last executing test programs: 7m5.486707321s ago: executing program 3 (id=97): bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() ioprio_get$pid(0x2, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) ptrace$getregset(0x4204, r0, 0x201, &(0x7f00000003c0)={&(0x7f00000002c0)=""/222, 0xde}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0xc67e7be33bfcd098, &(0x7f0000000180)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000000880)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000580)={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x26}}, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x549882, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, 0x0) ioctl$IOMMU_IOAS_COPY(r4, 0x3b83, &(0x7f0000000180)={0x28, 0x5, 0x0, 0x0, 0x1000, 0x7, 0x3ffe}) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6}) 7m3.759431064s ago: executing program 3 (id=99): syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000020000402505a1a4400000ae010109023b00010100000009040000c72ef85e66472d35120206000005240600000524"], 0x0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0xff, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x60, 0x2}}]}}, &(0x7f0000000140)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x201, 0xff, 0x23, 0x8, 0x20, 0x81}, 0x101, &(0x7f0000000340)={0x5, 0xf, 0x101, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x20, 0x8, 0x6, 0x8, 0x5}, @generic={0x63, 0x10, 0x2, "cb96b2595d80395db0d6041e3d9e5cc5084f5d157e22277570e7951bad4fbbccf477a5d5eece4e36289b844245239af99413052b382cceb8d703cc95f59328db9e3127b21394f6680bca4ce6054760c3f87f0d5129bd0d6f0461dfdc9bb4f384"}, @generic={0x7a, 0x10, 0xa, "a4763c7cae9c7eb7f91780d542424c6a4a4eaa4dc9b1bb94dbb72d0a2cbb1a63822a0c621ece3fed34c15db96cf554b6196c5fdf66e01ee6be67f4cb3ee7921ff4bd28c8f1acf26da4bdb8623302e093742f34ad63ec933cc4477daaebbffbb21815b0895dd50aa6dc8c10d0a1a7aca5165757b377835f"}, @ssp_cap={0x14, 0x10, 0xa, 0x1, 0x2, 0x2, 0xf0f, 0x6, [0x0, 0xff0030]}]}}) r0 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40240, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) shmat(r0, &(0x7f0000ffc000/0x3000)=nil, 0x4000) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000140), 0x10) r4 = syz_io_uring_setup(0x835, 0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r5, r6, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000001380), 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r7, 0xc0405626, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x1012, 0x0, 0x0, 0x3}}) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x400087, 0xffffffff, 0x40}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0x1}, 0x10}, 0x94) 6m53.966958435s ago: executing program 3 (id=115): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x121}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098", 0x29}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f", 0x85}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a", 0xcf}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95", 0x55}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 6m52.652674079s ago: executing program 3 (id=118): socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, 0xffffffffffffffff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002300)={0x2020}, 0x2020) r2 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80080) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@generic={0x0, 0x0, 0x8}, 0x18) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000002000)) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000010401040000000039"], 0x1c}}, 0x0) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f00000001c0)=0x2) 6m50.110953602s ago: executing program 3 (id=120): syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f00000001c0)=[@code={0xa, 0x75, {"f326460f019f00200000420f01c5470f01c248b8f61e0000000000000f23c80f21f835080030000f23f8c462bd9791040000000f07c7442400e3420000c744240264000000c7442406000000000f011c24c421e3d040000f009f082c000066660f388000"}}], 0x75}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6m43.396326805s ago: executing program 3 (id=132): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000800) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000140)=0x7) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$video(&(0x7f00000001c0), 0x2, 0x101000) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8, 0xfffffffe, 0x3136564e, 0x6, 0xc, [{0x3, 0x10001}, {0x9, 0x5}, {0x800004, 0x9}, {0x2, 0x5}, {0x9, 0x5}, {0x1964, 0x10000}, {0x5, 0x402}, {0x7, 0x3000000}], 0xd, 0x7, 0x1, 0x1, 0x7}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x2c8, 0x0, 0xffffffff, 0x228, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r4 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0x4}, 0x0, &(0x7f00000000c0)) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0xfffffffd, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x9}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010141}}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) unshare(0x2000400) syz_usb_connect(0x5, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x5c, 0x90, 0xae, 0x40, 0xb95, 0x2790, 0xa9a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb6, 0x3, 0x90, 0x2}}]}}, 0x0) 6m27.672385905s ago: executing program 32 (id=132): openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@bridge_getneigh={0x20, 0x1e, 0x1, 0x70bd26, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2000a}}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x20000800) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='personality\x00') ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f0000000140)=0x7) socket(0x400000000010, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_open_dev$video(&(0x7f00000001c0), 0x2, 0x101000) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000380)={0x1, @pix_mp={0x8, 0xfffffffe, 0x3136564e, 0x6, 0xc, [{0x3, 0x10001}, {0x9, 0x5}, {0x800004, 0x9}, {0x2, 0x5}, {0x9, 0x5}, {0x1964, 0x10000}, {0x5, 0x402}, {0x7, 0x3000000}], 0xd, 0x7, 0x1, 0x1, 0x7}}) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x4d8, 0x2c8, 0x0, 0xffffffff, 0x228, 0x370, 0x440, 0x440, 0xffffffff, 0x440, 0x440, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x1f0, 0x228, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "9401d3e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@dev={0xfe, 0x80, '\x00', 0x10}, [0xffffff00, 0xffffffff, 0x0, 0xff000000], @ipv4=@dev={0xac, 0x14, 0x14, 0x29}, [0x0, 0xffffff00, 0xff000000, 0xffffffff], @ipv6=@local, [0xff000000, 0xff, 0x0, 0xff], @ipv4=@broadcast, [0xffffffff, 0x0, 0xff], 0x7, 0x1, 0x5c, 0x4e1c, 0x4e22, 0x4e24, 0x4e24, 0x814, 0x20c0}, 0x80, 0x2}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r4 = syz_io_uring_setup(0x4172, &(0x7f00000002c0)={0x0, 0x2, 0x10100, 0x0, 0x4}, 0x0, &(0x7f00000000c0)) io_uring_enter(r4, 0x567, 0x0, 0x0, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0xfffffffd, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x9}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010141}}}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) unshare(0x2000400) syz_usb_connect(0x5, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x5c, 0x90, 0xae, 0x40, 0xb95, 0x2790, 0xa9a2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0xb6, 0x3, 0x90, 0x2}}]}}, 0x0) 4m5.94877011s ago: executing program 2 (id=341): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r0, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m5.578078986s ago: executing program 2 (id=342): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0xffffffff, 0xfffffffffffffd31) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r2}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) 4m4.438958555s ago: executing program 2 (id=343): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$FS_IOC_GETFSUUID(r0, 0x80111500, &(0x7f0000000040)) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0x6}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000001940)=[{{&(0x7f0000000000)=@qipcrtr={0x2a, 0x4, 0x7fff}, 0x80, 0x0, 0x0, &(0x7f0000001c00)=ANY=[], 0xc}}], 0x1, 0x45) socket(0x80000000000000a, 0x2, 0x0) r4 = syz_pidfd_open(0x0, 0x0) setns(r4, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x9000, &(0x7f0000000000)={0x100000, 0xa}, 0x20) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001a00010000000000fbdbdf25810000000000030000000000"], 0x30}}, 0x0) close_range(r5, 0xffffffffffffffff, 0x200000000000000) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}], 0x1}}], 0x2, 0x2090) 4m2.814457332s ago: executing program 2 (id=345): socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0xffffffff, 0xfffffffffffffd31) r1 = socket$kcm(0x29, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000040)={0xffffffffffffffff, r2}) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binfmt_format(0xffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz0\x00', 0x2, 0x0) write$binfmt_format(r4, &(0x7f0000000100)='-1\x00', 0x2) 3m57.726533832s ago: executing program 2 (id=351): ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0xfffffff8, "07bbfeb30c52d28881875bac175ccb0d6c446593aa7eaba9a256d98e03ab46af", 0xffffffffffffffff}) ioctl$SYNC_IOC_FILE_INFO(r0, 0xc0383e04, &(0x7f0000000140)={""/32, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m56.469144479s ago: executing program 2 (id=353): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0x80000}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x9902) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r6, &(0x7f0000002640)={0x2020}, 0x2020) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000", 0x15}], 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x200008c0) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r10, @ANYBLOB="0800051d000000001400060076657468115f746f5f74"], 0x58}}, 0x0) 3m41.009497175s ago: executing program 33 (id=353): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback, 0x80000}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) open_tree(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x9902) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000680)={'bridge0\x00'}) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') read$FUSE(r6, &(0x7f0000002640)={0x2020}, 0x2020) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000", 0x15}], 0x1) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x200008c0) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r10, @ANYBLOB="0800051d000000001400060076657468115f746f5f74"], 0x58}}, 0x0) 12.238562814s ago: executing program 0 (id=650): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x34, 0xd, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000084) 10.975698401s ago: executing program 0 (id=651): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x121}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098", 0x29}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30", 0x15}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 10.408427449s ago: executing program 0 (id=652): socket$inet_sctp(0x2, 0x1, 0x84) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_sctp(0xa, 0x5, 0x84) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000023c0)={0x24, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x20}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x24}}, 0x18) openat$mice(0xffffffffffffff9c, 0x0, 0x53d040) 10.014695014s ago: executing program 0 (id=653): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0xfffffff4, 0x4000000}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x20004, r3, 0x80000}) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{0x0}], 0x1, 0x0, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r6, 0x40505330, &(0x7f0000000bc0)={{0xfd, 0x1}, {0xe}, 0x2005, 0xbfbf}) r7 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r7, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r5}) sendmsg$IPSET_CMD_RENAME(r0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1800}, 0x40004) write$nci(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x10d3, &(0x7f0000000000)={0x0, 0x4391, 0x400, 0x1, 0xee}, &(0x7f00000000c0), &(0x7f0000001080)) socket$nl_generic(0x10, 0x3, 0x10) 8.128622432s ago: executing program 1 (id=655): r0 = fsopen(&(0x7f0000000000)='exfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) tkill(r5, 0xb) 6.867361266s ago: executing program 1 (id=656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) flistxattr(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x2000000000000319, &(0x7f0000000a80)=ANY=[@ANYBLOB], 0x0}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_har']) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r3, 0xee01) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 6.792730384s ago: executing program 4 (id=657): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz0\x00', {0x5, 0x0, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x2ee19903, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x42ac, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe46, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400008, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x0, 0x335, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x956, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0xffffff71) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x4800, 0x26) unlinkat(r6, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) 4.575992283s ago: executing program 1 (id=658): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000200)={0x73622a85, 0x20a, 0x1}) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) syz_io_uring_submit(0x0, 0x0, 0x0) syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x59c0, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x3, 