last executing test programs: 1m38.458752205s ago: executing program 4 (id=52): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x411000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet(0x10, 0x3, 0x0) r3 = syz_io_uring_setup(0xb80, &(0x7f0000000180)={0x0, 0x38ab, 0x400, 0x8000000, 0x1e6}, &(0x7f0000000340)=0x0, &(0x7f0000000600)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r3, 0x16, &(0x7f0000000040)={&(0x7f0000001000)={[{0x0, 0x0, 0x3, 0xf4}]}, 0x1, 0x1}, 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x20, 0x3, 0x7, 0x301, 0x0, 0x0, {0x5, 0x0, 0xd}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x10, r6, 0x0, 0x0, 0x0, 0x322, 0x1, {0x1}}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'hsr0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r7], 0x64}}, 0x400c014) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r9, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000002c0)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r9, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r9, &(0x7f0000000100)={0x2c, 0x0, r11}, 0x10) mmap$xdp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x1011, r9, 0x100000000) r12 = dup(r1) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r12) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x20, r13, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x59}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r14 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r12, r14, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000100)="f30f6ffebaf80c66b89a16a28766efbafc0cb82300eff6dcba4300ec0f01df660f3880159a0000d6000f974c3964668921ba610066ed", 0x36}], 0x0, 0x60, 0x0, 0x0) 1m37.290287398s ago: executing program 4 (id=59): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000ffffffff000000000000000000000000000002000000000000000000000000000300000000000000020000005e00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000004ba80824514338cdc4c964bb000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000ff"], 0xb8}}, 0x4000000) 1m37.105159979s ago: executing program 4 (id=62): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, &(0x7f0000000100)="f30f6ffebaf80c66b89a16a28766efbafc0cb82300eff6dcba4300ec0f01df660f3880159a0000d6000f974c3964668921ba610066ed", 0x36}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1m35.518704943s ago: executing program 4 (id=66): r0 = memfd_secret(0x0) fchmod(r0, 0x134) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) syz_open_procfs$pagemap(0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="34010000170001000000008000000000fc000000000000000000000000000000000000006c000000fe8000000000000000000000000000bbfe8000000000000000000002000000bbac1e000100"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0200000000000000000000000000fd7f00000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000009000000000000000000000000000000800000000000000000000000000000000c0008"], 0x134}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bond0\x00', 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x89901) move_mount(r6, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000681000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/175, 0xaf, 0x0, &(0x7f0000000040)=""/33, 0x21}, &(0x7f00000001c0)=0x40) pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='./file0/../file0/../file0/../file0/../file0\x00') sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010400000000ffdbdf2500000000", @ANYRES32=r4, @ANYBLOB="02100000000000001c00128009000100626f6e64000000000c0002800500110001"], 0x3c}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 1m34.278696228s ago: executing program 4 (id=68): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @private=0xa010102}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a634b0000000ae50ac96b82e3dff016eee72a2bc07284d94e2bf000000000000", 0x20}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[], 0x10b8}, 0x0) 1m33.615252342s ago: executing program 4 (id=71): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ffffffff000000001000000000000000000000000000000000000000000000000300000000000000020000005e", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="0000000000000000004ba80824514338cdc4c964bb000000000000060000000000000000000062d20000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000ffbb6335975f1bd5f3a52e2a98121ee5d142799f4d565fb4892415df55", @ANYRESDEC=r0], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 1m32.681304172s ago: executing program 32 (id=71): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000ffffffff000000001000000000000000000000000000000000000000000000000300000000000000020000005e", @ANYRES32=0x0, @ANYRESOCT=r0, @ANYBLOB="0000000000000000004ba80824514338cdc4c964bb000000000000060000000000000000000062d20000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000ffbb6335975f1bd5f3a52e2a98121ee5d142799f4d565fb4892415df55", @ANYRESDEC=r0], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 51.486904252s ago: executing program 1 (id=188): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x70) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r3) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a", 0x10) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, 0x0, 0x0) 49.911485773s ago: executing program 5 (id=190): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) sendfile(r2, r1, &(0x7f00000002c0)=0xb, 0x8) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="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", 0x1000}], 0x1}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)=""/185) socket$netlink(0x10, 0x3, 0x0) 48.613528018s ago: executing program 0 (id=195): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) execve(0x0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x4f3, 0x74d, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x30, 0x5, [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0xff, 0x1, 0x1, {0x22, 0xbb0}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0xba, 0x7}}}}}]}}]}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000) recvmmsg(r2, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f00000000c0)=""/35, 0x23}, {&(0x7f0000003bc0)=""/4111, 0x100f}, {&(0x7f00000006c0)=""/243, 0xf3}, {&(0x7f0000000040)=""/90, 0x5a}, {&(0x7f0000000440)=""/207, 0xcf}], 0x6}, 0x7ffffffe}], 0x4, 0x20, 0x0) (async) r3 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) readv(r3, &(0x7f0000000040), 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1, 0x0, 0x0, 0x2000000}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) (async) sendmsg$nl_route(r4, 0x0, 0x0) (async) openat$sndtimer(0xffffffffffffff9c, &(0x7f00000044c0), 0x141802) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x8, 0x0, 0xd66}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x2, 0x4038a19, 0x4, @empty, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0x5}}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000a00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000a40)=0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002240)={'ip6_vti0\x00', &(0x7f00000021c0)={'ip6_vti0\x00', r5, 0x2f, 0x2, 0x0, 0xa, 0x22, @private2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7800, 0x8, 0x8007d6, 0xfffffe00}}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000002280)={@initdev, @loopback}, &(0x7f00000022c0)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) r7 = socket(0x1d, 0x2, 0x6) (async) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) bind$can_j1939(r7, &(0x7f0000000000)={0x1d, r9, 0x1, {0x2, 0xf0, 0x1}}, 0x18) (async) socket(0x10, 0x3, 0x0) 47.876010788s ago: executing program 1 (id=196): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}}) r1 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r1, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={&(0x7f0000001b00)=@l2tp6={0xa, 0x0, 0xffe, @mcast1, 0x7, 0x83}, 0x80, &(0x7f0000000180)=[{&(0x7f0000001bc0)="ec000900062b3325fe80000000000000dc8b852303848f7e5c74a57f32cd8caf80bc8e7a2f3ce32a", 0x28}], 0x1}, 0x800) r2 = socket$inet6(0xa, 0x1, 0x8010800000000084) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000002680)={0x15, 0x110, 0xfa00, {r4, 0x0, 0x0, 0x30, 0x0, @in={0x2, 0x4e20, @local}, @ib={0x1b, 0x0, 0x8, {"00000000000000000000000000008001"}, 0x80000001, 0x2}}}, 0x118) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) ioctl$SCSI_IOCTL_GET_PCI(r5, 0x5393, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x4008031, 0xffffffffffffffff, 0x5b76f000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000200), r0) sendmsg$SMC_PNETID_GET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000828bd0400f9dbdf2501000100010004000200050000000000000074090076655f3000000000000000536f494ca0245c92489cd006bddbddd494c739ebb4c508178d357ec3da"], 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x14) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000640)={{0x0, 0x2, 0x1, 0x7ff, 'syz1\x00', 0x1}, 0x0, [0x228, 0x3, 0x800, 0x3, 0x7, 0x91, 0x0, 0x6, 0x100000001, 0x3, 0x6, 0x40, 0x100000000, 0x4, 0x4e, 0xf5a4, 0x3, 0x8, 0x0, 0x4, 0x7, 0x101, 0x0, 0xc, 0x8, 0x0, 0x9, 0xfffffffffffffff4, 0xde, 0x8000, 0x425, 0x1, 0x8000000000000001, 0x9, 0x6, 0x7, 0x7, 0x2, 0x2, 0x4, 0x1, 0xfffffffffffffffe, 0xffffffffffff7fff, 0x9, 0xfff, 0x5, 0x7, 0x0, 0xffffffffffffff35, 0x3, 0xe2d, 0x7, 0x649, 0x7, 0x9, 0x80000001, 0x9f9, 0x3, 0x5, 0x6, 0x8b, 0x3, 0x2, 0x1000, 0x4, 0x49, 0x7f, 0x0, 0xb02, 0xc8, 0xe3, 0x3, 0xffffffffffff47fd, 0x5, 0x9, 0x0, 0x6cb, 0xff, 0x5731, 0x800, 0x4, 0xe, 0x4, 0x7, 0xffffffff, 0x12000000000000, 0x5, 0x40, 0xf7aa, 0x5, 0x800, 0x100, 0x8, 0xffffffffffffaed1, 0x3, 0x6, 0xd, 0x916, 0xfff, 0x2, 0x7, 0x7ff, 0x0, 0x19, 0x7fff, 0x8, 0x8, 0x6, 0x1, 0xff, 0x448, 0x4, 0x10000, 0x8000000000000001, 0x5, 0x3, 0x2, 0x0, 0x2, 0x1, 0x400, 0x8000, 0x4, 0x0, 0x4b, 0x9c7, 0x6, 0x1]}) creat(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000240)=0x400, 0x4) sendmmsg$inet6(r2, &(0x7f00000005c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x6, @local, 0x8}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="484239502d9855646ceac23f24959ae928e287d33ab72eaac600eb4f147eded79e7551727bc0f0240d372fbb5353ee782e0f0c4a3d0330b4f87d4e124917", 0x3e}, {&(0x7f00000000c0)="c9b54028e85e91eb6abbafd7723f2840c4aa7fdd523a449b8982097dd7c066109144a2570acb0e21e3924bf70100b49c73a604e8ec9bd4f6cfd2ee11b53aaa45c7a57243e10dc4cb8396daf1f1f31ad07cf0", 0x48}], 0x2}}, {{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000001c0)}}], 0x2, 0xf803f09e9dd00492) 47.79088806s ago: executing program 2 (id=197): r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, 0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x7, 0x4, 0x1, 0x8, 0x26b0, 0x0, 0x8}, 0x1c) (async) r2 = syz_open_dev$usbfs(&(0x7f0000000500), 0x200000000000007, 0x402180) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f00000003c0)={0x3, 0x3, "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"}) (async) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f00000001c0)={0xa1, 0x16, 0x4, 0x300, 0x0, 0x12, 0x0}) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'dummy0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r4}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0) (async) r6 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8) close(r6) r7 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0xd4c41) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r6, 0xc06864a1, &(0x7f0000000700)={0x0, 0x0, r8, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r7, 0xc06864ce, &(0x7f0000000580)={r9, 0x0, 0x0, 0x9, 0x2, [0x0], [0x8, 0x19, 0x7, 0x7ff], [0x1, 0x2, 0xffffffff, 0x3], [0x8000000002, 0xbe9, 0x0, 0x2]}) ioctl$DRM_IOCTL_GEM_FLINK(r6, 0xc008640a, &(0x7f0000000040)={r10}) (async) r11 = syz_open_dev$dri(&(0x7f0000000080), 0x4, 0x181101) (async) r12 = openat(r6, &(0x7f0000000200)='./file1\x00', 0x10b401, 0x8) write$binfmt_elf64(r6, &(0x7f0000000600)=ANY=[@ANYBLOB="7f454c4600000006010000000000000002003e0000000000030000e17b4607004000deffffffffff970106000000000000010000000038", @ANYRESDEC=r2], 0x78) (async) close(r12) (async) execveat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r11, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000240)={&(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0x30}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r11, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x0], 0x1, 0x80000}) 47.284439057s ago: executing program 3 (id=198): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="34000180", @ANYRES8=r0, @ANYBLOB="030300000000000000002a0000000e0002006e657464657673696d0000"], 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x24044084) gettid() r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)) unshare(0x2040400) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b29, &(0x7f0000000040)={'wlan1\x00'}) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x18801, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) fchownat(0xffffffffffffff9c, &(0x7f00000046c0)='./file0\x00', 0x0, 0x0, 0x1000) r5 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESOCT], 0x0) syz_usb_disconnect(r5) syz_usb_control_io$cdc_ncm(r5, &(0x7f00000001c0)={0x14, &(0x7f00000014c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0x8, 0x3, 0x0, 0x2}, 0x0, &(0x7f0000000140)={0x1ff, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0xffffffffffffffff}, 0x0, 0x0) read$dsp(r3, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = syz_usb_connect$cdc_ncm(0x0, 0xb3, &(0x7f0000001380)={{0x12, 0x1, 0x350, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xa1, 0x2, 0x1, 0x10, 0x10, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "c6ba1a97"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x15a, 0x6, 0x1ff, 0x4}, {0x6, 0x24, 0x1a, 0x3, 0x20}, [@mbim_extended={0x8, 0x24, 0x1c, 0x80, 0x1d, 0xffff}, @network_terminal={0x7, 0x24, 0xa, 0x3, 0xd0, 0xf9, 0x3}, @mdlm={0x15, 0x24, 0x12, 0x10}, @mbim_extended={0x8, 0x24, 0x1c, 0x8, 0x8, 0x4}, @mdlm={0x15}]}, {{0x9, 0x5, 0x81, 0x3, 0x40, 0x0, 0x8}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x4, 0x7f, 0xc4}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x40, 0x4c, 0x6}}}}}}}]}}, &(0x7f0000001700)={0xa, &(0x7f0000001300)={0xa, 0x6, 0x201, 0x1, 0x1, 0x59, 0x8, 0xa3}, 0x31, &(0x7f0000001440)={0x5, 0xf, 0x31, 0x3, [@ssp_cap={0x18, 0x10, 0xa, 0x7, 0x3, 0x5, 0xff07, 0x4, [0xc000, 0x7f7fff, 0xfe7f00]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0x3, 0x9, 0x5d2a}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x5, 0x5, 0x200}]}, 0x5, [{0x4, &(0x7f0000001480)=@lang_id={0x4, 0x3, 0xf8ff}}, {0x4, &(0x7f0000001600)=@lang_id={0x4, 0x3, 0x180a}}, {0x4, &(0x7f0000001640)=@lang_id={0x4, 0x3, 0x44a}}, {0x4, &(0x7f0000001680)=@lang_id={0x4, 0x3, 0x41f}}, {0x1b, &(0x7f00000016c0)=@string={0x1b, 0x3, "eebd2439723befd9ac92d40d6d2f291aa91c58df2b4cb88ebe"}}]}) syz_usb_control_io(r6, &(0x7f0000001ac0)={0x2c, &(0x7f0000001780)={0x0, 0x8, 0x73, {0x73, 0xc, "765722eeacdad8df2c4d97573e8dbb549cf5a67e949df446b5bc0b8148c24ce9b1831ea4b11520991c91defaa912f7f0b99d959304a3a304c155bf50d7122e737126b03e6eebec24877d507e34a6efe4a94ff85e214260280c214fd2ae7f9b6b209bc95d8ac3d358aab301dd837b8f2242"}}, &(0x7f0000001800)={0x0, 0x3, 0x73, @string={0x73, 0x3, "8ea62f072481c5e1fc10445855929aadaed2bc74cf8b29c7f55f93231e63e2c2c5b5dce79439da779b962876ce4bc79f7d1517b9d5d4a440f6a270d198c966bca825c44300db99a24e6538b9ddf2b0db9a4d07714e0766a78dca40f0b298ec48c63b7e5af8f84336f63d9608eb482a351a"}}, &(0x7f0000001880)={0x0, 0xf, 0x1b4, {0x5, 0xf, 0x1b4, 0x5, [@ssp_cap={0x24, 0x10, 0xa, 0xf, 0x6, 0x3, 0xf000, 0x2, [0x30, 0x0, 0xc03f, 0x3f00, 0x3f0f, 0xc03f]}, @generic={0x7b, 0x10, 0xb, "d69fc48345fbafa9fcc775a3991c7864297b843267bcb3523dbf7b7d8a2a8538935ad89516c2f695ae5b237b4ebd97e05ebcb7618fc19e694200fba704d919af3acf6f94b5b2f958cb6c56808c04c385cec812e934929f6a99779ef3b1a8a03d2d71183280aa0e317eec2bd3c16eb4a076f2a3480d9c28ed"}, @wireless={0xb, 0x10, 0x1, 0xd8a8632c97be4121, 0x10, 0x3, 0x5, 0x6623, 0x6}, @generic={0xfe, 0x10, 