last executing test programs: 8.607483335s ago: executing program 2 (id=483): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0) 8.44054322s ago: executing program 2 (id=485): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8.003283554s ago: executing program 2 (id=489): listen(0xffffffffffffffff, 0x800) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20004053) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)={0xdc, 0x10, 0x50b, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa8, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d5f28732c5f289423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d6"}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="a64a6f8911da357ba323a96d75"]}]}, 0xdc}], 0x1}, 0x0) 6.461664424s ago: executing program 2 (id=490): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000000)="08205ef22440c3957a7cbddd0fbccb", 0xf}], 0x1}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x407c0, 0x0) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) syz_ublk_setup_queues(r9, r8, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)) getpid() io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) 6.231365401s ago: executing program 3 (id=492): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 6.107425915s ago: executing program 0 (id=494): move_pages(0x0, 0x2, &(0x7f0000000380)=[&(0x7f0000109000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil], 0x0, &(0x7f0000000400), 0x0) 6.046546497s ago: executing program 0 (id=495): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 5.863379112s ago: executing program 0 (id=496): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)="c6"}) 5.822234793s ago: executing program 3 (id=497): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x10, 0x0, 0x0, 0xa, 0x20, 0x0, 0x62}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000003, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 5.523627303s ago: executing program 3 (id=498): listen(0xffffffffffffffff, 0x800) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20004053) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000540)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000700)={0xd0, 0x10, 0x50b, 0x0, 0x0, "", [@typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff2d5f28732c5f289423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100100000000000000a0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x11, 0x0, 0x0, 0x1, [@generic="a64a6f8911da357ba323a96d75"]}]}, 0xd0}], 0x1}, 0x0) 4.461874017s ago: executing program 3 (id=499): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000c40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000) 4.39124017s ago: executing program 0 (id=500): mlockall(0x3) mlockall(0x4) mlockall(0x4) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0}, &(0x7f0000000240)=0xc) setxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f00000003c0)={{}, {}, [{0x2, 0x3, r0}, {0x2, 0xf}, {0x2, 0x3}, {0x2, 0x8, r0}, {0x2, 0x3}, {0x2, 0x0, r0}, {}, {0x2, 0x1, r0}], {0x4, 0x3}, [{0x8, 0x1}, {}, {0x8, 0x7, 0xee01}], {0x10, 0x2}, {0x20, 0x2}}, 0x7c, 0x2) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x1}}}}}, 0x0) 3.010011874s ago: executing program 2 (id=502): syz_mount_image$fuse(0x0, &(0x7f0000000480)='./file0\x00', 0x2a3096, 0x0, 0x3, 0x0, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10010, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8a0, &(0x7f0000000540)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1cc) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) 2.927541586s ago: executing program 1 (id=503): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000000000000000000800040001000000", 0x24) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), r0) 2.779250621s ago: executing program 1 (id=504): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000000)="08205ef22440c3957a7cbddd0fbccb", 0xf}], 0x1}}], 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(0x0, 0x2, 0x8081) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x407c0, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r5, r6, r7, 0x0) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2) syz_ublk_setup_queues(r10, r9, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)) getpid() io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) 2.572005038s ago: executing program 1 (id=505): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x29, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x1, 0x70bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1021, 0x3}, [@IFLA_GROUP={0x8}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 2.239504879s ago: executing program 1 (id=506): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0xf, 0xf, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0xba}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xbb}}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000500)={0x7, 0x6, 0x0, 0xffdffffc, 0xa, "0000100000a61c00"}) write$binfmt_aout(r4, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x12, "e315bc1cc261f7b7cdb242e1ff0aa6905446b3"}) r5 = syz_open_pts(r4, 0x0) r6 = dup3(r5, r4, 0x0) read$FUSE(r6, &(0x7f0000003f80)={0x2020}, 0x2020) read$watch_queue(r6, &(0x7f0000000340)=""/133, 0xfdef) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) unshare(0x22020600) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 2.164120501s ago: executing program 3 (id=507): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x6, 0x4c032, 0xffffffffffffffff, 0x0) madvise(&(0x7f00005e1000/0x2000)=nil, 0x2000, 0x18) 1.940849988s ago: executing program 2 (id=508): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc02c5625, &(0x7f0000000180)={0x8000, 0xc5f7, @name="ac2ad54970138065d4b1a10a14b7e65642722c3da99ba40f000026e78ffc1e0a"}) r2 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r2, r2, r2}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={'sha384\x00'}}) 1.817931882s ago: executing program 3 (id=509): add_key$keyring(0x0, &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000002c0)={0x38, 0x5, 0xa, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa14, 0xffffffff}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440), 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f00000007c0)={0x0, 0x0}) r3 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000002000)) socket$inet(0x2, 0x2000000080002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) syz_80211_inject_frame(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="2a00000008021100000108021100000008021100000000000000000000000000640001000006020202020202010782848b960c121872060303030303034d6e609fbb2ff63f11dcae47e85607e18f9735cb299d1e9f2ec1e075bc6397287a26a84f0c380a637cfd5c96e36d33e252e947e0f37f0a7374ee537bbe790702b97e22cc45f3e634823d4881e48ea20bde1a0d3b65547cb9fbfc2d152731e7382c04d47c096e43b426e025780673d613e7dc26d9cabfdb615d48806f"], 0x3d) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0), &(0x7f0000000800)=@data_frame={@msdu=@type10={{0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x8}, @random="5a6c9751f005", @device_a, @device_b, {0xb, 0x3}, "", @void, @value=@ver_80211n={0x0, 0x1fde, 0x3, 0x3, 0x0, 0x1, 0x1}}, @a_msdu}, 0x1c) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x2000e844) 1.323301557s ago: executing program 0 (id=510): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000000)="08205ef22440c3957a7cbddd0fbccb", 0xf}], 0x1}}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x407c0, 0x0) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2) syz_ublk_setup_queues(r9, r8, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)) getpid() io_uring_enter(r3, 0x1, 0x1, 0x1, 0x0, 0x0) 1.24971517s ago: executing program 1 (id=511): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r2, 0x13) pipe2$9p(0x0, 0x0) write$P9_RWALK(0xffffffffffffffff, 0x0, 0x0) tkill(r2, 0x12) waitid(0x1, r2, 0x0, 0x8, &(0x7f00000003c0)) 722.216327ms ago: executing program 0 (id=512): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) io_setup(0x38, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) 0s ago: executing program 1 (id=513): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000000)="08205ef22440c3957a7cbddd0fbccb", 0xf}], 0x1}}], 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder1\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x8081) writev(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x407c0, 0x0) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(r5, r6, r7, 0x0) io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2) syz_ublk_setup_queues(r10, r9, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)) getpid() io_uring_enter(r4, 0x1, 0x1, 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.103' (ED25519) to the list of known hosts. [ 73.371807][ T5763] cgroup: Unknown subsys name 'net' [ 73.488444][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.129943][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.689145][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.701875][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.713229][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.722882][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.730472][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.737952][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.746994][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.755826][ T5788] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.764351][ T5788] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.783030][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.792025][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.799563][ T5788] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.807553][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.819049][ T5788] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.824207][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.833567][ T5787] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.833797][ T5788] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.844904][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.848734][ T5788] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.857128][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.869548][ T5788] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.870242][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.901576][ T5788] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 76.910767][ T5788] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.346865][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 77.394499][ T5779] chnl_net:caif_netlink_parms(): no