0x3, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x8000002, 0x7, @dev={0xfe, 0x80, '\x00', 0x2b}}, 0x1c) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x406f613, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r2, 0x541c, 0x0) write$UHID_INPUT(r2, 0x0, 0x0) 4.44348024s ago: executing program 4 (id=659): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000380)}) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xc5) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newlink={0x20, 0x10, 0x601, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x22030, 0x9}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x800, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000350001002bbd7004fedbdb250400000008000400020000000c0005"], 0x28}, 0x1, 0x0, 0x0, 0x20040050}, 0x24000080) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000001580)={0x0, 0x8, 0x6, "401e18a4986a"}, 0xe) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x241, 0x0) 4.328925731s ago: executing program 1 (id=660): socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0xc0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x4c}}, 0x40c0080) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000ec0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r6, 0x0, 0x44000) 3.201278362s ago: executing program 1 (id=661): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r5, 0x400, 0x0) fcntl$setlease(r5, 0x400, 0x2) r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x2000000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000140)={r8, @in={{0x2, 0x4e22, @empty}}, [0x4, 0x0, 0xffffffffffff0000, 0x2, 0x9, 0x100000000, 0xef, 0x9, 0x8, 0x1ff, 0x10000, 0x2, 0x9, 0x7, 0x6]}, &(0x7f0000000240)=0x100) r9 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f0000000340)={'aio_iiro_16\x00', [0x8005, 0xb, 0x0, 0x7a55f50e, 0x27, 0xcc6, 0xb, 0x7, 0x3, 0xff, 0x0, 0x0, 0x4000000a, 0x6, 0xa991, 0x2009, 0xfffffffe, 0x40ed, 0x43, 0x40000003, 0x89, 0x6beab93e, 0xf27, 0x6, 0x800b, 0x9, 0x5, 0x0, 0x4fa7f95b, 0x5, 0x514b]}) setsockopt$inet_sctp_SCTP_CONTEXT(r5, 0x84, 0x11, 0x0, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) 1.188491977s ago: executing program 1 (id=662): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x121}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098", 0x29}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f", 0x85}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000d00)="31cef842d9c50636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6f10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba9547e1e343b451d9025c4e153612d4674b9411fb4de295599abbcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a4879bd736f1caacc2bbf1194598a652677efb930a5b6ee292c57402e0cc07a9a26ee794e46e604a", 0xcf}, {&(0x7f0000001300)="e0cda6472d1ccfb4d1d46bf348a3b7ff9e5b6b3e30ef2266c86a085e37271763c50968fe2e2eb13b9472381bade936f9a85e26aac6ebd21115f086751d870434cf07dbd92e0ea2322f163473dad24cffe6d23ffa95", 0x55}], 0x2}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa", 0xb0}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 385.502799ms ago: executing program 4 (id=663): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x202902, 0x0) flock(r0, 0x1) 240.431209ms ago: executing program 4 (id=664): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0]) 179.538298ms ago: executing program 0 (id=665): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00') preadv(r0, 0x0, 0x0, 0x3, 0x4) 141.702207ms ago: executing program 4 (id=666): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240), 0x0, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.853854ms ago: executing program 0 (id=667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(r1, 0x40046721, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) flistxattr(r1, &(0x7f0000000180)=""/30, 0x1e) socket$nl_route(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "ec9fe44d4dbe56a65274d7c727e7e53c1bb714e315eeb406bfdd73835e57efa94b1a0275781c647aa7e3470c6028642b17832b10b386a6f73791011c26a9aa141f406e312295ee620a9a46577b9249b738fe7750bec83bf6ed5b67213fa7d6c0823fd154ed29ed7eff0d26ff199ee1ff379742c3f0b46caa357d70ee438f901d7645c3f87e4b21482b76f2ad8eaac090272081f98fd2e3e5a63e006204df635e731a5bfcf142f4529517454618de595cd179445b4bdbf698b9986356f0ebf7d25a57774ef474f86a3ad24ae9f0bf94b99e6b87de5f79d383d05bb32701daed400785a49788f08caecc9e0c48a3740bbe6e1c1fd400cfdfe756bcb7d08e36655c"}) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000300)=ANY=[@ANYBLOB='usrquota,usrquota_block_har']) newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) chown(&(0x7f00000003c0)='./file0\x00', r3, 0xee01) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 0s ago: executing program 4 (id=668): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz0\x00', {0x5, 0x0, 0x0, 0x1000}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6, 0xd127, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x0, 0xfffffffc, 0xfffffffc, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x5, 0x0, 0x2000, 0x0, 0x0, 0x2ee19903, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x42ac, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xe46, 0x0, 0xffffffff, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4], [0xfffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400008, 0x0, 0x4, 0x0, 0x20, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x526d, 0x0, 0x0, 0x0, 0x335, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xfffffffd, 0x1000, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x956, 0x0, 0x1]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0xffffff71) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = open$dir(&(0x7f00000000c0)='./file1\x00', 0x4800, 0x26) unlinkat(r6, &(0x7f0000000000)='./file0\x00', 0x200) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.108' (ED25519) to the list of known hosts. [ 78.652198][ T5782] cgroup: Unknown subsys name 'net' [ 78.932682][ T5782] cgroup: Unknown subsys name 'cpuset' [ 78.978742][ T5782] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 80.665143][ T5782] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.859279][ T1238] cfg80211: failed to load regulatory.db [ 82.965726][ T5809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 82.979165][ T5809] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 82.980917][ T5809] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 82.981693][ T5809] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 82.985207][ T5809] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 82.986303][ T5809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 82.987719][ T5809] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 82.999634][ T5809] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 83.000250][ T5809] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.001214][ T5809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.001507][ T5809] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 83.001945][ T5809] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 83.002181][ T5809] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 83.002303][ T5809] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.004210][ T5809] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 83.005629][ T5809] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 83.005941][ T5809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.006066][ T5809] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 83.006742][ T5809] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.007513][ T5809] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 83.012705][ T5809] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 83.015487][ T5810] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.015739][ T5810] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 83.026145][ T5113] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.031725][ T61] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.921825][ T5798] chnl_net:caif_netlink_parms(): no params data found [ 83.946986][ T5795] chnl_net:caif_netlink_parms(): no params data found [ 84.043554][ T5797] chnl_net:caif_netlink_parms(): no params data found [ 84.146891][ T5796] chnl_net:caif_netlink_parms(): no params data found [ 84.191466][ T5794] chnl_net:caif_netlink_parms(): no params data found [ 84.354894][ T5798] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.356047][ T5798] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.356368][ T5798] bridge_slave_0: entered allmulticast mode [ 84.357809][ T5798] bridge_slave_0: entered promiscuous mode [ 84.412382][ T5795] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.412462][ T5795] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.412568][ T5795] bridge_slave_0: entered allmulticast mode [ 84.414069][ T5795] bridge_slave_0: entered promiscuous mode [ 84.418690][ T5798] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.418797][ T5798] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.419046][ T5798] bridge_slave_1: entered allmulticast mode [ 84.421610][ T5798] bridge_slave_1: entered promiscuous mode [ 84.473107][ T5795] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.473231][ T5795] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.473699][ T5795] bridge_slave_1: entered allmulticast mode [ 84.475672][ T5795] bridge_slave_1: entered promiscuous mode [ 84.520799][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.520908][ T5797] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.521280][ T5797] bridge_slave_0: entered allmulticast mode [ 84.522709][ T5797] bridge_slave_0: entered promiscuous mode [ 84.585483][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.585593][ T5797] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.585867][ T5797] bridge_slave_1: entered allmulticast mode [ 84.587282][ T5797] bridge_slave_1: entered promiscuous mode [ 84.623544][ T5798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.623800][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.623897][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.624521][ T5796] bridge_slave_0: entered allmulticast mode [ 84.626655][ T5796] bridge_slave_0: entered promiscuous mode [ 84.674118][ T5795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.676480][ T5798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.676718][ T5796] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.676883][ T5796] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.676990][ T5796] bridge_slave_1: entered allmulticast mode [ 84.679893][ T5796] bridge_slave_1: entered promiscuous mode [ 84.681739][ T5794] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.681892][ T5794] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.682056][ T5794] bridge_slave_0: entered allmulticast mode [ 84.684772][ T5794] bridge_slave_0: entered promiscuous mode [ 84.720870][ T5795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.763804][ T5794] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.763905][ T5794] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.764015][ T5794] bridge_slave_1: entered allmulticast mode [ 84.765555][ T5794] bridge_slave_1: entered promiscuous mode [ 84.770851][ T5797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.002205][ T5797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.025191][ T5798] team0: Port device team_slave_0 added [ 85.027779][ T5796] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.049617][ T5812] Bluetooth: hci1: command tx timeout [ 85.069532][ T5795] team0: Port device team_slave_0 added [ 85.071933][ T5798] team0: Port device team_slave_1 added [ 85.073966][ T5796] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.111049][ T5794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.112990][ T5795] team0: Port device team_slave_1 added [ 85.128495][ T5812] Bluetooth: hci0: command tx timeout [ 85.128505][ T5811] Bluetooth: hci4: command tx timeout [ 85.128624][ T5812] Bluetooth: hci3: command tx timeout [ 85.128633][ T5811] Bluetooth: hci2: command tx timeout [ 85.158762][ T5797] team0: Port device team_slave_0 added [ 85.160974][ T5794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.212244][ T5797] team0: Port device team_slave_1 added [ 85.256243][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.256260][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.256285][ T5798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.320162][ T5796] team0: Port device team_slave_0 added [ 85.337666][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.337684][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.337707][ T5795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.340876][ T5798] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.340892][ T5798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.340916][ T5798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.364703][ T5796] team0: Port device team_slave_1 added [ 85.367596][ T5794] team0: Port device team_slave_0 added [ 85.384679][ T5795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.384696][ T5795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.384720][ T5795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.386368][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.386381][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.386404][ T5797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.410459][ T5794] team0: Port device team_slave_1 added [ 85.426797][ T5797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.426813][ T5797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.426837][ T5797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.489471][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.489487][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.489511][ T5796] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.539461][ T5796] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.539478][ T5796] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.539503][ T5796] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.560630][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.560648][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.560671][ T5794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.603672][ T5798] hsr_slave_0: entered promiscuous mode [ 85.605309][ T5798] hsr_slave_1: entered promiscuous mode [ 85.607265][ T5794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.607279][ T5794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.607303][ T5794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.676351][ T5795] hsr_slave_0: entered promiscuous mode [ 85.677652][ T5795] hsr_slave_1: entered promiscuous mode [ 85.679899][ T5795] debugfs: 'hsr0' already exists in 'hsr' [ 85.680008][ T5795] Cannot create hsr debugfs directory [ 85.762408][ T5797] hsr_slave_0: entered promiscuous mode [ 85.763707][ T5797] hsr_slave_1: entered promiscuous mode [ 85.764582][ T5797] debugfs: 'hsr0' already exists in 'hsr' [ 85.764605][ T5797] Cannot create hsr debugfs directory [ 85.836559][ T5796] hsr_slave_0: entered promiscuous mode [ 85.837421][ T5796] hsr_slave_1: entered promiscuous mode [ 85.837978][ T5796] debugfs: 'hsr0' already exists in 'hsr' [ 85.837994][ T5796] Cannot create hsr debugfs directory [ 86.425008][ T5794] hsr_slave_0: entered promiscuous mode [ 86.425826][ T5794] hsr_slave_1: entered promiscuous mode [ 86.426347][ T5794] debugfs: 'hsr0' already exists in 'hsr' [ 86.426368][ T5794] Cannot create hsr debugfs directory [ 87.003649][ T5798] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.029662][ T5798] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.064349][ T5798] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.116731][ T5798] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.130557][ T61] Bluetooth: hci1: command tx timeout [ 87.208959][ T61] Bluetooth: hci3: command tx timeout [ 87.208993][ T61] Bluetooth: hci4: command tx timeout [ 87.209063][ T61] Bluetooth: hci2: command tx timeout [ 87.209083][ T61] Bluetooth: hci0: command tx timeout [ 87.219582][ T5795] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.258225][ T5795] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.295269][ T5795] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.347729][ T5795] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.460411][ T5797] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.513005][ T5797] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.556886][ T5797] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.601202][ T5797] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.738621][ T5796] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.782255][ T5796] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.829302][ T5796] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.877738][ T5796] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.017183][ T5794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.054826][ T5794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.103318][ T5794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.149445][ T5798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.153106][ T5794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.264697][ T5798] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.298775][ T5795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.321152][ T1449] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.321974][ T1449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.369793][ T1449] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.369878][ T1449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.434841][ T5795] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.460369][ T5797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.466428][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.466578][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.516125][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.516204][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.572351][ T5797] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.591600][ T5796] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.614981][ T1475] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.615104][ T1475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.654978][ T1475] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.656432][ T1475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.731249][ T5796] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.737038][ T5794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.770820][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.771565][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.824092][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.824290][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.876951][ T5794] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.952376][ T1449] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.959285][ T1449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.997609][ T1449] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.997970][ T1449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.179950][ T5798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.209166][ T5812] Bluetooth: hci1: command tx timeout [ 89.301687][ T5812] Bluetooth: hci0: command tx timeout [ 89.301733][ T5812] Bluetooth: hci4: command tx timeout [ 89.301744][ T5811] Bluetooth: hci3: command tx timeout [ 89.301823][ T61] Bluetooth: hci2: command tx timeout [ 89.386860][ T5795] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.530711][ T5798] veth0_vlan: entered promiscuous mode [ 89.560618][ T5797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.579106][ T5798] veth1_vlan: entered promiscuous mode [ 89.750351][ T5796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.779040][ T5798] veth0_macvtap: entered promiscuous mode [ 89.810454][ T5798] veth1_macvtap: entered promiscuous mode [ 89.824807][ T5797] veth0_vlan: entered promiscuous mode [ 89.878754][ T5797] veth1_vlan: entered promiscuous mode [ 89.887856][ T5794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.914498][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.944199][ T5798] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.977256][ T43] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.991837][ T43] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.007246][ T43] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.026158][ T43] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.052904][ T5796] veth0_vlan: entered promiscuous mode [ 90.164898][ T5797] veth0_macvtap: entered promiscuous mode [ 90.180190][ T5796] veth1_vlan: entered promiscuous mode [ 90.252636][ T5797] veth1_macvtap: entered promiscuous mode [ 90.313220][ T5795] veth0_vlan: entered promiscuous mode [ 90.315434][ T5794] veth0_vlan: entered promiscuous mode [ 90.355992][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.356017][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.391893][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.395574][ T5795] veth1_vlan: entered promiscuous mode [ 90.402298][ T5794] veth1_vlan: entered promiscuous mode [ 90.449086][ T5797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.491796][ T5796] veth0_macvtap: entered promiscuous mode [ 90.498681][ T43] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.498711][ T43] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.509276][ T1012] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.520170][ T1012] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.524894][ T1012] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.533286][ T5796] veth1_macvtap: entered promiscuous mode [ 90.534816][ T1012] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.725245][ T5795] veth0_macvtap: entered promiscuous mode [ 90.739664][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.741721][ T5794] veth0_macvtap: entered promiscuous mode [ 90.767434][ T5795] veth1_macvtap: entered promiscuous mode [ 90.777874][ T5796] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.797278][ T5794] veth1_macvtap: entered promiscuous mode [ 90.860700][ T1449] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.864662][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.864681][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.864925][ T1449] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.904817][ T1449] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.919896][ T1449] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.974587][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.051612][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.074389][ T5795] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.184483][ T1012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.184504][ T1012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.295826][ T5794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.307390][ T61] Bluetooth: hci1: command tx timeout [ 91.337384][ T1449] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.347983][ T1449] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.509219][ T5812] Bluetooth: hci0: command tx timeout [ 91.511203][ T61] Bluetooth: hci3: command tx timeout [ 91.989394][ T61] Bluetooth: hci2: command tx timeout [ 91.989433][ T61] Bluetooth: hci4: command tx timeout [ 92.128975][ T1449] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.165175][ T1449] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.195937][ T1449] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.227729][ T1449] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.257316][ T1449] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.051115][ T1449] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.171626][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.171646][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.362837][ T5886] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 93.484277][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.484294][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.626683][ T1012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.626706][ T1012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.014838][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.014880][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.014911][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.014941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.014972][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.015002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.015033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.015063][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.015094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.015124][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 94.477065][ T5928] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.487437][ T5928] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.060605][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.060624][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.497574][ T1475] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.497594][ T1475] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.014196][ T5886] usb 4-1: unable to get BOS descriptor or descriptor too short [ 96.035858][ T5886] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 96.035897][ T5886] usb 4-1: can't read configurations, error -71 [ 99.332676][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.332696][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.723153][ T5956] tmpfs: Unknown parameter 'usrquota_block_har' [ 100.932083][ T5960] binder: 5959:5960 ioctl c0306201 0 returned -14 [ 100.962382][ T5960] Zero length message leads to an empty skb [ 100.986052][ T5954] capability: warning: `syz.4.5' uses deprecated v2 capabilities in a way that may be insecure [ 103.907287][ T5980] hub 8-0:1.0: USB hub found [ 103.914812][ T5980] hub 8-0:1.0: 1 port detected [ 103.958729][ T808] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 104.646659][ T5988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.647205][ T5988] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 106.649441][ T808] usb 1-1: unable to get BOS descriptor or descriptor too short [ 106.651364][ T808] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 106.651399][ T808] usb 1-1: can't read configurations, error -71 [ 112.403266][ T6029] netlink: 'syz.1.29': attribute type 9 has an invalid length. [ 113.516633][ T6037] syz.4.33 (6037) used greatest stack depth: 18496 bytes left [ 119.304080][ T6076] binder: 6074:6076 ioctl c0306201 0 returned -14 [ 127.773424][ T6133] tmpfs: Unknown parameter 'usrquota_block_har' [ 127.902144][ T6134] tmpfs: Unknown parameter 'usrquota_block_har' [ 129.450022][ T5881] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 130.192213][ T5881] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 130.192242][ T5881] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 130.192261][ T5881] usb 3-1: config 220 has no interface number 2 [ 130.192396][ T5881] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 130.192423][ T5881] usb 3-1: config 220 interface 0 has no altsetting 0 [ 130.192441][ T5881] usb 3-1: config 220 interface 76 has no altsetting 0 [ 130.192458][ T5881] usb 3-1: config 220 interface 1 has no altsetting 0 [ 130.196292][ T5881] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 