last executing test programs: 10.623325657s ago: executing program 4 (id=77): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000440), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x0, 0x0, 0x1, 'queue0\x00'}) writev(r0, &(0x7f0000000580)=[{&(0x7f0000000000)="228292", 0xfff6}], 0x2) 10.259660132s ago: executing program 4 (id=81): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) sendto$packet(r2, &(0x7f0000000180)="0b032200e0ff14000200475400f6a13b", 0x10, 0x4fa21bd543933076, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0xfe}, 0x14) 9.820727905s ago: executing program 4 (id=84): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) r1 = dup2(r0, r0) read$FUSE(r1, &(0x7f00000063c0)={0x2020}, 0x2020) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000002280)=0x5) 8.422811048s ago: executing program 4 (id=88): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x3c, 0x20, 0x98, 0x40, 0x2001, 0x1a00, 0x38f5, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x66, 0x0, 0x0, 0x54, 0xef, 0x55}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x142, 0x0, 0x0) 6.401567172s ago: executing program 4 (id=103): syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000)=""/97) 4.820791292s ago: executing program 0 (id=113): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000500)=ANY=[@ANYBLOB="034886dd0100000000001400000060e1fd0003082f00fe88a43de1a400000000000000007d01ff0200000000000000000000000000010000883e"], 0xfdef) 4.596021528s ago: executing program 1 (id=114): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_DISABLE(r0, 0x0, 0x4048054) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x34, r1, 0x1, 0x70bd25, 0x0, {{0xa}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_IDX={0x5}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8881}, 0x0) 4.350007861s ago: executing program 3 (id=115): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=@ipv6_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x20}, [@RTA_ENCAP={0x18, 0x16, 0x0, 0x0, @SEG6_IPTUNNEL_SRH={0x14, 0x1, {{0x1, {0x0, 0x0, 0x10}}}}}, @RTA_OIF={0x8, 0x4, r2}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}]}, 0x44}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 4.061678752s ago: executing program 3 (id=116): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f00000000c0)={0x3}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000140)={[{0x5, 0xe, 0x6, 0x3, 0x40, 0x2, 0x2, 0x9, 0x1, 0x4, 0x2, 0x9, 0x4}, {0xfffffffe, 0x80, 0x7, 0x0, 0x1, 0x6, 0x9, 0xff, 0x1, 0x1, 0x9, 0xf, 0x9}, {0x2, 0x5, 0x5, 0x84, 0x8, 0x8, 0x0, 0x87, 0x5, 0x5, 0x2, 0x3}], 0xf87}) 3.97251366s ago: executing program 1 (id=117): bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x4140aecd, &(0x7f0000000100)) 3.644344609s ago: executing program 2 (id=119): socket$nl_rdma(0x10, 0x3, 0x14) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$TIOCGSID(r0, 0x5429, 0x0) waitid(0x0, 0x0, &(0x7f0000000240), 0x80000000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x43c, 0x64, 0x100, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7}, {0xfff1}, {0xc, 0xe}}, [@f_rsvp6={{0xa}, {0x40c, 0x2, [@TCA_RSVP_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x85, 0x8, 0x4, 0x9, 0x4, 0x9, 0xcf, 0x775, 0xfffffffa, 0x3, 0xa2, 0x4, 0x4, 0x7fff, 0x3, 0xf, 0x4, 0x3, 0x6, 0x2, 0x8, 0x7, 0x6, 0xffffffff, 0x9, 0x78, 0x1, 0x2, 0x4, 0x1, 0xfffffee8, 0x5, 0x9, 0xa, 0x5, 0x8000, 0xd9, 0x0, 0x16, 0x0, 0x8, 0xfffffffa, 0x1ff, 0x5, 0x3ff, 0x7, 0x0, 0x5, 0xfffffff7, 0x8, 0x50ea, 0x6, 0x8001, 0x9, 0xb0e0, 0xf, 0x5, 0x8, 0x3, 0x0, 0x4, 0x5b23, 0x5, 0x8, 0x2, 0xee, 0x7fffffff, 0x7fffffff, 0x3, 0x172, 0x5ae27a20, 0x5, 0x6, 0x4, 0x200, 0x1ff, 0x3, 0x400, 0xe6b3, 0xd171, 0x6, 0x1ff, 0x7, 0x699213b0, 0x9, 0xa, 0x12, 0x3, 0x4, 0x0, 0x100, 0x5, 0x6793, 0x0, 0x1, 0xfffffffa, 0x9, 0x80000000, 0x7, 0x5, 0x0, 0x80000000, 0x400, 0x7, 0x7, 0x5, 0x9, 0x6, 0x9, 0x0, 0x1, 0x5, 0x2, 0x2, 0x2, 0x7ff, 0x40, 0x7f, 0x5fece1ea, 0xbf7, 0x8, 0x78, 0xe, 0x80000000, 0x6, 0x8, 0x5, 0xe, 0x5, 0x200, 0x4, 0x4, 0x0, 0x0, 0x1, 0x3, 0xb, 0x70, 0x2, 0x1, 0x9, 0x1800000, 0x9, 0xbff, 0x4, 0x6, 0x800, 0x7, 0x5, 0x3, 0x9, 0x6, 0x0, 0x2, 0x6, 0x800, 0x3ff, 0x9, 0x3, 0xcc, 0xc60, 0x3, 0x8, 0x4, 0x1, 0x0, 0x7, 0x2, 0x6, 0xc, 0x4, 0x32, 0x2, 0x8, 0x1000, 0x2, 0x4, 0x4, 0x2, 0xffff, 0xb37, 0x7fff, 0xbec, 0x8, 0x5, 0x1, 0x5, 0x0, 0x1, 0xffff, 0x7f, 0x3, 0x94f, 0xc91, 0x9, 0x3, 0x2, 0xd46, 0xf, 0x200, 0x0, 0x8, 0x7fffffff, 0x0, 0x8, 0x2, 0xe6, 0xb, 0x18000000, 0x4, 0x5, 0xd756, 0x6, 0x3, 0x800, 0xd3, 0x2, 0x6, 0x9, 0x4, 0x7, 0x5, 0xaec, 0x100, 0x0, 0xfffffffb, 0x40, 0xfffffffe, 0x3, 0xa, 0x7f, 0x1, 0x9c, 0x400, 0x5, 0x8000, 0x8, 0x8, 0x9, 0x6, 0xffffff7f, 0xee2b, 0x7, 0xeaf, 0x3, 0x401, 0x7, 0x7f, 0x5f, 0x1000, 0x7, 0x9, 0x7, 0x8001, 0x9, 0x3]}]}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x1}, 0x40881) recvmmsg(r3, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000001f80)=[{&(0x7f0000000d40)=""/13, 0xd}, {&(0x7f0000000d80)=""/247, 0xf7}], 0x2}, 0x3}], 0x1, 0x1, 0x0) 2.891959989s ago: executing program 1 (id=120): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018010000756d6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r4, 0x407, 0x0) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x2}}, 0x50) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r4, 0x407, 0x2000000) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r2, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x32, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000002840)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1000, 0x3a, 'o,\xae\x01>_\xcbn(}\x06J\xda4\\x0\x00\x00\x00', 0x3a, ':dev/bus/usbF30#/00#\x00', 0x3a, './file0'}, 0x50) 2.836114775s ago: executing program 3 (id=121): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.events\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}}) 2.424310039s ago: executing program 0 (id=122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="01000000000000008104"]) 2.344043298s ago: executing program 2 (id=123): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008"], 0x7c}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf252100000008000300", @ANYRES32=r2, @ANYBLOB="24002d8005000100020000000500040001004000080002"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) 2.331502604s ago: executing program 4 (id=124): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x201}, 0x1}) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/185) 1.679823597s ago: executing program 2 (id=125): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000014f00), 0x8000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x8000203d}) 1.568114155s ago: executing program 3 (id=126): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xc5) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) sendto$inet6(r0, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40013043, 0x0) 1.110651514s ago: executing program 0 (id=127): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001dc0)) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 1.073324474s ago: executing program 1 (id=128): openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x410, &(0x7f00000001c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) setresgid(0x0, 0x0, 0xee01) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40, 0x40, 0xa}, 0x18) 1.071447009s ago: executing program 2 (id=129): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x80042, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xd) r1 = dup(r0) read$FUSE(r1, 0x0, 0x2) write$FUSE_INIT(r1, &(0x7f0000002100)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x40812008, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x515244b379a1e22c, 0x7}}, 0x50) 852.192109ms ago: executing program 3 (id=130): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x9d2, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x15, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r0, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}}], 0x4, 0x2060, 0x0) 759.252856ms ago: executing program 0 (id=131): r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='attr/current\x00') writev(r1, &(0x7f00000015c0)=[{&(0x7f00000000c0)='w', 0x1}], 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000, 0x0, 0x0, 0x40000}) fsetxattr$system_posix_acl(r0, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000180)={{}, {}, [], {0x4, 0x5}, [], {0x10, 0x3}, {0x20, 0x7}}, 0x24, 0x1) 608.009444ms ago: executing program 1 (id=132): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x46c, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000)="09000000e70014000000d97bfbf788a83baa88a80000000000008100000088a8", 0x20, 0x200000c4, &(0x7f0000000080)={0x11, 0x88a8, r2, 0x1, 0x8, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}}, 0x14) 563.743169ms ago: executing program 2 (id=133): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000000)=0xb6, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) recvfrom(r0, 0x0, 0x0, 0x32, 0x0, 0x0) syz_emit_ethernet(0x2e, &(0x7f00000003c0)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x40, 0x100, @void}}}}}}}, 0x0) 365.013617ms ago: executing program 0 (id=134): r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x1ff, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r1, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000040)={0x2}) 