params data found [ 77.469710][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 77.496568][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 77.611045][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.618993][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.626693][ T5782] bridge_slave_0: entered allmulticast mode [ 77.634344][ T5782] bridge_slave_0: entered promiscuous mode [ 77.654146][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.661473][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.668876][ T5779] bridge_slave_0: entered allmulticast mode [ 77.676029][ T5779] bridge_slave_0: entered promiscuous mode [ 77.700817][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.708225][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.715880][ T5782] bridge_slave_1: entered allmulticast mode [ 77.723398][ T5782] bridge_slave_1: entered promiscuous mode [ 77.730427][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.738808][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.746263][ T5779] bridge_slave_1: entered allmulticast mode [ 77.753874][ T5779] bridge_slave_1: entered promiscuous mode [ 77.849506][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.859355][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.866888][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.874208][ T5778] bridge_slave_0: entered allmulticast mode [ 77.881046][ T5778] bridge_slave_0: entered promiscuous mode [ 77.888950][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.896218][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.903871][ T5775] bridge_slave_0: entered allmulticast mode [ 77.910678][ T5775] bridge_slave_0: entered promiscuous mode [ 77.918723][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.925915][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.933423][ T5775] bridge_slave_1: entered allmulticast mode [ 77.940367][ T5775] bridge_slave_1: entered promiscuous mode [ 77.949486][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.961184][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.982170][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.989316][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.999870][ T5778] bridge_slave_1: entered allmulticast mode [ 78.007112][ T5778] bridge_slave_1: entered promiscuous mode [ 78.044864][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.089538][ T5782] team0: Port device team_slave_0 added [ 78.100925][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.122331][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.136321][ T5782] team0: Port device team_slave_1 added [ 78.144275][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.158783][ T5779] team0: Port device team_slave_0 added [ 78.167340][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.199116][ T5779] team0: Port device team_slave_1 added [ 78.249761][ T5775] team0: Port device team_slave_0 added [ 78.269645][ T5778] team0: Port device team_slave_0 added [ 78.277100][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.284909][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.311110][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.325547][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.332672][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.358683][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.374338][ T5775] team0: Port device team_slave_1 added [ 78.396846][ T5778] team0: Port device team_slave_1 added [ 78.433783][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.440801][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.466974][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.480138][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.487265][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.513364][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.572303][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.579298][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.605727][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.622980][ T5782] hsr_slave_0: entered promiscuous mode [ 78.629419][ T5782] hsr_slave_1: entered promiscuous mode [ 78.654605][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.664219][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.690494][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.702822][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.709798][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.735921][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.764838][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.772140][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.798279][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.852199][ T5776] Bluetooth: hci1: command tx timeout [ 78.859106][ T5779] hsr_slave_0: entered promiscuous mode [ 78.866242][ T5779] hsr_slave_1: entered promiscuous mode [ 78.872845][ T5779] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.880675][ T5779] Cannot create hsr debugfs directory [ 78.931355][ T5776] Bluetooth: hci0: command tx timeout [ 78.937391][ T5776] Bluetooth: hci3: command tx timeout [ 78.958769][ T5775] hsr_slave_0: entered promiscuous mode [ 78.965223][ T5775] hsr_slave_1: entered promiscuous mode [ 78.972636][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.980266][ T5775] Cannot create hsr debugfs directory [ 79.011411][ T5776] Bluetooth: hci2: command tx timeout [ 79.054534][ T5778] hsr_slave_0: entered promiscuous mode [ 79.060878][ T5778] hsr_slave_1: entered promiscuous mode [ 79.067192][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.074856][ T5778] Cannot create hsr debugfs directory [ 79.344571][ T5782] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.385306][ T5782] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.415750][ T5782] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.437958][ T5782] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.533852][ T5779] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.547947][ T5779] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.577847][ T5779] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.606377][ T5779] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.659562][ T5775] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.674228][ T5775] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.690835][ T5775] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.708653][ T5775] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.788743][ T5778] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.806935][ T5778] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.818720][ T5778] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.828922][ T5778] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.889279][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.941754][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.978355][ T3527] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.985859][ T3527] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.999552][ T3527] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.006727][ T3527] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.117982][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.132651][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.145498][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.175816][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.221157][ T3497] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.228417][ T3497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.245783][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.270339][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.305123][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.312376][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.329640][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.336789][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.346879][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.354032][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.404937][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.412160][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.450930][ T3497] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.458141][ T3497] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.658276][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.777969][ T5782] veth0_vlan: entered promiscuous mode [ 80.807275][ T5782] veth1_vlan: entered promiscuous mode [ 80.871048][ T5782] veth0_macvtap: entered promiscuous mode [ 80.896752][ T5782] veth1_macvtap: entered promiscuous mode [ 80.941462][ T5776] Bluetooth: hci1: command tx timeout [ 80.976074][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.011965][ T5776] Bluetooth: hci3: command tx timeout [ 81.012797][ T5788] Bluetooth: hci0: command tx timeout [ 81.049026][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.067001][ T5782] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.086915][ T5782] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.097884][ T5782] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.101888][ T5788] Bluetooth: hci2: command tx timeout [ 81.108081][ T5782] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.127464][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.264951][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.312062][ T5778] veth0_vlan: entered promiscuous mode [ 81.329422][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.333330][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.355699][ T5778] veth1_vlan: entered promiscuous mode [ 81.365496][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.451886][ T3527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.459871][ T3527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.495634][ T5778] veth0_macvtap: entered promiscuous mode [ 81.539756][ T5775] veth0_vlan: entered promiscuous mode [ 81.570746][ T5778] veth1_macvtap: entered promiscuous mode [ 81.589264][ T5775] veth1_vlan: entered promiscuous mode [ 81.601296][ T5779] veth0_vlan: entered promiscuous mode [ 81.665095][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.691758][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.706904][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.716949][ T5779] veth1_vlan: entered promiscuous mode [ 81.743218][ T5778] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.761492][ T5778] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.775391][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.798674][ T5778] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.814749][ T5778] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.826763][ T5778] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.835818][ T5778] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.908744][ T5775] veth0_macvtap: entered promiscuous mode [ 81.959294][ T5775] veth1_macvtap: entered promiscuous mode [ 81.980537][ T5779] veth0_macvtap: entered promiscuous mode [ 82.005266][ T5779] veth1_macvtap: entered promiscuous mode [ 82.057329][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.069615][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.080442][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.093363][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.113351][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.163606][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.174931][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.185578][ T5779] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.196304][ T5779] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.215400][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.226837][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.244425][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.256712][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.267886][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.278103][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.289446][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.304066][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.344798][ T5779] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.358141][ T5779] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.368593][ T5779] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.380186][ T5779] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.409614][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.422259][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.434373][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.446706][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.461454][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.472368][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.489124][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.504361][ T138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.514185][ T138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.570250][ T5775] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.590583][ T5775] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.600902][ T5775] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.610156][ T5775] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.689345][ T3497] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.746279][ T3497] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.864168][ T3497] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.894875][ T3497] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.012975][ T5788] Bluetooth: hci1: command tx timeout [ 83.031788][ T3515] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.041115][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.064208][ T3515] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.064739][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.215785][ T5776] Bluetooth: hci0: command tx timeout [ 83.216330][ T5780] Bluetooth: hci2: command tx timeout [ 83.227890][ T5788] Bluetooth: hci3: command tx timeout [ 84.000298][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.010310][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.412385][ T5846] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.477623][ T5849] syz.2.6[5849]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 84.729656][ T5846] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4191782039 (268274050496 ns) > initial count (168241000128 ns). Using initial count to start timer. [ 84.798023][ T5849] loop2: detected capacity change from 0 to 32768 [ 84.846309][ T5849] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 84.846309][ T5849] [ 84.858222][ T5849] ERROR: (device loop2): remounting filesystem as read-only [ 84.970681][ T5857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7'. [ 85.017084][ T5857] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7'. [ 85.057541][ T5857] Zero length message leads to an empty skb [ 85.085473][ T113] blkno = 1580, nblocks = 1 [ 85.090414][ T113] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map [ 85.090414][ T113] [ 85.108468][ T5788] Bluetooth: hci1: command tx timeout [ 85.252674][ T5788] Bluetooth: hci3: command tx timeout [ 85.258163][ T5788] Bluetooth: hci0: command tx timeout [ 85.261386][ T5780] Bluetooth: hci2: command tx timeout [ 85.486702][ T5862] x_tables: duplicate underflow at hook 3 [ 85.614726][ T5870] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10'. [ 85.879112][ T5875] binder: 5871:5875 ioctl c0285840 0 returned -22 [ 88.372716][ T5815] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 89.245062][ T5815] usb 3-1: config 0 has no interfaces? [ 89.254804][ T5815] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 89.264165][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.280113][ T5815] usb 3-1: Product: syz [ 89.284500][ T5815] usb 3-1: Manufacturer: syz [ 89.289152][ T5815] usb 3-1: SerialNumber: syz [ 89.298183][ T5815] usb 3-1: config 0 descriptor?? [ 89.445811][ T5908] loop0: detected capacity change from 0 to 256 [ 89.477214][ T5908] FAT-fs (loop0): Unrecognized mount option "dos1xfloppyf8=0" or missing value [ 89.674898][ T5908] overlayfs: statfs failed on './file0' [ 89.725206][ T788] usb 3-1: USB disconnect, device number 2 [ 91.255076][ T27] audit: type=1800 audit(1781273926.318:2): pid=5917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.21" name="file0" dev="overlay" ino=46 res=0 errno=0 [ 91.851475][ T5813] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 92.056167][ T5813] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 92.080930][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.112330][ T5813] usb 4-1: Product: syz [ 92.116569][ T5813] usb 4-1: Manufacturer: syz [ 92.151387][ T5813] usb 4-1: SerialNumber: syz [ 92.228679][ T5813] usb 4-1: config 0 descriptor?? [ 92.259975][ T5813] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 92.447552][ T42] cfg80211: failed to load regulatory.db [ 92.783439][ T5813] gspca_stk1135: reg_w 0x2 err -110 [ 92.840824][ T5813] gspca_stk1135: serial bus timeout: status=0x00 [ 92.893646][ T5813] gspca_stk1135: Sensor write failed [ 92.899632][ T5813] gspca_stk1135: serial bus timeout: status=0x00 [ 92.920324][ T5813] gspca_stk1135: Sensor write failed [ 92.974421][ T5813] gspca_stk1135: serial bus timeout: status=0x00 [ 92.981106][ T5813] gspca_stk1135: Sensor read failed [ 93.001414][ T5813] gspca_stk1135: serial bus timeout: status=0x00 [ 93.021387][ T5813] gspca_stk1135: Sensor read failed [ 93.026654][ T5813] gspca_stk1135: Detected sensor type unknown (0x0) [ 93.081349][ T5813] gspca_stk1135: serial bus timeout: status=0x00 [ 93.123241][ T5813] gspca_stk1135: Sensor read failed [ 93.128553][ T5813] gspca_stk1135: serial bus timeout: status=0x00 [ 93.151475][ T5813] gspca_stk1135: Sensor read failed [ 93.163838][ T5813] gspca_stk1135: serial bus timeout: status=0x00 [ 93.190630][ T5813] gspca_stk1135: Sensor write failed [ 93.200774][ T5813] gspca_stk1135: serial bus timeout: status=0x00 [ 93.227000][ T5813] gspca_stk1135: Sensor write failed [ 93.236727][ T5813] stk1135: probe of 4-1:0.0 failed with error -110 [ 93.317668][ T5942] netlink: 60 bytes leftover after parsing attributes in process `syz.2.31'. [ 94.635623][ T5955] loop2: detected capacity change from 0 to 32768 [ 94.751598][ T5956] process 'syz.3.24' launched '/dev/fd/5' with NULL argv: empty string added [ 94.956981][ T5952] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.012420][ T5952] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.173713][ T8] usb 4-1: USB disconnect, device number 2 [ 96.544226][ T5977] warning: `syz.1.41' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.568523][ T5979] Bluetooth: MGMT ver 1.22 [ 97.118066][ T5985] syz_tun: entered allmulticast mode [ 97.857044][ T5959] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 98.217486][ T5998] syz.2.49 uses obsolete (PF_INET,SOCK_PACKET) [ 98.501527][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 98.683371][ T8] usb 1-1: config 0 has no interfaces? [ 98.723655][ T8] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 98.767912][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.783806][ T8] usb 1-1: Product: syz [ 98.788379][ T8] usb 1-1: Manufacturer: syz [ 98.795478][ T8] usb 1-1: SerialNumber: syz [ 98.823313][ T8] usb 1-1: config 0 descriptor?? [ 99.050464][ T8] usb 1-1: USB disconnect, device number 2 [ 99.837575][ T6007] Bluetooth: MGMT ver 1.22 [ 100.986123][ T6015] mmap: syz.3.54 (6015) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 101.035753][ T6015] ipvlan2: entered promiscuous mode [ 101.044998][ T6015] team0: Device ipvlan2 failed to register rx_handler [ 101.575030][ T6029] loop3: detected capacity change from 0 to 4096 [ 101.891532][ T5780] Bluetooth: hci0: command tx timeout [ 102.061331][ T788] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 102.150905][ T27] audit: type=1800 audit(1781273937.208:3): pid=6029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.59" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 102.277891][ T788] usb 2-1: config 0 has no interfaces? [ 102.294131][ T27] audit: type=1800 audit(1781273937.328:4): pid=6037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.59" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 102.321233][ T788] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 102.344551][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.717955][ T788] usb 2-1: Product: syz [ 102.723837][ T788] usb 2-1: Manufacturer: syz [ 102.728571][ T788] usb 2-1: SerialNumber: syz [ 102.886769][ T788] usb 2-1: config 0 descriptor?? [ 103.146194][ T788] usb 2-1: USB disconnect, device number 2 [ 104.281348][ T5815] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.343202][ T6057] loop1: detected capacity change from 0 to 32768 [ 104.461315][ T5815] usb 4-1: Using ep0 maxpacket: 8 [ 104.509303][ T5815] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 104.559313][ T5815] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.595754][ T5815] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.631295][ T5815] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.651310][ T5815] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.681422][ T5815] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 104.716700][ T5780] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 104.727828][ T5780] CPU: 1 PID: 5780 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 104.735441][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 104.745542][ T5780] Workqueue: hci0 hci_rx_work [ 104.750239][ T5780] Call Trace: [ 104.753528][ T5780] [ 104.756467][ T5780] dump_stack_lvl+0x18c/0x250 [ 104.761154][ T5780] ? show_regs_print_info+0x20/0x20 [ 104.766379][ T5780] ? load_image+0x420/0x420 [ 104.770892][ T5780] sysfs_create_dir_ns+0x26e/0x2a0 [ 104.776010][ T5780] ? sysfs_warn_dup+0xa0/0xa0 [ 104.780717][ T5780] ? do_raw_spin_unlock+0x121/0x230 [ 104.786128][ T5780] kobject_add_internal+0x61c/0xcc0 [ 104.791352][ T5780] kobject_add+0x164/0x240 [ 104.795795][ T5780] ? __rwlock_init+0x150/0x150 [ 104.800580][ T5780] ? kobject_init+0x1e0/0x1e0 [ 104.805273][ T5780] ? _raw_spin_unlock+0x28/0x40 [ 104.810143][ T5780] ? get_device_parent+0x366/0x390 [ 104.815262][ T5780] device_add+0x408/0xc50 [ 104.819613][ T5780] hci_conn_add_sysfs+0xd5/0x1e0 [ 104.824571][ T5780] le_conn_complete_evt+0xf5d/0x1540 [ 104.829859][ T5780] ? hci_event_packet+0x4cb/0x1270 [ 104.835022][ T5780] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 104.841309][ T5780] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 104.846995][ T5780] ? skb_pull_data+0xfb/0x200 [ 104.851879][ T5780] hci_le_conn_complete_evt+0x187/0x440 [ 104.857447][ T5780] ? hci_remote_host_features_evt+0x150/0x150 [ 104.863637][ T5780] hci_event_packet+0x7ba/0x1270 [ 104.868625][ T5780] ? bis_list+0x290/0x290 [ 104.873009][ T5780] ? lockdep_hardirqs_on+0x98/0x150 [ 104.878240][ T5780] ? hci_send_to_monitor+0xd7/0x4f0 [ 104.883461][ T5780] hci_rx_work+0x43a/0xd60 [ 104.887904][ T5780] ? process_scheduled_works+0x96f/0x15d0 [ 104.893648][ T5780] process_scheduled_works+0xa5d/0x15d0 [ 104.899243][ T5780] ? worker_attach_to_pool+0x380/0x380 [ 104.904731][ T5780] ? assign_work+0x3d2/0x5d0 [ 104.909346][ T5780] worker_thread+0xa55/0xfc0 [ 104.914413][ T5780] kthread+0x2fa/0x390 [ 104.918490][ T5780] ? pr_cont_work+0x560/0x560 [ 104.923182][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 104.927783][ T5780] ret_from_fork+0x48/0x80 [ 104.932213][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 104.936816][ T5780] ret_from_fork_asm+0x11/0x20 [ 104.941616][ T5780] [ 104.949950][ T5780] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 104.964406][ T5780] Bluetooth: hci0: failed to register connection device [ 104.973107][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.189207][ T5815] usb 4-1: GET_CAPABILITIES returned aa [ 105.199898][ T5815] usbtmc 4-1:16.0: can't read capabilities [ 105.968603][ T788] usb 4-1: USB disconnect, device number 3 [ 105.977467][ T5815] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 106.131039][ T6086] kvm: pic: non byte write [ 106.136429][ T6086] kvm: pic: non byte write [ 106.141134][ T6086] kvm: pic: non byte write [ 106.183508][ T5815] usb 2-1: config 0 has no interfaces? [ 106.199967][ T5815] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 106.241733][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.260303][ T5815] usb 2-1: Product: syz [ 106.266338][ T5815] usb 2-1: Manufacturer: syz [ 106.271657][ T5815] usb 2-1: SerialNumber: syz [ 106.296704][ T5815] usb 2-1: config 0 descriptor?? [ 106.549136][ T6103] : renamed from bond_slave_0 (while UP) [ 106.596346][ T2177] usb 2-1: USB disconnect, device number 3 [ 108.066421][ T6117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.88'. [ 108.078642][ T6117] netlink: 16 bytes leftover after parsing attributes in process `syz.1.88'. [ 108.536740][ T6123] loop1: detected capacity change from 0 to 40427 [ 108.563256][ T6123] F2FS-fs (loop1): LFS is not compatible with checkpoint=disable [ 108.591696][ T6109] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 108.611402][ T6109] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 108.670661][ T6109] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 108.694054][ T6109] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 108.742535][ T6109] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 108.772152][ T6109] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 108.810751][ T6109] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 108.843228][ T6109] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 108.862766][ T6109] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.877919][ T6109] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 108.898618][ T6109] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 108.920564][ T6109] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 108.949140][ T6109] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.942098][ T5780] Bluetooth: hci0: command 0x0c1a tx timeout [ 110.948231][ T5780] Bluetooth: hci1: command 0x0c1a tx timeout [ 110.954420][ T5776] Bluetooth: hci2: command 0x0c1a tx timeout [ 110.960486][ T5788] Bluetooth: hci3: command 0x0c1a tx timeout [ 111.881368][ T5813] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 112.113586][ T5813] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x5 has invalid wMaxPacketSize 0 [ 112.141371][ T5813] usb 4-1: config 0 interface 0 has no altsetting 0 [ 112.158998][ T5813] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 112.169220][ T5813] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 112.197942][ T5813] usb 4-1: Product: syz [ 112.228211][ T5813] usb 4-1: Manufacturer: syz [ 112.235934][ T5813] usb 4-1: SerialNumber: syz [ 112.276563][ T5813] usb 4-1: config 0 descriptor?? [ 112.343341][ T5813] usb 4-1: selecting invalid altsetting 0 [ 112.817242][ T5815] usb 4-1: USB disconnect, device number 4 [ 113.516777][ T6158] fuse: Bad value for 'fd' [ 114.334312][ T5780] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.340375][ T5780] Bluetooth: hci3: command 0x0c1a tx timeout [ 114.346536][ T5776] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.346564][ T5087] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.886248][ T23] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 115.083605][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 115.099364][ T23] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x12, skipping [ 115.140663][ T23] usb 1-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 115.181817][ T6169] ipvlan2: entered promiscuous mode [ 115.187328][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.195322][ T6169] team0: Device ipvlan2 failed to register rx_handler [ 115.243461][ T23] usb 1-1: Product: syz [ 115.255178][ T23] usb 1-1: Manufacturer: syz [ 115.268461][ T23] usb 1-1: SerialNumber: syz [ 116.911488][ T5087] Bluetooth: hci3: command 0x0c1a tx timeout [ 116.917708][ T5780] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.923821][ T5776] Bluetooth: hci2: command 0x0c1a tx timeout [ 116.929946][ T5788] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.951961][ T23] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 116.958968][ T23] usb 1-1: MIDIStreaming interface descriptor not found [ 117.069093][ T23] usb 1-1: USB disconnect, device number 3 [ 118.128435][ T6174] loop3: detected capacity change from 0 to 32768 [ 118.626802][ T27] audit: type=1326 audit(1781273953.678:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352519ce59 code=0x7ffc0000 [ 118.666952][ T5815] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 118.711170][ T27] audit: type=1326 audit(1781273953.718:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352519ce59 code=0x7ffc0000 [ 118.775821][ T27] audit: type=1326 audit(1781273953.718:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352519ce59 code=0x7ffc0000 [ 118.825942][ T27] audit: type=1326 audit(1781273953.718:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352519ce59 code=0x7ffc0000 [ 118.876050][ T27] audit: type=1326 audit(1781273953.718:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f352519ce59 code=0x7ffc0000 [ 118.904772][ T5815] usb 2-1: Using ep0 maxpacket: 8 [ 118.910502][ T27] audit: type=1326 audit(1781273953.728:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f352519ce59 code=0x7ffc0000 [ 118.960929][ T5815] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 118.979761][ T5815] usb 2-1: config 179 has no interface number 0 [ 118.990562][ T5815] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 119.012893][ T5087] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.047853][ T5815] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 119.050209][ T27] audit: type=1326 audit(1781273953.768:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f352515d68e code=0x7ffc0000 [ 119.089382][ T5815] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 119.102738][ T5815] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 119.114651][ T5815] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 119.142395][ T5815] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 119.191128][ T5815] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.251468][ T27] audit: type=1326 audit(1781273953.768:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f352515d68e code=0x7ffc0000 [ 119.289433][ T6192] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 119.348925][ T27] audit: type=1326 audit(1781273953.768:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f352515d68e code=0x7ffc0000 [ 119.420601][ T27] audit: type=1326 audit(1781273953.768:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6193 comm="syz.2.109" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f352515d68e code=0x7ffc0000 [ 119.678365][ T6206] ipvlan2: entered promiscuous mode [ 120.374233][ T6206] team0: Device ipvlan2 failed to register rx_handler [ 120.761252][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 120.771283][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 120.811278][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 120.871287][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 120.901279][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 120.921242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 121.771270][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 121.831254][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 121.851282][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 122.031255][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 122.766160][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 122.774564][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 