130.196319][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.196338][ T5881] usb 3-1: Product: syz [ 130.196351][ T5881] usb 3-1: Manufacturer: syz [ 130.196365][ T5881] usb 3-1: SerialNumber: syz [ 132.199628][ T5881] usb 3-1: selecting invalid altsetting 0 [ 132.204117][ T5881] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 132.204141][ T5881] uvcvideo 3-1:220.0: No valid video chain found. [ 132.226841][ T5881] usb 3-1: selecting invalid altsetting 0 [ 132.226863][ T5881] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 132.263941][ T5881] usb 3-1: USB disconnect, device number 2 [ 132.596160][ T6169] tmpfs: Unknown parameter 'usrquota_block_har' [ 133.713958][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.714045][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.530142][ T5886] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 135.274954][ T5886] usb 2-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 135.275114][ T5886] usb 2-1: too many endpoints for config 1 interface 0 altsetting 0: 199, using maximum allowed: 30 [ 135.277137][ T5886] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 199 [ 135.324560][ T5886] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 135.324598][ T5886] usb 2-1: New USB device strings: Mfr=0, Product=174, SerialNumber=1 [ 135.324662][ T5886] usb 2-1: Product: syz [ 135.324676][ T5886] usb 2-1: SerialNumber: syz [ 135.925971][ T6174] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.927877][ T6174] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.257445][ T6187] capability: warning: `syz.1.73' uses 32-bit capabilities (legacy support in use) [ 138.076510][ T5886] usb 2-1: USB disconnect, device number 2 [ 139.847773][ T5886] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 140.009798][ T5886] usb 3-1: Using ep0 maxpacket: 16 [ 140.011807][ T5886] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 140.011826][ T5886] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 140.015426][ T5886] usb 3-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52 [ 140.015452][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.015465][ T5886] usb 3-1: Product: syz [ 140.015472][ T5886] usb 3-1: Manufacturer: syz [ 140.015479][ T5886] usb 3-1: SerialNumber: syz [ 140.022566][ T5886] usb 3-1: config 0 descriptor?? [ 140.380337][ T6213] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 141.840596][ T5886] usb 3-1: USB disconnect, device number 3 [ 142.332048][ T6220] tmpfs: Unknown parameter 'usrquota_block_har' [ 145.448123][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 145.654688][ T31] usb 2-1: Using ep0 maxpacket: 16 [ 145.662289][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 145.662312][ T31] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 145.667198][ T31] usb 2-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52 [ 145.667224][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.667247][ T31] usb 2-1: Product: syz [ 145.667261][ T31] usb 2-1: Manufacturer: syz [ 145.667274][ T31] usb 2-1: SerialNumber: syz [ 145.676855][ T31] usb 2-1: config 0 descriptor?? [ 147.164519][ T5886] usb 2-1: USB disconnect, device number 3 [ 147.775401][ T6255] hub 8-0:1.0: USB hub found [ 147.783194][ T6255] hub 8-0:1.0: 1 port detected [ 149.268943][ T5882] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 150.816801][ T5882] usb 1-1: unable to get BOS descriptor or descriptor too short [ 150.827471][ T5882] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 150.827507][ T5882] usb 1-1: can't read configurations, error -71 [ 152.067550][ T6271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 153.089875][ T6278] tmpfs: Unknown parameter 'usrquota_block_har' [ 155.112307][ T6284] vivid-000: kernel_thread() failed [ 158.114964][ T6307] netlink: 20 bytes leftover after parsing attributes in process `syz.2.108'. [ 158.695997][ T36] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 158.982240][ T36] usb 4-1: config 1 has an invalid descriptor of length 71, skipping remainder of the config [ 158.982313][ T36] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 199, using maximum allowed: 30 [ 158.982609][ T36] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 199 [ 159.058435][ T36] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 159.058478][ T36] usb 4-1: New USB device strings: Mfr=0, Product=174, SerialNumber=1 [ 159.058526][ T36] usb 4-1: Product: syz [ 159.058540][ T36] usb 4-1: SerialNumber: syz [ 159.899731][ T6316] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.919390][ T6316] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.247494][ T36] usb 4-1: USB disconnect, device number 4 [ 162.589789][ T6334] tmpfs: Unknown parameter 'usrquota_block_har' [ 165.231310][ T6346] input: syz0 as /devices/virtual/input/input5 [ 165.915555][ T6348] netlink: 8 bytes leftover after parsing attributes in process `syz.3.118'. [ 171.081461][ T6376] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 171.722214][ T6387] input: syz0 as /devices/virtual/input/input6 [ 172.236740][ T6386] binder: 6385:6386 ioctl c0306201 0 returned -14 [ 174.245614][ T6392] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 175.636971][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 178.099387][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 178.100415][ T10] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 178.100448][ T10] usb 4-1: can't read configurations, error -71 [ 178.362192][ T6459] tmpfs: Unknown parameter 'usrquota_block_har' [ 185.096979][ T6492] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 186.798062][ T6501] vivid-000: kernel_thread() failed [ 189.211701][ T6516] syz.0.155 uses obsolete (PF_INET,SOCK_PACKET) [ 189.736562][ T61] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 189.745859][ T61] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 189.748506][ T61] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 189.761419][ T61] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 189.762550][ T61] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 191.212035][ T6532] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 192.112538][ T61] Bluetooth: hci5: command tx timeout [ 192.430155][ T6538] overlayfs: missing 'lowerdir' [ 194.168239][ T61] Bluetooth: hci5: command tx timeout [ 195.175098][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.167'. [ 195.809912][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.809981][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.710486][ T61] Bluetooth: hci5: command tx timeout [ 197.268088][ T5805] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 198.185403][ T6566] warning: `syz.2.170' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 198.198845][ T6578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 198.199330][ T6578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 198.550896][ T5805] usb 3-1: unable to get BOS descriptor or descriptor too short [ 198.552873][ T5805] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 198.552904][ T5805] usb 3-1: can't read configurations, error -71 [ 198.808210][ T61] Bluetooth: hci5: command tx timeout [ 199.445326][ T6600] tmpfs: Unknown parameter 'usrquota_block_har' [ 200.032783][ T169] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.907699][ T169] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.015497][ T6611] overlayfs: missing 'workdir' [ 205.002270][ T169] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.088919][ T6624] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.815187][ T5808] Bluetooth: hci0: command 0x0406 tx timeout [ 206.815223][ T5809] Bluetooth: hci1: command 0x0406 tx timeout [ 206.815248][ T5807] Bluetooth: hci4: command 0x0406 tx timeout [ 206.815260][ T5809] Bluetooth: hci2: command 0x0406 tx timeout [ 209.232450][ T169] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.069035][ T6637] netlink: 20 bytes leftover after parsing attributes in process `syz.4.188'. [ 210.162134][ T6522] chnl_net:caif_netlink_parms(): no params data found [ 211.450164][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.450239][ T6522] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.450399][ T6522] bridge_slave_0: entered allmulticast mode [ 211.451910][ T6522] bridge_slave_0: entered promiscuous mode [ 211.503909][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.503981][ T6522] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.504144][ T6522] bridge_slave_1: entered allmulticast mode [ 211.509213][ T6522] bridge_slave_1: entered promiscuous mode [ 212.849262][ T6664] input: syz0 as /devices/virtual/input/input7 [ 214.676220][ T6522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.740780][ T6522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.006058][ T169] bridge_slave_1: left allmulticast mode [ 216.006223][ T169] bridge_slave_1: left promiscuous mode [ 216.030490][ T169] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.712821][ T6688] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 217.621071][ T169] bridge_slave_0: left allmulticast mode [ 217.621089][ T169] bridge_slave_0: left promiscuous mode [ 217.621226][ T169] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.289079][ T6692] tmpfs: Unknown parameter 'usrquota_block_har' [ 220.063663][ T169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.157350][ T169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.192376][ T169] bond0 (unregistering): Released all slaves [ 220.232851][ T6522] team0: Port device team_slave_0 added [ 220.354502][ T6704] tmpfs: Unknown parameter 'usrquota_block_har' [ 221.254923][ T6522] team0: Port device team_slave_1 added [ 221.499125][ T6522] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.499136][ T6522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.499149][ T6522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.503102][ T6522] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.503111][ T6522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 221.503124][ T6522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.911833][ T1238] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 222.969853][ T6720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 222.974002][ T6720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.150321][ T6522] hsr_slave_0: entered promiscuous mode [ 224.152998][ T6522] hsr_slave_1: entered promiscuous mode [ 224.156418][ T6522] debugfs: 'hsr0' already exists in 'hsr' [ 224.156441][ T6522] Cannot create hsr debugfs directory [ 224.464178][ T10] libceph: connect (1)[c::]:6789 error -101 [ 224.478785][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 224.496934][ T10] libceph: connect (1)[c::]:6789 error -101 [ 224.497480][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 224.749195][ T10] libceph: connect (1)[c::]:6789 error -101 [ 224.749366][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 225.024381][ T6730] ceph: No mds server is up or the cluster is laggy [ 225.248126][ T1238] usb 3-1: unable to get BOS descriptor or descriptor too short [ 225.250030][ T1238] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 225.250063][ T1238] usb 3-1: can't read configurations, error -71 [ 225.327740][ T1237] libceph: connect (1)[c::]:6789 error -101 [ 225.334955][ T1237] libceph: mon0 (1)[c::]:6789 connect error [ 226.646185][ T169] hsr_slave_0: left promiscuous mode [ 226.666832][ T169] hsr_slave_1: left promiscuous mode [ 226.667797][ T169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.667856][ T169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.773135][ T6751] input: syz0 as /devices/virtual/input/input8 [ 227.892630][ T169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 227.892657][ T169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.834159][ T169] veth1_macvtap: left promiscuous mode [ 228.834402][ T169] veth0_macvtap: left promiscuous mode [ 228.834570][ T169] veth1_vlan: left promiscuous mode [ 228.834841][ T169] veth0_vlan: left promiscuous mode [ 229.547293][ T36] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 229.708755][ T36] usb 5-1: Using ep0 maxpacket: 8 [ 229.711761][ T36] usb 5-1: unable to get BOS descriptor or descriptor too short [ 229.717167][ T36] usb 5-1: config 3 has an invalid interface number: 182 but max is 0 [ 229.717192][ T36] usb 5-1: config 3 has an invalid descriptor of length 109, skipping remainder of the config [ 229.717289][ T36] usb 5-1: config 3 has no interface number 0 [ 229.717332][ T36] usb 5-1: config 3 interface 182 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 229.717357][ T36] usb 5-1: config 3 interface 182 has no altsetting 0 [ 229.723638][ T36] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=90.57 [ 229.723666][ T36] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.723692][ T36] usb 5-1: Product: syz [ 229.723713][ T36] usb 5-1: Manufacturer: syz [ 229.723726][ T36] usb 5-1: SerialNumber: syz [ 230.295741][ T169] team0 (unregistering): Port device team_slave_1 removed [ 230.617269][ T6756] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 230.629032][ T6756] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 230.647165][ T36] usbtest 5-1:3.182: couldn't get endpoints, -22 [ 230.647249][ T36] usbtest 5-1:3.182: probe with driver usbtest failed with error -22 [ 230.666390][ T36] usb 5-1: USB disconnect, device number 2 [ 230.696964][ T169] team0 (unregistering): Port device team_slave_0 removed [ 230.911838][ T6742] netlink: 20 bytes leftover after parsing attributes in process `syz.2.208'. [ 230.911916][ T6753] netlink: 20 bytes leftover after parsing attributes in process `syz.0.210'. [ 232.090160][ T6770] netlink: 20 bytes leftover after parsing