0x4, "b9d88db64f42aba307c163f98e0340bb5d65052a5160adaaf6ed6054ea141b2c647c577dcdd5b636c6b57f2bf3e63d7feb85c58cf183456c926d0fbad85aeac74dce9bb9bb48772b8b79d8c762fbb655047b372847e86b15821b0749e352ecc1d28d6470d7ac558f35abd63e12a8dbe7ef01ec7c12043b58383598023bd3d9922d22e274fac6f0b5c995e1692964036464e0f230d4a37e4a32a302a10fecb2de961ac739aa510d871bc51ea0591afab2cccbae6a3dc7a9e9116802e9842fa7c747248762c146c012dcbf28dd619c95c4c4aac196672799f2dbcde58af503cfddac974275f78d37930dc0558a158fa3232efa265184d838c622d21c"}, @ext_cap={0x7, 0x10, 0x2, 0x6, 0x8, 0x2}]}}, &(0x7f0000001a40)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfb, 0x4, 0x81, 0x8, "1b8a9131", "2b220ecb"}}, &(0x7f0000001a80)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2c, 0x18, 0x1, 0x5, 0x0, 0x8, 0x1}}}, &(0x7f0000002000)={0x84, &(0x7f0000001b00)={0x0, 0x16, 0xfe, "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"}, &(0x7f0000001c40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000001c80)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000001cc0)={0x20, 0x0, 0x4, {0x0, 0x3}}, &(0x7f0000001d00)={0x20, 0x0, 0x4, {0x80, 0x40}}, &(0x7f0000001d40)={0x40, 0x7, 0x2, 0x4}, &(0x7f0000001d80)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000001dc0)={0x40, 0xb, 0x2, "c5d7"}, &(0x7f0000001e00)={0x40, 0xf, 0x2}, &(0x7f0000001e40)={0x40, 0x13, 0x6, @remote}, &(0x7f0000001e80)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f0000001ec0)={0x40, 0x19, 0x2, "f704"}, &(0x7f0000001f00)={0x40, 0x1a, 0x2, 0x7f}, &(0x7f0000001f40)={0x40, 0x1c, 0x1, 0xfd}, &(0x7f0000001f80)={0x40, 0x1e, 0x1}, &(0x7f0000001fc0)={0x40, 0x21, 0x1, 0x4}}) 46.826292842s ago: executing program 2 (id=199): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, &(0x7f0000000380)=0x0, &(0x7f0000000340)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r6, 0xae03, 0x23) io_uring_enter(r3, 0x6b02, 0xfffffffe, 0x1, 0x0, 0x0) 45.534938607s ago: executing program 0 (id=200): socket$inet(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0xffd}, 0x2a, 0x0) r2 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0x5ba8, 0xfffffffffffffffd) keyctl$read(0xb, r2, &(0x7f0000000240)=""/112, 0x349b7f55) r3 = socket$netlink(0x10, 0x3, 0x15) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RLINK(r4, 0x0, 0x0) writev(r3, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r5, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000040)={0x48, 0x2, r6}) ustat(0x801, &(0x7f0000000300)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 45.446479481s ago: executing program 1 (id=201): r0 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYRES16=r5, @ANYBLOB="010000000000fdffffff0f0000001800078008"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, 0x0, 0x0) set_mempolicy_home_node(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x300, 0x0) modify_ldt$write(0x1, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002080)="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", 0x2000, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000013000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="28150000020000000c001aab0600058004c601"], 0x2c}, 0x1, 0x0, 0x0, 0x4048904}, 0x4) r6 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r7 = signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) r8 = syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r8, 0x21, &(0x7f0000000440)=r7, 0x1) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f00000000c0)={0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e64"], 0x48}}, 0x0) sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) 45.280878005s ago: executing program 5 (id=202): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76, 0x0, 0x0, 0x20}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000600)={{0xa, 0x4e24, 0x8, @local}, {0xa, 0x0, 0x0, @empty}, 0x1, {[0x0, 0x0, 0x0, 0x0, 0x3]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd3, &(0x7f00000000c0)={{0xa, 0x0, 0x2d3, @local}, {0xa, 0x4e21, 0x0, @empty}, 0xffffffffffffffff, {[0x0, 0x1ff, 0x0, 0x0, 0x0, 0xe3, 0xc]}}, 0x5c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3000001, 0x31, 0xffffffffffffffff, 0x0) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) r8 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000240), 0x2001, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000015"], 0x188}}, 0x0) syz_usb_connect(0x5, 0x3d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001b1fb66101e090300bb350102030109022b0001080540040904ce01026fda0d000705f71f22810b09050c02"], 0x0) setsockopt$sock_int(r5, 0x1, 0x1, &(0x7f0000000280)=0x6, 0x4) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$inet(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 44.593154566s ago: executing program 2 (id=203): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = socket(0x400000000010, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r3, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002000a00000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) write(r2, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r2) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/67, 0x0, 0x4000}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 43.618799583s ago: executing program 3 (id=204): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xb8, &(0x7f0000000140), &(0x7f00000000c0)=0x4) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) r2 = socket(0x10, 0x80002, 0x0) syz_usb_connect(0x2, 0x58, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000012e7c820dd0407808edf0102030109024600010000000a09047ef30002060000052406000005240048000d240f01060000000300500036052406000105260009000d240f"], 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x8000) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) accept4(r1, &(0x7f0000000380)=@qipcrtr, &(0x7f0000000400)=0x80, 0x800) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0) sendmsg$key(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000001200)={0x2, 0x14, 0xd, 0x2, 0x4, 0x0, 0x70bd2a, 0x25dfdbfd, [@sadb_x_sec_ctx={0x1, 0x18, 0x5, 0x1f}, @sadb_key={0x1, 0x9}]}, 0x20}}, 0x80) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000000)={0x3, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000001040)={0x3, {{0x2, 0x0, @multicast1}}}, 0x88) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000300)={@cgroup=r5, 0xc, 0x0, 0x25d4, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000180), &(0x7f00000002c0)}, 0x40) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a00000000000000000700", @ANYRES32=r8], 0x44}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0xffffffff, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 43.161506203s ago: executing program 0 (id=205): io_setup(0x2007, &(0x7f0000000200)=0x0) r1 = eventfd2(0x0, 0x800) io_submit(r0, 0x1, &(0x7f0000000540)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000240)="7a8c06bd91b4f3b7", 0x8, 0x7, 0x0, 0x1, r1}]) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000001c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r6, 0x8008ae9d, &(0x7f0000000f80)=""/4096) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f00000004c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x2, r7, r5, 0x0, 0x0, 0x0, 0x4, {0x4, 0x1, 0x3, 0x69, 0x200, 0x0, 0x2, 0x5, 0x4cab, 0xe156, 0x0, 0x0, 0x0, 0x0, "fe1d0e1cff001704000000341300"}}) syz_usb_connect(0x0, 0x24, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000dc3f6e4013080100083a000000010902120001000000000904"], 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x84500, 0x88) getdents(r8, &(0x7f0000000280)=""/62, 0x3e) 42.394752239s ago: executing program 2 (id=206): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setxattr$incfs_metadata(0x0, 0x0, 0x0, 0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) r2 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000180)=0x70) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) close(r3) write$dsp(r2, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c0928", 0x18) syz_usb_connect(0x5, 0x3f, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000), 0x4) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r4, 0x0, 0x0) 41.702270121s ago: executing program 5 (id=207): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='net_prio.prioidx\x00', 0x275a, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f0000000000)={r3, 0x7, 0x2}) ioctl$KVM_SET_IRQCHIP(r2, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r2, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0xfe}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0) timerfd_gettime(r0, &(0x7f0000000040)) r4 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0xc8841) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) write$binfmt_elf32(r0, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x90, 0x0, 0x0, 0x3, 0x3, 0x6, 0x0, 0x3a2, 0x38, 0x233, 0x7e, 0x4, 0x20, 0x1, 0x200, 0x400, 0x100}, [{0x6474e551, 0x2, 0xf2d, 0x11502171, 0x1, 0xffff, 0xe, 0x7fff}], "2b7fe797b95e9809eb793c7bc2e2d47c587961167d5f19a2e09d74ec684b0b5b1a4c5e09526dc1e5b46025a0122971509d754e41df37410f902eb146917b1adb0f17c97bd2a481ef66ad2fd95a1cb1801cfada4d007e93c0e8c0220e4813613d1c4b453df6e395cf1668a79f79288488055b3aac48c4940db6910943007559fdf3a7b0c3fd3342f8ac1dccea9a425033e116658ba233eec0ebbef1e222408e45ee08ee75522af5e731", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x701) ioctl$LOOP_SET_CAPACITY(r4, 0x4c07) syz_io_uring_setup(0x4cf2, &(0x7f0000010140)={0x0, 0xa9ee, 0x4, 0x8000001, 0x110, 0x0, r0}, &(0x7f0000000140), 0x0) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) 41.211505627s ago: executing program 5 (id=208): r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, r0, 0x800, 0xd2, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x31}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfffffffe}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xb0}, 0x1, 0x0, 0x0, 0x24004000}, 0x20000000) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5616}}, './file0\x00'}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2080000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r2, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xc}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x7}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x4004810) sendmsg$NFT_BATCH(r1, &(0x7f0000000840)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000800)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELFLOWTABLE={0x130, 0x18, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0xcc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xee5}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_batadv\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'wlan1\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'wg0\x00'}, {0x14, 0x1, 'xfrm0\x00'}, {0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x308, 0x8, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2b4, 0x4, 0x0, 0x1, [{0x9c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x8c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x77, 0x3, "091304952db3d3a596fed797e94a9fb3023fdc42d8810f8aba58ea552e196a9b55d7f7fe8f7f3862d04e9f6f7e07af73308b41955e9bc1cd8185b4ffebf00259a15cf8d786ceffe7e4393a666a3c824ab9ddc04272cff6ecc7518fc7aa08ded142c3767640dfb86d95bd4dc4e52061e8252287"}, @NFTA_TARGET_INFO={0x7, 0x3, "6e387f"}, @NFTA_TARGET_NAME={0x7, 0x1, 'CT\x00'}]}}}, {0x30, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x188, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x178, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SREG_DATA={0x8, 0x5, 0x1, 0x0, 0xa}, @NFTA_DYNSET_EXPRESSIONS={0x16c, 0xa, 0x0, 0x1, [{0x5c, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x1e, 0x3, "9c09ce4aefb110339026b7e8e2e5eb6011c0b756e5074f37fb53"}, @NFTA_TARGET_NAME={0x10, 0x1, 'CONNSECMARK\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_NAME={0x7, 0x1, 'CT\x00'}, @NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_SREG={0x8, 0x7, 0x1, 0x0, 0x17}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}, {0x34, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @exthdr={{0xb}, @void}}, {0x14, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @objref={{0xb}, @void}}, {0x4c, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LAST_MSECS={0xc, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}]}]}}}, {0x5c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x460}, 0x1, 0x0, 0x0, 0x40000}, 0x20000084) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, &(0x7f0000000880)=0x3, 0x101, 0x5) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000940)=[@text64={0x40, &(0x7f00000008c0)="66430f1ecdb93c0900000f32c421f95b48fb0f20d835200000000f22d866baf80cb876856484ef66bafc0c66b80b0066ef48b8364a0000000000000f23c80f21f8350c00b0000f23f866420f7595f27f000066b817008ed8b9800000c00f3235000800000f3036440f30", 0x6a}], 0x1, 0x20, &(0x7f0000000980)=[@cr4={0x1, 0x200000}], 0x1) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a00), r1) sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000c00)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x178, r3, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x26}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x118, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'ib', 0x3a, 'veth1_macvtap\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4c}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x8, @mcast2, 0x359e5701}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @local, 0xb6}}, {0x14, 0x2, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6ce}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x8000, @remote, 0x96}}}}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x44045}, 0x20004804) fcntl$addseals(r1, 0x409, 0x5) sendto$inet(r1, &(0x7f0000000c40)="2240d118b2bb5e80ac54f035a2557681ede797e62e39272da92769dcfd41c8f6c2877dad51d6332d8ef85b692cb4893db47acd174aa79dec7797208e573ac815eb7aa8c1f201c2927f405c9ea9a789c1560497078ce2bf20c57265e76eb4e8a55f048db7da2154a34b406c0ea498260d613ea2fb6341d2b513dc0a0ac9bfc29200983c49", 0x84, 0x8004854, 0x0, 0x0) r4 = accept4$inet(r1, &(0x7f0000000d00)={0x2, 0x0, @multicast1}, &(0x7f0000000d40)=0x10, 0x0) connect$inet(r1, &(0x7f0000000d80)={0x2, 0x4e24, @broadcast}, 0x10) ioctl$EXT4_IOC_GROUP_EXTEND(r4, 0x40086607, &(0x7f0000000dc0)=0x8000000000000000) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000e00), r1) getsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f0000000e80)={@private2, 0x0}, &(0x7f0000000ec0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)=@newneigh={0x64, 0x1c, 0x8, 0x70bd25, 0x25dfdbfb, {0x1c, 0x0, 0x0, r6, 0x10, 0x3, 0x6}, [@NDA_CACHEINFO={0x14, 0x3, {0x2, 0xb, 0x1, 0x10000}}, @NDA_PORT={0x6, 0x6, 0x4e20}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_FLAGS_EXT={0x8}, @NDA_SRC_VNI={0x8, 0xb, 0x1f9}, @NDA_CACHEINFO={0x14, 0x3, {0x40d5, 0xc, 0x7, 0x2}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x20008850) fcntl$getownex(r1, 0x10, &(0x7f0000001000)={0x0, 0x0}) read$FUSE(r1, &(0x7f0000001040)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$DRM_IOCTL_GET_CLIENT(r1, 0xc0286405, &(0x7f0000003080)={0x8ef, 0xffe7, {r7}, {r8}, 0x5, 0x9}) ioctl$PPPIOCDISCONN(r1, 0x7439) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x2) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f00000031c0)={&(0x7f00000030c0), 0xc, &(0x7f0000003180)={&(0x7f0000003100)={0x68, r5, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x4814) setns(r1, 0x20000) write$P9_RSETATTR(r1, &(0x7f0000003200)={0x7, 0x1b, 0x2}, 0x7) syz_io_uring_setup(0x2c3c, &(0x7f0000003240)={0x0, 0xb325, 0x80, 0x1, 0x20b, 0x0, r1}, &(0x7f00000032c0), &(0x7f0000003300)) pipe2$9p(&(0x7f0000003340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_RXATTRWALK(r9, &(0x7f0000003380)={0xf, 0x1f, 0x1, 0x2}, 0xf) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000033c0)={0xff, 0x9, 0x2, 0x1, 0x1}) 41.167322971s ago: executing program 0 (id=209): r0 = syz_usb_connect$cdc_ecm(0x0, 0x60, &(0x7f0000000280)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0xfffffffffffffeb1, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x16, 