180.226679][ T92] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 180.234404][ T92] input: HID 0955:7214 Haptics as /devices/virtual/input/input6 [ 180.288351][ T92] shield 0003:0955:7214.0001: Registered Thunderstrike controller [ 180.288835][ T92] shield 0003:0955:7214.0001: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 180.360420][ T6901] syzkaller1: entered promiscuous mode [ 180.360479][ T6901] syzkaller1: entered allmulticast mode [ 180.424502][ T6887] random: crng reseeded on system resumption [ 180.429283][ T6887] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 180.429305][ T6887] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 180.429321][ T6887] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 180.429332][ T6887] PM: hibernation: Basic memory bitmaps created [ 180.431432][ T6887] PM: hibernation: Basic memory bitmaps freed [ 180.435497][ T24] usb 5-1: USB disconnect, device number 6 [ 180.442409][ T48] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 180.442548][ T48] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 180.442587][ T48] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 180.442626][ T48] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 180.454713][ T24] ------------[ cut here ]------------ [ 180.454725][ T24] workqueue: work disable count underflowed [ 180.454768][ T24] WARNING: CPU: 1 PID: 24 at kernel/workqueue.c:4326 enable_work+0x2b1/0x2c0 [ 180.454797][ T24] Modules linked in: [ 180.454824][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 180.454840][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.454849][ T24] Workqueue: usb_hub_wq hub_event [ 180.454864][ T24] RIP: 0010:enable_work+0x2b1/0x2c0 [ 180.454879][ T24] Code: 41 5e 41 5f 5d e9 ff 06 f1 09 cc e8 09 22 ee 09 e8 c4 36 35 00 c6 05 3f b4 02 0e 01 90 48 c7 c7 c0 e3 89 8b e8 30 d5 f8 ff 90 <0f> 0b 90 90 e9 69 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 [ 180.454890][ T24] RSP: 0018:ffffc900001e7060 EFLAGS: 00010046 [ 180.454902][ T24] RAX: c480efe1d1f31f00 RBX: ffff88807d5d9738 RCX: 0000000000100000 [ 180.454912][ T24] RDX: ffffc90018a36000 RSI: 0000000000005914 RDI: 0000000000005915 [ 180.454921][ T24] RBP: ffffc900001e7118 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 180.454934][ T24] R10: dffffc0000000000 R11: ffffed10170e484b R12: 1ffff9200003ce10 [ 180.454944][ T24] R13: dffffc0000000000 R14: 0000000000000000 R15: 001fffffffc00001 [ 180.454954][ T24] FS: 0000000000000000(0000) GS:ffff888125d24000(0000) knlGS:0000000000000000 [ 180.454965][ T24] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.454974][ T24] CR2: 000000110c3cf5f3 CR3: 000000006d288000 CR4: 00000000003526f0 [ 180.454987][ T24] Call Trace: [ 180.454993][ T24] [ 180.455003][ T24] ? __pfx_enable_work+0x10/0x10 [ 180.455019][ T24] ? __thermal_zone_cdev_unbind+0x485/0x4c0 [ 180.455034][ T24] ? kasan_quarantine_put+0xdd/0x220 [ 180.455050][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.455067][ T24] __cancel_work_sync+0xf7/0x110 [ 180.455083][ T24] thermal_zone_device_unregister+0x23e/0x3f0 [ 180.455101][ T24] power_supply_unregister+0xf9/0x140 [ 180.455116][ T24] ? __pfx_shield_remove+0x10/0x10 [ 180.455132][ T24] shield_remove+0x72/0x120 [ 180.455151][ T24] hid_device_remove+0x225/0x370 [ 180.455170][ T24] ? __pfx_hid_device_remove+0x10/0x10 [ 180.455187][ T24] device_release_driver_internal+0x46f/0x800 [ 180.455222][ T24] bus_remove_device+0x34d/0x410 [ 180.455242][ T24] device_del+0x511/0x8e0 [ 180.455265][ T24] ? __pfx_device_del+0x10/0x10 [ 180.455289][ T24] hid_destroy_device+0x6b/0x1b0 [ 180.455308][ T24] usbhid_disconnect+0x9f/0xc0 [ 180.455322][ T24] usb_unbind_interface+0x26b/0x910 [ 180.455348][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 180.455371][ T24] device_release_driver_internal+0x4d6/0x800 [ 180.455409][ T24] bus_remove_device+0x34d/0x410 [ 180.455442][ T24] device_del+0x511/0x8e0 [ 180.455476][ T24] ? kfree+0x18e/0x440 [ 180.455505][ T24] ? __pfx_device_del+0x10/0x10 [ 180.455535][ T24] ? kobject_put+0x446/0x480 [ 180.455573][ T24] usb_disable_device+0x3e9/0x8a0 [ 180.455608][ T24] usb_disconnect+0x330/0x950 [ 180.455649][ T24] hub_event+0x1cf5/0x4a20 [ 180.455704][ T24] ? do_raw_spin_lock+0x121/0x290 [ 180.455734][ T24] ? register_lock_class+0x51/0x320 [ 180.455786][ T24] ? __pfx_hub_event+0x10/0x10 [ 180.455808][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 180.455837][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 180.455859][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 180.455879][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 180.455902][ T24] process_scheduled_works+0xade/0x17b0 [ 180.455956][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 180.456010][ T24] worker_thread+0x8a0/0xda0 [ 180.456062][ T24] kthread+0x70e/0x8a0 [ 180.456093][ T24] ? __pfx_worker_thread+0x10/0x10 [ 180.456113][ T24] ? __pfx_kthread+0x10/0x10 [ 180.456141][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 180.456163][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.456184][ T24] ? __pfx_kthread+0x10/0x10 [ 180.456218][ T24] ret_from_fork+0x3fc/0x770 [ 180.456244][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 180.456275][ T24] ? __switch_to_asm+0x39/0x70 [ 180.456302][ T24] ? __switch_to_asm+0x33/0x70 [ 180.456328][ T24] ? __pfx_kthread+0x10/0x10 [ 180.456358][ T24] ret_from_fork_asm+0x1a/0x30 [ 180.456405][ T24] [ 180.456417][ T24] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 180.456432][ T24] CPU: 1 UID: 0 PID: 24 Comm: kworker/1:0 Not tainted 6.16.0-syzkaller-11743-g6bcdbd62bd56 #0 PREEMPT(full) [ 180.456455][ T24] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.456469][ T24] Workqueue: usb_hub_wq hub_event [ 180.456492][ T24] Call Trace: [ 180.456501][ T24] [ 180.456510][ T24] dump_stack_lvl+0x99/0x250 [ 180.456536][ T24] ? __asan_memcpy+0x40/0x70 [ 180.456561][ T24] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.456586][ T24] ? __pfx__printk+0x10/0x10 [ 180.456633][ T24] vpanic+0x281/0x750 [ 180.456657][ T24] ? __pfx__printk+0x10/0x10 [ 180.456687][ T24] ? __pfx_vpanic+0x10/0x10 [ 180.456711][ T24] ? is_bpf_text_address+0x26/0x2b0 [ 180.456757][ T24] panic+0xb9/0xc0 [ 180.456781][ T24] ? __pfx_panic+0x10/0x10 [ 180.456825][ T24] __warn+0x31b/0x4b0 [ 180.456847][ T24] ? enable_work+0x2b1/0x2c0 [ 180.456872][ T24] ? enable_work+0x2b1/0x2c0 [ 180.456893][ T24] report_bug+0x2be/0x4f0 [ 180.456906][ T24] ? enable_work+0x2b1/0x2c0 [ 180.456920][ T24] ? enable_work+0x2b1/0x2c0 [ 180.456934][ T24] ? enable_work+0x2b3/0x2c0 [ 180.456950][ T24] handle_bug+0x84/0x160 [ 180.456967][ T24] exc_invalid_op+0x1a/0x50 [ 180.456983][ T24] asm_exc_invalid_op+0x1a/0x20 [ 180.456996][ T24] RIP: 0010:enable_work+0x2b1/0x2c0 [ 180.457010][ T24] Code: 41 5e 41 5f 5d e9 ff 06 f1 09 cc e8 09 22 ee 09 e8 c4 36 35 00 c6 05 3f b4 02 0e 01 90 48 c7 c7 c0 e3 89 8b e8 30 d5 f8 ff 90 <0f> 0b 90 90 e9 69 ff ff ff 66 0f 1f 44 00 00 90 90 90 90 90 90 90 [ 180.457021][ T24] RSP: 0018:ffffc900001e7060 EFLAGS: 00010046 [ 180.457032][ T24] RAX: c480efe1d1f31f00 RBX: ffff88807d5d9738 RCX: 0000000000100000 [ 180.457042][ T24] RDX: ffffc90018a36000 RSI: 0000000000005914 RDI: 0000000000005915 [ 180.457050][ T24] RBP: ffffc900001e7118 R08: ffff8880b8724253 R09: 1ffff110170e484a [ 180.457059][ T24] R10: dffffc0000000000 R11: ffffed10170e484b R12: 1ffff9200003ce10 [ 180.457068][ T24] R13: dffffc0000000000 R14: 0000000000000000 R15: 001fffffffc00001 [ 180.457090][ T24] ? __pfx_enable_work+0x10/0x10 [ 180.457105][ T24] ? __thermal_zone_cdev_unbind+0x485/0x4c0 [ 180.457120][ T24] ? kasan_quarantine_put+0xdd/0x220 [ 180.457135][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.457151][ T24] __cancel_work_sync+0xf7/0x110 [ 180.457167][ T24] thermal_zone_device_unregister+0x23e/0x3f0 [ 180.457186][ T24] power_supply_unregister+0xf9/0x140 [ 180.457210][ T24] ? __pfx_shield_remove+0x10/0x10 [ 180.457226][ T24] shield_remove+0x72/0x120 [ 180.457244][ T24] hid_device_remove+0x225/0x370 [ 180.457262][ T24] ? __pfx_hid_device_remove+0x10/0x10 [ 180.457280][ T24] device_release_driver_internal+0x46f/0x800 [ 180.457304][ T24] bus_remove_device+0x34d/0x410 [ 180.457323][ T24] device_del+0x511/0x8e0 [ 180.457346][ T24] ? __pfx_device_del+0x10/0x10 [ 180.457370][ T24] hid_destroy_device+0x6b/0x1b0 [ 180.457388][ T24] usbhid_disconnect+0x9f/0xc0 [ 180.457402][ T24] usb_unbind_interface+0x26b/0x910 [ 180.457421][ T24] ? __pfx_usb_unbind_interface+0x10/0x10 [ 180.457435][ T24] device_release_driver_internal+0x4d6/0x800 [ 180.457458][ T24] bus_remove_device+0x34d/0x410 [ 180.457477][ T24] device_del+0x511/0x8e0 [ 180.457496][ T24] ? kfree+0x18e/0x440 [ 180.457513][ T24] ? __pfx_device_del+0x10/0x10 [ 180.457530][ T24] ? kobject_put+0x446/0x480 [ 180.457551][ T24] usb_disable_device+0x3e9/0x8a0 [ 180.457569][ T24] usb_disconnect+0x330/0x950 [ 180.457592][ T24] hub_event+0x1cf5/0x4a20 [ 180.457620][ T24] ? do_raw_spin_lock+0x121/0x290 [ 180.457636][ T24] ? register_lock_class+0x51/0x320 [ 180.457663][ T24] ? __pfx_hub_event+0x10/0x10 [ 180.457675][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 180.457691][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 180.457703][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 180.457714][ T24] ? process_scheduled_works+0x9ef/0x17b0 [ 180.457727][ T24] process_scheduled_works+0xade/0x17b0 [ 180.457756][ T24] ? __pfx_process_scheduled_works+0x10/0x10 [ 180.457786][ T24] worker_thread+0x8a0/0xda0 [ 180.457814][ T24] kthread+0x70e/0x8a0 [ 180.457831][ T24] ? __pfx_worker_thread+0x10/0x10 [ 180.457843][ T24] ? __pfx_kthread+0x10/0x10 [ 180.457859][ T24] ? _raw_spin_unlock_irq+0x23/0x50 [ 180.457872][ T24] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.457884][ T24] ? __pfx_kthread+0x10/0x10 [ 180.457899][ T24] ret_from_fork+0x3fc/0x770 [ 180.457914][ T24] ? __pfx_ret_from_fork+0x10/0x10 [ 180.457930][ T24] ? __switch_to_asm+0x39/0x70 [ 180.457948][ T24] ? __switch_to_asm+0x33/0x70 [ 180.457962][ T24] ? __pfx_kthread+0x10/0x10 [ 180.457978][ T24] ret_from_fork_asm+0x1a/0x30 [ 180.458004][ T24] [ 180.458344][ T24] Kernel Offset: disabled