122.794322][ T5815] usb 2-1: USB disconnect, device number 4 [ 123.991316][ T5815] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 124.311493][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 124.460355][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 124.883209][ T5815] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 124.916270][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.399693][ T5815] usb 3-1: config 0 descriptor?? [ 126.687535][ T5815] iowarrior 3-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 127.162163][ T5815] usb 3-1: USB disconnect, device number 3 [ 127.931307][ T5815] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 128.081561][ T8] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 128.534175][ T5815] usb 1-1: Using ep0 maxpacket: 8 [ 128.614907][ T5815] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 128.645268][ T5815] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.700847][ T5815] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.737280][ T5815] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.785784][ T5815] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.836336][ T5815] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.901254][ T5815] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.812566][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 130.820315][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 130.882074][ T8] usb 2-1: device descriptor read/all, error -71 [ 130.931372][ T5815] usb 1-1: usb_control_msg returned -71 [ 130.937046][ T5815] usbtmc 1-1:16.0: can't read capabilities [ 130.993796][ T5815] usb 1-1: USB disconnect, device number 4 [ 131.528419][ T6291] loop1: detected capacity change from 0 to 512 [ 131.668950][ T6291] EXT4-fs error (device loop1): ext4_orphan_get:1404: inode #15: comm syz.1.141: iget: bad i_size value: 38620345925642 [ 131.793226][ T6291] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.141: couldn't read orphan inode 15 (err -117) [ 131.883477][ T6291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.277036][ T6303] EXT4-fs error (device loop1): ext4_validate_block_bitmap:430: comm syz.1.141: bg 0: block 5: invalid block bitmap [ 132.298305][ T6303] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 380 with error 28 [ 132.342377][ T6303] EXT4-fs (loop1): This should not happen!! Data will be lost [ 132.342377][ T6303] [ 133.806426][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.811277][ T42] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 133.813741][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.827237][ T6303] EXT4-fs (loop1): Total free blocks count 0 [ 133.879868][ T6291] EXT4-fs (loop1): shut down requested (1) [ 133.886462][ T6303] EXT4-fs (loop1): Free/Dirty block details [ 133.971399][ T6303] EXT4-fs (loop1): free_blocks=0 [ 133.991453][ T6303] EXT4-fs (loop1): dirty_blocks=384 [ 133.996743][ T6303] EXT4-fs (loop1): Block reservation details [ 134.023107][ T6303] EXT4-fs (loop1): i_reserved_data_blocks=384 [ 134.061678][ T42] usb 3-1: Using ep0 maxpacket: 16 [ 134.076546][ T42] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 134.121478][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.129548][ T42] usb 3-1: Product: syz [ 134.137979][ T42] usb 3-1: Manufacturer: syz [ 134.144322][ T42] usb 3-1: SerialNumber: syz [ 134.151662][ T42] usb 3-1: config 0 descriptor?? [ 134.591309][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 134.607339][ T42] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 134.635724][ T42] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 134.654702][ T42] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 134.666969][ T42] usb 3-1: media controller created [ 134.705015][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.873316][ T42] zl10353_read_register: readreg error (reg=127, ret==0) [ 134.896858][ T42] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 134.915800][ T42] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 134.963507][ T23] usb 2-1: config 0 has no interfaces? [ 134.974471][ T23] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 134.980219][ T42] usb 3-1: USB disconnect, device number 4 [ 134.984526][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.653516][ T42] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 135.782264][ T23] usb 2-1: Product: syz [ 135.786518][ T23] usb 2-1: Manufacturer: syz [ 135.791270][ T23] usb 2-1: SerialNumber: syz [ 135.799054][ T23] usb 2-1: config 0 descriptor?? [ 136.237174][ T23] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 136.393200][ T788] usb 2-1: USB disconnect, device number 7 [ 136.668181][ T23] usb 1-1: Using ep0 maxpacket: 8 [ 136.968845][ T23] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 137.021366][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 137.052269][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 137.089538][ T23] usb 1-1: New USB device found, idVendor=046d, idProduct=c081, bcdDevice= 0.00 [ 137.111776][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.170534][ T23] usb 1-1: config 0 descriptor?? [ 138.329923][ T23] logitech-hidpp-device 0003:046D:C081.0001: unknown main item tag 0x0 [ 139.773248][ T23] logitech-hidpp-device 0003:046D:C081.0001: unknown main item tag 0x0 [ 139.791330][ T23] logitech-hidpp-device 0003:046D:C081.0001: unknown main item tag 0x0 [ 139.821361][ T23] logitech-hidpp-device 0003:046D:C081.0001: unknown main item tag 0x0 [ 139.830055][ T23] logitech-hidpp-device 0003:046D:C081.0001: unknown main item tag 0x0 [ 139.864402][ T23] logitech-hidpp-device 0003:046D:C081.0001: unbalanced collection at end of report description [ 139.900229][ T23] logitech-hidpp-device 0003:046D:C081.0001: hidpp_probe:parse failed [ 139.925731][ T23] logitech-hidpp-device: probe of 0003:046D:C081.0001 failed with error -22 [ 139.986152][ T23] usb 1-1: USB disconnect, device number 5 [ 144.701736][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 144.903617][ T23] usb 2-1: config 0 has no interfaces? [ 144.930876][ T23] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 144.957390][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.986273][ T23] usb 2-1: Product: syz [ 144.996217][ T23] usb 2-1: Manufacturer: syz [ 145.007860][ T23] usb 2-1: SerialNumber: syz [ 145.023773][ T23] usb 2-1: config 0 descriptor?? [ 145.244723][ T23] usb 2-1: USB disconnect, device number 8 [ 152.759738][ T6484] block device autoloading is deprecated and will be removed. [ 153.701323][ T788] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 153.974824][ T788] usb 3-1: config 0 has no interfaces? [ 153.991450][ T788] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 154.029857][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.053455][ T788] usb 3-1: Product: syz [ 154.065927][ T788] usb 3-1: Manufacturer: syz [ 154.067348][ T6508] syz_tun: entered allmulticast mode [ 154.076137][ T788] usb 3-1: SerialNumber: syz [ 154.087626][ T788] usb 3-1: config 0 descriptor?? [ 154.314629][ T42] usb 3-1: USB disconnect, device number 5 [ 156.141383][ T788] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 156.521423][ T788] usb 1-1: Using ep0 maxpacket: 8 [ 156.532318][ T788] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 156.545641][ T788] usb 1-1: config 179 has no interface number 0 [ 156.863081][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 157.288048][ T9] usb 3-1: config 0 has no interfaces? [ 157.309352][ T9] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 157.312181][ T788] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 157.350437][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.355652][ T788] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 157.378907][ T9] usb 3-1: Product: syz [ 157.388421][ T788] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 157.389318][ T9] usb 3-1: Manufacturer: syz [ 157.405571][ T788] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 157.411726][ T9] usb 3-1: SerialNumber: syz [ 157.418347][ T788] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 157.438370][ T9] usb 3-1: config 0 descriptor?? [ 157.457528][ T788] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 157.474003][ T788] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.486714][ T6527] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 157.670642][ T8] usb 3-1: USB disconnect, device number 6 [ 157.989589][ T6527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 158.002159][ T6527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 158.031724][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 158.040077][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 158.064004][ T788] usb 1-1: USB disconnect, device number 6 [ 158.595345][ T6568] syz_tun: entered allmulticast mode [ 162.387632][ T2177] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 162.743377][ T2177] usb 2-1: config 0 has no interfaces? [ 162.755955][ T2177] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 162.766371][ T2177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.776641][ T2177] usb 2-1: Product: syz [ 162.780898][ T2177] usb 2-1: Manufacturer: syz [ 162.785798][ T2177] usb 2-1: SerialNumber: syz [ 162.798171][ T2177] usb 2-1: config 0 descriptor?? [ 163.018155][ T2177] usb 2-1: USB disconnect, device number 9 [ 166.901399][ T788] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 167.145603][ T788] usb 3-1: config 0 has no interfaces? [ 167.153335][ T788] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 167.173764][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.201536][ T788] usb 3-1: Product: syz [ 167.205844][ T788] usb 3-1: Manufacturer: syz [ 167.210528][ T788] usb 3-1: SerialNumber: syz [ 167.244736][ T788] usb 3-1: config 0 descriptor?? [ 167.493501][ T788] usb 3-1: USB disconnect, device number 7 [ 168.469424][ T6653] ======================================================= [ 168.469424][ T6653] WARNING: The mand mount option has been deprecated and [ 168.469424][ T6653] and is ignored by this kernel. Remove the mand [ 168.469424][ T6653] option from the mount to silence this warning. [ 168.469424][ T6653] ======================================================= [ 169.696692][ T42] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 169.860903][ T6662] loop1: detected capacity change from 0 to 256 [ 169.910085][ T6663] netlink: 'syz.0.264': attribute type 1 has an invalid length. [ 169.940782][ T42] usb 3-1: Using ep0 maxpacket: 32 [ 169.949535][ T42] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 169.971304][ T42] usb 3-1: config 0 has no interface number 0 [ 169.983462][ T42] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 169.992629][ T42] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.000661][ T42] usb 3-1: Product: syz [ 170.005471][ T42] usb 3-1: Manufacturer: syz [ 170.010116][ T42] usb 3-1: SerialNumber: syz [ 170.022689][ T42] usb 3-1: config 0 descriptor?? [ 170.039208][ T42] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 170.048755][ T42] usb 3-1: selecting invalid altsetting 1 [ 170.054621][ T42] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 170.070271][ T42] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 170.080902][ T42] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 170.090031][ T42] usb 3-1: media controller created [ 170.093178][ T6663] bond1: entered promiscuous mode [ 170.113491][ T42] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 170.114227][ T6663] bond1: entered allmulticast mode [ 170.149511][ T6663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.183975][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz.0.264'. [ 170.437820][ T6665] bond1 (unregistering): Released all slaves [ 170.511639][ T5815] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 170.735868][ T5815] usb 2-1: config 0 has no interfaces? [ 170.760687][ T5815] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 170.791113][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.811325][ T5815] usb 2-1: Product: syz [ 170.817935][ T5815] usb 2-1: Manufacturer: syz [ 170.830502][ T5815] usb 2-1: SerialNumber: syz [ 170.839433][ T5815] usb 2-1: config 0 descriptor?? [ 172.210463][ T5815] usb 2-1: USB disconnect, device number 10 [ 172.273297][ T42] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 172.419938][ T42] usb 3-1: USB disconnect, device number 8 [ 173.173131][ T5815] kernel write not supported for file bpf-prog (pid: 5815 comm: kworker/1:4) [ 173.293282][ T6689] kvm: kvm [6688]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x49 [ 174.941359][ T2177] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 175.134921][ T2177] usb 2-1: Using ep0 maxpacket: 32 [ 175.158104][ T2177] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 175.176152][ T2177] usb 2-1: config 0 has no interface number 0 [ 175.193962][ T2177] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 175.203575][ T2177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.221496][ T2177] usb 2-1: Product: syz [ 175.225748][ T2177] usb 2-1: Manufacturer: syz [ 175.230372][ T2177] usb 2-1: SerialNumber: syz [ 175.263313][ T2177] usb 2-1: config 0 descriptor?? [ 175.282464][ T2177] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 175.295654][ T2177] usb 2-1: selecting invalid altsetting 1 [ 175.305756][ T2177] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 175.332620][ T2177] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 175.362784][ T2177] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 175.371590][ T2177] usb 2-1: media controller created [ 175.433942][ T2177] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 175.619284][ T6719] netlink: 444 bytes leftover after parsing attributes in process `syz.3.283'. [ 175.849823][ T5815] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 176.119484][ T5815] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 176.128783][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.145665][ T5815] usb 3-1: Product: syz [ 176.149894][ T5815] usb 3-1: Manufacturer: syz [ 176.168180][ T5815] usb 3-1: SerialNumber: syz [ 176.524660][ T5815] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 176.620701][ T6732] ipvlan2: entered promiscuous mode [ 176.846012][ T5815] usb 3-1: USB disconnect, device number 9 [ 177.152490][ T6732] team0: Device ipvlan2 failed to register rx_handler [ 177.176890][ T5815] usblp0: removed [ 177.419017][ T6741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.293'. [ 177.441832][ T6741] netlink: 16 bytes leftover after parsing attributes in process `syz.2.293'. [ 179.430223][ T6748] fuse: Bad value for 'fd' [ 179.481079][ T2177] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 179.631121][ T2177] usb 2-1: USB disconnect, device number 11 [ 182.005958][ T6778] fuse: Bad value for 'fd' [ 182.009280][ T6772] ipvlan2: entered promiscuous mode [ 182.066383][ T6772] team0: Device ipvlan2 failed to register rx_handler [ 182.276631][ T6784] netlink: 444 bytes leftover after parsing attributes in process `syz.0.296'. [ 182.481378][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 183.461566][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 183.477348][ T8] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 183.496026][ T8] usb 3-1: config 0 has no interface number 0 [ 183.505997][ T8] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 183.516882][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 183.530330][ T8] usb 3-1: Product: syz [ 183.535191][ T8] usb 3-1: Manufacturer: syz [ 183.540004][ T8] usb 3-1: SerialNumber: syz [ 183.554814][ T8] usb 3-1: config 0 descriptor?? [ 183.576549][ T8] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 183.590760][ T8] usb 3-1: selecting invalid altsetting 1 [ 183.612398][ T8] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 183.640745][ T8] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 183.660586][ T8] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 183.676252][ T8] usb 3-1: media controller created [ 183.710942][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.937983][ T6816] fuse: Bad value for 'fd' [ 185.712827][ T6819] ipvlan2: entered promiscuous mode [ 185.720633][ T6819] team0: Device ipvlan2 failed to register rx_handler [ 185.851713][ T6824] netlink: 444 bytes leftover after parsing attributes in process `syz.0.317'. [ 185.974491][ T8] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 186.656512][ T8] usb 3-1: USB disconnect, device number 10 [ 188.205307][ T6856] ipvlan2: entered promiscuous mode [ 188.215630][ T6856] team0: Device ipvlan2 failed to register rx_handler [ 188.223091][ T6858] netlink: 444 bytes leftover after parsing attributes in process `syz.3.329'. [ 188.551409][ T5815] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 188.861276][ T5815] usb 1-1: Using ep0 maxpacket: 32 [ 188.869082][ T5815] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 188.880042][ T5815] usb 1-1: config 0 has no interface number 0 [ 188.911398][ T5815] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 188.920796][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.947683][ T5815] usb 1-1: Product: syz [ 188.952408][ T5815] usb 1-1: Manufacturer: syz [ 188.957103][ T5815] usb 1-1: SerialNumber: syz [ 189.338922][ T5815] usb 1-1: config 0 descriptor?? [ 189.790142][ T5815] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 189.799208][ T5815] usb 1-1: selecting invalid altsetting 1 [ 189.805049][ T5815] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 189.815417][ T5815] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 189.826184][ T5815] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 189.840235][ T5815] usb 1-1: media controller created [ 189.870146][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 191.726324][ T5815] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 191.940110][ T5815] usb 1-1: USB disconnect, device number 7 [ 192.552867][ T8] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 192.573759][ T6935] overlayfs: workdir and upperdir must reside under the same mount [ 192.751838][ T8] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 192.768907][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.777690][ T8] usb 1-1: Product: syz [ 192.783731][ T8] usb 1-1: Manufacturer: syz [ 192.788552][ T8] usb 1-1: SerialNumber: syz [ 192.797285][ T8] usb 1-1: config 0 descriptor?? [ 192.812515][ T8] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 192.951322][ T5815] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 193.235285][ T5815] usb 3-1: Using ep0 maxpacket: 32 [ 193.242939][ T5815] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 193.251004][ T5815] usb 3-1: config 0 has no interface number 0 [ 193.267678][ T5815] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 193.278565][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.291339][ T5815] usb 3-1: Product: syz [ 193.295573][ T5815] usb 3-1: Manufacturer: syz [ 193.309829][ T5815] usb 3-1: SerialNumber: syz [ 193.318597][ T5815] usb 3-1: config 0 descriptor?? [ 193.337510][ T5815] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 193.349662][ T5815] usb 3-1: selecting invalid altsetting 1 [ 193.360405][ T5815] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 193.386108][ T5815] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 193.400623][ T5815] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 193.410664][ T5815] usb 3-1: media controller created [ 193.439255][ T5815] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.649787][ T8] gspca_stk1135: reg_w 0x3 err -71 [ 193.663831][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 193.670230][ T8] gspca_stk1135: Sensor write failed [ 193.691719][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 193.698123][ T8] gspca_stk1135: Sensor write failed [ 193.721444][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 193.727849][ T8] gspca_stk1135: Sensor read failed [ 193.743077][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 193.749466][ T8] gspca_stk1135: Sensor read failed [ 193.762254][ T8] gspca_stk1135: Detected sensor type unknown (0x0) [ 193.768942][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 193.779242][ T8] gspca_stk1135: Sensor read failed [ 193.789226][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 193.800576][ T8] gspca_stk1135: Sensor read failed [ 193.807396][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 193.827472][ T8] gspca_stk1135: Sensor write failed [ 193.836881][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 193.844869][ T8] gspca_stk1135: Sensor write failed [ 193.859686][ T8] stk1135: probe of 1-1:0.0 failed with error -71 [ 193.881762][ T8] usb 1-1: USB disconnect, device number 8 [ 193.908202][ T6964] binder: BINDER_SET_CONTEXT_MGR already set [ 193.914785][ T6964] binder: 6963:6964 ioctl 4018620d 2000000002c0 returned -16 [ 194.781961][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.788582][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.415759][ T8] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 195.617737][ T8] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 