264.048156ms ago: executing program 3 (id=135): r0 = socket$inet(0x2, 0x1, 0x100) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 195.343077ms ago: executing program 2 (id=136): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000500)={0x40, 0xa}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 147.561606ms ago: executing program 0 (id=137): r0 = socket$igmp(0x2, 0x3, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = accept(r1, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000000c0), 0x4) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_IOAS$SET(r4, 0x3b88, &(0x7f00000002c0)={0xc}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000340)={0x28, 0x2, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x10}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') rename(&(0x7f0000000400)='./bus\x00', &(0x7f0000000f00)='./file0\x00') rmdir(&(0x7f0000000000)='./file0\x00') socket(0x10, 0x3, 0x0) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r4, 0x3b72, &(0x7f0000000440)=ANY=[@ANYBLOB="1800007f00000000002000000000000000010021"]) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000073115800000000008510000002000000850000007600000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x88a, &(0x7f0000000140)={0x0, 0x90f7, 0x8, 0x2, 0x8001ae}, &(0x7f0000000240), &(0x7f0000000280)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff48700000020000005c6000000000000095000000000000002ba728041598d6fbd307ce99e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f071326bd9174842fa9e09000000000000000a0e168c1884d005d94f204e345c652fbc1626e3a2a2ad35806150ae0209e62f51ee988e6e0dc84e974a42a550d6f97181980400003e05df3ceb9f1feae5737ecaa81d666963c474c2a175e04ad6ee1cbf9b0a4def23d410f6296b32ae343881dcc7b1b85f3c3d44aeaced3641110bec4e90a634196508000000000000f0f4ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d4dcecb0c005d2a1bcf9436c101040000f73902ebcf0200822775985b231f000000ccb0ecf31b715f5888b2a858ab3f11afc9bd08c676d2b89432fb465b3dad9d2aa7f1521b3ebb0cc52f49129b204eb99b6150e320c9901de2eb879a15943b6dc8ea15aab9dd6968698e3095c4c5c7a156cec33a7bb727667d81ff2757ca1e6bfdd4c968dacf81e65998b9091957d1d11a5730baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba165d876defd3541772f26e27c44cfd7bb5097379cf1756869cebc7b0b2d85d6d29983e830a9cdd1d0a017c100344c52a6f387a1340a1c8889464f90c284a4db539621fbb70f01a2c02dec4cd1f570dd39877dfb2ff1ae66e1ce917474b2e650ae610afd01409d9a337ac5d58bcb5e5fc231514952c5255f22bd8b325d9b76e57f041b665ab0249886c0a65cc99d5893521372c8d8b7bacac24000020a4a24d8dbd75062e1daef9dead619cc6e7baa72706287793c3d2a2661edcd3545236c204682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b993508000000e480cd9d4850a049ee19b67d17ef0477aeb12b1d255be1ed66d9051f22614d1f62734d6780393e783df8b8a17e3aa9fe9c502f9acee4f1b56e1f231200743792cead3c058a5b700d64d160abe33df726608510136ce8bf239414a1d98ea93e3d35dbb6c23b90cf36e83b8a4309b402d264b09f2779a0bcd7cd6dfc06b02e69d384146056d125cf4aadd80800000000000000e88d10acd06864eac44c42fbe334bdc3e9768fc360b130dc6111fe3293e8e02f819a2aa34dba1c25be27945507a3477b437525b81aef2f0b4c4f63483026b5e34d44705b76ef29f7f6e0a2be625eae975e02069fbff63a06578d6d184f5de7bfb6aa800016996d536256c02294cb1d3a6fb8eae87691fae365a70c3f15871565bba8dd8a8ca049f798abe646f738bebdfc9d8a5edd7a19ca6a42bc3f1db37c17f22a287c6d31a13db5dfef409eb1d3c91c6e6f80d215c9e16e0c4736c81936315418f26770cca4e2f89800d18c89d7f46f679df6c9e7005f209dda94302a30003b952ae1ebfd0ca88368ee6ce139e8b5822422cf4c9dde943d34c432e1001171792c65986146666a549092398af45ba38c41df7e0fffeac41824ca1fd0eb68aa243c9035c788d5480e5aee9c9e5f2e5a3628995b1531bd20360d33d8f9ffffff5f4bf6ea8a1850c4f83306dbca02ee3686da707b6d85db491ba0cc33f6be92c55969a2b52a25419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9bc31f09834b4788be2a442aa81b259e9eb1bf5314844051f3a642aca9ff98c9036471ccff0522903e7bcf62e18f7796bbc280b95e8e0d6fd5644b0ebde3885b06548862de809d3dae3cccf109f7c78e8479a345e805e47dfa82caed44b11a443c5ba92a326dd10921aa79c62800844c7a59f55ee205a11ab50fb402e7da6ada561ec1117cc186b01fd5c2061d22156b1bfeb51f5c65a907f2217d5f80c580dc31b0963ff953ce09148e8dfe3a61bbd2bb173518507a3cd0e37c4da0a71eee31071d5d642498181c69cee3b2e414ddd6a12ff4bdf6e97c247b6025d4376067e25357d3b521a5b927d3392a7503718aea24179528f6a0c6de4e61b49cad1e4d6b000000000000005b2d16877299acefc0655bc1422c3d425d988eedebcf242b780a687c9acae2a5a71c2a16a32ceb377f5d54f9b2fa90b2905925e611be56e9ebe20cab20ab2b5baa1b07b16e81f278e54a479f1a068658e3656cfa196d6c050000000000000000814955c62a7d72b317399e572a7f6a4657b741eb66c9179ffd097d61fcfd0fa1d46cfb110e3e8cff5579e83f2820f95eaa0c609f666950c24311740e36de8f65708cfffce798c99ef8f62fd2398e999b220125da8eb07947512365abbc5b84ef524bdf184727c67910051f204662264607d548dbdffe14b41dd0843cf3d85bb820656a88a9e52a4cd7b3eeadfe00007267f226019ef0a25bc15da71e893856a2182c3167d8ba73f7c6294b159a426ce44cd73f000000a66fc501eae0c3504c1400697ba69fd9b7eaf49aff6a6aea529610db8dfef86c3cc698e9fddf1b13287615b972281a90c3a4cf415df25fbcdd35cf8368f068c4481844bdd0dda553e1cb0966d5686013d382956d50055dce0d1bc225c1d77612b1ec52e743dbc51f25cc07a202b704577316913cf067fa65e476f688de2d6c54ea192a569eed05d0d7536b3205c68d4ee0fe318ed3112c76dcf128a1d5595b773ef4c8a7ba4e10381de8808ff02dd0a7b996ecf1c65e6d9db90c87123d9cb3945330f7a270ee0cca35b1331ca8fec0b2f39f505140751b60f29a83e4bc0ef2ffea443e4aa221cc38a503add16a2c98cb589e1dac1912b4142a3be30f50b2d9479c5bde0beb38030d0c0ce0590000130000000000000000000000554361e1628ee0017ad19ca787f2c078aa260701ce0800000080623902000000000000000000003d118a04fa6a80c4928c01ccab57b5f4eb265ad15004f967543fe6e6ddc2a12165fe3a08bf9475ee0eee3539369b0e566fedbd215a6ddd4fe03dcc7a922e16410d820747b7e806c0f3b6f14c884d150a0ff07f2e0000bfb083c56d3bed0a61fab880f8885c612ebff8523d14cfb12aca274c000000005e5155611969f6e67dd83b20206207cb8b2cd2fab6fa6d7fdaed6a27a2e4db1d5adc80c4014ff11d9dbceba41d8dfce410333a054e82b1d050331c5bc4acb843b94d67f69f49eb4dd3b1b85b018359c32df01db8ebce0dbc36cade09c6b44f6b93d28db8ae4db5624d8a02f7be91bec65e4b3373059587dd6528bbc48e3379d477d482faff738c39c61cac1195043bd5b70cea5fc1083a169a82632ff3a9a48ff805202ae9aec56b9f7795fa27634a7f06359e3058d2dd69c4e5cc11b36d9ed9c4b2867f583de6fc582f789722bd1500e64c495abdb72de2c739d38c72f6f4fb1946081dcc825d5b5b747e9fa1b5226cd31e131263f1fcd7d45a630b46d04af906f0be464d829dd2dfcf7400002b7827f6d957e51bb1f1b44a50200c9dfadfaff2e32baa9c0edaac7144e174dba582a951d2b03c27219cec4fbc7b6e99c3f00188941e3fbf008cbace177ae250fd757a22e21ec05aa45c91e1345ca936184c3fc28153283e13654123cfaf4e661f4b6d430adad1e2116bc385f888405d48f0d386da0cc6747b33395772a68f2ea3fb7e7207000000b24088014c8e64f03d053c4e02ddd08b262e422eff1c9f124b892b0a9462b07d4f88c0693bd9c54ad2ab5227aa59ef2b53ac528c0800000000000000ebfde0c4a37c2d55c176680c4207000000e4aa467f995c9bc99e60441d4dbebead3b436427762618810bac7308c6d3298ea932b66572825e62d18462d3b2342ba48c145ff4674a94fa078cc552d064da2bb69a0d269076f8955076578f44ffb8895f11bd5e06840f8848df72230a28e0304569bfa0350b6dde9e96273de1758505aa1ba89dfb12be7a7c6dae1028d1bc68b6336eb1a5d18f6148354df7e60a489dc543ccdee1fff9d8f8d78844f0c6a77ef1181d5055c2a193a5763ed7749a17296c76818b60426082c86619dacc8a884c4de8572a044faf0c8e4377776c8703ecf2e3f1c3d6410000000000008369f062639e3ddcf725be54f626448fb7bfc74c183b26e31b71a390ccea4be07278dd12fa16848797397b76908fa03613cd961b98b26a0879ccba4a78c82958764bce07a7f70df1cef6d4db1ddbda1db18e4f41c390fd3cb862216ece39a9ec60bd3be5f9329dcaf33bf2c87cc510557460d14421e1d26322ab64388f2cea0d6269ffc8580a01e9acd2ec3ece39f3b4ffdc4dfea3da6ddb002512e2313253801044e751168eabe977c503c30ef7c489e5ea1fff041e54de54cfeb258f2387dad096b72a78d91134927492cfc773c731cca9b13b3f6e7760ab0929c46f51ea5643f3df4f4044f3ad0a6ba739e72d8b8b2835d81534bea8372bc590c111d573e04280659a096eaa495a4154daae7d1800c130d920964845c50c8ba4763b19b6008f6d7a5091895c7a4b7816ab706503be879b18b778b0f61ecfde2f8bbb32cfeb766ec4430ee0ad45a0a263ddc4b2f47680c8d53439f8d388dab87112c83997c83e178be287eb6e8c95bad8f8ed85cd5b03a7352a0fb83398566d1bc133582ce2d95636cd23eba4432180b2d5c3019879cd949a5be1b241b3d0d0d52a3529cc9e704a9d8d54f4f7b776a969a4505e18fe5284985ca7d112c397d776e3baba918b7df456bd970e761e00f3b0efa5ce4246d9f08ba60da3be556c518a1f19504c7cea1491a9eadd27d747ca9cc5f92e30b2ca3cf0b142a8554c87e8026d4e586cf5f7c9d412e6eb4f66a076c8bca6b294305969dabb6c932b57a5dd4234bf1ed3bd095229ee3cbb86883d574c5af4bb78370561de3fbf55bfcd2db3979eb1be120b5795443324023353bdd9fc87c862c247e140379ef098c7b3fa79a6638a245b6a74f14dde9bd4ee48e62cdc70f486ce38641e4e4309aa9f4bd097fa1530db966d9919544ab4890301e51f9525436f5d9591460340f5093161a78a249783945407f2576d6f35a99e3521d7991e3fdfde5ee7f6a8ff8181a68ef15a2ebfe9e22d7c745949ab5cc15b9f5659799b5e00debbf9f623f75bfd4d83c4859ca9b652cea33daeeef47b60c78a21965bcf91919071c7ded19317dc0b7587d9322f8cec9e32675a187465bdfa101bcd9ac680839b375af12c160247dd960e70eb7ee60c52a900440aa9bd9a6b15a4a34dc73c3c4936d8986300fdc264b28537df387e6442c32f5fa2a31d24c1ed888a57fcc50400a084a38a3630ffc465f36a4b770fab0946148161184be39134542e934f3a538bccd48a0325aa9b151855c800000000881d4361e7fbd1fc2331b4e34733480bc497662a8234a7eeab3e65d6b0f5d92edff04416eedcd15b9ddbcb3cf9228afda6b17d44a276b205eabd0069f7e26aea50f537dc77b683ed83d2f9110e00a705f48e9d13378cf09bca22e8f45c4f360d5fff8ba35f21c4513bcc0800000000000000dc5cc7ad7290c60bc609bff9be7cd922f474c3faa78fd42cba7c78d6d912656b6313497625e2f9afaba05b17ca242b7ca8d6556175aee38142a8aac5f677c2f8a6967f2cb5e97aae97a5e5579a706243688ac4d38a4601b4aadb2d319fe7d6bf1272fa3fa701338d7bce390e8bf959081