attributes in process `syz.2.214'. [ 232.798061][ T808] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 233.843523][ T6774] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 234.217131][ T808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.217184][ T808] usb 1-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.00 [ 234.217206][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.306333][ T808] usb 1-1: config 0 descriptor?? [ 234.324281][ T808] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 234.577145][ T6768] netlink: 24 bytes leftover after parsing attributes in process `syz.0.215'. [ 234.718967][ T5881] usb 1-1: USB disconnect, device number 6 [ 235.538261][ T6522] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 235.861031][ T6522] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 235.949274][ T6522] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 236.957407][ T6795] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 237.515880][ T6522] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 241.168203][ T6522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.469387][ T6522] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.526910][ T3562] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.527040][ T3562] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.622026][ T1118] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.622152][ T1118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.978738][ T1237] IPVS: starting estimator thread 0... [ 243.999218][ T6863] binder: 6857:6863 ioctl c0306201 0 returned -14 [ 244.418296][ T6862] IPVS: using max 15 ests per chain, 36000 per kthread [ 244.518085][ T1237] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 244.721242][ T1237] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.721277][ T1237] usb 1-1: New USB device found, idVendor=056a, idProduct=00e6, bcdDevice= 0.00 [ 244.721289][ T1237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.738778][ T1237] usb 1-1: config 0 descriptor?? [ 244.835190][ T1237] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 246.229793][ T6872] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.602786][ T10] usb 1-1: USB disconnect, device number 7 [ 246.735779][ T6522] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.710178][ T6896] netlink: 20 bytes leftover after parsing attributes in process `syz.0.238'. [ 250.967100][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 250.985306][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 250.986553][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 251.009882][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 251.011434][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 251.374746][ T6929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.244'. [ 252.908027][ T6935] input: syz0 as /devices/virtual/input/input9 [ 253.219048][ T5811] Bluetooth: hci3: command tx timeout [ 256.340972][ T6945] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 256.418744][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.418811][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.438041][ T5811] Bluetooth: hci3: command tx timeout [ 258.540848][ T6954] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 258.955932][ T5811] Bluetooth: hci3: command tx timeout [ 260.262664][ T6965] netlink: 8 bytes leftover after parsing attributes in process `syz.1.249'. [ 260.968830][ T5811] Bluetooth: hci3: command tx timeout [ 262.578778][ T6971] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 264.454915][ T6976] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 265.580632][ T6921] chnl_net:caif_netlink_parms(): no params data found [ 266.978825][ T6988] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 267.685733][ T12] bridge_slave_1: left allmulticast mode [ 267.685759][ T12] bridge_slave_1: left promiscuous mode [ 267.685991][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.839582][ T12] bridge_slave_0: left allmulticast mode [ 267.839610][ T12] bridge_slave_0: left promiscuous mode [ 267.839901][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.279080][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.339347][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.378655][ T12] bond0 (unregistering): Released all slaves [ 272.412983][ T7016] netlink: 20 bytes leftover after parsing attributes in process `syz.0.256'. [ 273.511632][ T7029] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.119741][ T6921] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.119811][ T6921] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.119971][ T6921] bridge_slave_0: entered allmulticast mode [ 274.123644][ T6921] bridge_slave_0: entered promiscuous mode [ 274.127110][ T6921] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.127229][ T6921] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.127406][ T6921] bridge_slave_1: entered allmulticast mode [ 274.130115][ T6921] bridge_slave_1: entered promiscuous mode [ 275.048863][ T6921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.080028][ T6921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.638411][ T7042] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 278.846413][ T7055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 280.329026][ T12] hsr_slave_0: left promiscuous mode [ 280.378133][ T12] hsr_slave_1: left promiscuous mode [ 280.379242][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.419053][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.772219][ T7069] input: syz0 as /devices/virtual/input/input10 [ 284.025995][ T7083] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 285.806215][ T36] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 286.875266][ T36] usb 2-1: device descriptor read/all, error -71 [ 288.890680][ T7110] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 289.335168][ T7113] process 'syz.2.285' launched '/dev/fd/4' with NULL argv: empty string added [ 290.499286][ T12] team0 (unregistering): Port device team_slave_1 removed [ 291.954388][ T7120] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.131348][ T12] team0 (unregistering): Port device team_slave_0 removed [ 293.014911][ T36] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 293.219452][ T36] usb 3-1: Using ep0 maxpacket: 16 [ 293.310222][ T36] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 293.310247][ T36] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 293.312517][ T36] usb 3-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52 [ 293.312542][ T36] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.312560][ T36] usb 3-1: Product: syz [ 293.312573][ T36] usb 3-1: Manufacturer: syz [ 293.312586][ T36] usb 3-1: SerialNumber: syz [ 293.392760][ T36] usb 3-1: config 0 descriptor?? [ 293.735331][ T6921] team0: Port device team_slave_0 added [ 293.768896][ T6921] team0: Port device team_slave_1 added [ 294.960824][ T7083] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.981822][ T6921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.981838][ T6921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.981862][ T6921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 295.411213][ T7134] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 295.726970][ T6921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 295.727027][ T6921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 295.727129][ T6921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.640040][ T1237] usb 3-1: USB disconnect, device number 8 [ 297.153753][ T7142] input: syz0 as /devices/virtual/input/input12 [ 299.734817][ T6921] hsr_slave_0: entered promiscuous mode [ 299.748423][ T6921] hsr_slave_1: entered promiscuous mode [ 299.784805][ T6921] debugfs: 'hsr0' already exists in 'hsr' [ 299.784831][ T6921] Cannot create hsr debugfs directory [ 304.482392][ T7197] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 304.808064][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 305.390520][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 305.390630][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.390649][ T10] usb 5-1: Product: syz [ 305.390662][ T10] usb 5-1: Manufacturer: syz [ 305.390676][ T10] usb 5-1: SerialNumber: syz [ 305.504953][ T10] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 305.650490][ T6921] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 305.694961][ T6921] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 305.779597][ T6921] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 305.877067][ T6921] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 305.910686][ T1237] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 306.101322][ T7212] netlink: 'syz.1.306': attribute type 11 has an invalid length. [ 306.101359][ T7212] netlink: 32 bytes leftover after parsing attributes in process `syz.1.306'. [ 307.703501][ T1237] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 307.705892][ T1237] ath9k_htc: Failed to initialize the device [ 308.222940][ T7200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.319098][ T1237] usb 5-1: ath9k_htc: USB layer deinitialized [ 308.417182][ T5881] usb 5-1: USB disconnect, device number 3 [ 308.476358][ T6921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.819293][ T6921] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.342171][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.345386][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.425044][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.425167][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.028147][ T808] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 311.098308][ T5801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 311.119505][ T5801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 311.137844][ T5801] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 311.168392][ T5801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 311.174125][ T5801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 311.188212][ T808] usb 5-1: Using ep0 maxpacket: 16 [ 311.196649][ T808] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.196672][ T808] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 311.199917][ T808] usb 5-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52 [ 311.199943][ T808] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.199961][ T808] usb 5-1: Product: syz [ 311.199974][ T808] usb 5-1: Manufacturer: syz [ 311.199988][ T808] usb 5-1: SerialNumber: syz [ 311.274502][ T808] usb 5-1: config 0 descriptor?? [ 312.622182][ T5881] usb 5-1: USB disconnect, device number 4 [ 313.209672][ T5801] Bluetooth: hci5: command tx timeout [ 315.349900][ T5801] Bluetooth: hci5: command tx timeout [ 317.377226][ T5801] Bluetooth: hci5: command tx timeout [ 317.378644][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.378699][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.564975][ T7253] chnl_net:caif_netlink_parms(): no params data found [ 318.118862][ T7326] netlink: 20 bytes leftover after parsing attributes in process `syz.2.324'. [ 320.236375][ T5801] Bluetooth: hci5: command tx timeout [ 320.280592][ T7337] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 321.347820][ T7253] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.348468][ T7253] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.348774][ T7253] bridge_slave_0: entered allmulticast mode [ 321.381275][ T7253] bridge_slave_0: entered promiscuous mode [ 321.653081][ T7253] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.653204][ T7253] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.653410][ T7253] bridge_slave_1: entered allmulticast mode [ 321.694927][ T7253] bridge_slave_1: entered promiscuous mode [ 322.017782][ T7253] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.196018][ T7253] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.288786][ T3562] bridge_slave_1: left allmulticast mode [ 322.288804][ T3562] bridge_slave_1: left promiscuous mode [ 322.288967][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.407168][ T3562] bridge_slave_0: left allmulticast mode [ 322.407186][ T3562] bridge_slave_0: left promiscuous mode [ 322.407361][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.306887][ T7370] input: syz0 as /devices/virtual/input/input15 [ 328.475713][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 328.560017][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 328.655359][ T3562] bond0 (unregistering): Released all slaves [ 328.970305][ T7253] team0: Port device team_slave_0 added [ 328.974134][ T7253] team0: Port device team_slave_1 added [ 329.730035][ T7389] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 330.128129][ T3562] hsr_slave_0: left promiscuous mode [ 330.227190][ T3562] hsr_slave_1: left promiscuous mode [ 330.233789][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.319089][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.210329][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 333.262115][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 333.410489][ T7416] netlink: 20 bytes leftover after parsing attributes in process `syz.2.343'. [ 333.484624][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 333.484640][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.484652][ T7253] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 333.556685][ T7253] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.556695][ T7253] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 333.556709][ T7253] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.931952][ T7253] hsr_slave_0: entered promiscuous mode [ 333.935111][ T7253] hsr_slave_1: entered promiscuous mode [ 333.957305][ T7253] debugfs: 