0x2, 0x2, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "a650ddfd0300"}, {0x5}, {0xd}, [@acm={0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x0, 0x8}}]}}}]}}]}}, 0x0) (async) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000380)={0xa, &(0x7f0000000300)=[{0x9, 0x9, 0x5, 0xffff7fff}, {0xde7, 0x4, 0x1, 0x7}, {0x401, 0x7, 0x89, 0x8}, {0x4, 0x6, 0x4, 0x7}, {0x7, 0x9, 0x5, 0xe}, {0x945, 0x1, 0x7, 0x8}, {0x101, 0x6, 0x8, 0xfffffff7}, {0x706, 0x81, 0x2b, 0x10000}, {0x2, 0x91, 0x7, 0x707}, {0x0, 0xc, 0x40, 0x2}]}, 0x10) r2 = socket(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x3, 0x0, 0x7ff, 0x1}, 0x1, 0xfffffffc, 0x0, 0x0, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0xfffffffc, 0x0, 0xff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x20, 0x8, 0x70, {0x70, 0x22, "6212d738778e57c7a794a7d6c268a066b70722b49db7f159fd2b78159e8bb1ecac4c1694ae71a654cd86eb51e4235ea9920f2abb3ff1a0e1b84550464cad352a13b93205c8828812d1d3b69dac1ecf0da8fc454d23a1f0d31677876564392111fb52d865835138d2748e588a95d1"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000001c0)={0x1c, &(0x7f0000000100)={0x0, 0x13, 0x8, "13c9c5ab2f4802b9"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0xa}}) 40.755052177s ago: executing program 5 (id=210): syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x5b15, 0x0) 39.728103967s ago: executing program 1 (id=211): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) (async) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) (async) io_setup(0x4809, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000700)=[&(0x7f00000002c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) 39.294266431s ago: executing program 0 (id=212): syz_usb_connect$cdc_ncm(0x0, 0x72, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) sendfile(r2, r1, &(0x7f00000002c0)=0xb, 0x8) socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000840)="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", 0x1000}], 0x1}, 0x40) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x3, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_usb_connect(0x2, 0x9a2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000d0241710d8050a81b892000000010902900902000000000904"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x28}}, 0x0) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)=""/185) socket$netlink(0x10, 0x3, 0x0) 38.985782113s ago: executing program 3 (id=213): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) dup(r0) socket$inet6_sctp(0xa, 0x801, 0x84) (async, rerun: 64) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "5d9bc136c963254c661fb620148b6f72ca6ae2a44829bfa79ec13499f8ec9077d85d879711d98bb1687ad36dfe5f14a7b0ce15c1e6be0e7ecabfdfde0dfa00b1"}, 0x48, 0xffffffffffffffff) (async, rerun: 32) r2 = syz_open_dev$mouse(&(0x7f00000001c0), 0x7a, 0x129641) (rerun: 32) keyctl$KEYCTL_WATCH_KEY(0x6, r1, r2, 0xac) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x1) (async, rerun: 64) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000100)) (async) syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) (async) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000280)={0x0, 0x9}, &(0x7f0000000300)=0x8) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0) 38.882565624s ago: executing program 5 (id=214): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x5, 0x6fc2, 0x0, {0x6000, 0x1}, {0x51, 0x2}, @rumble={0x8, 0xff33}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x100000a2, 0xca66, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b753b5086d049608113a01020301090257b774b895"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b27, &(0x7f0000000040)) bpf$ITER_CREATE(0x21, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$cgroup_pid(r6, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, 0x0, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x20280, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) unshare(0x50040080) 38.663933485s ago: executing program 2 (id=215): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x10000) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1}}}}}}, 0x0) r2 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x29cc, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x567, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 38.468264336s ago: executing program 3 (id=216): r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000004, 0x42010, r0, 0x8d8dc000) sendfile(r0, r0, &(0x7f0000000040)=0xf65f, 0x4) (async) r1 = signalfd(r0, &(0x7f0000000080)={[0x6]}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7ff, 0xffff, 0x144, 0x24108, r1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x8, @void, @value, @void, @value}, 0x50) r2 = ioctl$UDMABUF_CREATE_LIST(r1, 0x40087543, &(0x7f0000000140)={0x0, 0x2, [{r1, 0x0, 0xfffefffef1002000, 0x8000}, {r1, 0x0, 0x2000, 0x1000}]}) sendfile(r2, r0, &(0x7f0000000180), 0x9) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000440)={0x4, 0x0, [{0xd000, 0x3f, &(0x7f00000001c0)=""/63}, {0x8001002, 0x38, &(0x7f0000000200)=""/56}, {0x6184d99cadad0500, 0xd3, &(0x7f0000000240)=""/211}, {0x4000, 0xd4, &(0x7f0000000340)=""/212}]}) (async) r3 = syz_open_dev$vcsu(&(0x7f0000000500), 0x25, 0x280000) sendmsg$nl_generic(r3, &(0x7f0000000a00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000580)={0x42c, 0x29, 0x0, 0x70bd27, 0x25dfdbfe, {0x4}, [@nested={0xc3, 0x12f, 0x0, 0x1, [@generic="f64d203bd4741fc8b71e15b0f42d1fc6e463967e87d2552a944c847bc7176ef4a811c12d9bf6f44e30c74c5b5ca7ecf16d7d2c53950fa8ee25e7564a7757b275f0184a1e569c0371cb6357b3c17a50de534835fd2c69007e88d046424fee707c50540e0c6cf9bf20582efab687b7b0b0e61be87ea5092c5059f95f7304e7d77ef3cb64b06520bca76bcc9f083f7622c21a1af49a10281b5961f8db9578b5342121a274b5c5a52d0383614acb444218c4336f8c6bc664bfec117da171416d12"]}, @nested={0x27c, 0x110, 0x0, 0x1, [@generic="52395a4507848395337d9e51258634640046c835d2b140170dc37a18347d593802fe0e3968c6cc2ef594f4c898f98b9980c94d2355d70035a14df05a4469db688c5db6a92ba954434fc01157e212b9dde7a81585d691f02e73007af77dd8b12414551507e079fce03c7fc7c540fd85080219959415ea57582d590a4c37a497bd161cce1fc8b1a29c1b4a1b3f77f4483420c1ceb80d47614e1de83afedebebd7ad03552cad2c033d04af4f066e01b04a251ae72d454f3ac1919cf12de", @nested={0x4, 0x90}, @generic="9fd6c3a003632dcd944b2624d1d0441b5723643c38873c33b0a101e8b8cd3a96f20fa95063508a804f19e52936e15da51e7f833eb83533cacb052f5a180b70fbd3d7f15ee98f2e7ca2990dedecc33a7871b75f534073952f6bb021b8a6e97db3a10d7beb82589cd070c1e2efb1b368b206aae6a76ba9608712ea777939e8b6f6e169840168c5a30c6620ead9af93f306cba61650b13bb1489d8ae8d09996a3b8c24e316b045a5b7554e13dbdd052c18144edc177cbf40e85db237a6332aa1fb8a540892c86648e0a3757a294e77a5aba30fb0f6d96ba", @typed={0x14, 0x136, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="668b9163edc1c70e649897504d0dcc0c721f7d0108e4fce1d101701a8936eba89bf61ebfe430bcb0c9ac2d52983df1e1b676039177902450581462997253adb5d89141bd0dfba8d9266891a99661001336a568cdbeee55873a560492846b153728fe2e7c6b4f16bf773c9bdb176781aca949703da936094524335307301588629537a42175c6e6a96ddffe6d52be04468c0b5cdb8746af9dc4e55478ec54ba4c111d256ef4c5758c25c0d51e86e62b2517dc", @nested={0x4, 0x66}, @nested={0x4, 0x58}, @typed={0x14, 0x8e, 0x0, 0x0, @ipv6=@private0}]}, @generic="ff795163674c6da8ff84f208eff1ebc1e1824be82bc91acc88dd222673a2d5ac3c16e77b90e5f61599e1d9c771c7bca1984467bda74ae45f5c904a93d50f8bb51216f23b540f2b0bbd522ecda8beb7c43d8795d358cc14c76cca8c8525027844bb9ebff2736d404f6078301127850ee40c90cd2e79231a59f78ab165a265e4183d21b29a6fa10a68e3cbb616f30bc98cc235aa4d609516135e7c1acaaf793d9497627b064e617c56b743699dc49546d8a5092d94203f5feea8bdb60e8ec7db244205be280c43e365d7b6a48aee17dc2255c90d", @typed={0x4, 0x137}]}, 0x42c}, 0x1, 0x0, 0x0, 0x4000}, 0x890) (async) r4 = socket$inet6(0xa, 0x4, 0x40) sendto$inet6(r4, &(0x7f0000000a40)="f16364ec87c24b78b23a1a5e2ed72d01edb8abfb570babbb31dfdb3194c1e2d88f5dd8bb405f950db07d1f48a7444705e63423e71b9edf5614b97e298fd120d45b3fa25beaae3075499c5a0db46c95ead8935bb3f60e66d16f0f2d12fd0fd7d96047b2bcb9b89a460032e80e0fa45077c6e377b31771d2cd57db9211ba6aa60557bed7c2e3e620211d946c701124f219b75eb1e9298970f3f15a170cc269ab9c6dfc80257dce0c2887cc5e62c316c90bf11e7556d703e6a0b106ba89d009840abec9453430a8e3315b4562634876e942ccdcb3ed46598ea4dfcc492223d4af2eff1c1fa313f81faaa25956ca0f3f5819f76fa651e9c91df972acf16e63b3c76dca4c946e6aa9a2ad2c997bd805c7ecb1703e748112f6b711ed3f5fda344c5d142d13cf886202331a1876a54bd6b18e805da499d0cc12bc2f1f6022867b82c7f6ca23907d6ba9e8e2e01201d49e9c57dad8c0b47a2fe92881d9b1e9c8b6b3f087f2c7844775d791b2ba9ad848df85ecf900d4e98769f6cf81c29117de23a8852a3e37aa3355b0b6398bff26777017fbf1992ccd6278f5fc125d72a3987ccf7621e7601d69ad671105c74a272bd42f34372292fff869386dcc1afa399fb1248efa1c18a3843ae494b4cf2a2ad5e2c8933670612f2a4d6dca96cbcae66ccb2c42a059c0e77d79098e38f23f6260358151c9f9ae965d38aa5a9bb0f0bad221c782c2b6bc05ec2a8fd24b8d92ec505d0b717d7c59137093acae60d539dd5f3ddd7e913c5e5651a467bfc4e3d3c65871fbcacd8a87b68afed79b474caf32dd74da209b9177ea4179ff9ebfb3aec568fb2a48ccfe2d315d98d226e499d3c44fd4fb51493e3cad3b3c7b62dbbcf30f179fe4b5de3f9ec3db522192c39195cc6c09c25d7c56d89029e7fe037fffe1d9bf236bad6c5e621fc6d13406caf20a28b54890ec57313b88b811a86a46afb87f580411b94fb44313147814398015f45d243bac09947fd44fb8b1047f6dfe02084944029b54de94ccbaf50cb2eb90623ce54089ceebf4472412106d8fe82a383bf890be45f9ff0aaa1106eafc80930a4c25cae11ebfc67ad3132c44d2e1670f537ee8ebd273e02c12ddf0102f8452481bbd5ae2163047c18e441977de09a6379c25d6271f4a6def4b9caa320c9e912cf5ea2d2129c9eaaa2ac9821e813ea0a27a421ccdf4180b37c8d30a97f8106ca41d281bc2981319939b9c073b7f537e15abca17c1adc288b3bebf31f48c4f1a1bcd4363fcf8e2f20f2625de863baa3937e1a31d9742ba20f0a95d3ca32e22df21675542eb61788fefdf8b6fba17e7ddf3dfc752a06bc418e5b5b8a23a2a44f79880360bf598ab16388a89ec09c7f31bed3c3ca928a50a69685cb8ae808542fe16e12cf1c92dda8c88c7216aab453debb6d9acfd3c7b6718c1aa9d070d7fed5aced1b8c707df2d591d74587917f0c3caba362154fe194052c5733d4c9911eddba1af05a377e5ef8c84b04cc184c4ffaf7c1efe86ee18869276ecdbb2e30daad48ca4685118c8790b556cc5a5396afedef38d2a6b7eeb237780076274dcba322e5b759c099f8fabd51124f262dde286a359f57a348c40146c2d032e49b59c548c5b75e9a79552e920de056326f0b96f22e1733f3e2eca8369a99a25fd79cd875a6c14557d3e33d3310a32235cdb63e1d1a58a627f8ab860a6c14d785d969eb1baa143b4c3a4eaaa01c520f2330415e63707af201ac1d4d849d913ddaa7fcd5888e85a46fe07a4fce2f99144b7b2ff8523d8d505979f368c3cac4f995671763748136c223dea93aca2a07abc4572532ea5da26d6c9805793716d32ec6cb29805b828de71cd5e939815a17d2441cc070ff0e4eaf3073fccc383583fa65973705462eb625e8854d90dceb688fc4841cb38e2108434279711c884b56772afa2bafd092a19580c8a3eb19d4b9433a747be214182da5e87dc136fd8e7ef1502926234cebe164f5c4abd88d6fa711ca527bf438c29814b11c7e0c0d86c7bb095328f4a9c17cba16068f7b52d93721c447eb76e2ad5ae312272573f0bfade3dba54ebd086eecda525179ed1f4415d54b4dde91dc7656b5a757066725ebf8552e6bf543001044b131c12a3c7e870fff263e629078f6a8b78de41c2c5ec8c56cee8e5d4dfa78b2d17f0f818c57b1c38be546d58532b27dbbec2a9afac9257581cf76fb64bc7261032cb622b6dccfcf61ef633a5b4f3f56488997268fc0072592ca5c60e0626d110dcbd3519594c4b7aa9529eb15c0b3b985f9a04bcf1cf7953900ac82f2606b4c84b3c06c56be6f80de08aa06585b83f4c6e5625ca90761088e0cdb8349ac2f0877dd56ccb9ff38934b09ac79111b1ecbd9d3d75d14ffec2d62300b3d193cf3091d363d940eb15453120e900316e3e2a4237204b8b6f3634f6e6f9feb0e6c99f72b8d0b21d2c512fec401a9cda8e297b690232662c0bfef770a60a513176783c4f12efc85986516322ab43a02f771175438941e7950c708295fc6b316e8473a4c009b71114f4d01fafb2a94cc6a68431eeada2a859bf87c9959555f21f13f46edc9e62ad53b071b34a8b200c55ee5276462af3a03b7547e0d9a19dc38c2e9d4e3b638f3e6f4bf592b610dea54c31defcd7a77cf3c156059be5d11bc9d6f96f775dd5492eb15e92493599035df7d5002c8a91cc939a36d818e47a9323a51ead96b019cceabde031f435c9acd4c8247eade48fbca1304ff833308d240a1cf3fd134b45f217829f0587bf1e65ccebb4a45465b96b75a2c4a07db7e1c2a3fe3a9958824ec15efc29baca689e2db71ff268a4fdf994e321f5144044efd37dd1a94d40cbc64defee03056f1416cec994bd9ffa8860d9cf8832f2cc13b8ded2ebcc8fdc17a4f2389cc3a0e29eda7b239f985a22d5e37b0e511feeae5c6907951c4d9552d614c541794d00e51e49733e10e67960c9510ec81fb16ff605304b743c57f29d89633d966723e547d23d87c7ca1c9929c619a451035cd74c619ff6b384f3bd0c13c7a095b93d733e5a393e741c01214a36207ef8da43b6eb652c08baa9befb115e56f4f8016632ce37daae39d79914111f4a8c35e6be528b20da90badaeff58f89a1c4d6fb7c9a72dd822cd566272f9573e649ae0951185918c9e694f2f1686ca0a2bf30e088bcae5e42812828b77ae5c6d9748cee733942ab35576251e2e3ef21d3666083157f49f0deb7658f82960bde093b1e3eedc6dc9314c99f5d63ee31cdec3a1aba9e7724ecfdb910412af6d11437ef7ea7d3f897c998d82c096938ccdaa695993ba24fdaee7706e22446c8fe55097af14c7845718b289ba4b58823c873b81a684f701592a249d17bec4ecd3527cb4bd3a3d7a57b433d6ef54c3ec059327d2bb946d37b87fe0aebbd590925abb9b670fa54400608d4af2c5e871170fde899cdd2a94cf6007785395ea8fc35423c52f62f6d49460c6fd49e3b6775e74f75ae88fc80dc51099cfe7fdcecb9ebcd370594852d01188043f84b02ced69f8d6bbd14fb0c9b9a4ef31b27dd69f31ef3fd6c355a66b8a1a128f1652747d54e2aff93c3316c20676e0c58092086d08fc77ede7597af7b48afd615e9d3588c96e150d020bdbe447485faf8e0b55301b853ea3961dcde5b1b2f05afa1b84bda827920d596eca7629d6035f74ff81e710d36c66e89b78f50e294cac2f4d88b718794c4a2f869f452e85a885af12f625583ab294d88a29b423d294a811cbc477b2be4da1a03e89644b94455be600e8ea661963cae8c7cd83481d7f0069f080aee5cfbc07ff8e9475525255247ee3c440071394ff762ed841842fc31c2fa76b69a9abfa67ae85d5253901849f79c6957009ead6919008b585828b2a892b204d0aac5ff94d79a4dc3a03f72b9826c6804f021d6aeeab5ee3ec387007bfcd6d09c65047d49f16437c09887d87bd72a3dc05be76d758bc8a9f0bfac87499c13e40f7c5f196942b570134aee263202ea50fb882209c79a7e290fd69e8d4fe18dd3a6bc6d58f5aa6942659b0a7a7186d7ca6fc5bf48529462855fe1a449968d59a1da02612e0a2dce0ccc0e99d3738127835a217c659d00c03756bb2e7b6f52f94f9350875197636742411266292603925de63e4d3f1cc998abbb8fdb83dc2eea6a77c7733b3cd147c71f280f704ff7e8c34ed3edb1053a7044628dc6b14dedeca3c567c9e4f2695fb15e99aae545023de7c484d0c18af14d8c34f7cfd356b8ece9a7185ad02b95d2465ed3df27bd944f0b0ef5567fb504d1ee8ecaa91321e6e0f37974ed0a6f7cbc5e3a34c4fe86b55b7eccd1a841cf3f20d18007a4f7ad191292b2a7ab5c1cfd87488641c94986c979009dfa49961efdc8e2712cca321e7d05b9279b168ec6dc958bc5aa2591a876bff7c6c5af6bc42b04cffb063c336bd7ae1fa0bdf0bedb15c6cea5c650b0a1a0ade0716acadf0d7fc47e8815bd70e85d558010f103cd35bdbe7e7bcb40287450074d514ba4728af940459e5d426cd9c8bbdd3768b76d15b2b5400d58ef117b2c2609dc84fe3aaac589d71702bcd93244cf7335d667b253fea365964ae74f0b3f1c4ef84913f2317a0cfaf49bc3f56761be8562ef69aadc8ed9e4d0ee3c2592b7c67b8f08ae967fb712ab7be0abd02d5d9c5afa6bf116feaeee1943b3effb5a0f2225f4eaae3c02d16a40777d31f5c1812b111966904ebbb89c7325111feeee49826993505514761c89dfa0aff471dc38cd49aa63f9de6eb94b8b83b19e83b48be609a94971c4787ccbd44e4caaa18d7e475b5dcb42f85d2862c56882deb70a96146e7a872a654aa3bfb78d524e994db484bc5cd1833322c2f0d8c8763bef72d3ad500833fbcb68b3e7ce551a58900a0223ae0abfa3991df33ba5e1a8d7b4f3b1922aa3f6b1090277371521b2a2869ed4cd010c3db3086779d255e5b1d6305b59c82a95b23b04b31435fa20c4c556a1058eaf9f809aaa5599bc4d0d5bc5e9f9f9bea5c3af2f8574743a9473ac7218537d213e420344ea68c77f32d48a50fbc71520eb2de81cf6506ff250a70a653ce847b3e88dbdcfa0a66183c8da226376f8fe68ef96e9281b3f0944d16bf4e476a6db322a81ed2181aa4963e8b37fd6b1062b44dc3f00e3afe240a8d9552cc5c069957f5f7e9753e04134db0609124a3056e9fd132d050c11387efae3cc0d7a8bd11d29c61625e44663d1ec45f8569bd562c6b422b6a668a231eba4620492a85a6d778cd5ec1ec1c2a7fe3fac787bab0106c9f9e973ba2a67c421c336ab1ddb438ba1d032e894b48c1fc945dddc716343274bb53f6cd61dc1882bf75a6ba321bf8db0d9d81b987f71c17193b1c561ed3aa7a953e0fb43f225a395df5bab50c79eb1b5d7f50d7a1d44382ab448ed63bded447a87fec3403deeb0f19e96349064833f978956c1949a70f5f4d5889a8f59707b0495ac31a0af001ab25c77649d18cbd8b784cadfff9404a919ee15bfa719772d6d56c2333084a138bcf5dfc85f4f040ea2863f473116e15dd15aec8d442720d08cbb73492cd355b2ab7553833a080cb181fa167abe54c7c9d4f120f4ecfb68d45486bc176c3a5b63edb18cf4ecc8770e30105f85b084d75b7d762813a2165de55381361e5de3393e72d28df9221c39804d2556b5b5b3889027e72cb989d4e6da9f0f4aba12fafe30de80d32f2b0ab0f8ac071111f00a40837804bfd1a79294923b01e20c1764e725a93fe9cb1ef1f73cca585e9f9edd0f18df3ac0038204bb4f44e07becbe8420bb703fd6fa8fea5bc2127b933b7748a467834783480b", 