ed39e63a431901d615a26ff95e1620a6c26eda4f92d83499a173e7217001f58ed5406bdb59acbc997e8fd3d53b4c2c2a1b3145bf54a851f3c08931d4c2c32bfe611e5958458af7b3c5319fdb4c40b8d01365fdee93af6fad7c7a8da86460f45c9e99d43264c929e7de4e9620000000000000000000000000000007cf90000008f8a9da7a8a167815c6ffcd1b6863cde9ab45ecd8f06423198bb00cdf76877f407be46b000000000afbb4cb3a8de259a8beb2223f28b855e2bdf4b31b91e5062a42a55bd95e93f77f2499391cf0000000000000000000000000000195007ad27d1d61dc4d5512f117f0ed554c2c88c1713000000000000bb1ff447d6e12da208e9f0422a84f361684861169f498909c4841f4d5a0f5807a3b7d833075fdcd9c1d169b03d7df7f4150fad8b9e92eaf86992adbda360dd91de51c6df335445492608162fb0804dabdeac6fb71042f906eefd37f1d190a1c8a0d9de7f34dcc8cbd7b565fc675f3bf7aac559411808ee703ec3ad461c6ddc571994cb504c46eabbc2ff4b97df394bc75b5e7f45a4450753b5d2b8b8414a7fe6a17661bdb5b1d080cfd974811e1d60763d8d9509c75aa729a334b55ee76b0c2d50270a1deec1a6d7441d0b5b8d7a4d048d156ebcff102e45c15d2a73b40d74807f5182a319d50edbf430f00b1c29a9e4bd92111caacbb1d4541545c2d262646070da42f76e3f3c6d139eed89cc9300000000000000000000000000000000000072d7e605eb8e978d76796d9d3a728c51a3145da8e1ca4973aa8fed855328e9d2509335c5386cac74e862eac50e9ba95b6a2a29e8ef08a9ae29792e77fb9952b1ac5c816db5c23a656db528f81f6a9465d2c94d701ee8646b30650c84b9510a337e82702baf368d29281d3d54b39014756ca5a1be1881000000000000006fbac0b9c9f97c920dfac7e2379ef6bb076118aa9bb24ee12e64aa530f852bf4f970a08a55531934e39fbae483129949a918115571d76740ca6a1cea59df290f2e63675ca30a289775825fe3e5d6f206f3f395346c0738035dc74368bb035fc65a40f8124369b8950ded31af64855c5c95ef5c83b18b23517ca935a0fa1b630d70c4ca4029a90d47701102045fff90675adb3c83983d125ae730b9497c681a912a6bb70300a2d7fba051f82b9d6f710426b5bd0d0bc0b08a0f801276789613da406905011bd6ebbac91ff17a21d1ed0882e73394025772f31dc8a3048789c703f920c55746f6fc955046f9332d72150be23c26cbb08d1b438e84b83fefc6a16958fd46dc7b8cbea1da2d541324e373e9157696d698a0b4bc84d7cc2fdb069db8a5a491a9d2bbc0a61b73f75d81d07d778a1577db3b06d20a21b19ea17e0000815a42318151feaad37f7abf9bfa0bcac3c1934854b3f6dc6de835952ebdda297dd3b29c07c69888cf029271449e035edc8a4459705f222bda537481e66ce3c665129f9829524eca8b5bef27adde96bd3ee95da4a176deff3408da050fe8d512e5a19379b403ee11d010bf86d0af4ac5c2057709b18cff438d0d58810670b222dfeb317bb935f925d2a070e68a701fd4316a677bb513c9476f25969097c165ca1705473341ea03f259dc5bee6a2d2e05176965192941abfae36b3a1e30784e6532c96ab971c5706a88b6f66860e31098b5b788788aad67507ffab2184a950065c1337259b63135fa060fc5ce3e4f6cdfb64f40e1a90351a01fd3d70f9dde03c335a931e58b8570316590ae22c7de567260849049e963ee15db15f592abb24111a219f0d128ceaf19764d92755abc9c313f65e7a220e64bb0d7139ce59da85bc710cea0c6553b336763bd3e39c2374b86885a32cdfae817196a7850257ead09f3e30e676b51062bb9000000000000000000000000000000000000000000000000000000aefb12dd3507c8dd24490bf9de062cd166a4dad6b9f2e53bad342546e546f6dece81d53cf717bd91ad72f4da82018f43259899e53e0b69a92180f1345699045fd23689e66d21d13be1a2d20eb1ce23eda84a63855173ca7f51d436306c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001ac0)={'vcan0\x00', 0x6}) 0s ago: executing program 1 (id=138): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000fdffffff18010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000018010000756d6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000004000000"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) fcntl$setpipe(r4, 0x407, 0x0) write$FUSE_INIT(r4, &(0x7f0000000340)={0x50, 0xfffffffffffffff5, 0x0, {0x7, 0x28, 0xd19e, 0x0, 0x0, 0x4, 0x8d, 0x40000000, 0x0, 0x0, 0x10, 0x2}}, 0x50) vmsplice(r4, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r4, 0x407, 0x2000000) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r2, 0x201, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x70, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x526}, @TCA_SAMPLE_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x70}}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@newtaction={0x48, 0x32, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4}}}]}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000002840)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1000, 0x3a, 'o,\xae\x01>_\xcbn(}\x06J\xda4\\x0\x00\x00\x00', 0x3a, ':dev/bus/usbF30#/00#\x00', 0x3a, './file0'}, 0x50) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.113' (ED25519) to the list of known hosts. [ 92.142329][ T9] cfg80211: failed to load regulatory.db [ 92.546081][ T5825] cgroup: Unknown subsys name 'net' [ 92.783461][ T5825] cgroup: Unknown subsys name 'cpuset' [ 92.828039][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.798195][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.742999][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.746416][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.748956][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.762916][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.764088][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.829449][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.831739][ T59] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.832884][ T59] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.834844][ T59] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.835816][ T59] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.923125][ T5154] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.929076][ T59] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.930272][ T59] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.931009][ T59] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.933855][ T59] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.934664][ T59] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.939257][ T59] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.940287][ T59] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.969116][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.975821][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.012432][ T5154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.020559][ T5154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.021548][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.023599][ T5154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.024588][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.023389][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 99.127714][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 99.147701][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 99.520249][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 99.526466][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 99.888977][ T5154] Bluetooth: hci0: command tx timeout [ 99.967470][ T5154] Bluetooth: hci1: command tx timeout [ 99.967477][ T5837] Bluetooth: hci4: command tx timeout [ 100.047502][ T5837] Bluetooth: hci3: command tx timeout [ 100.127670][ T5837] Bluetooth: hci2: command tx timeout [ 100.155572][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.156798][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.171872][ T5843] bridge_slave_0: entered allmulticast mode [ 100.174750][ T5843] bridge_slave_0: entered promiscuous mode [ 100.353332][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.353490][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.353709][ T5843] bridge_slave_1: entered allmulticast mode [ 100.356748][ T5843] bridge_slave_1: entered promiscuous mode [ 100.381296][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.381463][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.381703][ T5835] bridge_slave_0: entered allmulticast mode [ 100.384838][ T5835] bridge_slave_0: entered promiscuous mode [ 100.410983][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.411131][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.411350][ T5838] bridge_slave_0: entered allmulticast mode [ 100.419003][ T5838] bridge_slave_0: entered promiscuous mode [ 100.568359][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.568514][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.568665][ T5835] bridge_slave_1: entered allmulticast mode [ 100.570605][ T5835] bridge_slave_1: entered promiscuous mode [ 100.573781][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.573904][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.574059][ T5838] bridge_slave_1: entered allmulticast mode [ 100.575997][ T5838] bridge_slave_1: entered promiscuous mode [ 101.126693][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.328578][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.328803][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.329007][ T5842] bridge_slave_0: entered allmulticast mode [ 101.331488][ T5842] bridge_slave_0: entered promiscuous mode [ 101.334067][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.334289][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.334476][ T5841] bridge_slave_0: entered allmulticast mode [ 101.336666][ T5841] bridge_slave_0: entered promiscuous mode [ 101.382615][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.400513][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.421003][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.422651][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.422798][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.422993][ T5842] bridge_slave_1: entered allmulticast mode [ 101.426392][ T5842] bridge_slave_1: entered promiscuous