195.631041][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.644845][ T8] usb 2-1: Product: syz [ 195.649135][ T8] usb 2-1: Manufacturer: syz [ 195.655955][ T8] usb 2-1: SerialNumber: syz [ 195.682586][ T8] usb 2-1: config 0 descriptor?? [ 195.697859][ T8] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 195.724032][ T5815] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 195.866963][ T5815] usb 3-1: USB disconnect, device number 11 [ 196.469711][ T7018] binder: BINDER_SET_CONTEXT_MGR already set [ 196.476056][ T7018] binder: 7015:7018 ioctl 4018620d 2000000002c0 returned -16 [ 196.601526][ T8] gspca_stk1135: reg_w 0x3 err -110 [ 196.715895][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 196.724633][ T8] gspca_stk1135: Sensor write failed [ 196.730018][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 196.737722][ T8] gspca_stk1135: Sensor write failed [ 196.747288][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 196.755171][ T8] gspca_stk1135: Sensor read failed [ 196.760486][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 196.769154][ T8] gspca_stk1135: Sensor read failed [ 196.776907][ T8] gspca_stk1135: Detected sensor type unknown (0x0) [ 196.788817][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 196.797764][ T8] gspca_stk1135: Sensor read failed [ 196.803540][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 196.814421][ T8] gspca_stk1135: Sensor read failed [ 196.819696][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 196.831102][ T8] gspca_stk1135: Sensor write failed [ 196.837414][ T8] gspca_stk1135: serial bus timeout: status=0x00 [ 196.851752][ T8] gspca_stk1135: Sensor write failed [ 196.883169][ T8] stk1135: probe of 2-1:0.0 failed with error -110 [ 196.906372][ T8] usb 2-1: USB disconnect, device number 12 [ 197.361325][ T2177] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 198.951294][ T2177] usb 3-1: device descriptor read/64, error -71 [ 199.221865][ T2177] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 199.391287][ T2177] usb 3-1: device descriptor read/64, error -71 [ 199.511618][ T2177] usb usb3-port1: attempt power cycle [ 199.681387][ T5835] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 199.877804][ T5835] usb 2-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 199.888394][ T5835] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.922940][ T5835] usb 2-1: Product: syz [ 199.935551][ T5835] usb 2-1: Manufacturer: syz [ 199.941586][ T2177] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 199.943666][ T5835] usb 2-1: SerialNumber: syz [ 199.957033][ T5835] usb 2-1: config 0 descriptor?? [ 201.629354][ T5835] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 201.672587][ T2177] usb 3-1: device descriptor read/8, error -71 [ 202.295970][ T5835] gspca_stk1135: reg_w 0x3 err -71 [ 202.306332][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 202.313276][ T5835] gspca_stk1135: Sensor write failed [ 202.318884][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 202.325467][ T5835] gspca_stk1135: Sensor write failed [ 202.331044][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 202.337879][ T5835] gspca_stk1135: Sensor read failed [ 202.343471][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 202.349943][ T5835] gspca_stk1135: Sensor read failed [ 202.355456][ T5835] gspca_stk1135: Detected sensor type unknown (0x0) [ 202.362261][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 202.368721][ T5835] gspca_stk1135: Sensor read failed [ 202.374158][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 202.380582][ T5835] gspca_stk1135: Sensor read failed [ 202.387379][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 202.393890][ T5835] gspca_stk1135: Sensor write failed [ 202.399242][ T5835] gspca_stk1135: serial bus timeout: status=0x00 [ 202.405819][ T5835] gspca_stk1135: Sensor write failed [ 202.411261][ T5835] stk1135: probe of 2-1:0.0 failed with error -71 [ 202.420879][ T5835] usb 2-1: USB disconnect, device number 13 [ 202.701725][ T2177] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 202.753930][ T2177] usb 3-1: Using ep0 maxpacket: 32 [ 203.921178][ C0] sched: RT throttling activated [ 203.950032][ T2177] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 204.055116][ T2177] usb 3-1: config 0 has no interface number 0 [ 204.086184][ T2177] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=93.d8 [ 204.102729][ T2177] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 204.131250][ T2177] usb 3-1: Product: syz [ 204.135575][ T2177] usb 3-1: Manufacturer: syz [ 204.140213][ T2177] usb 3-1: SerialNumber: syz [ 204.177515][ T2177] usb 3-1: config 0 descriptor?? [ 204.199611][ T2177] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 204.209699][ T2177] usb 3-1: selecting invalid altsetting 1 [ 204.220819][ T2177] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 204.235936][ T2177] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 204.251864][ T2177] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 204.265741][ T2177] usb 3-1: media controller created [ 204.334181][ T2177] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 206.363256][ T2177] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 206.461494][ T2177] usb 3-1: USB disconnect, device number 15 [ 207.237339][ T7124] bridge_slave_0: left allmulticast mode [ 207.245749][ T7124] bridge_slave_0: left promiscuous mode [ 207.259967][ T7124] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.295709][ T7124] bridge_slave_1: left allmulticast mode [ 207.309633][ T7124] bridge_slave_1: left promiscuous mode [ 207.323754][ T7124] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.357477][ T7124] bond0: (slave bond_slave_0): Releasing backup interface [ 207.384196][ T7124] bond0: (slave bond_slave_1): Releasing backup interface [ 207.456508][ T7124] team0: Failed to send options change via netlink (err -105) [ 207.495159][ T7124] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 207.520848][ T7124] team0: Port device team_slave_0 removed [ 207.555943][ T7124] team0: Failed to send options change via netlink (err -105) [ 207.592674][ T7124] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 207.607844][ T7124] team0: Port device team_slave_1 removed [ 207.632120][ T7124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.639694][ T7124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.655008][ T7124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.673351][ T7124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.725881][ T7127] team0: Failed to send options change via netlink (err -105) [ 207.786257][ T7127] team0: Mode changed to "activebackup" [ 207.805852][ T7124] syz.1.428 (7124) used greatest stack depth: 20296 bytes left [ 208.971307][ T7134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.511409][ T5835] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 209.708544][ T5835] usb 2-1: device descriptor read/64, error -71 [ 210.001319][ T5835] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 210.172823][ T5835] usb 2-1: device descriptor read/64, error -71 [ 210.301607][ T5835] usb usb2-port1: attempt power cycle [ 211.591250][ T5835] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 211.648338][ T5835] usb 2-1: device descriptor read/8, error -71 [ 211.974031][ T5835] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 212.026552][ T5835] usb 2-1: device descriptor read/8, error -71 [ 212.163857][ T5835] usb usb2-port1: unable to enumerate USB device [ 212.617660][ T7184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.635437][ T7195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.446'. [ 212.650773][ T7195] netlink: 16 bytes leftover after parsing attributes in process `syz.0.446'. [ 216.122201][ T7216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.462'. [ 216.151577][ T7216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.462'. [ 216.410067][ T7219] overlayfs: failed to clone upperpath [ 219.132681][ T7245] fuse: Bad value for 'fd' [ 219.265466][ T7247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.472'. [ 219.291966][ T7247] netlink: 16 bytes leftover after parsing attributes in process `syz.2.472'. [ 224.377140][ T7280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.649511][ T7323] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 227.872446][ T7325] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 227.911268][ T7325] overlayfs: failed to set xattr on upper [ 227.925497][ T7325] overlayfs: ...falling back to redirect_dir=nofollow. [ 227.978454][ T7325] overlayfs: ...falling back to index=off. [ 228.001218][ T7325] overlayfs: ...falling back to uuid=null. [ 229.955592][ T7344] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.215318][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 430.291102][ C0] BUG: workqueue lockup - pool cpus=0 node=0 flags=0x0 nice=0 stuck for 199s! [ 430.300405][ C0] BUG: workqueue lockup - pool cpus=1 node=0 flags=0x0 nice=0 stuck for 197s! [ 430.309313][ C0] Showing busy workqueues and worker pools: [ 430.315398][ C0] workqueue events: flags=0x0 [ 430.320112][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=11/256 refcnt=12 [ 430.320135][ C0] pending: 2*nsim_dev_hwstats_traffic_work, 4*psi_avgs_work, 2*ovs_dp_masks_rebalance, ima_keys_handler, switchdev_deferred_process_work, rht_deferred_worker [ 430.320491][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=10/256 refcnt=11 [ 430.320510][ C0] pending: 2*nsim_dev_hwstats_traffic_work, psi_avgs_work, vmstat_shepherd, 3*ovs_dp_masks_rebalance, kfree_rcu_monitor, 2*rht_deferred_worker [ 430.320604][ C0] workqueue events_long: flags=0x0 [ 430.372737][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=7/256 refcnt=8 [ 430.372766][ C0] pending: 3*defense_work_handler, 2*br_multicast_gc_work, 2*br_fdb_cleanup [ 430.372939][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=5/256 refcnt=6 [ 430.372960][ C0] pending: 2*defense_work_handler, br_multicast_gc_work, 2*br_fdb_cleanup [ 430.373000][ C0] workqueue events_unbound: flags=0x2 [ 430.411672][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=14/512 refcnt=15 [ 430.411698][ C0] in-flight: 6833:toggle_allocation_gate [ 430.411806][ C0] pending: 2*cfg80211_wiphy_work, 4*nsim_dev_trap_report_work, flush_memcg_stats_dwork, cfg80211_wiphy_work, crng_reseed, 3*macvlan_process_broadcast, idle_cull_fn [ 430.412040][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=13/512 refcnt=14 [ 430.412057][ C0] in-flight: 6599:cfg80211_wiphy_work cfg80211_wiphy_work [ 430.412081][ C0] pending: 