'hsr0' already exists in 'hsr' [ 333.957323][ T7253] Cannot create hsr debugfs directory [ 335.965649][ T7430] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 338.029127][ T7440] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 339.037327][ T7449] input: syz0 as /devices/virtual/input/input16 [ 345.638757][ T7498] input: syz0 as /devices/virtual/input/input17 [ 348.384884][ T7253] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 348.443018][ T7253] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 348.832490][ T7253] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 349.381689][ T7253] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 349.857752][ T7525] input: syz0 as /devices/virtual/input/input18 [ 352.986858][ T7534] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 355.314708][ T7533] syz.4.365 (7533) used greatest stack depth: 16792 bytes left [ 355.383774][ T7253] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.518059][ T7253] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.574583][ T1127] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.574728][ T1127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 355.582519][ T1127] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.583914][ T1127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 355.683456][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 355.686088][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 355.690248][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 355.697739][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 355.702475][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.849570][ T5811] Bluetooth: hci3: command tx timeout [ 358.936070][ T7551] chnl_net:caif_netlink_parms(): no params data found [ 359.930214][ T5811] Bluetooth: hci3: command tx timeout [ 362.008714][ T5811] Bluetooth: hci3: command tx timeout [ 363.966516][ T7610] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 364.193093][ T5811] Bluetooth: hci3: command tx timeout [ 365.354174][ T3562] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.658045][ T36] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 365.750804][ T3562] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.811528][ T36] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.811554][ T36] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 365.817432][ T36] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 365.817461][ T36] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.817480][ T36] usb 1-1: Product: syz [ 365.817493][ T36] usb 1-1: Manufacturer: syz [ 365.817507][ T36] usb 1-1: SerialNumber: syz [ 365.873347][ T7551] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.876666][ T7551] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.876901][ T7551] bridge_slave_0: entered allmulticast mode [ 365.899686][ T36] usb 1-1: config 0 descriptor?? [ 365.903939][ T7551] bridge_slave_0: entered promiscuous mode [ 365.925116][ T7551] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.925193][ T7551] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.925334][ T7551] bridge_slave_1: entered allmulticast mode [ 365.972704][ T7551] bridge_slave_1: entered promiscuous mode [ 366.040874][ T7253] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.119905][ T5805] usb 1-1: USB disconnect, device number 8 [ 366.273759][ T3562] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.347525][ T7551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.375119][ T7551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.703106][ T3562] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.255330][ T7551] team0: Port device team_slave_0 added [ 367.472806][ T7551] team0: Port device team_slave_1 added [ 367.636776][ T7551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.636794][ T7551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.636816][ T7551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.936041][ T7551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.936057][ T7551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 367.936081][ T7551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.306479][ T7646] overlay: filesystem on ./file0 not supported as upperdir [ 368.882761][ T3562] bridge_slave_1: left allmulticast mode [ 368.882780][ T3562] bridge_slave_1: left promiscuous mode [ 368.882927][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.946569][ T3562] bridge_slave_0: left allmulticast mode [ 368.947564][ T3562] bridge_slave_0: left promiscuous mode [ 368.948793][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.293350][ T7653] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.695553][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 371.733754][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 371.734876][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.736178][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.736808][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 372.365305][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 372.445886][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 372.498080][ T3562] bond0 (unregistering): Released all slaves [ 372.523944][ T3562] bond1 (unregistering): Released all slaves [ 372.757434][ T7551] hsr_slave_0: entered promiscuous mode [ 372.765884][ T7551] hsr_slave_1: entered promiscuous mode [ 372.766424][ T7551] debugfs: 'hsr0' already exists in 'hsr' [ 372.766440][ T7551] Cannot create hsr debugfs directory [ 372.838033][ T31] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 373.019951][ T31] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.019978][ T31] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 373.024960][ T31] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 373.024988][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.025006][ T31] usb 1-1: Product: syz [ 373.025018][ T31] usb 1-1: Manufacturer: syz [ 373.025030][ T31] usb 1-1: SerialNumber: syz [ 373.070514][ T31] usb 1-1: config 0 descriptor?? [ 373.315014][ T5880] usb 1-1: USB disconnect, device number 9 [ 374.107155][ T5801] Bluetooth: hci4: command tx timeout [ 376.112376][ T7707] overlayfs: failed to resolve './file0': -2 [ 376.168243][ T5801] Bluetooth: hci4: command tx timeout [ 378.421084][ T5801] Bluetooth: hci4: command tx timeout [ 378.475441][ T7713] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 378.840890][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.840957][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.928272][ T808] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 380.110199][ T808] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.110224][ T808] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 380.112811][ T808] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 380.112836][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.112854][ T808] usb 1-1: Product: syz [ 380.112867][ T808] usb 1-1: Manufacturer: syz [ 380.112881][ T808] usb 1-1: SerialNumber: syz [ 380.177288][ T808] usb 1-1: config 0 descriptor?? [ 380.569315][ T7736] input: syz0 as /devices/virtual/input/input19 [ 381.031670][ T5801] Bluetooth: hci4: command tx timeout [ 381.053665][ T808] usb 1-1: USB disconnect, device number 10 [ 381.533061][ T7739] overlay: filesystem on ./file0 not supported as upperdir [ 382.261383][ T3562] hsr_slave_0: left promiscuous mode [ 382.398074][ T3562] hsr_slave_1: left promiscuous mode [ 382.399208][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.399239][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 383.289688][ T3562] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.289717][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 383.658608][ T7750] overlay: filesystem on ./file0 not supported as upperdir [ 384.957670][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.0.420'. [ 385.170105][ T3562] veth1_macvtap: left promiscuous mode [ 385.170203][ T3562] veth0_macvtap: left promiscuous mode [ 385.170434][ T3562] veth1_vlan: left promiscuous mode [ 385.170594][ T3562] veth0_vlan: left promiscuous mode [ 389.898539][ T7779] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 391.097728][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 392.083151][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 393.202729][ T7795] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 393.878082][ T7796] overlay: filesystem on ./file0 not supported as upperdir [ 394.997072][ T7800] overlayfs: failed to resolve './file0': -2 [ 397.598370][ T5881] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 397.952160][ T5881] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.952186][ T5881] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 397.956901][ T5881] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac [ 397.956928][ T5881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.956948][ T5881] usb 5-1: Product: syz [ 397.956962][ T5881] usb 5-1: Manufacturer: syz [ 397.956976][ T5881] usb 5-1: SerialNumber: syz [ 397.962731][ T5881] usb 5-1: config 0 descriptor?? [ 398.699633][ T7551] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 398.759313][ T9] usb 5-1: USB disconnect, device number 5 [ 398.805159][ T7663] chnl_net:caif_netlink_parms(): no params data found [ 398.910594][ T7551] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 399.049705][ T7551] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 399.329082][ T7551] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 400.656333][ T7840] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 401.385817][ T3562] IPVS: stop unused estimator thread 0... [ 401.596591][ T7663] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.618588][ T7663] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.618841][ T7663] bridge_slave_0: entered allmulticast mode [ 401.718586][ T7663] bridge_slave_0: entered promiscuous mode [ 401.738878][ T7663] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.738990][ T7663] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.739131][ T7663] bridge_slave_1: entered allmulticast mode [ 401.741702][ T7663] bridge_slave_1: entered promiscuous mode [ 402.165684][ T7663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.398261][ T7860] Can't find ip_set type bitmap:ip [ 403.575436][ T7663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.335823][ T7879] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 406.555276][ T7663] team0: Port device team_slave_0 added [ 406.586431][ T7663] team0: Port device team_slave_1 added [ 406.895970][ T7884] overlay: filesystem on ./file0 not supported as upperdir [ 407.668045][ T6529] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 407.824477][ T6529] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 407.824506][ T6529] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.824528][ T6529] usb 2-1: Product: syz [ 407.824541][ T6529] usb 2-1: Manufacturer: syz [ 407.824555][ T6529] usb 2-1: SerialNumber: syz [ 407.890818][ T6529] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 407.891645][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.891659][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 407.891682][ T7663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.965585][ T808] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 408.151039][ T7663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.151200][ T7663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.151381][ T7663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 410.600609][ T6529] usb 2-1: USB disconnect, device number 6 [ 410.671989][ T808] usb 2-1: ath9k_htc: Unable to allocate URBs [ 410.673730][ T6529] usb 2-1: ath9k_htc: USB layer deinitialized [ 410.695910][ T7879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.548892][ T7663] hsr_slave_0: entered promiscuous mode [ 411.549932][ T7663] hsr_slave_1: entered promiscuous mode [ 411.551643][ T7663] debugfs: 'hsr0' already exists in 'hsr' [ 411.551659][ T7663] Cannot create hsr debugfs directory [ 414.075348][ T7918] netlink: 'syz.1.453': attribute type 11 has an invalid length. [ 414.075370][ T7918] netlink: 20 bytes leftover after parsing attributes in process `syz.1.453'. [ 414.233869][ T7551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.271094][ T3562] bridge_slave_1: left allmulticast mode [ 414.271113][ T3562] bridge_slave_1: left promiscuous mode [ 414.271251][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.187631][ T3562] bridge_slave_0: left allmulticast mode [ 415.187651][ T3562] bridge_slave_0: left promiscuous mode [ 415.187828][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.715751][ T7935] overlay: filesystem on ./file0 not supported as upperdir [ 418.754966][ T5811] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 418.774471][ T5811] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 418.776400][ T5811] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 418.798926][ T5811] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 418.799843][ T5811] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 419.028489][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 419.111195][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 419.310235][ T3562] bond0 (unregistering): Released all slaves [ 420.734399][ T7959] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 421.807273][ T5811] Bluetooth: hci5: command tx timeout [ 422.668193][ T3562] hsr_slave_0: left promiscuous mode [ 422.708418][ T3562] hsr_slave_1: left promiscuous mode [ 422.709702][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.755230][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.863537][ T5811] Bluetooth: hci5: command tx timeout [ 424.273123][ T7969] Can't