mode [ 101.468837][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.468986][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.469224][ T5841] bridge_slave_1: entered allmulticast mode [ 101.472172][ T5841] bridge_slave_1: entered promiscuous mode [ 101.572447][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.575484][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.967439][ T5837] Bluetooth: hci0: command tx timeout [ 102.047482][ T5154] Bluetooth: hci1: command tx timeout [ 102.047646][ T5837] Bluetooth: hci4: command tx timeout [ 102.127886][ T5837] Bluetooth: hci3: command tx timeout [ 102.137046][ T5843] team0: Port device team_slave_0 added [ 102.207477][ T5837] Bluetooth: hci2: command tx timeout [ 102.292899][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.310765][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.314832][ T5843] team0: Port device team_slave_1 added [ 102.321625][ T5835] team0: Port device team_slave_0 added [ 102.503442][ T5838] team0: Port device team_slave_0 added [ 102.510744][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.514806][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.611362][ T5835] team0: Port device team_slave_1 added [ 102.613803][ T5838] team0: Port device team_slave_1 added [ 103.119766][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.119779][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.119798][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.292470][ T5842] team0: Port device team_slave_0 added [ 103.295017][ T5841] team0: Port device team_slave_0 added [ 103.296277][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.296292][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.296320][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.308040][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.308061][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.308092][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.311329][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.311347][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.311377][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.316203][ T5842] team0: Port device team_slave_1 added [ 103.331291][ T5841] team0: Port device team_slave_1 added [ 103.370291][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.370312][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.370345][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.372006][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.372023][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.372054][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.925052][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.925067][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.925085][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.926315][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.926330][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.926358][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.047384][ T5837] Bluetooth: hci0: command tx timeout [ 104.051159][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.051172][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.051192][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.052301][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.052311][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.052330][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.128996][ T5154] Bluetooth: hci1: command tx timeout [ 104.129186][ T5837] Bluetooth: hci4: command tx timeout [ 104.217610][ T5837] Bluetooth: hci3: command tx timeout [ 104.287524][ T5837] Bluetooth: hci2: command tx timeout [ 104.389160][ T5843] hsr_slave_0: entered promiscuous mode [ 104.390573][ T5843] hsr_slave_1: entered promiscuous mode [ 104.545128][ T5835] hsr_slave_0: entered promiscuous mode [ 104.546118][ T5835] hsr_slave_1: entered promiscuous mode [ 104.546901][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 104.546995][ T5835] Cannot create hsr debugfs directory [ 104.563803][ T5838] hsr_slave_0: entered promiscuous mode [ 104.565551][ T5838] hsr_slave_1: entered promiscuous mode [ 104.566686][ T5838] debugfs: 'hsr0' already exists in 'hsr' [ 104.566715][ T5838] Cannot create hsr debugfs directory [ 105.268385][ T5842] hsr_slave_0: entered promiscuous mode [ 105.270253][ T5842] hsr_slave_1: entered promiscuous mode [ 105.271225][ T5842] debugfs: 'hsr0' already exists in 'hsr' [ 105.271250][ T5842] Cannot create hsr debugfs directory [ 105.280477][ T5841] hsr_slave_0: entered promiscuous mode [ 105.283119][ T5841] hsr_slave_1: entered promiscuous mode [ 105.284149][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 105.284178][ T5841] Cannot create hsr debugfs directory [ 106.127463][ T5837] Bluetooth: hci0: command tx timeout [ 106.217638][ T5154] Bluetooth: hci1: command tx timeout [ 106.217700][ T5837] Bluetooth: hci4: command tx timeout [ 106.297620][ T5837] Bluetooth: hci3: command tx timeout [ 106.367407][ T5837] Bluetooth: hci2: command tx timeout [ 106.879527][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.927866][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.968433][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 107.024586][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 107.151076][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.200007][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.256336][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.318675][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.475786][ T5838] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.533416][ T5838] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.582131][ T5838] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.636150][ T5838] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.806006][ T5841] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.865247][ T5841] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.907947][ T5841] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.981227][ T5841] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 108.185913][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.227709][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.239165][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.283037][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.335452][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.455391][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.520420][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.521252][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.553677][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.585718][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.586346][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.696960][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.714066][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.763457][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.765017][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.822448][ T1486] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.822601][ T1486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.899910][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.924283][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.970828][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.970987][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.016983][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.017134][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.141436][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.214125][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.226616][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.228362][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.358415][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.358570][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.478535][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.553428][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.553661][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.612463][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.612726][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.716396][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.053281][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.132284][ T5843] veth0_vlan: entered promiscuous mode [ 110.219970][ T5843] veth1_vlan: entered promiscuous mode [ 110.245253][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.437622][ T5835] veth0_vlan: entered promiscuous mode [ 110.528065][ T5843] veth0_macvtap: entered promiscuous mode [ 110.561739][ T5835] veth1_vlan: entered promiscuous mode [ 110.595713][ T5843] veth1_macvtap: entered promiscuous mode [ 110.711858][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.825868][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.885798][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.888928][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.930387][ T5835] veth0_macvtap: entered promiscuous mode [ 110.958976][ T1486] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.979338][ T1486] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.982915][ T5835] veth1_macvtap: entered promiscuous mode [ 110.984556][ T1486] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.026305][ T1486] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.236714][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.246910][ T5841] veth0_vlan: entered promiscuous mode [ 111.361336][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.405781][ T5838] veth0_vlan: entered promiscuous mode [ 111.453884][ T5841] veth1_vlan: entered promiscuous mode [ 111.455597][ T1486] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.486903][ T1486] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.503069][ T1486] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.506230][ T5842] veth0_vlan: entered promiscuous mode [ 111.518334][ T1486] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.526787][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.526820][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.552441][ T5838] veth1_vlan: entered promiscuous mode [ 111.671456][ T5842] veth1_vlan: entered promiscuous mode [ 111.747841][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.747861][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.951846][ T5841] veth0_macvtap: entered promiscuous mode [ 112.038299][ T5841] veth1_macvtap: entered promiscuous mode [ 112.058753][ T1351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.058775][ T1351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.086677][ T5838] veth0_macvtap: entered promiscuous mode [ 112.201815][ T5842] veth0_macvtap: entered promiscuous mode [ 112.204256][ T5838] veth1_macvtap: entered promiscuous mode [ 112.282516][ T5842] veth1_macvtap: entered promiscuous mode [ 112.315375][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.333295][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.333319][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.475186][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.540442][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.579429][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.584359][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.589614][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.609972][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.620746][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.632887][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.681258][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.762488][ T69] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.769473][ T69] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.788926][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.794450][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.888984][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.895862][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.956889][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.083484][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.165164][ T5965] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 113.458489][ T5923] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.572229][ T1351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.572252][ T1351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.618988][ T5923] usb 1-1: Using ep0 maxpacket: 32 [ 113.652531][ T5923] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 113.652574][ T5923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.750324][ T5923] usb 1-1: config 0 descriptor?? [ 113.764588][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.764609][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.903992][ T1486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.904015][ T1486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.058588][ T1351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.058610][ T1351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.158481][ T5923] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 114.185605][ T1351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.185628][ T1351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.443690][ T5923] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 114.445182][ T5923] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 114.445274][ T5923] usb 1-1: media controller created [ 114.708085][ T5923] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 114.788603][ T1486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.788624][ T1486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.976579][ T5923] az6027: usb out operation failed. (-71) [ 114.981827][ T5923] az6027: usb out operation failed. (-71) [ 114.981849][ T5923] stb0899_attach: Driver disabled by Kconfig [ 114.981861][ T5923] az6027: no front-end attached [ 114.981861][ T5923] [ 114.986736][ T5923] az6027: usb out operation failed. (-71) [ 114.986757][ T5923] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 115.028886][ T5923] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 115.070664][ T5923] dvb-usb: schedule remote query interval to 400 msecs. [ 115.070690][ T5923] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 115.118620][ T5922] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 115.223272][ T5923] usb 1-1: USB disconnect, device number 2 [ 115.337272][ T5922] usb 2-1: Using ep0 maxpacket: 8 [ 115.345374][ T5922] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 115.345406][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.491706][ T5922] pvrusb2: Hardware description: Terratec Grabster AV400 [ 115.491726][ T5922] pvrusb2: ********** [ 115.491733][ T5922] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 115.491745][ T5922] pvrusb2: Important functionality might not be entirely working. [ 115.491754][ T5922] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 115.491766][ T5922] pvrusb2: ********** [ 115.673186][ T2369] pvrusb2: Invalid write control endpoint [ 115.860194][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 115.873925][ T5903] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 115.949004][ T5922] usb 2-1: USB disconnect, device number 2 [ 116.050053][ T5903] usb 5-1: Using ep0 maxpacket: 32 [ 116.079168][ T5903] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 116.079217][ T5903] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 116.079326][ T5903] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 116.079355][ T5903] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 116.079381][ T5903] usb 5-1: config 0 interface 0 has no altsetting 0 [ 116.147365][ T5903] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 116.147397][ T5903] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 116.147418][ T5903] usb 5-1: Product: syz [ 116.147432][ T5903] usb 5-1: Manufacturer: syz [ 116.147446][ T5903] usb 5-1: SerialNumber: syz [ 116.253786][ T5903] usb 5-1: config 0 descriptor?? [ 116.335432][ T2369] pvrusb2: Invalid write control endpoint [ 116.335449][ T2369] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 116.335459][ T2369] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 116.335467][ T2369] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 116.335478][ T2369] pvrusb2: Device being rendered inoperable [ 116.380123][ T2369] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 116.380488][ T2369] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 116.419185][ T2369] pvrusb2: Attached sub-driver cx25840 [ 116.419214][ T2369] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 116.419225][ T2369] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 116.420201][ T5923] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 116.429237][ T5903] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 116.664678][ T5903] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 116.901585][ T5903] usb 5-1: USB disconnect, device number 2 [ 117.019209][ T5903] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 117.089799][ T6003] warning: `syz.2.20' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 117.190074][ T5923] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 117.338264][ T5923] usb 1-1: Using ep0 maxpacket: 8 [ 117.341323][ T5923] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 117.341388][ T5923] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 117.341418][ T5923] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.341444][ T5923] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 117.341472][ T5923] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 117.349500][ T5923] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 117.349561][ T5923] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 117.349589][ T5923] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.349616][ T5923] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 117.349642][ T5923] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 117.359625][ T5923] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 117.359699][ T5923] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 117.359727][ T5923] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 117.359753][ T5923] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 117.359789][ T5923] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 117.433567][ T5923] usb 1-1: string descriptor 0 read error: -22 [ 117.433768][ T5923] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 117.433796][ T5923] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.539878][ T5922] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 117.635234][ T5923] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 117.693437][ T5922] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 117.693475][ T5922] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 117.693524][ T5922] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 117.693547][ T5922] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.747123][ T5999] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 117.883399][ T3118] usb 1-1: USB disconnect, device number 3 [ 117.886233][ T5922] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 117.937342][ T5995] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 118.097938][ T5995] usb 3-1: Using ep0 maxpacket: 32 [ 118.103094][ T5995] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 118.103132][ T5995] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.136284][ T5995] usb 3-1: config 0 descriptor?? [ 118.372972][ T5995] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 118.403196][ T5922] usb 2-1: USB disconnect, device number 3 [ 118.463999][ T5995] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 118.478078][ T5995] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 118.478132][ T5995] usb 3-1: media controller created [ 118.500090][ T5888] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 118.537502][ T5995] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 118.630925][ T5995] az6027: usb out operation failed. (-71) [ 118.631345][ T5995] az6027: usb out operation failed. (-71) [ 118.631359][ T5995] stb0899_attach: Driver disabled by Kconfig [ 118.631369][ T5995] az6027: no front-end attached [ 118.631369][ T5995] [ 118.631875][ T5995] az6027: usb out operation failed. (-71) [ 118.631893][ T5995] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 118.675765][ T5888] usb 4-1: Using ep0 maxpacket: 16 [ 118.698724][ T5888] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 118.698778][ T5888] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 118.698802][ T5888] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.773640][ T5995] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input6 [ 118.918226][ T5995] dvb-usb: schedule remote query interval to 400 msecs. [ 118.918251][ T5995] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 118.923013][ T5888] usb 4-1: config 0 descriptor?? [ 118.978588][ T5995] usb 3-1: USB disconnect, device number 2 [ 118.995547][ T5888] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 119.167812][ T5888] bcm5974 4-1:0.0: could not read from device [ 119.270237][ T5190] bcm5974 4-1:0.0: could not read from device [ 119.372072][ T5888] input: failed to attach handler mousedev to device input7, error: -5 [ 119.420958][ T5888] usb 4-1: USB disconnect, device number 2 [ 119.740035][ T5995] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 120.429104][ T5922] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 120.588963][ T5922] usb 4-1: Using ep0 maxpacket: 32 [ 120.605711][ T5922] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 120.605742][ T5922] usb 4-1: config 0 has no interface number 0 [ 120.651778][ T5922] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 120.651808][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.651827][ T5922] usb 4-1: Product: syz [ 120.651840][ T5922] usb 4-1: Manufacturer: syz [ 120.651854][ T5922] usb 4-1: SerialNumber: syz [ 120.690877][ T5922] usb 4-1: config 0 descriptor?? [ 120.715845][ T5922] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 121.134034][ T5922] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 121.208363][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - xmit_empty message too short [ 121.394440][ T5922] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 121.411358][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 121.471266][ T5922] usb 4-1: USB disconnect, device number 3 [ 121.524126][ T5922] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 121.646186][ T5922] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 121.648728][ T5922] quatech2 4-1:0.51: device disconnected [ 122.243782][ T6065] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 122.499126][ T6071] netlink: 27 bytes leftover after parsing attributes in process `syz.1.51'. [ 122.787462][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.787514][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.830376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.830432][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 122.897227][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.974938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 122.974975][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 123.015952][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.015987][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.067729][ T5922] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 123.097235][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 123.254646][ T5922] usb 1-1: Using ep0 maxpacket: 32 [ 123.524355][ T5922] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.524393][ T5922] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.524417][ T5922] usb 1-1: config 0 interface 0 has no altsetting 0 [ 123.550358][ T5922] usb 1-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 123.550392][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0 [ 123.550413][ T5922] usb 1-1: Product: syz [ 123.590254][ T6082] ubi31: attaching mtd0 [ 123.591478][ T5922] usb 1-1: config 0 descriptor?? [ 124.081888][ T5922] waterforce 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 124.081934][ T5922] waterforce 0003:1044:7A4D.0001: unknown main item tag 0x0 [ 124.081972][ T5922] waterforce 0003:1044:7A4D.0001: item fetching failed at offset 2/5 [ 124.082850][ T5922] waterforce 0003:1044:7A4D.0001: hid parse failed with -22 [ 124.082974][ T5922] waterforce 0003:1044:7A4D.0001: probe with driver waterforce failed with error -22 [ 124.227537][ T5995] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 124.267554][ T5924] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.300904][ T9] usb 1-1: USB disconnect, device number 4 [ 124.393082][ T5995] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 124.393112][ T5995] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 124.393132][ T5995] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 124.393159][ T5995] usb 2-1: config 220 has no interface number 2 [ 124.393245][ T5995] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 124.393274][ T5995] usb 2-1: config 220 interface 0 has no altsetting 0 [ 124.393294][ T5995] usb 2-1: config 220 interface 76 has no altsetting 0 [ 124.393313][ T5995] usb 2-1: config 220 interface 1 has no altsetting 0 [ 124.406427][ T5995] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 124.406463][ T5995] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.406486][ T5995] usb 2-1: Product: syz [ 124.406504][ T5995] usb 2-1: Manufacturer: syz [ 124.406521][ T5995] usb 2-1: SerialNumber: syz [ 124.517441][ T5924] usb 4-1: Using ep0 maxpacket: 16 [ 124.520162][ T5924] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.520190][ T5924] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.526089][ T5924] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 124.526120][ T5924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.526142][ T5924] usb 4-1: Product: syz [ 124.526164][ T5924] usb 4-1: Manufacturer: syz [ 124.526179][ T5924] usb 4-1: SerialNumber: syz [ 124.767136][ T5995] usb 2-1: Found UVC 7.01 device syz (8086:0b07) [ 124.782407][ T5995] usb 2-1: No valid video chain found. [ 124.783609][ T5995] usb 2-1: selecting invalid altsetting 0 [ 124.864060][ T5995] usb 2-1: selecting invalid altsetting 0 [ 124.864104][ T5995] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 124.901289][ T5995] usb 2-1: USB disconnect, device number 4 [ 125.050422][ T5924] usb 4-1: 0:2 : does not exist [ 125.471749][ T5924] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 125.587695][ T5924] usb 4-1: USB disconnect, device number 4 [ 125.755290][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.824378][ T6109] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 126.510284][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 126.608249][ T6130] netlink: 56 bytes leftover after parsing attributes in process `syz.1.78'. [ 126.667313][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 126.669752][ T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 126.669779][ T9] usb 4-1: config 0 has no interface number 0 [ 126.680652][ T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 126.680686][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.680710][ T9] usb 4-1: Product: syz [ 126.680726][ T9] usb 4-1: Manufacturer: syz [ 126.680743][ T9] usb 4-1: SerialNumber: syz [ 126.712829][ T9] usb 4-1: config 0 descriptor?? [ 126.774498][ T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 127.038717][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 127.086679][ T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 127.171375][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - port change to invalid port: 210 [ 127.247451][ T44] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 