0x1000, 0x40000, &(0x7f0000001a40)={0xa, 0x4e24, 0xbdb, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8}, 0x1c) (async) connect$inet(0xffffffffffffffff, &(0x7f0000001a80)={0x2, 0x4e22, @private=0xa010102}, 0x10) (async) bind$inet(r3, &(0x7f0000001ac0)={0x2, 0x4e23, @empty}, 0x10) (async) setsockopt$inet_mreq(r3, 0x0, 0x24, &(0x7f0000001b00)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x8) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000001b40)={'raw\x00', 0x4, [{}, {}, {}, {}]}, 0x68) (async) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) openat$nullb(0xffffffffffffff9c, &(0x7f0000001bc0), 0x180, 0x0) (async) madvise(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3) (async) ioctl$NS_GET_OWNER_UID(r3, 0xb704, &(0x7f0000001c00)=0x0) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000300, r6, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000001c40), 0x600181, 0x0) r7 = socket(0x1e, 0x1, 0x7fff) (async) tee(r3, r2, 0x7, 0x2) (async) recvmmsg(r5, &(0x7f0000003740)=[{{&(0x7f0000001c80)=@xdp, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001d00)=""/78, 0x4e}, {&(0x7f0000001d80)=""/4096, 0x1000}], 0x2, &(0x7f0000002dc0)=""/111, 0x6f}, 0x4}, {{&(0x7f0000002e40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003040)=[{&(0x7f0000002ec0)=""/121, 0x79}, {&(0x7f0000002f40)=""/239, 0xef}], 0x2, &(0x7f0000003080)=""/171, 0xab}}, {{&(0x7f0000003140)=@qipcrtr, 0x80, &(0x7f0000003200)=[{&(0x7f00000031c0)=""/46, 0x2e}], 0x1}}, {{&(0x7f0000003240)=@in, 0x80, &(0x7f0000003680)=[{&(0x7f00000032c0)=""/203, 0xcb}, {&(0x7f00000033c0)=""/78, 0x4e}, {&(0x7f0000003440)=""/206, 0xce}, {&(0x7f0000003540)=""/174, 0xae}, {&(0x7f0000003600)=""/79, 0x4f}], 0x5, &(0x7f0000003700)=""/29, 0x1d}, 0xffffe3fe}], 0x4, 0x2, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000003840)={0xffff, 0x9, 0x820a, 0x0, 0x7f, 0x1f87, 0x2, 0x5}, 0x20) (async) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000003880)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) getrlimit(0x3, &(0x7f00000038c0)) (async) ioctl$SIOCGIFMTU(r8, 0x8921, &(0x7f0000003900)={'veth0_vlan\x00'}) 37.907770873s ago: executing program 3 (id=217): futex(0x0, 0x18b, 0x0, 0x0, &(0x7f0000000100), 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000002100210100000000012000000a000002fe000000000000000800060007000000d189c5629e30263578e5f3b30a"], 0x24}}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c0002"], 0x92fc}}, 0x0) 37.42358774s ago: executing program 3 (id=218): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140), 0x0, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) (async) r6 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x40, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x1000000, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x1ff}}, 0xe8) (async) sendmmsg(r6, &(0x7f0000000480), 0x21, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) r7 = socket(0x1e, 0x1, 0x0) getpeername$packet(r7, 0x0, 0x0) (async) r8 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x5, 0xfffffffffffffffc}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000900)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) r9 = syz_io_uring_setup(0x1d3e, &(0x7f0000000240)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x403}) (async) io_uring_enter(r9, 0x2def, 0x0, 0x0, 0x0, 0x0) preadv2(r4, &(0x7f0000000100)=[{&(0x7f0000000040)=""/86, 0x56}], 0x1, 0xffff, 0x2, 0x1) (async) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) (async) epoll_wait(r0, 0x0, 0x0, 0x400) 37.115525434s ago: executing program 1 (id=219): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8918, &(0x7f0000000480)={'veth1_macvtap\x00', {0x2, 0x0, @empty=0xcf050000}}) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) fcntl$getflags(r0, 0x408) 30.410625556s ago: executing program 2 (id=220): mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x3, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="1b8d7a", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000080)={0x1, @output={0x1000, 0x0, {0xffffffe0, 0xea}, 0xfffffff7, 0xffffffff}}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast1, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="796042138b34020dd0917abe9d3552dd9653a7fe731077ad9ca75c8a9402c5ef07c2e8a929f3042d8d64ac5f40", 0x2d}], 0x1, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xcd}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1e50}}, @txtime={{0x18, 0x1, 0x3d, 0xf}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0xbfb0}}], 0xd8}, 0x22000805) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socket(0x22, 0x2, 0x2) r5 = socket(0x22, 0x2, 0x1) close(r5) syz_usb_connect(0x4, 0x6a4, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0x8c, 0x29, 0xbb, 0x8, 0x152d, 0x2566, 0x114, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x692, 0x2, 0xfe, 0x5, 0x90, 0x9, [{{0x9, 0x4, 0xc7, 0x8, 0xb, 0xad, 0x18, 0x82, 0x5, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "c6e87c"}, {0x5, 0x24, 0x0, 0xfffa}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1, 0xa00, 0xfd}, {0x6, 0x24, 0x1a, 0xa, 0x12}, [@obex={0x5, 0x24, 0x15, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x20, 0x7, 0x1, 0x94}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "794484e4a6"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x1f9, 0x8, 0x2}, [@mdlm={0x15, 0x24, 0x12, 0x40}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x3, 0xfff8}]}], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xf8, 0xa, 0x1, [@generic={0x1e, 0x3, "119a41658a3e47ca9b7543e18584ab8f1a0a8629597068d9750f760f"}, @generic={0xfd, 0x11, "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"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x10, 0x2, 0x0, 0xfe, [@generic={0x74, 0x9, "817f3292ace48b910d7e266f9c0fefc2c49d244da9d011118daa071e04a73da2aa034de4be35d9b18e0e43b0d4d323c9ba2f3fc4646af2c877622d6bf43e206b773471323c4ebce590b2502e8bfc615aead8a89b723f43a387e052df5ea406a94d5852485f04f662beeb61376cdb0fba29bf"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x2, 0xb, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa0}]}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0xfb, 0x6, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0xb, 0xa, 0x8}}, {{0x9, 0x5, 0x7, 0x10, 0x0, 0x8, 0x9}}, {{0x9, 0x5, 0x80, 0x18, 0x258, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x1a, 0x3ff, 0x74, 0x5, 0x7f, [@generic={0x51, 0x23, "a7931a850429f0fb9d91623a0380398d1f3c74719e0c58b11e1fa73739a0e2132943caafb173b1ad795d347804bf326490e65391407ad390be4e1bbe16363a092c1b3ba4ae282e2c9b50906dd6bdba"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x0, 0x20, 0xc}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0x6, 0x6, 0x6d}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0xf5, 0x40, 0x3}}]}}, {{0x9, 0x4, 0xfd, 0x5, 0x8, 0x36, 0x7b, 0xc2, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x5}, [@feature_unit={0x11, 0x24, 0x6, 0x3, 0x5, 0x5, [0x1, 0x5, 0x8, 0x8, 0x4], 0x4}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x5, 0x1, "a9d28c7b"}, @processing_unit={0xd, 0x24, 0x7, 0x4, 0x0, 0x3, "6b39a051fdc7"}, @processing_unit={0x8, 0x24, 0x7, 0x1, 0x5, 0x9, 'y'}]}, @uac_control={{0xa, 0x24, 0x1, 0x80, 0x2}, [@extension_unit={0xb, 0x24, 0x8, 0x4, 0x7, 0x4, "3eda7f5b"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x303, 0x3, 0x6, 0xe5}]}], [{{0x9, 0x5, 0xc, 0x8, 0x200, 0x80, 0x3, 0x6, [@generic={0xeb, 0x28, "061354b017b41cff43a323efaf1a21f31e50e009cb68f197af88ef56f399c9b21da38494560a02c10cf031c5d7baafa7dd493f0823b4863ca5498a77f924869dc32677b02321340eedb81e685597646660259aad5c4ab813c8d6971eabbae96b7a6783bb013aaf410c0a19baefff9109f8454239fae60673b25dfa7237d71c3a3a7f075756f86b54631b3f477d717450c791e4661c8c52b54483ead58629751d5e7a2759aa6ca6894863ce5ce54a2aa2da2e74b4123f56ee6d21793a7710bd614f72024eb69e0839a8c5444f6c3bc763194ac0e4380918fd8332da34a86355cfb7be52d2b32fe979a6"}, @generic={0xff, 0x7, "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"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfc}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x8}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x5, 0x9, 0x7f, [@generic={0x32, 0x21, "ed0624d6332d4510ad4107bd6932c6ab3cee3c9229871ef62ad96fff8c5aea69c82edfb84ec5421b8127723df420cfa9"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x0, 0xd, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x71}]}}, {{0x9, 0x5, 0x7, 0xc, 0x20, 0xd, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xf}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x5, 0x0, 0x8}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x0, 0x7, 0x9}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x9, 0x1, 0xc, [@generic={0xf1, 0x9, "6ece22a3dd48551bc51d6838d9284738b286320babaeef43a357497ab90079aa26d1c1a707d383079fba7651eb334b8ef5eb9d65001edc4d99e6a0c965995b53f5cee0e190291977f9c826452ec9011c86577f3c7b11608ea30884b977d9bc055b1e45799f05dbbef7da8249ad3875008955de29afc9d0e9913826eead8a0a23cced5336ea458488d05bd6df610497633c13525b83a2ce600025d48a49c60c0b9bd19a326eac2461d86dc38ed53767dbe87fae2f965a4c48ebb0d2291a369682a245743fd2d529c38cad1322b66fd67aef584ca4baa45eebc1c5305f27b13fb9663f5d75da01ce088e16f6b3dbd52d"}]}}]}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x6, 0x4, 0x3, 0x40, 0x4}, 0x48, &(0x7f0000000f80)={0x5, 0xf, 0x57, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "5a2832688f0ae17e08a0813732f407c0"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "571c65c9fdd34d13765707d4418b830b"}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "382729747bc268c91ea381dee5fa3432"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x5, 0x5}]}, 0x5, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xfcff}}, {0xfffffefa, &(0x7f0000000d40)=@string={0x84, 0x3, "c8e3034738576f3989721b6bcf21f52d8492c13c07cffa6279b86744e16a2df4637027b69246566a4f1e5f876499cfaa6a9cb9ea3d07050d658bc5dfad873aa5585c51a6c08a4c8e7ded194bfff6d4f538fde3ff1ceff2d2ad4b76170828304b9d77acade7d124a9e45191bcb09545a20c7fcb8b08a219dac2daf64dbeada269fa3a"}}, {0xd, &(0x7f0000000e00)=ANY=[@ANYRES32=r2]}]}) r6 = dup3(r4, r3, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000640)={0x3, 0x0, 0x0, 0x0, 0x0, 0x2000000}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r8, 0x0, 0xfffffffffffffffe, 0x10000000006}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r8, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000380)=0x7) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000ec0), 0x10300, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000f00)={{0x1, 0x1, 0x18, r9, {0x1}}, './file0\x00'}) 29.210108489s ago: executing program 1 (id=221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0xff) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000340)={0x2000, 0xe6ef4001, 0x1, 0x1, 0x9}) socket$nl_netfilter(0x10, 0x3, 0xc) 29.2096393s ago: executing program 0 (id=222): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x54}}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x2, 0x0, 0x39, 0x4}]}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) recvmmsg(r2, &(0x7f0000003500)=[{{&(0x7f0000000240)=@ax25={{0x3, @default}, [@netrom, @netrom, @default, @default, @remote, @null, @netrom, @rose]}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)=""/97, 0x61}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f0000000380)=""/163, 0xa3}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000540)=""/223, 0xdf}], 0x6, &(0x7f00000006c0)=""/171, 0xab}, 0x47800000}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/209, 0xd1}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000980)=""/129, 0x81}, {&(0x7f0000000a40)=""/146, 0x92}], 0x4, &(0x7f0000000b40)=""/75, 0x4b}, 0xe}, {{&(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000c40)=""/44, 0x2c}, {&(0x7f0000000c80)=""/93, 0x5d}, {&(0x7f0000000d00)=""/229, 0xe5}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/140, 0x8c}], 0x5, &(0x7f0000001f40)=""/235, 0xeb}, 0x9}, {{&(0x7f0000002040)=@un=@abs, 0x80, &(0x7f0000002200)=[{&(0x7f00000020c0)=""/66, 0x42}, {&(0x7f0000002140)=""/176, 0xb0}], 0x2, &(0x7f0000002240)=""/103, 0x67}, 0xfff}, {{&(0x7f00000022c0)=@vsock, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002340)=""/109, 0x6d}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x2, &(0x7f0000003400)=""/249, 0xf9}}], 0x5, 0x2, &(0x7f0000003640)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@fallback, 0xffffffffffffffff, 0x2e, 0x20, 0xffffffffffffffff, @void, @void, @void, @value=0xffffffffffffffff}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc3, 0xff, 0x6e, 0x40, 0x545, 0x800d, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xe6, 0x34, 0xa7}}]}}]}}, 0x0) sendfile(r0, r2, 0x0, 0xffffffff004) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[], 0x0) 9.435401371s ago: executing program 33 (id=214): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f00000006c0)={0x5, 0x6fc2, 0x0, {0x6000, 0x1}, {0x51, 0x2}, @rumble={0x8, 0xff33}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) keyctl$KEYCTL_MOVE(0x1e, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x100000a2, 0xca66, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000b753b5086d049608113a01020301090257b774b895"], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b27, &(0x7f0000000040)) bpf$ITER_CREATE(0x21, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$cgroup_pid(r6, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000180)=ANY=[], 0x8) setsockopt$inet6_IPV6_DSTOPTS(r7, 0x29, 0x3b, 0x0, 0x0) openat$userio(0xffffffffffffff9c, 0x0, 0x20280, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) unshare(0x50040080) 8.089329048s ago: executing program 34 (id=222): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_IFNAME={0x14, 0x3, 'ip6tnl0\x00'}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x4}}}]}, 0x54}}, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x2, 0x0, 0x39, 0x4}]}) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000500)=@gcm_128={{0x303}, "a95972fc5ec50719", "8e083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "12772541f8eb02bb"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) recvmmsg(r2, &(0x7f0000003500)=[{{&(0x7f0000000240)=@ax25={{0x3, @default}, [@netrom, @netrom, @default, @default, @remote, @null, @netrom, @rose]}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000300)=""/97, 0x61}, {&(0x7f0000000080)=""/28, 0x1c}, {&(0x7f00000001c0)=""/2, 0x2}, {&(0x7f0000000380)=""/163, 0xa3}, {&(0x7f0000000440)=""/188, 0xbc}, {&(0x7f0000000540)=""/223, 0xdf}], 0x6, &(0x7f00000006c0)=""/171, 0xab}, 0x47800000}, {{&(0x7f0000000780)=@xdp, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000800)=""/209, 0xd1}, {&(0x7f0000000900)=""/124, 0x7c}, {&(0x7f0000000980)=""/129, 0x81}, {&(0x7f0000000a40)=""/146, 0x92}], 0x4, &(0x7f0000000b40)=""/75, 0x4b}, 0xe}, {{&(0x7f0000000bc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000000c40)=""/44, 0x2c}, {&(0x7f0000000c80)=""/93, 0x5d}, {&(0x7f0000000d00)=""/229, 0xe5}, {&(0x7f0000000e00)=""/4096, 0x1000}, {&(0x7f0000001e00)=""/140, 0x8c}], 0x5, &(0x7f0000001f40)=""/235, 0xeb}, 0x9}, {{&(0x7f0000002040)=@un=@abs, 0x80, &(0x7f0000002200)=[{&(0x7f00000020c0)=""/66, 0x42}, {&(0x7f0000002140)=""/176, 0xb0}], 0x2, &(0x7f0000002240)=""/103, 0x67}, 0xfff}, {{&(0x7f00000022c0)=@vsock, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002340)=""/109, 0x6d}, {&(0x7f00000023c0)=""/4096, 0x1000}], 0x2, &(0x7f0000003400)=""/249, 0xf9}}], 0x5, 0x2, &(0x7f0000003640)={0x77359400}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@fallback, 0xffffffffffffffff, 0x2e, 0x20, 0xffffffffffffffff, @void, @void, @void, @value=0xffffffffffffffff}, 0x20) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc3, 0xff, 0x6e, 0x40, 0x545, 0x800d, 0x30a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x50, 0x0, [{{0x9, 0x4, 0x4c, 0x0, 0x0, 0xe6, 0x34, 0xa7}}]}}]}}, 0x0) sendfile(r0, r2, 0x0, 0xffffffff004) syz_emit_ethernet(0x7a, &(0x7f0000000540)=ANY=[], 