find ip_set type bitmap:ip [ 425.928432][ T5811] Bluetooth: hci5: command tx timeout [ 427.335652][ T7990] vivid-000: kernel_thread() failed [ 428.198887][ T7989] Can't find ip_set type bitmap:ip [ 428.297212][ T5811] Bluetooth: hci5: command tx timeout [ 429.532442][ T7998] Can't find ip_set type bitmap:ip [ 430.215201][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 430.458827][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 433.831427][ T8020] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.498425][ T5801] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 434.518154][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 434.522388][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 434.525217][ T5801] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 434.544724][ T5801] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 436.626820][ T7940] chnl_net:caif_netlink_parms(): no params data found [ 436.648407][ T5801] Bluetooth: hci3: command tx timeout [ 437.733426][ T8055] input: syz0 as /devices/virtual/input/input20 [ 439.593661][ T5801] Bluetooth: hci3: command tx timeout [ 439.693232][ T8063] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 440.448014][ T8065] Can't find ip_set type bitmap:ip [ 440.455372][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.455438][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.248342][ T5801] Bluetooth: hci3: command tx timeout [ 443.845708][ T8024] chnl_net:caif_netlink_parms(): no params data found [ 444.728206][ T5801] Bluetooth: hci3: command tx timeout [ 446.760124][ T8097] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 447.242363][ T7940] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.242552][ T7940] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.243617][ T7940] bridge_slave_0: entered allmulticast mode [ 447.246065][ T7940] bridge_slave_0: entered promiscuous mode [ 447.347778][ T7940] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.348322][ T7940] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.348621][ T7940] bridge_slave_1: entered allmulticast mode [ 447.353620][ T7940] bridge_slave_1: entered promiscuous mode [ 447.676472][ T7940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.725865][ T7940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.355733][ T8024] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.357726][ T8024] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.361025][ T8024] bridge_slave_0: entered allmulticast mode [ 448.369130][ T8024] bridge_slave_0: entered promiscuous mode [ 448.462845][ T7940] team0: Port device team_slave_0 added [ 448.464205][ T8024] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.464346][ T8024] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.464616][ T8024] bridge_slave_1: entered allmulticast mode [ 448.505086][ T8024] bridge_slave_1: entered promiscuous mode [ 448.620990][ T7940] team0: Port device team_slave_1 added [ 448.962360][ T8024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.962945][ T7940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.962960][ T7940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.962973][ T7940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.973075][ T7940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.973090][ T7940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 448.973114][ T7940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.989238][ T8024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.517357][ T3562] bridge_slave_1: left allmulticast mode [ 450.517376][ T3562] bridge_slave_1: left promiscuous mode [ 450.517517][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.598864][ T3562] bridge_slave_0: left allmulticast mode [ 450.598882][ T3562] bridge_slave_0: left promiscuous mode [ 450.599034][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.710678][ T3562] bridge_slave_1: left allmulticast mode [ 450.710697][ T3562] bridge_slave_1: left promiscuous mode [ 450.710845][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.918577][ T3562] bridge_slave_0: left allmulticast mode [ 450.918596][ T3562] bridge_slave_0: left promiscuous mode [ 450.918755][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 451.662589][ T8125] Can't find ip_set type bitmap:ip [ 455.031848][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 455.152696][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 455.353792][ T3562] bond0 (unregistering): Released all slaves [ 457.748755][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.014929][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.534625][ T3562] bond0 (unregistering): Released all slaves [ 458.686694][ T8024] team0: Port device team_slave_0 added [ 458.762259][ T8024] team0: Port device team_slave_1 added [ 458.807598][ T7940] hsr_slave_0: entered promiscuous mode [ 458.833891][ T7940] hsr_slave_1: entered promiscuous mode [ 458.834408][ T7940] debugfs: 'hsr0' already exists in 'hsr' [ 458.834422][ T7940] Cannot create hsr debugfs directory [ 459.013024][ T8024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.013034][ T8024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.013047][ T8024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.044126][ T8024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.044143][ T8024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.044168][ T8024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.787884][ T8179] Can't find ip_set type bitmap:ip [ 461.654514][ T8184] overlay: filesystem on ./file0 not supported as upperdir [ 462.208743][ T8185] Can't find ip_set type bitmap:ip [ 462.373567][ T3562] hsr_slave_0: left promiscuous mode [ 462.402483][ T3562] hsr_slave_1: left promiscuous mode [ 462.403442][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.473818][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.640264][ T3562] hsr_slave_0: left promiscuous mode [ 463.791678][ T3562] hsr_slave_1: left promiscuous mode [ 463.794218][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.876521][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.829712][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 464.931348][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 465.971955][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 466.059106][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 466.355246][ T8229] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 467.277184][ T31] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 468.390078][ T8240] overlayfs: failed to resolve './file2': -2 [ 468.810623][ T8241] Can't find ip_set type bitmap:ip [ 469.040383][ T31] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 469.040411][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.040429][ T31] usb 5-1: Product: syz [ 469.040441][ T31] usb 5-1: Manufacturer: syz [ 469.040454][ T31] usb 5-1: SerialNumber: syz [ 469.077315][ T8024] hsr_slave_0: entered promiscuous mode [ 469.082113][ T8024] hsr_slave_1: entered promiscuous mode [ 469.083089][ T8024] debugfs: 'hsr0' already exists in 'hsr' [ 469.083112][ T8024] Cannot create hsr debugfs directory [ 469.146776][ T31] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 469.191065][ T6529] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 470.386455][ T6529] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 470.386646][ T6529] ath9k_htc: Failed to initialize the device [ 470.461147][ T9] usb 5-1: USB disconnect, device number 6 [ 470.506704][ T8228] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.580785][ T9] usb 5-1: ath9k_htc: USB layer deinitialized [ 473.506414][ T8267] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 477.504789][ T5811] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 477.541417][ T5811] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 477.542673][ T5811] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 477.543767][ T5811] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 477.544480][ T5811] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 479.618015][ T5811] Bluetooth: hci4: command tx timeout [ 481.688291][ T5811] Bluetooth: hci4: command tx timeout [ 482.015740][ T8330] random: crng reseeded on system resumption [ 482.807244][ T8303] chnl_net:caif_netlink_parms(): no params data found [ 484.289151][ T5811] Bluetooth: hci4: command tx timeout [ 485.029217][ T8349] Can't find ip_set type bitmap:ip [ 485.378134][ T8024] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 486.171580][ T8024] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 486.488001][ T5811] Bluetooth: hci4: command tx timeout [ 487.391664][ T8362] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 487.622606][ T8024] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 487.712333][ T8024] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 490.376745][ T8303] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.376864][ T8303] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.377096][ T8303] bridge_slave_0: entered allmulticast mode [ 490.414659][ T8303] bridge_slave_0: entered promiscuous mode [ 490.828228][ T8303] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.828349][ T8303] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.828677][ T8303] bridge_slave_1: entered allmulticast mode [ 490.862019][ T8303] bridge_slave_1: entered promiscuous mode [ 491.571342][ T8396] Can't find ip_set type bitmap:ip [ 492.125114][ T8303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.172257][ T8303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.467519][ T8303] team0: Port device team_slave_0 added [ 492.599928][ T8303] team0: Port device team_slave_1 added [ 493.152391][ T5801] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 493.171557][ T5801] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 493.173630][ T5801] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 493.175820][ T5801] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 493.176277][ T5801] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 493.226448][ T8303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.230136][ T8303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.230163][ T8303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.434452][ T8303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.434559][ T8303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.434585][ T8303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.396357][ T8423] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 495.374744][ T5801] Bluetooth: hci5: command tx timeout [ 495.843422][ T8303] hsr_slave_0: entered promiscuous mode [ 495.846989][ T8303] hsr_slave_1: entered promiscuous mode [ 495.866992][ T8303] debugfs: 'hsr0' already exists in 'hsr' [ 495.867019][ T8303] Cannot create hsr debugfs directory [ 496.221087][ T8437] overlayfs: failed to resolve './file2': -2 [ 496.826326][ T8438] Can't find ip_set type bitmap:ip [ 497.450113][ T5801] Bluetooth: hci5: command tx timeout [ 497.610260][ T8445] overlayfs: failed to resolve './file2': -2 [ 498.203027][ T8446] Can't find ip_set type bitmap:ip [ 499.764053][ T5801] Bluetooth: hci5: command tx timeout [ 501.502192][ T3562] bridge_slave_1: left allmulticast mode [ 501.502211][ T3562] bridge_slave_1: left promiscuous mode [ 501.502357][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.769365][ T5801] Bluetooth: hci5: command tx timeout [ 501.788646][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.790116][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.256328][ T8469] Can't find ip_set type bitmap:ip [ 502.424604][ T3562] bridge_slave_0: left allmulticast mode [ 502.424630][ T3562] bridge_slave_0: left promiscuous mode [ 502.424878][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.311571][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.418407][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.844064][ T3562] bond0 (unregistering): Released all slaves [ 504.878217][ T3562] hsr_slave_0: left promiscuous mode [ 504.908135][ T3562] hsr_slave_1: left promiscuous mode [ 504.909176][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 504.971286][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 507.777286][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 507.890321][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 509.755185][ T8517] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 510.633187][ T8525] input: syz1 as /devices/virtual/input/input21 [ 510.633222][ T8525] input: failed to attach handler leds to device input21, error: -6 [ 513.268497][ T8539] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 514.489363][ T8553] overlayfs: failed to resolve './file2': -2 [ 515.120783][ T8554] Can't find ip_set type bitmap:ip [ 515.358178][ T8415] chnl_net:caif_netlink_parms(): no params data found [ 517.963171][ T8578] Can't find ip_set type bitmap:ip [ 518.272778][ T8415] bridge0: port 1(bridge_slave_0) entered blocking state [ 518.272898][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state [ 518.273018][ T8415] bridge_slave_0: entered allmulticast mode [ 518.277300][ T8415] bridge_slave_0: entered promiscuous mode [ 518.338434][ T8415] bridge0: port 2(bridge_slave_1) entered blocking state [ 518.338667][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state [ 518.338897][ T8415] bridge_slave_1: entered allmulticast mode [ 518.381305][ T8415] bridge_slave_1: entered promiscuous mode [ 519.870026][ T8586] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 520.900652][ T8600] overlayfs: failed to resolve './file1': -2 [ 521.765216][ T8415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.819802][ T8415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 