127.397291][ T44] usb 3-1: Using ep0 maxpacket: 32 [ 127.400253][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.400287][ T44] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.400325][ T44] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 127.400349][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.403837][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 127.405216][ T5995] usb 4-1: USB disconnect, device number 5 [ 127.539009][ T44] usb 3-1: config 0 descriptor?? [ 127.548687][ T5995] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 127.586703][ T5995] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 127.594823][ T5995] quatech2 4-1:0.51: device disconnected [ 127.838299][ T5888] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 127.987359][ T5888] usb 2-1: Using ep0 maxpacket: 16 [ 127.989744][ T5888] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 127.989772][ T5888] usb 2-1: config 0 has no interface number 0 [ 127.989822][ T5888] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.989849][ T5888] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.989889][ T5888] usb 2-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 127.989913][ T5888] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.034018][ T5888] usb 2-1: config 0 descriptor?? [ 128.121431][ T44] savu 0003:1E7D:2D5A.0002: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.2-1/input0 [ 128.383230][ T5991] usb 3-1: USB disconnect, device number 3 [ 128.449168][ T6153] fido_id[6153]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 128.839134][ T5888] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0003/input/input8 [ 129.057533][ T5924] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 129.059689][ T5888] input: HID 28bd:0071 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0071.0003/input/input9 [ 129.163704][ T5888] uclogic 0003:28BD:0071.0003: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.1-1/input1 [ 129.194470][ T5888] usb 2-1: USB disconnect, device number 5 [ 129.210021][ T5924] usb 5-1: config 0 has an invalid interface number: 102 but max is 0 [ 129.210049][ T5924] usb 5-1: config 0 has no interface number 0 [ 129.210099][ T5924] usb 5-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 129.210122][ T5924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.292368][ T5924] usb 5-1: config 0 descriptor?? [ 129.965051][ T6174] ======================================================= [ 129.965051][ T6174] WARNING: The mand mount option has been deprecated and [ 129.965051][ T6174] and is ignored by this kernel. Remove the mand [ 129.965051][ T6174] option from the mount to silence this warning. [ 129.965051][ T6174] ======================================================= [ 129.987107][ T6169] fido_id[6169]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 130.137690][ T5924] asix 5-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 130.137721][ T5924] asix 5-1:0.102 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0080: ffffffb9 [ 130.138353][ T5924] asix 5-1:0.102: probe with driver asix failed with error -71 [ 130.180873][ T5924] usb 5-1: USB disconnect, device number 3 [ 131.067435][ T44] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 131.230511][ T44] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.230540][ T44] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 131.230596][ T44] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 131.230620][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.296124][ T44] usb 5-1: config 0 descriptor?? [ 131.316096][ T44] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 131.316154][ T44] dvb-usb: bulk message failed: -22 (3/0) [ 131.349720][ T44] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 131.352019][ T44] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 131.352078][ T44] usb 5-1: media controller created [ 131.386713][ T44] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 131.406140][ T44] dvb-usb: bulk message failed: -22 (6/0) [ 131.415904][ T44] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 131.432294][ T44] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input10 [ 131.450792][ T44] dvb-usb: schedule remote query interval to 150 msecs. [ 131.450815][ T44] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 131.610845][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 131.610896][ T44] dvb-usb: error while querying for an remote control event. [ 131.768997][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 131.769031][ T44] dvb-usb: error while querying for an remote control event. [ 131.936013][ T5991] dvb-usb: bulk message failed: -22 (1/0) [ 131.936047][ T5991] dvb-usb: error while querying for an remote control event. [ 132.088933][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 132.088967][ T44] dvb-usb: error while querying for an remote control event. [ 132.231109][ T6210] syzkaller1: entered promiscuous mode [ 132.231141][ T6210] syzkaller1: entered allmulticast mode [ 132.247306][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 132.247337][ T44] dvb-usb: error while querying for an remote control event. [ 132.407334][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 132.407370][ T44] dvb-usb: error while querying for an remote control event. [ 132.567292][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 132.567327][ T44] dvb-usb: error while querying for an remote control event. [ 132.568917][ T6228] syz.0.113 uses obsolete (PF_INET,SOCK_PACKET) [ 132.728988][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 132.729024][ T44] dvb-usb: error while querying for an remote control event. [ 132.856714][ T6232] netlink: 'syz.3.115': attribute type 1 has an invalid length. [ 132.858495][ T6232] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.858681][ T6232] IPv6: NLM_F_CREATE should be set when creating new route [ 132.858717][ T6232] IPv6: NLM_F_CREATE should be set when creating new route [ 132.887317][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 132.887348][ T44] dvb-usb: error while querying for an remote control event. [ 132.923837][ T6236] netlink: 'syz.3.115': attribute type 1 has an invalid length. [ 132.923895][ T6236] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 132.924130][ T6236] Zero length message leads to an empty skb [ 133.047503][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 133.047540][ T44] dvb-usb: error while querying for an remote control event. [ 133.208676][ T44] dvb-usb: bulk message failed: -22 (1/0) [ 133.208706][ T44] dvb-usb: error while querying for an remote control event. [ 133.213195][ T5991] usb 5-1: USB disconnect, device number 4 [ 133.376125][ T5991] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 134.398098][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.026738][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'. [ 135.231560][ C0] vkms_vblank_simulate: vblank timer overrun [ 135.268015][ T6259] loop2: detected capacity change from 0 to 7 [ 135.364199][ T6259] Dev loop2: unable to read RDB block 7 [ 135.364238][ T6259] loop2: AHDI p1 p2 [ 135.364268][ T6259] loop2: partition table partially beyond EOD, truncated [ 135.387353][ T5888] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 135.393191][ T6259] loop2: p1 start 1702258030 is beyond EOD, truncated [ 135.737235][ T5888] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 135.737299][ T5888] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.802790][ T5888] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 135.802824][ T5888] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 135.802846][ T5888] usb 5-1: Manufacturer: syz [ 135.839576][ T5888] usb 5-1: config 0 descriptor?? [ 136.207392][ T5888] rc_core: IR keymap rc-hauppauge not found [ 136.207415][ T5888] Registered IR keymap rc-empty [ 136.210483][ T5888] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 136.213830][ T5888] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input11 [ 136.279163][ C0] igorplugusb 5-1:0.0: Error: urb status = -32 [ 136.457626][ T5924] usb 5-1: USB disconnect, device number 5 [ 136.629154][ T6280] capability: warning: `syz.0.131' uses deprecated v2 capabilities in a way that may be insecure [ 136.645707][ T38] audit: type=1400 audit(1755985081.871:2): lsm=SMACK fn=smack_inode_set_acl action=denied subject="w" object="_" requested=w pid=6278 comm="syz.0.131" name="22" dev="tmpfs" ino=125 [ 137.104863][ T6292] [ 137.104876][ T6292] ====================================================== [ 137.104885][ T6292] WARNING: possible circular locking dependency detected [ 137.104903][ T6292] syzkaller #0 Not tainted [ 137.104915][ T6292] ------------------------------------------------------ [ 137.104923][ T6292] syz.3.135/6292 is trying to acquire lock: [ 137.104935][ T6292] ffff8880b8923d90 ((softirq_ctrl.lock)){+.+.}-{3:3}, at: __local_bh_disable_ip+0x264/0x400 [ 137.105002][ T6292] [ 137.105002][ T6292] but task is already holding lock: [ 137.105009][ T6292] ffffffff8efa6548 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 137.105059][ T6292] [ 137.105059][ T6292] which lock already depends on the new lock. [ 137.105059][ T6292] [ 137.105066][ T6292] [ 137.105066][ T6292] the existing dependency chain (in reverse order) is: [ 137.105074][ T6292] [ 137.105074][ T6292] -> #1 (smc_v4_hashinfo.lock){++.