0x0) 7.259443368s ago: executing program 35 (id=221): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000340)=0xff) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000340)={0x2000, 0xe6ef4001, 0x1, 0x1, 0x9}) socket$nl_netfilter(0x10, 0x3, 0xc) 6.944379622s ago: executing program 36 (id=220): mknod(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)=@known='security.apparmor\x00', 0x0, 0x0, 0x1) lsetxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000003c0)=@known='user.incfs.id\x00', 0x0, 0x0, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffe, 0x3, 0x0, @scatter={0x0, 0x3, 0x0}, &(0x7f0000000240)="1b8d7a", 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_PARM(r1, 0xc0cc5616, &(0x7f0000000080)={0x1, @output={0x1000, 0x0, {0xffffffe0, 0xea}, 0xfffffff7, 0xffffffff}}) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast1, 0x1}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="796042138b34020dd0917abe9d3552dd9653a7fe731077ad9ca75c8a9402c5ef07c2e8a929f3042d8d64ac5f40", 0x2d}], 0x1, &(0x7f0000000280)=[@mark={{0x14, 0x1, 0x24, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xcd}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x1e50}}, @txtime={{0x18, 0x1, 0x3d, 0xf}}, @timestamping={{0x14, 0x1, 0x25, 0xffffffff}}, @timestamping={{0x14, 0x1, 0x25, 0xbfb0}}], 0xd8}, 0x22000805) r2 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcc0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) socket(0x22, 0x2, 0x2) r5 = socket(0x22, 0x2, 0x1) close(r5) syz_usb_connect(0x4, 0x6a4, &(0x7f0000000680)={{0x12, 0x1, 0x250, 0x8c, 0x29, 0xbb, 0x8, 0x152d, 0x2566, 0x114, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x692, 0x2, 0xfe, 0x5, 0x90, 0x9, [{{0x9, 0x4, 0xc7, 0x8, 0xb, 0xad, 0x18, 0x82, 0x5, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "c6e87c"}, {0x5, 0x24, 0x0, 0xfffa}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1, 0xa00, 0xfd}, {0x6, 0x24, 0x1a, 0xa, 0x12}, [@obex={0x5, 0x24, 0x15, 0x3}, @network_terminal={0x7, 0x24, 0xa, 0x20, 0x7, 0x1, 0x94}]}, @cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, "794484e4a6"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x80, 0x1f9, 0x8, 0x2}, [@mdlm={0x15, 0x24, 0x12, 0x40}, @mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x3, 0xfff8}]}], [{{0x9, 0x5, 0x0, 0x0, 0x3ff, 0xf8, 0xa, 0x1, [@generic={0x1e, 0x3, "119a41658a3e47ca9b7543e18584ab8f1a0a8629597068d9750f760f"}, @generic={0xfd, 0x11, "5bfe1cdf8cbbb82f8d29ac2ca51cc3fa0fd2dfaf7322e748b66c0a6beb4034af061fdea24693d8fe5ec9b52a3dcdc7d9959939c5d0f08250ad7d4eee8efcfd0b28af773ad1b67bf5f16eb47a07e4b0809d94d1fb19aa9b0f5e84f347268487de7e654db6621e1b7c59489c76d7843b68d09aff0b3265ef027cce57d92f6cdec2c5f8475b849607cb768b4fe797e8f8d733ba0de858bc77b5b368a570d139b852a0bf1173685f00c0f530a1a85e8e54ff4cfdb7d9511c70ca7519ed9b0f1c6f8ad7c2f709dd200d5a3b5350700e04f0900555a78d59c4ac2060c8110aead1c95338e156effc85a59894ce65aa85fe0b7c74105eb91a3839cf24a567"}]}}, {{0x9, 0x5, 0xa, 0xc, 0x10, 0x2, 0x0, 0xfe, [@generic={0x74, 0x9, "817f3292ace48b910d7e266f9c0fefc2c49d244da9d011118daa071e04a73da2aa034de4be35d9b18e0e43b0d4d323c9ba2f3fc4646af2c877622d6bf43e206b773471323c4ebce590b2502e8bfc615aead8a89b723f43a387e052df5ea406a94d5852485f04f662beeb61376cdb0fba29bf"}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x2, 0xb, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xa0}]}}, {{0x9, 0x5, 0x7, 0x8, 0x40, 0xfb, 0x6, 0x5}}, {{0x9, 0x5, 0xf, 0x0, 0x400, 0xb, 0xa, 0x8}}, {{0x9, 0x5, 0x7, 0x10, 0x0, 0x8, 0x9}}, {{0x9, 0x5, 0x80, 0x18, 0x258, 0x0, 0x6}}, {{0x9, 0x5, 0x0, 0x1a, 0x3ff, 0x74, 0x5, 0x7f, [@generic={0x51, 0x23, "a7931a850429f0fb9d91623a0380398d1f3c74719e0c58b11e1fa73739a0e2132943caafb173b1ad795d347804bf326490e65391407ad390be4e1bbe16363a092c1b3ba4ae282e2c9b50906dd6bdba"}]}}, {{0x9, 0x5, 0x2, 0x4, 0x3ff, 0x0, 0x20, 0xc}}, {{0x9, 0x5, 0xd, 0x1, 0x3ff, 0x6, 0x6, 0x6d}}, {{0x9, 0x5, 0x0, 0x4, 0x400, 0xf5, 0x40, 0x3}}]}}, {{0x9, 0x4, 0xfd, 0x5, 0x8, 0x36, 0x7b, 0xc2, 0x8, [@uac_control={{0xa, 0x24, 0x1, 0x5, 0x5}, [@feature_unit={0x11, 0x24, 0x6, 0x3, 0x5, 0x5, [0x1, 0x5, 0x8, 0x8, 0x4], 0x4}, @processing_unit={0xb, 0x24, 0x7, 0x3, 0x5, 0x1, "a9d28c7b"}, @processing_unit={0xd, 0x24, 0x7, 0x4, 0x0, 0x3, "6b39a051fdc7"}, @processing_unit={0x8, 0x24, 0x7, 0x1, 0x5, 0x9, 'y'}]}, @uac_control={{0xa, 0x24, 0x1, 0x80, 0x2}, [@extension_unit={0xb, 0x24, 0x8, 0x4, 0x7, 0x4, "3eda7f5b"}, @output_terminal={0x9, 0x24, 0x3, 0x1, 0x303, 0x3, 0x6, 0xe5}]}], [{{0x9, 0x5, 0xc, 0x8, 0x200, 0x80, 0x3, 0x6, [@generic={0xeb, 0x28, "061354b017b41cff43a323efaf1a21f31e50e009cb68f197af88ef56f399c9b21da38494560a02c10cf031c5d7baafa7dd493f0823b4863ca5498a77f924869dc32677b02321340eedb81e685597646660259aad5c4ab813c8d6971eabbae96b7a6783bb013aaf410c0a19baefff9109f8454239fae60673b25dfa7237d71c3a3a7f075756f86b54631b3f477d717450c791e4661c8c52b54483ead58629751d5e7a2759aa6ca6894863ce5ce54a2aa2da2e74b4123f56ee6d21793a7710bd614f72024eb69e0839a8c5444f6c3bc763194ac0e4380918fd8332da34a86355cfb7be52d2b32fe979a6"}, @generic={0xff, 0x7, "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"}]}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x1, 0x9, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xfc}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x5, 0x8}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x5, 0x9, 0x7f, [@generic={0x32, 0x21, "ed0624d6332d4510ad4107bd6932c6ab3cee3c9229871ef62ad96fff8c5aea69c82edfb84ec5421b8127723df420cfa9"}]}}, {{0x9, 0x5, 0xa, 0x3, 0x40, 0x0, 0xd, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x81, 0x71}]}}, {{0x9, 0x5, 0x7, 0xc, 0x20, 0xd, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3, 0xf}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x5, 0x0, 0x8}}, {{0x9, 0x5, 0x1, 0x10, 0x400, 0x0, 0x7, 0x9}}, {{0x9, 0x5, 0x0, 0x1, 0x10, 0x9, 0x1, 0xc, [@generic={0xf1, 0x9, "6ece22a3dd48551bc51d6838d9284738b286320babaeef43a357497ab90079aa26d1c1a707d383079fba7651eb334b8ef5eb9d65001edc4d99e6a0c965995b53f5cee0e190291977f9c826452ec9011c86577f3c7b11608ea30884b977d9bc055b1e45799f05dbbef7da8249ad3875008955de29afc9d0e9913826eead8a0a23cced5336ea458488d05bd6df610497633c13525b83a2ce600025d48a49c60c0b9bd19a326eac2461d86dc38ed53767dbe87fae2f965a4c48ebb0d2291a369682a245743fd2d529c38cad1322b66fd67aef584ca4baa45eebc1c5305f27b13fb9663f5d75da01ce088e16f6b3dbd52d"}]}}]}}]}}]}}, &(0x7f0000000e40)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x200, 0x6, 0x4, 0x3, 0x40, 0x4}, 0x48, &(0x7f0000000f80)={0x5, 0xf, 0x57, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x4, "5a2832688f0ae17e08a0813732f407c0"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "571c65c9fdd34d13765707d4418b830b"}, @ss_container_id={0x14, 0x10, 0x4, 0x7f, "382729747bc268c91ea381dee5fa3432"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x2, 0x5, 0x5}]}, 0x5, [{0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000f40)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0xfcff}}, {0xfffffefa, &(0x7f0000000d40)=@string={0x84, 0x3, "c8e3034738576f3989721b6bcf21f52d8492c13c07cffa6279b86744e16a2df4637027b69246566a4f1e5f876499cfaa6a9cb9ea3d07050d658bc5dfad873aa5585c51a6c08a4c8e7ded194bfff6d4f538fde3ff1ceff2d2ad4b76170828304b9d77acade7d124a9e45191bcb09545a20c7fcb8b08a219dac2daf64dbeada269fa3a"}}, {0xd, &(0x7f0000000e00)=ANY=[@ANYRES32=r2]}]}) r6 = dup3(r4, r3, 0x0) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r6, 0xc018620c, &(0x7f0000000640)={0x3, 0x0, 0x0, 0x0, 0x0, 0x2000000}) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r7, 0x3ba0, &(0x7f0000000240)={0x48, 0x1, r8, 0x0, 0xfffffffffffffffe, 0x10000000006}) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r8, 0x0, &(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x7}) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r6, 0xc0045516, &(0x7f0000000380)=0x7) r9 = openat$full(0xffffffffffffff9c, &(0x7f0000000ec0), 0x10300, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f0000000f00)={{0x1, 0x1, 0x18, r9, {0x1}}, './file0\x00'}) 0s ago: executing program 37 (id=218): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r0, &(0x7f0000000140), 0x0, 0x2d516fb6, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) (async) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) (async) r6 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000200)={{{@in=@local, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x40, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x1000000, 0x0, 0x0, 0xfd, 0x1, 0x0, 0x1ff}}, 0xe8) (async) sendmmsg(r6, &(0x7f0000000480), 0x21, 0x0) (async) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) r7 = socket(0x1e, 0x1, 0x0) getpeername$packet(r7, 0x0, 0x0) (async) r8 = openat$procfs(0xffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) fcntl$lock(r8, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x5, 0xfffffffffffffffc}) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000900)) (async) ioctl$VHOST_VSOCK_SET_RUNNING(r4, 0x4004af61, &(0x7f00000000c0)=0x1) r9 = syz_io_uring_setup(0x1d3e, &(0x7f0000000240)={0x0, 0x3416, 0x13100}, &(0x7f0000000100)=0x0, &(0x7f0000000380)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x403}) (async) io_uring_enter(r9, 0x2def, 0x0, 0x0, 0x0, 0x0) preadv2(r4, &(0x7f0000000100)=[{&(0x7f0000000040)=""/86, 0x56}], 0x1, 0xffff, 0x2, 0x1) (async) ppoll(&(0x7f0000000200)=[{r3, 0x1}], 0x1, 0x0, 0x0, 0x3) (async) epoll_wait(r0, 0x0, 0x0, 0x400) kernel console output (not intermixed with test programs): b_submit_urb failed with result -19 [ 97.842016][ T1217] input: Griffin SoundKnob as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 97.889351][ C0] powermate: config urb returned -71 [ 97.895132][ C0] powermate: config urb returned -71 [ 97.901498][ C0] powermate: config urb returned -71 [ 97.906993][ C0] powermate: config urb returned -71 [ 97.955462][ T1217] usb 1-1: USB disconnect, device number 2 [ 97.955528][ C0] powermate 1-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 98.427877][ T5975] syzkaller1: entered promiscuous mode [ 98.433469][ T5975] syzkaller1: entered allmulticast mode [ 98.472779][ T5911] usb 3-1: USB disconnect, device number 2 [ 98.486814][ T5979] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.496439][ T5911] em28xx 3-1:0.0: Disconnecting em28xx [ 98.508736][ T5980] process 'syz.1.12' launched './file1' with NULL argv: empty string added [ 98.532491][ T5911] em28xx 3-1:0.0: Freeing device [ 98.743925][ T5986] fuse: Unknown parameter 'rotmode' [ 98.867919][ T5918] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.038662][ T5918] usb 1-1: device descriptor read/64, error -71 [ 99.282517][ T5918] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 99.440107][ T5918] usb 1-1: device descriptor read/64, error -71 [ 99.567629][ T5911] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 99.576307][ T5918] usb usb1-port1: attempt power cycle [ 99.610147][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 99.791300][ T5911] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 99.806898][ T5911] usb 4-1: New USB device found, idVendor=0fd9, idProduct=002c, bcdDevice=71.01 [ 99.816766][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.825839][ T5911] usb 4-1: Product: syz [ 99.830316][ T5911] usb 4-1: Manufacturer: syz [ 99.835157][ T5911] usb 4-1: SerialNumber: syz [ 99.848929][ T5911] usb 4-1: config 0 descriptor?? [ 99.859186][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 99.897741][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 99.939826][ T5918] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 99.945393][ T10] usb 2-1: New USB device found, idVendor=0499, idProduct=5ae2, bcdDevice= 9.0f [ 99.967328][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=7 [ 99.975428][ T10] usb 2-1: Product: syz [ 99.987289][ T10] usb 2-1: Manufacturer: syz [ 99.996640][ T10] usb 2-1: SerialNumber: syz [ 100.009433][ T5918] usb 1-1: device descriptor read/8, error -71 [ 100.041708][ T10] usb 2-1: config 0 descriptor?? [ 100.068618][ T6004] syz.3.22 uses obsolete (PF_INET,SOCK_PACKET) [ 100.154868][ T5834] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 100.181701][ T6004] syzkaller1: entered promiscuous mode [ 100.207349][ T6004] syzkaller1: entered allmulticast mode [ 100.317223][ T5834] usb 5-1: Using ep0 maxpacket: 32 [ 100.318193][ T5918] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 100.351759][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 100.363131][ T5834] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 100.402492][ T5834] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 100.444081][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.501026][ T5834] usb 5-1: config 0 descriptor?? [ 100.528061][ T5918] usb 1-1: device descriptor read/8, error -71 [ 100.582621][ T5911] usb 4-1: USB disconnect, device number 2 [ 100.693702][ T6006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 100.704185][ T6006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 100.724829][ T5918] usb usb1-port1: unable to enumerate USB device [ 100.860282][ T5941] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.937804][ T6010] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.082191][ T5941] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 101.104950][ T5941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.172912][ T5941] usb 3-1: Product: syz [ 101.183647][ T5941] usb 3-1: Manufacturer: syz [ 101.277735][ T5941] usb 3-1: SerialNumber: syz [ 101.337922][ T5941] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 101.373871][ T5927] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 101.633765][ T5834] usbhid 5-1:0.0: can't add hid device: -71 [ 101.640080][ T5834] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 101.671301][ T6013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.761287][ T6013] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.776922][ T5834] usb 5-1: USB disconnect, device number 3 [ 102.018957][ T5918] usb 3-1: USB disconnect, device number 3 [ 102.487278][ T5927] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 102.510419][ T5927] ath9k_htc: Failed to initialize the device [ 102.554490][ T5918] usb 3-1: ath9k_htc: USB layer deinitialized [ 102.567276][ T5834] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 102.638638][ T10] usb 2-1: USB disconnect, device number 2 [ 102.697395][ T5834] usb 1-1: device descriptor read/64, error -71 [ 102.848544][ T5897] udevd[5897]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 102.958182][ T5834] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 103.157353][ T5834] usb 1-1: device descriptor read/64, error -71 [ 103.268944][ T5834] usb usb1-port1: attempt power cycle [ 103.271788][ T6040] Zero length message leads to an empty skb [ 103.657163][ T5834] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 103.708454][ T5834] usb 1-1: device descriptor read/8, error -71 [ 104.063150][ T5834] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 104.094114][ T5834] usb 1-1: device descriptor read/8, error -71 [ 104.138626][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 104.207455][ T5834] usb usb1-port1: unable to enumerate USB device [ 104.350173][ T10] usb 4-1: device descriptor read/64, error -71 [ 104.377349][ T5918] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.467201][ T5898] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 104.733506][ T5918] usb 3-1: config 0 has no interfaces? [ 104.743163][ T5918] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 104.812580][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.821754][ T5898] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.882315][ T5898] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 104.897463][ T5918] usb 3-1: Product: syz [ 104.905674][ T5918] usb 3-1: Manufacturer: syz [ 105.237508][ T5898] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 105.246757][ T5918] usb 3-1: SerialNumber: syz [ 105.256994][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.266373][ T5918] usb 3-1: config 