3*cfg80211_wiphy_work, 5*macvlan_process_broadcast, 3*idle_cull_fn [ 430.412114][ C0] workqueue events_freezable: flags=0x4 [ 430.471900][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.471930][ C0] pending: update_balloon_stats_func [ 430.472022][ C0] workqueue events_power_efficient: flags=0x80 [ 430.491532][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 430.491557][ C0] pending: neigh_managed_work, neigh_periodic_work [ 430.491643][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=7/256 refcnt=8 [ 430.491661][ C0] in-flight: 9:wg_ratelimiter_gc_entries [ 430.491711][ C0] pending: hash_ipport6_gc, neigh_periodic_work, neigh_managed_work, do_cache_clean, gc_worker, check_lifetime [ 430.491851][ C0] workqueue mm_percpu_wq: flags=0x8 [ 430.537295][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.537324][ C0] pending: vmstat_update [ 430.537352][ C0] workqueue writeback: flags=0x4a [ 430.554815][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 430.554841][ C0] pending: wb_workfn [ 430.554939][ C0] workqueue iou_exit: flags=0x2 [ 430.571284][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=6/64 refcnt=7 [ 430.571306][ C0] in-flight: 3527:io_ring_exit_work, 138:io_ring_exit_work, 50:io_ring_exit_work, 3515:io_ring_exit_work, 3497:io_ring_exit_work, 6793:io_ring_exit_work [ 430.571432][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=4/64 refcnt=5 [ 430.571448][ C0] in-flight: 3470:io_ring_exit_work, 12:io_ring_exit_work, 41:io_ring_exit_work, 1090:io_ring_exit_work [ 430.571549][ C0] workqueue dm_bufio_cache: flags=0x8 [ 430.618418][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.618451][ C0] pending: work_fn [ 430.618555][ C0] workqueue ipv6_addrconf: flags=0xe000a [ 430.636265][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=8 [ 430.636297][ C0] pending: addrconf_verify_work [ 430.636372][ C0] inactive: 4*addrconf_verify_work [ 430.636391][ C0] workqueue bat_events: flags=0xe000a [ 430.659527][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/1 refcnt=36 [ 430.659549][ C0] in-flight: 6876:batadv_nc_worker [ 430.659618][ C0] inactive: 3*batadv_nc_worker, 2*batadv_iv_send_outstanding_bat_ogm_packet, 4*batadv_purge_orig, 4*batadv_mcast_mla_update, 7*batadv_iv_send_outstanding_bat_ogm_packet, 4*batadv_tt_purge, batadv_bla_periodic_work, batadv_dat_purge, batadv_bla_periodic_work, 2*batadv_dat_purge, 2*batadv_bla_periodic_work, batadv_dat_purge [ 430.659824][ C0] workqueue wg-kex-wg0: flags=0x6 [ 430.708001][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 430.708027][ C0] pending: wg_packet_handshake_send_worker [ 430.708048][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 430.726695][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 430.726717][ C0] pending: wg_packet_tx_worker, wg_packet_encrypt_worker [ 430.726752][ C0] workqueue wg-kex-wg1: flags=0x6 [ 430.746867][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 430.746898][ C0] pending: wg_packet_handshake_send_worker [ 430.746921][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 430.765731][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.765759][ C0] pending: wg_packet_encrypt_worker [ 430.765778][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.765798][ C0] pending: wg_packet_encrypt_worker [ 430.765813][ C0] workqueue wg-kex-wg2: flags=0x6 [ 430.797497][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 430.797521][ C0] pending: wg_packet_handshake_send_worker [ 430.797539][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 430.816198][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.816221][ C0] pending: wg_packet_encrypt_worker [ 430.816237][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.816257][ C0] pending: wg_packet_encrypt_worker [ 430.816272][ C0] workqueue wg-kex-wg0: flags=0x6 [ 430.847718][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 430.847749][ C0] pending: wg_packet_handshake_send_worker [ 430.847773][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 430.866494][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.866519][ C0] pending: wg_packet_encrypt_worker [ 430.866540][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.866559][ C0] pending: wg_packet_encrypt_worker [ 430.866576][ C0] workqueue wg-kex-wg1: flags=0x6 [ 430.898064][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 430.898091][ C0] pending: wg_packet_handshake_send_worker [ 430.898111][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 430.917065][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.917089][ C0] pending: wg_packet_encrypt_worker [ 430.917106][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.917130][ C0] pending: wg_packet_encrypt_worker [ 430.917145][ C0] workqueue wg-kex-wg2: flags=0x6 [ 430.948532][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 430.948558][ C0] pending: wg_packet_handshake_send_worker [ 430.948577][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 430.967232][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.967257][ C0] pending: wg_packet_encrypt_worker [ 430.967274][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 430.967292][ C0] pending: wg_packet_encrypt_worker [ 430.967309][ C0] workqueue wg-kex-wg0: flags=0x6 [ 430.998719][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 430.998743][ C0] pending: wg_packet_handshake_send_worker [ 430.998762][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 431.017533][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 431.017566][ C0] pending: wg_packet_encrypt_worker [ 431.017588][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 431.017608][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 431.017636][ C0] workqueue wg-kex-wg0: flags=0x6 [ 431.051230][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 431.051261][ C0] pending: wg_packet_handshake_send_worker [ 431.051285][ C0] workqueue wg-crypt-wg0: flags=0x28 [ 431.069961][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 431.069986][ C0] pending: wg_packet_encrypt_worker, wg_packet_tx_worker [ 431.070023][ C0] workqueue wg-kex-wg1: flags=0x6 [ 431.090225][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 431.090258][ C0] pending: wg_packet_handshake_send_worker [ 431.090280][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 431.109339][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 431.109373][ C0] pending: wg_packet_encrypt_worker [ 431.109397][ C0] workqueue wg-kex-wg2: flags=0x6 [ 431.127661][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 431.127689][ C0] pending: wg_packet_handshake_send_worker [ 431.127709][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 431.146528][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 431.146554][ C0] pending: wg_packet_encrypt_worker [ 431.146572][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 431.146593][ C0] pending: wg_packet_encrypt_worker [ 431.146607][ C0] workqueue wg-kex-wg1: flags=0x6 [ 431.178146][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 431.178180][ C0] pending: wg_packet_handshake_send_worker [ 431.178203][ C0] workqueue wg-crypt-wg1: flags=0x28 [ 431.196989][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 431.197016][ C0] pending: wg_packet_encrypt_worker [ 431.197037][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=2/256 refcnt=3 [ 431.197057][ C0] pending: wg_packet_decrypt_worker, wg_packet_encrypt_worker [ 431.197083][ C0] workqueue wg-kex-wg2: flags=0x6 [ 431.230737][ C0] pwq 4: cpus=0-1 flags=0x4 nice=0 active=1/256 refcnt=2 [ 431.230771][ C0] pending: wg_packet_handshake_send_worker [ 431.230795][ C0] workqueue wg-crypt-wg2: flags=0x28 [ 431.249464][ C0] pwq 2: cpus=1 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 431.249498][ C0] pending: wg_packet_encrypt_worker [ 431.249518][ C0] pwq 0: cpus=0 node=0 flags=0x0 nice=0 active=1/256 refcnt=2 [ 431.249540][ C0] pending: wg_packet_encrypt_worker [ 431.249559][ C0] pool 0: cpus=0 node=0 flags=0x0 nice=0 hung=200s workers=8 idle: 42 5835 8 5813 5814 5836 5765 [ 431.249602][ C0] pool 4: cpus=0-1 flags=0x4 nice=0 hung=200s workers=18 idle: 60 6275 6909 11 6766 [ 431.249634][ C0] Showing backtraces of running workers in stalled CPU-bound worker pools: [ 431.305278][ C0] pool 0: [ 431.305286][ C0] task:kworker/0:1 state:R running task stack:24464 pid:9 ppid:2 flags:0x00004000 [ 431.305313][ C0] Workqueue: events_power_efficient wg_ratelimiter_gc_entries [ 431.305335][ C0] Call Trace: [ 431.305388][ C0] [ 431.305430][ C0] __schedule+0x1553/0x45a0 [ 431.305523][ C0] ? asan.module_dtor+0x20/0x20 [ 431.305551][ C0] ? mark_lock+0x94/0x320 [ 431.305573][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 431.305592][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 431.305611][ C0] preempt_schedule_irq+0xbf/0x150 [ 431.305632][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 431.305651][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 431.305681][ C0] irqentry_exit+0x67/0x70 [ 431.305718][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 431.305767][ C0] RIP: 0010:__might_resched+0x280/0x630 [ 431.305808][ C0] Code: c8 48 83 c0 9c 79 40 48 c7 44 24 40 0e 36 e0 45 4a c7 04 2b 00 00 00 00 4a c7 44 2b 08 00 00 00 00 65 48 8b 04 25 28 00 00 00 <48> 3b 84 24 c0 00 00 00 0f 85 58 02 00 00 48 8d 65 d8 5b 41 5c 41 [ 431.305835][ C0] RSP: 0018:ffffc900000e7a40 EFLAGS: 00000246 [ 431.305861][ C0] RAX: 197157210ba0b100 RBX: 1ffff9200001cf50 RCX: 197157210ba0b100 [ 431.305870][ C0] RDX: ffff88801aa40000 RSI: ffffffff8acadd60 RDI: ffffffff8b1c9c20 [ 431.305878][ C0] RBP: ffffc900000e7b58 R08: ffffffff8db73363 R09: 1ffffffff1b6e66c [ 431.305885][ C0] R10: dffffc0000000000 R11: fffffbfff1b6e66d R12: ffff88801aa40a70 [ 431.305893][ C0] R13: dffffc0000000000 R14: ffff88801aa4043c R15: 1ffff11003548087 [ 431.305914][ C0] ? __might_sleep+0xe0/0xe0 [ 431.305929][ C0] ? __lock_acquire+0x7d40/0x7d40 [ 431.305941][ C0] ? __rwlock_init+0x150/0x150 [ 431.305957][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 431.305973][ C0] wg_ratelimiter_gc_entries+0x3a6/0x450 [ 431.305991][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 431.306005][ C0] process_scheduled_works+0xa5d/0x15d0 [ 431.306034][ C0] ? worker_attach_to_pool+0x380/0x380 [ 431.306051][ C0] ? assign_work+0x3d2/0x5d0 [ 431.306067][ C0] worker_thread+0xa55/0xfc0 [ 431.306095][ C0] kthread+0x2fa/0x390 [ 431.306105][ C0] ? pr_cont_work+0x560/0x560 [ 431.306118][ C0] ? kthread_blkcg+0xd0/0xd0 [ 431.306129][ C0] ret_from_fork+0x48/0x80 [ 431.306161][ C0] ? kthread_blkcg+0xd0/0xd0 [ 431.306172][ C0] ret_from_fork_asm+0x11/0x20 [ 431.306215][ C0]