+}-{3:3}: [ 137.105101][ T6292] lock_acquire+0x120/0x360 [ 137.105128][ T6292] rt_write_lock+0x6a/0x110 [ 137.105148][ T6292] smc_hash_sk+0x8f/0x2a0 [ 137.105166][ T6292] smc_sk_init+0x5a1/0x7f0 [ 137.105185][ T6292] smc_inet_init_sock+0x4e/0xb0 [ 137.105204][ T6292] inet_create+0xd13/0x1010 [ 137.105224][ T6292] __sock_create+0x4b3/0x9f0 [ 137.105245][ T6292] __sys_socket+0xd7/0x1b0 [ 137.105265][ T6292] __x64_sys_socket+0x7a/0x90 [ 137.105285][ T6292] do_syscall_64+0xfa/0x3b0 [ 137.105311][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.105330][ T6292] [ 137.105330][ T6292] -> #0 ((softirq_ctrl.lock)){+.+.}-{3:3}: [ 137.105358][ T6292] validate_chain+0xb9b/0x2140 [ 137.105387][ T6292] __lock_acquire+0xab9/0xd20 [ 137.105412][ T6292] reacquire_held_locks+0x127/0x1d0 [ 137.105441][ T6292] lock_release+0x1b4/0x3e0 [ 137.105465][ T6292] __local_bh_enable_ip+0x10c/0x270 [ 137.105489][ T6292] sock_i_ino+0xa9/0xc0 [ 137.105516][ T6292] smc_diag_dump_proto+0xa4c/0x1fb0 [ 137.105537][ T6292] smc_diag_dump+0x27/0xa0 [ 137.105557][ T6292] netlink_dump+0x6e4/0xe90 [ 137.105577][ T6292] __netlink_dump_start+0x5cb/0x7e0 [ 137.105598][ T6292] smc_diag_handler_dump+0x178/0x210 [ 137.105619][ T6292] sock_diag_rcv_msg+0x4c9/0x600 [ 137.105639][ T6292] netlink_rcv_skb+0x205/0x470 [ 137.105660][ T6292] netlink_unicast+0x843/0xa10 [ 137.105754][ T6292] netlink_sendmsg+0x805/0xb30 [ 137.105779][ T6292] __sock_sendmsg+0x219/0x270 [ 137.105799][ T6292] ____sys_sendmsg+0x508/0x820 [ 137.105825][ T6292] ___sys_sendmsg+0x21f/0x2a0 [ 137.105852][ T6292] __x64_sys_sendmsg+0x1a1/0x260 [ 137.105879][ T6292] do_syscall_64+0xfa/0x3b0 [ 137.105905][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.105924][ T6292] [ 137.105924][ T6292] other info that might help us debug this: [ 137.105924][ T6292] [ 137.105930][ T6292] Possible unsafe locking scenario: [ 137.105930][ T6292] [ 137.105936][ T6292] CPU0 CPU1 [ 137.105943][ T6292] ---- ---- [ 137.105950][ T6292] rlock(smc_v4_hashinfo.lock); [ 137.105966][ T6292] lock((softirq_ctrl.lock)); [ 137.105982][ T6292] lock(smc_v4_hashinfo.lock); [ 137.105998][ T6292] lock((softirq_ctrl.lock)); [ 137.106012][ T6292] [ 137.106012][ T6292] *** DEADLOCK *** [ 137.106012][ T6292] [ 137.106018][ T6292] 3 locks held by syz.3.135/6292: [ 137.106030][ T6292] #0: ffff88803a698908 (nlk_cb_mutex-SOCK_DIAG){+.+.}-{4:4}, at: __netlink_dump_start+0xfe/0x7e0 [ 137.106082][ T6292] #1: ffffffff8efa6548 (smc_v4_hashinfo.lock){++.+}-{3:3}, at: smc_diag_dump_proto+0x174/0x1fb0 [ 137.106134][ T6292] #2: ffffffff8d9a8b80 (rcu_read_lock){....}-{1:3}, at: rt_read_lock+0x1f8/0x360 [ 137.106182][ T6292] [ 137.106182][ T6292] stack backtrace: [ 137.106213][ T6292] CPU: 1 UID: 0 PID: 6292 Comm: syz.3.135 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 137.106239][ T6292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 137.106260][ T6292] Call Trace: [ 137.106268][ T6292] [ 137.106277][ T6292] dump_stack_lvl+0x189/0x250 [ 137.106312][ T6292] ? __pfx_dump_stack_lvl+0x10/0x10 [ 137.106344][ T6292] ? __pfx__printk+0x10/0x10 [ 137.106369][ T6292] ? print_lock_name+0xde/0x100 [ 137.106393][ T6292] print_circular_bug+0x2ee/0x310 [ 137.106415][ T6292] check_noncircular+0x134/0x160 [ 137.106453][ T6292] validate_chain+0xb9b/0x2140 [ 137.106487][ T6292] ? validate_chain+0x897/0x2140 [ 137.106530][ T6292] __lock_acquire+0xab9/0xd20 [ 137.106562][ T6292] reacquire_held_locks+0x127/0x1d0 [ 137.106595][ T6292] ? __local_bh_disable_ip+0x264/0x400 [ 137.106624][ T6292] lock_release+0x1b4/0x3e0 [ 137.106650][ T6292] ? __local_bh_enable_ip+0x100/0x270 [ 137.106685][ T6292] __local_bh_enable_ip+0x10c/0x270 [ 137.106713][ T6292] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 137.106744][ T6292] ? rt_read_unlock+0x65/0xa0 [ 137.106767][ T6292] ? sock_i_ino+0x24/0xc0 [ 137.106798][ T6292] sock_i_ino+0xa9/0xc0 [ 137.106830][ T6292] smc_diag_dump_proto+0xa4c/0x1fb0 [ 137.106868][ T6292] ? __pfx_smc_diag_dump_proto+0x10/0x10 [ 137.106894][ T6292] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 137.106932][ T6292] ? __lruvec_stat_mod_folio+0x79/0x2f0 [ 137.106968][ T6292] ? __phys_addr+0xd3/0x180 [ 137.106999][ T6292] ? __kasan_kmalloc_large+0x85/0xa0 [ 137.107028][ T6292] ? rcu_is_watching+0x15/0xb0 [ 137.107060][ T6292] ? rcu_is_watching+0x15/0xb0 [ 137.107094][ T6292] ? trace_kmalloc+0x1f/0xd0 [ 137.107120][ T6292] ? __kmalloc_node_track_caller_noprof+0x213/0x450 [ 137.107160][ T6292] ? __build_skb_around+0x257/0x3e0 [ 137.107188][ T6292] smc_diag_dump+0x27/0xa0 [ 137.107211][ T6292] netlink_dump+0x6e4/0xe90 [ 137.107240][ T6292] ? __pfx_netlink_dump+0x10/0x10 [ 137.107261][ T6292] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 137.107287][ T6292] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.107326][ T6292] __netlink_dump_start+0x5cb/0x7e0 [ 137.107355][ T6292] smc_diag_handler_dump+0x178/0x210 [ 137.107381][ T6292] ? __pfx_smc_diag_handler_dump+0x10/0x10 [ 137.107404][ T6292] ? __pfx_smc_diag_dump+0x10/0x10 [ 137.107428][ T6292] ? sock_diag_lock_handler+0x19/0x290 [ 137.107450][ T6292] ? sock_diag_lock_handler+0x19/0x290 [ 137.107476][ T6292] sock_diag_rcv_msg+0x4c9/0x600 [ 137.107502][ T6292] netlink_rcv_skb+0x205/0x470 [ 137.107527][ T6292] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 137.107552][ T6292] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 137.107582][ T6292] ? netlink_deliver_tap+0x2e/0x1b0 [ 137.107611][ T6292] netlink_unicast+0x843/0xa10 [ 137.107638][ T6292] ? __pfx_netlink_unicast+0x10/0x10 [ 137.107660][ T6292] ? netlink_sendmsg+0x642/0xb30 [ 137.107694][ T6292] ? skb_put+0x11b/0x210 [ 137.107723][ T6292] netlink_sendmsg+0x805/0xb30 [ 137.107755][ T6292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.107785][ T6292] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 137.107806][ T6292] ? __pfx_netlink_sendmsg+0x10/0x10 [ 137.107833][ T6292] __sock_sendmsg+0x219/0x270 [ 137.107856][ T6292] ____sys_sendmsg+0x508/0x820 [ 137.107888][ T6292] ? __pfx_____sys_sendmsg+0x10/0x10 [ 137.107923][ T6292] ? import_iovec+0x74/0xa0 [ 137.107947][ T6292] ___sys_sendmsg+0x21f/0x2a0 [ 137.107980][ T6292] ? __pfx____sys_sendmsg+0x10/0x10 [ 137.108029][ T6292] ? __fget_files+0x2a/0x420 [ 137.108058][ T6292] ? __fget_files+0x3a6/0x420 [ 137.108094][ T6292] __x64_sys_sendmsg+0x1a1/0x260 [ 137.108125][ T6292] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 137.108161][ T6292] ? rcu_is_watching+0x15/0xb0 [ 137.108196][ T6292] ? do_syscall_64+0xbe/0x3b0 [ 137.108224][ T6292] do_syscall_64+0xfa/0x3b0 [ 137.108248][ T6292] ? lockdep_hardirqs_on+0x9c/0x150 [ 137.108271][ T6292] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.108292][ T6292] ? clear_bhb_loop+0x60/0xb0 [ 137.108315][ T6292] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.108336][ T6292] RIP: 0033:0x7f93678aebe9 [ 137.108364][ T6292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.108381][ T6292] RSP: 002b:00007f9365b0e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 137.108403][ T6292] RAX: ffffffffffffffda RBX: 00007f9367ad5fa0 RCX: 00007f93678aebe9 [ 137.108419][ T6292] RDX: 0000000000000600 RSI: 0000200000000540 RDI: 0000000000000004 [ 137.108432][ T6292] RBP: 00007f9367931e19 R08: 0000000000000000 R09: 0000000000000000 [ 137.108446][ T6292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.108459][ T6292] R13: 00007f9367ad6038 R14: 00007f9367ad5fa0 R15: 00007ffd60bc6688 [ 137.108484][ T6292] [ 137.257349][ T44] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 137.284971][ T6297] overlayfs: missing 'workdir' [ 137.411211][ T44] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.411267][ T44] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 137.411349][ T44] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.607539][ T44] usb 3-1: config 0 descriptor?? [ 137.672549][ T44] pwc: Askey VC010 type 2 USB webcam detected. [ 138.116802][ T44] pwc: recv_control_msg error -32 req 02 val 2b00 [ 138.222201][ T1319] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.222259][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.250304][ T44] pwc: recv_control_msg error -32 req 02 val 2700 [ 138.485438][ T44] pwc: recv_control_msg error -71 req 04 val 1000 [ 138.485789][ T44] pwc: recv_control_msg error -71 req 04 val 1300 [ 138.486139][ T44] pwc: recv_control_msg error -71 req 04 val 1400 [ 138.486475][ T44] pwc: recv_control_msg error -71 req 02 val 2000 [ 138.486820][ T44] pwc: recv_control_msg error -71 req 02 val 2100 [ 138.487356][ T44] pwc: recv_control_msg error -71 req 04 val 1500 [ 138.487714][ T44] pwc: recv_control_msg error -71 req 02 val 2500 [ 138.488152][ T44] pwc: recv_control_msg error -71 req 02 val 2400 [ 138.488510][ T44] pwc: recv_control_msg error -71 req 02 val 2600 [ 138.488878][ T44] pwc: recv_control_msg error -71 req 02 val 2900 [ 138.489235][ T44] pwc: recv_control_msg error -71 req 02 val 2800 [ 138.489814][ T44] pwc: recv_control_msg error -71 req 04 val 1100 [ 138.490186][ T44] pwc: recv_control_msg error -71 req 04 val 1200 [ 138.492628][ T44] pwc: Registered as video103. [ 138.494528][ T44] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input12 [ 138.499100][ T44] usb 3-1: USB disconnect, device number 4