524.474328][ T8415] team0: Port device team_slave_0 added [ 524.713904][ T8415] team0: Port device team_slave_1 added [ 524.770254][ T5886] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 524.889587][ T8415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 524.889598][ T8415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 524.889611][ T8415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.207852][ T8616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.208438][ T8616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 525.621840][ T8415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.621851][ T8415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.621865][ T8415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.702737][ T5886] usb 2-1: unable to get BOS descriptor or descriptor too short [ 525.727450][ T5886] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 525.727485][ T5886] usb 2-1: can't read configurations, error -71 [ 526.122078][ T8303] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 526.355560][ T8303] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 526.474187][ T8415] hsr_slave_0: entered promiscuous mode [ 526.649375][ T8415] hsr_slave_1: entered promiscuous mode [ 527.412886][ T8415] debugfs: 'hsr0' already exists in 'hsr' [ 527.412914][ T8415] Cannot create hsr debugfs directory [ 527.609003][ T8303] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 528.138205][ T8303] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 529.716234][ T3562] bridge_slave_1: left allmulticast mode [ 529.716253][ T3562] bridge_slave_1: left promiscuous mode [ 529.736361][ T3562] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.296425][ T3562] bridge_slave_0: left allmulticast mode [ 531.296454][ T3562] bridge_slave_0: left promiscuous mode [ 531.296769][ T3562] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.150005][ T3562] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.296800][ T3562] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.402860][ T3562] bond0 (unregistering): Released all slaves [ 534.958624][ T3562] hsr_slave_0: left promiscuous mode [ 535.004819][ T3562] hsr_slave_1: left promiscuous mode [ 535.006857][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.088972][ T3562] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.589323][ T5811] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 538.611157][ T5811] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 539.327195][ T5811] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 539.339295][ T5811] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 539.340112][ T5811] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 539.585862][ T8716] input: syz1 as /devices/virtual/input/input23 [ 539.609970][ T3562] team0 (unregistering): Port device team_slave_1 removed [ 539.698802][ T3562] team0 (unregistering): Port device team_slave_0 removed [ 541.449203][ T5811] Bluetooth: hci3: command tx timeout [ 544.757283][ T5811] Bluetooth: hci3: command tx timeout [ 545.310331][ T8751] overlayfs: failed to resolve './file2': -2 [ 545.998238][ T8752] Can't find ip_set type bitmap:ip [ 546.810659][ T5811] Bluetooth: hci3: command tx timeout [ 547.339707][ T8758] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 547.422329][ T8763] input: syz1 as /devices/virtual/input/input24 [ 548.899887][ T5811] Bluetooth: hci3: command tx timeout [ 549.498714][ T8710] chnl_net:caif_netlink_parms(): no params data found [ 552.970399][ T8710] bridge0: port 1(bridge_slave_0) entered blocking state [ 552.970677][ T8710] bridge0: port 1(bridge_slave_0) entered disabled state [ 552.970871][ T8710] bridge_slave_0: entered allmulticast mode [ 552.973685][ T8710] bridge_slave_0: entered promiscuous mode [ 553.011015][ T8710] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.011162][ T8710] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.011392][ T8710] bridge_slave_1: entered allmulticast mode [ 553.014146][ T8710] bridge_slave_1: entered promiscuous mode [ 553.276021][ T5801] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 553.295922][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 553.317681][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 553.338301][ T5801] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 553.357169][ T5801] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 554.048107][ T8810] overlayfs: failed to resolve './file1': -2 [ 554.657944][ T8811] Can't find ip_set type bitmap:ip [ 554.941657][ T8710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.998987][ T8710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 556.224534][ T5811] Bluetooth: hci4: command tx timeout [ 558.364894][ T5811] Bluetooth: hci4: command tx timeout [ 559.408847][ T8842] tmpfs: Unknown parameter 'usrquota_block_har' [ 560.538276][ T5811] Bluetooth: hci4: command tx timeout [ 561.623331][ T8848] overlayfs: failed to resolve './file1': -2 [ 562.152647][ T8849] Can't find ip_set type bitmap:ip [ 563.843564][ T5811] Bluetooth: hci4: command tx timeout [ 563.844311][ T1321] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.844380][ T1321] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.013041][ T8710] team0: Port device team_slave_0 added [ 564.039462][ T8710] team0: Port device team_slave_1 added [ 564.464384][ T8710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.464401][ T8710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 564.464426][ T8710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 565.095790][ T8862] Can't find ip_set type bitmap:ip [ 565.290068][ T8710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 565.290080][ T8710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 565.290094][ T8710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 565.887064][ T8710] hsr_slave_0: entered promiscuous mode [ 566.246931][ T8710] hsr_slave_1: entered promiscuous mode [ 566.255064][ T8710] debugfs: 'hsr0' already exists in 'hsr' [ 566.255090][ T8710] Cannot create hsr debugfs directory [ 566.588357][ T1475] bridge_slave_1: left allmulticast mode [ 566.588376][ T1475] bridge_slave_1: left promiscuous mode [ 566.588581][ T1475] bridge0: port 2(bridge_slave_1) entered disabled state [ 566.715524][ T1475] bridge_slave_0: left allmulticast mode [ 566.715563][ T1475] bridge_slave_0: left promiscuous mode [ 566.715811][ T1475] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.288679][ T8886] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 569.389869][ T1475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.533067][ T1475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.846313][ T8896] tmpfs: Unknown parameter 'usrquota_block_har' [ 570.027065][ T8897] input: syz0 as /devices/virtual/input/input25 [ 570.559341][ T1475] bond0 (unregistering): Released all slaves [ 575.733537][ T1475] hsr_slave_0: left promiscuous mode [ 575.769257][ T1475] hsr_slave_1: left promiscuous mode [ 575.770233][ T1475] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 575.804351][ T1475] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 576.626162][ T8934] tmpfs: Unknown parameter 'usrquota_block_har' [ 576.853235][ T8935] input: syz0 as /devices/virtual/input/input26 [ 578.332891][ T6529] ------------[ cut here ]------------ [ 578.332906][ T6529] faux_driver vkms: [drm] vblank wait timed out on crtc 0 [ 578.332927][ T6529] WARNING: drivers/gpu/drm/drm_vblank.c:1320 at drm_crtc_wait_one_vblank+0x357/0x500, CPU#1: kworker/1:7/6529 [ 578.332990][ T6529] Modules linked in: [ 578.333024][ T6529] CPU: 1 UID: 0 PID: 6529 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 578.333050][ T6529] Tainted: [L]=SOFTLOCKUP [ 578.333057][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 578.333070][ T6529] Workqueue: events drm_fb_helper_damage_work [ 578.333105][ T6529] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 578.333136][ T6529] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 2a c0 d4 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 578.333153][ T6529] RSP: 0018:ffffc900043878e0 EFLAGS: 00010246 [ 578.333169][ T6529] RAX: 1ffff11004a89600 RBX: ffffffff8f751120 RCX: 0000000000000000 [ 578.333183][ T6529] RDX: ffffffff8bbf30c0 RSI: ffffffff8bc0efc0 RDI: ffffffff8f751120 [ 578.333198][ T6529] RBP: ffffc900043879c8 R08: 0000000000000000 R09: 0000000000000000 [ 578.333210][ T6529] R10: dffffc0000000000 R11: fffffbfff1ed4637 R12: ffffffff8bc0efc0 [ 578.333224][ T6529] R13: ffff88802544b000 R14: 0000000000000000 R15: ffffffff8bbf30c0 [ 578.333238][ T6529] FS: 0000000000000000(0000) GS:ffff888126440000(0000) knlGS:0000000000000000 [ 578.333254][ T6529] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 578.333267][ T6529] CR2: 000020000013d030 CR3: 000000002af1a000 CR4: 00000000003526f0 [ 578.333284][ T6529] Call Trace: [ 578.333296][ T6529] [ 578.333310][ T6529] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 578.333340][ T6529] ? rt_spin_unlock+0x14f/0x200 [ 578.333362][ T6529] ? __pfx_autoremove_wake_function+0x10/0x10 [ 578.333394][ T6529] ? rt_spin_unlock+0x160/0x200 [ 578.333417][ T6529] ? drm_vblank_get+0x147/0x260 [ 578.333447][ T6529] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 578.333476][ T6529] drm_fb_helper_damage_work+0x131/0x6f0 [ 578.333517][ T6529] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 578.333552][ T6529] ? process_scheduled_works+0xa25/0x1830 [ 578.333579][ T6529] ? process_scheduled_works+0xa25/0x1830 [ 578.333608][ T6529] process_scheduled_works+0xb02/0x1830 [ 578.333664][ T6529] ? __pfx_process_scheduled_works+0x10/0x10 [ 578.333698][ T6529] ? assign_work+0x3d5/0x5e0 [ 578.333731][ T6529] worker_thread+0xa50/0xfc0 [ 578.333787][ T6529] kthread+0x388/0x470 [ 578.333809][ T6529] ? __pfx_worker_thread+0x10/0x10 [ 578.333834][ T6529] ? __pfx_kthread+0x10/0x10 [ 578.333856][ T6529] ret_from_fork+0x51e/0xb90 [ 578.333887][ T6529] ? __pfx_ret_from_fork+0x10/0x10 [ 578.333913][ T6529] ? __switch_to+0xc7d/0x1450 [ 578.333959][ T6529] ? __pfx_kthread+0x10/0x10 [ 578.333987][ T6529] ret_from_fork_asm+0x1a/0x30 [ 578.334025][ T6529] [ 578.334041][ T6529] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 578.334058][ T6529] CPU: 1 UID: 0 PID: 6529 Comm: kworker/1:7 Tainted: G L syzkaller #0 PREEMPT_{RT,(full)} [ 578.334083][ T6529] Tainted: [L]=SOFTLOCKUP [ 578.334090][ T6529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 578.334102][ T6529] Workqueue: events drm_fb_helper_damage_work [ 578.334132][ T6529] Call Trace: [ 578.334139][ T6529] [ 578.334147][ T6529] vpanic+0x56c/0xa60 [ 578.334177][ T6529] ? __pfx__printk+0x10/0x10 [ 578.334199][ T6529] ? __pfx_vpanic+0x10/0x10 [ 578.334224][ T6529] ? is_bpf_text_address+0x292/0x2b0 [ 578.334252][ T6529] ? is_bpf_text_address+0x26/0x2b0 [ 578.334287][ T6529] panic+0xc5/0xd0 [ 578.334315][ T6529] ? __pfx_panic+0x10/0x10 [ 578.334354][ T6529] ? ret_from_fork_asm+0x1a/0x30 [ 578.334378][ T6529] __warn+0x315/0x4f0 [ 578.334405][ T6529] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 578.334436][ T6529] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 578.334466][ T6529] __report_bug+0x29a/0x540 [ 578.334497][ T6529] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 578.334528][ T6529] ? __pfx___report_bug+0x10/0x10 [ 578.334568][ T6529] ? drm_crtc_wait_one_vblank+0x357/0x500 [ 578.334602][ T6529] report_bug_entry+0x19a/0x290 [ 578.334628][ T6529] ? drm_crtc_wait_one_vblank+0x4b6/0x500 [ 578.334656][ T6529] ? drm_crtc_wait_one_vblank+0x4bb/0x500 [ 578.334685][ T6529] handle_bug+0xca/0x200 [ 578.334715][ T6529] exc_invalid_op+0x1a/0x50 [ 578.334744][ T6529] asm_exc_invalid_op+0x1a/0x20 [ 578.334763][ T6529] RIP: 0010:drm_crtc_wait_one_vblank+0x4b6/0x500 [ 578.334793][ T6529] Code: e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 74 08 4c 89 ef e8 2a c0 d4 fc 4d 8b 7d 00 48 89 df 4c 89 e6 4c 89 fa 44 89 f1 <67> 48 0f b9 3a 48 8b 3c 24 44 89 f6 e8 e9 f4 ff ff b8 92 ff ff ff [ 578.334809][ T6529] RSP: 0018:ffffc900043878e0 EFLAGS: 00010246 [ 578.334824][ T6529] RAX: 1ffff11004a89600 RBX: ffffffff8f751120 RCX: 0000000000000000 [ 578.334838][ T6529] RDX: ffffffff8bbf30c0 RSI: ffffffff8bc0efc0 RDI: ffffffff8f751120 [ 578.334852][ T6529] RBP: ffffc900043879c8 R08: 0000000000000000 R09: 0000000000000000 [ 578.334864][ T6529] R10: dffffc0000000000 R11: fffffbfff1ed4637 R12: ffffffff8bc0efc0 [ 578.334878][ T6529] R13: ffff88802544b000 R14: 0000000000000000 R15: ffffffff8bbf30c0 [ 578.334913][ T6529] ? __pfx_drm_crtc_wait_one_vblank+0x10/0x10 [ 578.334941][ T6529] ? rt_spin_unlock+0x14f/0x200 [ 578.334961][ T6529] ? __pfx_autoremove_wake_function+0x10/0x10 [ 578.334998][ T6529] ? rt_spin_unlock+0x160/0x200 [ 578.335022][ T6529] ? drm_vblank_get+0x147/0x260 [ 578.335053][ T6529] drm_client_modeset_wait_for_vblank+0xc5/0xf0 [ 578.335082][ T6529] drm_fb_helper_damage_work+0x131/0x6f0 [ 578.335122][ T6529] ? __pfx_drm_fb_helper_damage_work+0x10/0x10 [ 578.335157][ T6529] ? process_scheduled_works+0xa25/0x1830 [ 578.335183][ T6529] ? process_scheduled_works+0xa25/0x1830 [ 578.335212][ T6529] process_scheduled_works+0xb02/0x1830 [ 578.335267][ T6529] ? __pfx_process_scheduled_works+0x10/0x10 [ 578.335301][ T6529] ? assign_work+0x3d5/0x5e0 [ 578.335333][ T6529] worker_thread+0xa50/0xfc0 [ 578.335389][ T6529] kthread+0x388/0x470 [ 578.335410][ T6529] ? __pfx_worker_thread+0x10/0x10 [ 578.335435][ T6529] ? __pfx_kthread+0x10/0x10 [ 578.335456][ T6529] ret_from_fork+0x51e/0xb90 [ 578.335490][ T6529] ? __pfx_ret_from_fork+0x10/0x10 [ 578.335516][ T6529] ? __switch_to+0xc7d/0x1450 [ 578.335544][ T6529] ? __pfx_kthread+0x10/0x10 [ 578.335566][ T6529] ret_from_fork_asm+0x1a/0x30 [ 578.335602][ T6529] [ 578.335994][ T6529] Kernel Offset: disabled