0 descriptor?? [ 105.267307][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 105.323525][ T5898] usb 2-1: config 0 descriptor?? [ 105.346545][ T5898] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 105.381139][ T5898] dvb-usb: bulk message failed: -22 (3/0) [ 105.414579][ T5898] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 105.435316][ T5898] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 105.450941][ T5898] usb 2-1: media controller created [ 105.457698][ T10] usb 4-1: device descriptor read/64, error -71 [ 105.464437][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.574120][ T10] usb usb4-port1: attempt power cycle [ 105.645972][ T5898] dvb-usb: bulk message failed: -22 (6/0) [ 105.668182][ T5898] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 105.801219][ T5898] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input10 [ 105.856565][ T5898] dvb-usb: schedule remote query interval to 150 msecs. [ 105.887211][ T5918] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 105.927157][ T5898] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 105.947175][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 105.976791][ T10] usb 4-1: device descriptor read/8, error -71 [ 106.097797][ T5898] dvb-usb: bulk message failed: -22 (1/0) [ 106.117370][ T5898] dvb-usb: error while querying for an remote control event. [ 106.129610][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.152992][ T5918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.167607][ T5918] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 106.177905][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.192715][ T5918] usb 5-1: config 0 descriptor?? [ 106.227307][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 106.289286][ T5898] dvb-usb: bulk message failed: -22 (1/0) [ 106.312401][ T5898] dvb-usb: error while querying for an remote control event. [ 106.357806][ T10] usb 4-1: device descriptor read/8, error -71 [ 106.467379][ T10] usb usb4-port1: unable to enumerate USB device [ 106.597409][ T5898] dvb-usb: bulk message failed: -22 (1/0) [ 106.608735][ T5898] dvb-usb: error while querying for an remote control event. [ 106.672801][ T5918] usbhid 5-1:0.0: can't add hid device: -71 [ 106.680861][ T5918] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 106.725477][ T5918] usb 5-1: USB disconnect, device number 4 [ 106.847415][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 106.854126][ T977] dvb-usb: error while querying for an remote control event. [ 107.027148][ T5918] dvb-usb: bulk message failed: -22 (1/0) [ 107.032975][ T5918] dvb-usb: error while querying for an remote control event. [ 107.227460][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 107.299117][ T977] dvb-usb: error while querying for an remote control event. [ 107.335549][ T977] usb 3-1: USB disconnect, device number 4 [ 107.487274][ T5898] dvb-usb: bulk message failed: -22 (1/0) [ 107.496094][ T5898] dvb-usb: error while querying for an remote control event. [ 107.677268][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 107.697796][ T977] dvb-usb: error while querying for an remote control event. [ 107.857168][ T5918] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 107.886584][ T5898] dvb-usb: bulk message failed: -22 (1/0) [ 107.902659][ T6100] netlink: 'syz.4.52': attribute type 9 has an invalid length. [ 107.947289][ T5898] dvb-usb: error while querying for an remote control event. [ 107.950627][ T10] usb 2-1: USB disconnect, device number 3 [ 108.001763][ T6100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.52'. [ 108.026719][ T6103] binder: 6101:6103 ioctl c018480b 200000000100 returned -22 [ 108.047174][ T5918] usb 4-1: Using ep0 maxpacket: 8 [ 108.096758][ T5918] usb 4-1: unable to get BOS descriptor or descriptor too short [ 108.116388][ T6103] binder: 6101:6103 ioctl c0306201 200000000700 returned -14 [ 108.127358][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 108.153134][ T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 108.180247][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 108.227164][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 108.239562][ T6100] hsr0: entered promiscuous mode [ 108.274956][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 108.296394][ T6100] macvlan2: entered promiscuous mode [ 108.302060][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 108.337261][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 108.360687][ T5918] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 108.384337][ T6100] macvlan2: entered allmulticast mode [ 108.392515][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.397184][ T6100] hsr0: entered allmulticast mode [ 108.406474][ T5918] usb 4-1: Product: syz [ 108.413062][ T5918] usb 4-1: Manufacturer: syz [ 108.425747][ T5918] usb 4-1: SerialNumber: syz [ 108.442975][ T6100] hsr_slave_0: entered allmulticast mode [ 108.453186][ T5918] usb 4-1: config 0 descriptor?? [ 108.475161][ T5918] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 108.505727][ T6100] hsr_slave_1: entered allmulticast mode [ 108.768437][ T5889] udevd[5889]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 109.796642][ T6139] fuse: Unknown parameter 'd' [ 110.237625][ T5927] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 110.509845][ T5918] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 110.549298][ T5834] usb 4-1: USB disconnect, device number 7 [ 110.729186][ T5918] usb 3-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 110.746404][ T5927] usb 2-1: config 8 has an invalid interface number: 223 but max is 0 [ 110.755160][ T5918] usb 3-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d [ 110.774961][ T5927] usb 2-1: config 8 has no interface number 0 [ 110.800739][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.822816][ T5927] usb 2-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64 [ 110.844423][ T5918] usb 3-1: Product: syz [ 110.859833][ T5918] usb 3-1: Manufacturer: syz [ 110.864524][ T5918] usb 3-1: SerialNumber: syz [ 111.077816][ T5927] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d [ 111.093891][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 111.117907][ T5918] usb 3-1: selecting invalid altsetting 1 [ 111.126504][ T5927] usb 2-1: Product: syz [ 111.134720][ T6144] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.147270][ T5927] usb 2-1: Manufacturer: syz [ 111.177150][ T5834] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 111.193706][ T5927] usb 2-1: SerialNumber: syz [ 111.318542][ T5918] LME2510(C): Firmware Status: 00 00 00 00 00 00 [ 111.318685][ T5918] dvb_usb_lmedm04 3-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22 [ 111.377245][ T5834] usb 4-1: Using ep0 maxpacket: 16 [ 111.389410][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 111.409596][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 111.467212][ T5834] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 111.501784][ T5834] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 111.541218][ T5918] usb 3-1: USB disconnect, device number 5 [ 111.583855][ T5834] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.725680][ T5834] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 111.765570][ T5834] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 111.776818][ T5834] usb 4-1: Manufacturer: syz [ 111.813709][ T5834] usb 4-1: config 0 descriptor?? [ 112.083976][ T6142] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.118670][ T6142] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.777858][ T5918] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 112.886272][ T1095] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.077164][ T5927] usb 2-1: USB disconnect, device number 4 [ 113.316501][ T1095] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.408392][ T1095] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.486489][ T1095] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.668131][ T6171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.77'. [ 113.902188][ T1095] bridge_slave_1: left allmulticast mode [ 113.934746][ T1095] bridge_slave_1: left promiscuous mode [ 113.972232][ T1095] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.129495][ T1095] bridge_slave_0: left allmulticast mode [ 114.154513][ T1095] bridge_slave_0: left promiscuous mode [ 114.167834][ T5834] rc_core: IR keymap rc-hauppauge not found [ 114.173823][ T5834] Registered IR keymap rc-empty [ 114.189491][ T1095] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.267700][ T5834] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.307290][ T5834] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.347664][ T5834] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 114.382520][ T5834] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 114.453615][ T5834] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.455758][ T6188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.80'. [ 114.487830][ T5834] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.547182][ T5834] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.607326][ T5834] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.747348][ T5834] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.807378][ T5834] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 114.997769][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 115.008452][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 115.019727][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 115.038090][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 115.063226][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 115.187305][ T5834] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 115.247219][ T5834] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 115.277375][ T5834] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 115.297659][ T5834] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 115.320548][ T5834] mceusb 4-1:0.0: Registered with mce emulator interface version 1 [ 115.337414][ T5834] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 115.379385][ T5834] usb 4-1: USB disconnect, device number 8 [ 115.886195][ T6208] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'. [ 115.910562][ T6205] sctp: failed to load transform for md5: -2 [ 115.930229][ T6206] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'. [ 116.125902][ T6214] capability: warning: `syz.2.84' uses deprecated v2 capabilities in a way that may be insecure [ 116.190310][ T1095] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.206918][ T1095] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.239699][ T1095] bond0 (unregistering): Released all slaves [ 116.437194][ T5834] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 116.607235][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 116.664396][ T5834] usb 2-1: config 2 has an invalid interface number: 130 but max is 1 [ 116.756358][ T5834] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 116.939617][ T6231] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'. [ 117.118645][ T5846] Bluetooth: hci4: command tx timeout [ 117.127214][ T5834] usb 2-1: config 2 has 1 interface, different from the descriptor's value: 2 [ 117.138129][ T5834] usb 2-1: config 2 has no interface number 0 [ 117.166138][ T5834] usb 2-1: New USB device found, idVendor=2013, idProduct=0258, bcdDevice=c6.0c [ 117.178051][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.186249][ T5834] usb 2-1: Product: syz [ 117.190676][ T5834] usb 2-1: Manufacturer: syz [ 117.195385][ T5834] usb 2-1: SerialNumber: syz [ 117.498041][ T5834] usb 2-1: USB disconnect, device number 5 [ 117.727200][ T5929] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 117.905691][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.933510][ T5929] usb 3-1: config 0 has no interfaces? [ 117.954061][ T5929] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 117.963643][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.973892][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.981205][ T5929] usb 3-1: Product: syz [ 117.985418][ T5929] usb 3-1: Manufacturer: syz [ 117.997151][ T5929] usb 3-1: SerialNumber: syz [ 118.012609][ T5929] usb 3-1: config 0 descriptor?? [ 118.059744][ T1095] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.097289][ T1095] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.187306][ T5834] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 118.199396][ T1095] hsr0: left allmulticast mode [ 118.207602][ T1095] veth1_macvtap: left promiscuous mode [ 118.213433][ T1095] veth0_macvtap: left promiscuous mode [ 118.284067][ T1095] veth1_vlan: left promiscuous mode [ 118.294133][ T1095] veth0_vlan: left promiscuous mode [ 118.339005][ T5834] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 118.366835][ T5834] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.434877][ T5834] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 118.526156][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.537291][ T977] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 118.596351][ T6258] loop8: detected capacity change from 0 to 1 [ 118.614615][ T5834] hub 1-1:4.0: USB hub found [ 118.639804][ T6258] Dev loop8: unable to read RDB block 1 [ 118.661511][ T6258] loop8: unable to read partition table [ 118.685228][ T6258] loop8: partition table beyond EOD, truncated [ 118.701079][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.716311][ T977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 118.743537][ T977] usb 4-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00 [ 118.774349][ T6258] loop_reread_partitions: partition scan of loop8 (þ被xü^>à– ) failed (rc=-5) [ 118.791785][ T977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.804306][ T5834] hub 1-1:4.0: 13 ports detected [ 118.818516][ T5834] usb 1-1: selecting invalid altsetting 1 [ 118.835217][ T5834] hub 1-1:4.0: Using single TT (err -22) [ 118.856020][ T977] usb 4-1: config 0 descriptor?? [ 118.866636][ T5834] hub 1-1:4.0: insufficient power available to use all downstream ports [ 119.008661][ T5834] hub 1-1:4.0: hub_hub_status failed (err = -71) [ 119.054701][ T5834] hub 1-1:4.0: config failed, can't get hub status (err -71) [ 119.150464][ T5834] usb 1-1: USB disconnect, device number 11 [ 119.201153][ T5846] Bluetooth: hci4: command tx timeout [ 119.308626][ T977] usbhid 4-1:0.0: can't add hid device: -71 [ 119.610583][ T977] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 119.797783][ T1217] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 119.869791][ T977] usb 4-1: USB disconnect, device number 9 [ 119.978926][ T1217] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.118769][ T1217] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 120.139666][ T1217] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 120.191026][ T1217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.298182][ T1217] usb 2-1: config 0 descriptor?? [ 120.396622][ T1217] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 120.428194][ T1217] dvb-usb: bulk message failed: -22 (3/0) [ 120.443924][ T1217] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 120.455234][ T1217] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 120.466291][ T1217] usb 2-1: media controller created [ 120.475691][ T1217] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 120.512183][ T1217] dvb-usb: bulk message failed: -22 (6/0) [ 120.565316][ T1217] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 120.594093][ T1217] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12 [ 120.668003][ T1217] dvb-usb: schedule remote query interval to 150 msecs. [ 120.675215][ T1217] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 120.837251][ T1217] dvb-usb: bulk message failed: -22 (1/0) [ 120.844344][ T1217] dvb-usb: error while querying for an remote control event. [ 121.007218][ T1217] dvb-usb: bulk message failed: -22 (1/0) [ 121.013127][ T1217] dvb-usb: error while querying for an remote control event. [ 121.177281][ T1217] dvb-usb: bulk message failed: -22 (1/0) [ 121.192284][ T1217] dvb-usb: error while querying for an remote control event. [ 121.277583][ T5846] Bluetooth: hci4: command tx timeout [ 121.285929][ T1095] team0 (unregistering): Port device team_slave_1 removed [ 121.332371][ T1095] team0 (unregistering): Port device team_slave_0 removed [ 121.362832][ T1217] dvb-usb: bulk message failed: -22 (1/0) [ 121.379322][ T1217] dvb-usb: error while querying for an remote control event. [ 121.552591][ T1217] dvb-usb: bulk message failed: -22 (1/0) [ 121.558505][ T1217] dvb-usb: error while querying for an remote control event. [ 121.727412][ T1217] dvb-usb: bulk message failed: -22 (1/0) [ 121.740064][ T1217] dvb-usb: error while querying for an remote control event. [ 121.907332][ T1217] dvb-usb: bulk message failed: -22 (1/0) [ 121.933070][ T1217] dvb-usb: error while querying for an remote control event. [ 122.043578][ T5834] usb 3-1: USB disconnect, device number 7 [ 122.097380][ T5929] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 122.121872][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 122.127189][ T5927] dvb-usb: bulk message failed: -22 (1/0) [ 122.137228][ T5927] dvb-usb: error while querying for an remote control event. [ 122.262536][ T5929] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 122.301585][ T5929] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.312621][ T5834] dvb-usb: bulk message failed: -22 (1/0) [ 122.330493][ T5834] dvb-usb: error while querying for an remote control event. [ 122.362643][ T5929] usb 4-1: config 0 descriptor?? [ 122.383089][ T5929] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 122.513711][ T6198] chnl_net:caif_netlink_parms(): no params data found [ 122.539241][ T5834] dvb-usb: bulk message failed: -22 (1/0) [ 122.563082][ T5834] dvb-usb: error while querying for an remote control event. [ 122.732289][ T10] dvb-usb: bulk message failed: -22 (1/0) [ 122.746555][ T5927] usb 2-1: USB disconnect, device number 6 [ 122.756455][ T10] dvb-usb: error while querying for an remote control event. [ 122.800372][ T5929] cpia1 4-1:0.0: unexpected state after lo power cmd: 00 [ 122.923820][ T5927] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 122.957824][ T5834] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 122.988773][ T6315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.997573][ T977] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 123.020858][ T6315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.063743][ T6314] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.088241][ T6314] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.120612][ T5834] usb 3-1: Using ep0 maxpacket: 16 [ 123.132217][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.145888][ T5834] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.158935][ T5834] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 123.176271][ T5834] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 123.187195][ T6198] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.195144][ T6198] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.204002][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.213159][ T6198] bridge_slave_0: entered allmulticast mode [ 123.227687][ T5834] usb 3-1: config 0 descriptor?? [ 123.235557][ T6198] bridge_slave_0: entered promiscuous mode [ 123.257192][ T5927] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 123.295321][ T6198] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.311922][ T6198] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.320211][ T6198] bridge_slave_1: entered allmulticast mode [ 123.333777][ T6198] bridge_slave_1: entered promiscuous mode [ 123.361538][ T5846] Bluetooth: hci4: command tx timeout [ 123.381093][ T977] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 123.411237][ T977] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 123.421902][ T977] usb 1-1: config 0 has no interface number 0 [ 123.427203][ T5927] usb 2-1: Using ep0 maxpacket: 32 [ 123.437870][ T977] usb 1-1: config 0 interface 126 has no altsetting 0 [ 123.445776][ T5927] usb 2-1: config 0 has an invalid interface number: 223 but max is 0 [ 123.476908][ T977] usb 1-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=df.8e [ 123.487261][ T977] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.491110][ T5927] usb 2-1: config 0 has no interface number 0 [ 123.495417][ T977] usb 1-1: Product: syz [ 123.508568][ T5929] gspca_cpia1: usb_control_msg 05, error -71 [ 123.521809][ T5929] cpia1 4-1:0.0: unexpected systemstate: 00 [ 123.521897][ T977] usb 1-1: Manufacturer: syz [ 123.575789][ T977] usb 1-1: SerialNumber: syz [ 123.590034][ T5927] usb 2-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=10.fe [ 123.599637][ T6198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 123.617495][ T5929] usb 4-1: USB disconnect, device number 10 [ 123.643331][ T977] usb 1-1: config 0 descriptor?? [ 123.649948][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.658791][ T6198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 123.698493][ T977] zaurus 1-1:0.126: More than one union descriptor, skipping ... [ 123.707631][ T5927] usb 2-1: Product: syz [ 123.713806][ T5834] HID 045e:07da: Invalid code 65791 type 1 [ 123.733236][ T5927] usb 2-1: Manufacturer: syz [ 123.737378][ T977] zaurus 1-1:0.126: skipping garbage [ 123.743369][ T977] usb 1-1: bad CDC descriptors [ 123.749152][ T5927] usb 2-1: SerialNumber: syz [ 123.769409][ T5927] usb 2-1: config 0 descriptor?? [ 123.793759][ T5834] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0001/input/input13 [ 123.910148][ T6198] team0: Port device team_slave_0 added [ 123.932800][ T6198] team0: Port device team_slave_1 added [ 124.020564][ T5898] usb 2-1: USB disconnect, device number 7 [ 124.044503][ T5834] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 124.220561][ T6303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.104'. [ 124.250651][ T5834] usb 3-1: USB disconnect, device number 8 [ 124.268567][ T6198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 124.285626][ T6198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.355224][ T6324] fido_id[6324]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/3-1/report_descriptor': No such file or directory [ 124.379920][ T6198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 124.411901][ T6303] bridge_slave_1: left allmulticast mode [ 124.418138][ T6303] bridge_slave_1: left promiscuous mode [ 124.424970][ T6303] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.450193][ T6303] bridge_slave_0: left allmulticast mode [ 124.456157][ T6303] bridge_slave_0: left promiscuous mode [ 124.462892][ T6303] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.648168][ T6198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 124.670471][ T6198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.696506][ C0] vkms_vblank_simulate: vblank timer overrun [ 124.747593][ T5911] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 124.756952][ T6331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.109'. [ 124.766142][ T6331] netlink: 32 bytes leftover after parsing attributes in process `syz.1.109'. [ 124.775217][ T6331] netlink: 32 bytes leftover after parsing attributes in process `syz.1.109'. [ 124.785177][ T6198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 124.906356][ T5911] usb 4-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 124.920636][ T5911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.002621][ T5911] usb 4-1: config 0 descriptor?? [ 125.047388][ T5834] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 125.103705][ T6198] hsr_slave_0: entered promiscuous mode [ 125.132081][ T6198] hsr_slave_1: entered promiscuous mode [ 125.179188][ T6198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 125.207982][ T5834] usb 2-1: Using ep0 maxpacket: 16 [ 125.285141][ T6198] Cannot create hsr debugfs directory [ 125.299788][ T5834] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.312871][ T5911] usb 4-1: can't set first interface for hiFace device. [ 125.320008][ T5834] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.333511][ T5911] snd-usb-hiface 4-1:0.0: probe with driver snd-usb-hiface failed with error -5 [ 125.344391][ T5834] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.363174][ T5834] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.378217][ T5911] usb 4-1: USB disconnect, device number 11 [ 125.479175][ T5834] usb 2-1: Product: syz [ 125.483432][ T5834] usb 2-1: Manufacturer: syz [ 125.502343][ T5834] usb 2-1: SerialNumber: syz [ 125.967235][ T6331] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.976470][ T6331] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 126.007563][ T5834] usb 2-1: 0:2 : does not exist [ 126.120367][ T5929] usb 1-1: USB disconnect, device number 12 [ 126.304847][ T6352] netlink: 12 bytes leftover after parsing attributes in process `syz.3.113'. [ 126.620628][ T5834] usb 2-1: USB disconnect, device number 8 [ 126.893568][ T6198] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 126.955668][ T6198] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 126.974231][ T6198] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 127.029580][ T6198] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 127.217633][ T5927] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 127.413694][ T6198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.427379][ T5927] usb 1-1: Using ep0 maxpacket: 32 [ 127.439485][ T5927] usb 1-1: config 0 has no interfaces? [ 127.445057][ T5927] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 127.497090][ T5927] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.512169][ T6198] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.528358][ T5927] usb 1-1: config 0 descriptor?? [ 127.548859][ T6385] trusted_key: syz.2.118 sent an empty control message without MSG_MORE. [ 127.630368][ T1336] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.637708][ T1336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.701573][ T1336] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.709116][ T1336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.718696][ T1217] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 127.917885][ T30] audit: type=1326 audit(1750184582.984:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz.2.118" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f768f98e929 code=0x0 [ 127.990058][ T1217] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.025092][ T6392] fuse: Bad value for 'fd' [ 128.034027][ T1217] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 128.072638][ T1217] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 128.116279][ T1217] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.152486][ T1217] usb 4-1: config 0 descriptor?? [ 128.182786][ T6198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.212337][ T1217] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 128.233848][ T1217] dvb-usb: bulk message failed: -22 (3/0) [ 128.287971][ T1217] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 128.327586][ T1217] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 128.370490][ T1217] usb 4-1: media controller created [ 128.405207][ T6198] veth0_vlan: entered promiscuous mode [ 128.413104][ T1217] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 128.482704][ T1217] dvb-usb: bulk message failed: -22 (6/0) [ 128.493742][ T6198] veth1_vlan: entered promiscuous mode [ 128.527771][ T1217] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 128.553433][ T1217] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 128.616406][ T1217] dvb-usb: schedule remote query interval to 150 msecs. [ 128.667853][ T6198] veth0_macvtap: entered promiscuous mode [ 128.676281][ T1217] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 128.731288][ T6198] veth1_macvtap: entered promiscuous mode [ 128.827199][ T1217] dvb-usb: bulk message failed: -22 (1/0) [ 128.846286][ T1217] dvb-usb: error while querying for an remote control event. [ 128.859079][ T6198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 128.939886][ T6198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.039785][ T6198] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.068902][ T1217] dvb-usb: bulk message failed: -22 (1/0) [ 129.095222][ T1217] dvb-usb: error while querying for an remote control event. [ 129.118337][ T6198] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.133811][ T6198] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.145124][ T6198] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.237002][ T6405] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 129.253669][ T6405] macsec1: entered allmulticast mode [ 129.283759][ T6405] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 129.319195][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 129.332568][ T5929] dvb-usb: error while querying for an remote control event. [ 129.349318][ T5898] usb 1-1: USB disconnect, device number 13 [ 129.375914][ T6405] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 129.433571][ T6405] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 129.498068][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 129.517719][ T5929] dvb-usb: error while querying for an remote control event. [ 129.618067][ T6415] ip6erspan0: entered promiscuous mode [ 129.740734][ T1217] dvb-usb: bulk message failed: -22 (1/0) [ 129.752645][ T1217] dvb-usb: error while querying for an remote control event. [ 129.907769][ T1217] dvb-usb: bulk message failed: -22 (1/0) [ 129.916882][ T1217] dvb-usb: error while querying for an remote control event. [ 130.087794][ T1217] dvb-usb: bulk message failed: -22 (1/0) [ 130.093803][ T1217] dvb-usb: error while querying for an remote control event. [ 130.192855][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.235526][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.357539][ T1217] dvb-usb: bulk message failed: -22 (1/0) [ 130.392949][ T1217] dvb-usb: error while querying for an remote control event. [ 130.514028][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.554070][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.607276][ T1217] dvb-usb: bulk message failed: -22 (1/0) [ 130.609725][ T5918] usb 4-1: USB disconnect, device number 12 [ 130.613256][ T1217] dvb-usb: error while querying for an remote control event. [ 130.659074][ T6427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.125'. [ 130.849214][ T5918] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 130.867115][ T30] audit: type=1326 audit(1750184586.034:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6428 comm="syz.3.126" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd867d8e929 code=0x0 [ 131.091114][ T6436] netlink: 'syz.5.74': attribute type 1 has an invalid length. [ 132.097154][ T5918] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 132.248906][ T5918] usb 3-1: Using ep0 maxpacket: 8 [ 132.354506][ T5918] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 132.441035][ T5918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.467799][ T5918] usb 3-1: Product: syz [ 132.477657][ T5918] usb 3-1: Manufacturer: syz [ 132.482426][ T5918] usb 3-1: SerialNumber: syz [ 132.497262][ T5918] usb 3-1: config 0 descriptor?? [ 132.519535][ T5918] gspca_main: sq905-2.14.0 probing 2770:9120 [ 132.721090][ T6448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.763629][ T6448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.999879][ T5898] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 133.184584][ T5898] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 133.224411][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.255174][ T5898] usb 1-1: Product: syz [ 133.302431][ T5898] usb 1-1: Manufacturer: syz [ 133.323040][ T5898] usb 1-1: SerialNumber: syz [ 133.367941][ T5918] gspca_sq905: sq905_command: usb_control_msg failed 2 (-110) [ 133.387300][ T5898] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 133.411831][ T5918] sq905 3-1:0.0: probe with driver sq905 failed with error -110 [ 133.425549][ T5911] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 133.577628][ T6486] usb usb8: usbfs: process 6486 (syz.3.136) did not claim interface 0 before use [ 133.697310][ T1217] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 133.852829][ T5918] usb 1-1: USB disconnect, device number 14 [ 133.853071][ T1217] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 133.878918][ T1217] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 133.892957][ T1217] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 133.921437][ T1217] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.999973][ T1217] usb 2-1: config 0 descriptor?? [ 134.019992][ T1217] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 134.041001][ T1217] dvb-usb: bulk message failed: -22 (3/0) [ 134.115058][ T1217] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 134.142798][ T1217] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 134.165561][ T1217] usb 2-1: media controller created [ 134.176068][ T1217] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 134.243687][ T1217] dvb-usb: bulk message failed: -22 (6/0) [ 134.306368][ T1217] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 134.494067][ T5911] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 134.501355][ T5911] ath9k_htc: Failed to initialize the device [ 134.516069][ T5918] usb 1-1: ath9k_htc: USB layer deinitialized [ 134.818509][ T977] usb 3-1: USB disconnect, device number 9 [ 134.859559][ T1217] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input16 [ 134.930169][ T1217] dvb-usb: schedule remote query interval to 150 msecs. [ 134.947460][ T6497] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 134.981067][ T1217] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 135.024077][ T6494] netlink: 24 bytes leftover after parsing attributes in process `syz.5.133'. [ 135.137150][ T1217] dvb-usb: bulk message failed: -22 (1/0) [ 135.143255][ T1217] dvb-usb: error while querying for an remote control event. [ 135.272811][ T6508] sctp: [Deprecated]: syz.3.139 (pid 6508) Use of int in maxseg socket option. [ 135.272811][ T6508] Use struct sctp_assoc_value instead [ 135.293742][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.139'. [ 135.377193][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 135.383285][ T5929] dvb-usb: error while querying for an remote control event. [ 135.697296][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 135.712028][ T5929] dvb-usb: error while querying for an remote control event. [ 135.952938][ T5929] dvb-usb: bulk message failed: -22 (1/0) [ 135.980685][ T5929] dvb-usb: error while querying for an remote control event. [ 136.177233][ T5927] dvb-usb: bulk message failed: -22 (1/0) [ 136.185940][ T5927] dvb-usb: error while querying for an remote control event. [ 136.237214][ T1217] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 136.317891][ T5911] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 136.400087][ T5927] dvb-usb: bulk message failed: -22 (1/0) [ 136.426307][ T5927] dvb-usb: error while querying for an remote control event. [ 136.538672][ T1217] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 136.556566][ T1217] usb 3-1: config 0 interface 0 has no altsetting 0 [ 136.573027][ T5911] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 136.584257][ T1217] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 136.627300][ T5927] dvb-usb: bulk message failed: -22 (1/0) [ 136.633151][ T5927] dvb-usb: error while querying for an remote control event. [ 136.650080][ T5911] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 136.666894][ T1217] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 136.726757][ T5911] usb 4-1: config 0 has no interface number 0 [ 136.733198][ T1217] usb 3-1: Product: syz [ 136.757201][ T5911] usb 4-1: config 0 interface 126 has no altsetting 0 [ 136.778256][ T977] usb 2-1: USB disconnect, device number 9 [ 136.843146][ T1217] usb 3-1: Manufacturer: syz [ 136.873633][ T1217] usb 3-1: SerialNumber: syz [ 136.896871][ T977] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 136.905584][ T5911] usb 4-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=df.8e [ 136.926453][ T1217] usb 3-1: config 0 descriptor?? [ 136.957784][ T5911] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.965856][ T5911] usb 4-1: Product: syz [ 136.978713][ T1217] usb 3-1: selecting invalid altsetting 0 [ 137.078410][ T5911] usb 4-1: Manufacturer: syz [ 137.083106][ T5911] usb 4-1: SerialNumber: syz [ 137.142962][ T5911] usb 4-1: config 0 descriptor?? [ 137.239602][ T5911] zaurus 4-1:0.126: More than one union descriptor, skipping ... [ 137.324953][ T5911] zaurus 4-1:0.126: skipping garbage [ 137.353839][ T5911] usb 4-1: bad CDC descriptors [ 137.654543][ T5834] usb 3-1: USB disconnect, device number 10 [ 137.694448][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.142'. [ 137.703995][ T6545] bridge_slave_1: left allmulticast mode [ 137.710011][ T6545] bridge_slave_1: left promiscuous mode [ 137.717646][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.880515][ T6545] bridge_slave_0: left allmulticast mode [ 137.891134][ T6545] bridge_slave_0: left promiscuous mode [ 138.097276][ T6545] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.133499][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.141600][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.481080][ T6571] netlink: 'syz.5.150': attribute type 3 has an invalid length. [ 140.517515][ T6571] netlink: 766 bytes leftover after parsing attributes in process `syz.5.150'. [ 140.981554][ T5834] usb 4-1: USB disconnect, device number 13 [ 141.664830][ T6590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.152'. [ 141.917376][ T5927] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 142.097188][ T5927] usb 3-1: Using ep0 maxpacket: 32 [ 142.111063][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 142.138118][ T5927] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 142.160557][ T5927] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 142.213242][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.273580][ T5927] usb 3-1: config 0 descriptor?? [ 142.304182][ T5927] hub 3-1:0.0: USB hub found [ 142.467201][ T5918] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 142.491765][ T5927] hub 3-1:0.0: 1 port detected [ 142.704657][ T5918] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.787655][ T5918] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 142.806604][ T5918] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 142.859497][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.898225][ T5918] usb 6-1: config 0 descriptor?? [ 142.930649][ T5918] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 142.969854][ T5918] dvb-usb: bulk message failed: -22 (3/0) [ 143.000419][ T5918] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 143.020958][ T5918] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 143.043329][ T5918] usb 6-1: media controller created [ 143.086407][ T5918] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 143.103613][ T6592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.137841][ T6592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.179558][ T5918] dvb-usb: bulk message failed: -22 (6/0) [ 143.185550][ T5918] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 143.254289][ T5918] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input17 [ 143.328385][ T5918] dvb-usb: schedule remote query interval to 150 msecs. [ 143.366003][ T5918] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 143.527283][ T5918] dvb-usb: bulk message failed: -22 (1/0) [ 143.553493][ T5918] dvb-usb: error while querying for an remote control event. [ 143.740315][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 143.752069][ T977] dvb-usb: error while querying for an remote control event. [ 143.997854][ T5918] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 144.037845][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 144.043717][ T977] dvb-usb: error while querying for an remote control event. [ 144.080843][ T5927] hub 3-1:0.0: hub_ext_port_status failed (err = -32) [ 144.159574][ T5918] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 144.169834][ T5918] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.181690][ T5918] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 144.191433][ T5918] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 144.200198][ T5918] usb 4-1: Manufacturer: syz [ 144.214282][ T5918] usb 4-1: config 0 descriptor?? [ 144.219473][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 144.225253][ T977] dvb-usb: error while querying for an remote control event. [ 144.408527][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 144.414612][ T5918] rc_core: IR keymap rc-hauppauge not found [ 144.421070][ T5911] dvb-usb: error while querying for an remote control event. [ 144.430898][ T5918] Registered IR keymap rc-empty [ 144.446457][ T5918] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 144.463665][ T5918] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input18 [ 144.540227][ T5927] usb 1-1: new full-speed USB device number 15 using dummy_hcd [ 144.587882][ T5918] dvb-usb: bulk message failed: -22 (1/0) [ 144.611135][ T5918] dvb-usb: error while querying for an remote control event. [ 144.696213][ T6640] rc rc0: two consecutive events of type space [ 144.793584][ T5927] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 144.802315][ T5927] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 144.855392][ T5927] usb 1-1: config 0 has no interface number 0 [ 144.868205][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 144.874186][ T977] dvb-usb: error while querying for an remote control event. [ 144.894530][ T5927] usb 1-1: config 0 interface 126 has no altsetting 0 [ 144.900980][ T6619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.948260][ T5927] usb 1-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=df.8e [ 144.950996][ T6619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.964218][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.017287][ T5927] usb 1-1: Product: syz [ 145.021542][ T5927] usb 1-1: Manufacturer: syz [ 145.027738][ T5911] usb 3-1: USB disconnect, device number 11 [ 145.046590][ T5927] usb 1-1: SerialNumber: syz [ 145.104008][ T5918] dvb-usb: bulk message failed: -22 (1/0) [ 145.226887][ T5834] usb 6-1: USB disconnect, device number 2 [ 145.243172][ T1217] usb 4-1: USB disconnect, device number 14 [ 145.274509][ T5918] dvb-usb: error while querying for an remote control event. [ 145.350805][ T5927] usb 1-1: config 0 descriptor?? [ 145.455229][ T5927] zaurus 1-1:0.126: More than one union descriptor, skipping ... [ 145.485569][ T5834] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 145.496635][ T6649] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 145.526796][ T5927] zaurus 1-1:0.126: skipping garbage [ 145.547698][ T5927] usb 1-1: bad CDC descriptors [ 145.572020][ T6649] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 145.755709][ T6657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 147.298255][ T5834] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 147.458965][ T5834] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 147.472661][ T5834] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.555845][ T5834] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 147.686976][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.730392][ T6678] ucma_write: process 49 (syz.5.169) changed security contexts after opening file descriptor, this is not allowed. [ 147.776390][ T5834] hub 4-1:4.0: USB hub found [ 147.977927][ T5834] hub 4-1:4.0: 12 ports detected [ 147.996184][ T5834] usb 4-1: selecting invalid altsetting 1 [ 148.064292][ T5834] hub 4-1:4.0: Using single TT (err -22) [ 148.145387][ T5834] hub 4-1:4.0: insufficient power available to use all downstream ports [ 148.654611][ T5918] usb 1-1: USB disconnect, device number 15 [ 148.907265][ T5834] hub 4-1:4.0: hub_hub_status failed (err = -71) [ 148.913752][ T5834] hub 4-1:4.0: config failed, can't get hub status (err -71) [ 149.073994][ T5834] usb 4-1: USB disconnect, device number 15 [ 149.867196][ T5834] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 150.206858][ T5927] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 150.420197][ T5927] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 150.521112][ T5927] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 150.557123][ T5927] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 150.613296][ T5927] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.669978][ T5927] usb 6-1: config 0 descriptor?? [ 150.719487][ T5927] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 150.764229][ T5927] dvb-usb: bulk message failed: -22 (3/0) [ 150.828003][ T5927] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 150.914410][ T5927] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 150.982682][ T5927] usb 6-1: media controller created [ 151.092607][ T5927] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 151.232257][ T5927] dvb-usb: bulk message failed: -22 (6/0) [ 151.253112][ T5927] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 151.287746][ T5834] usb 4-1: device descriptor read/64, error -71 [ 151.317776][ T5927] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input19 [ 151.407539][ T5927] dvb-usb: schedule remote query interval to 150 msecs. [ 151.452318][ T5927] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 151.533644][ T5927] usb 6-1: USB disconnect, device number 3 [ 151.541872][ T5834] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 151.637146][ T1217] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 151.807414][ T5834] usb 4-1: Using ep0 maxpacket: 32 [ 151.816377][ T5927] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 151.841906][ T5834] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 151.910291][ T1217] usb 3-1: config 0 has an invalid interface number: 201 but max is 0 [ 151.927682][ T5834] usb 4-1: config 0 has no interface number 0 [ 151.953736][ T1217] usb 3-1: config 0 has no interface number 0 [ 151.980333][ T5834] usb 4-1: config 0 interface 184 has no altsetting 0 [ 152.005571][ T1217] usb 3-1: config 0 interface 201 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 152.085211][ T1217] usb 3-1: config 0 interface 201 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 152.158865][ T5834] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 152.231035][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.297275][ T1217] usb 3-1: New USB device found, idVendor=04fc, idProduct=0235, bcdDevice=ef.15 [ 152.320966][ T5834] usb 4-1: Product: syz [ 152.336290][ T1217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.347186][ T5834] usb 4-1: Manufacturer: syz [ 152.427913][ T5834] usb 4-1: SerialNumber: syz [ 152.436262][ T1217] usb 3-1: Product: syz [ 152.459487][ T5834] usb 4-1: config 0 descriptor?? [ 152.464713][ T1217] usb 3-1: Manufacturer: syz [ 152.478089][ T1217] usb 3-1: SerialNumber: syz [ 152.495761][ T5834] smsc75xx v1.0.0 [ 152.516398][ T1217] usb 3-1: config 0 descriptor?? [ 152.632582][ T1217] spcp8x5 3-1:0.201: SPCP8x5 converter detected [ 152.657797][ T1217] usb 3-1: SPCP8x5 converter now attached to ttyUSB0 [ 152.986194][ T1217] usb 1-1: new full-speed USB device number 16 using dummy_hcd [ 153.540564][ T6731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 153.549594][ T6731] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 153.559019][ T5929] usb 3-1: USB disconnect, device number 12 [ 153.574681][ T5929] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 153.589591][ T1217] usb 1-1: config 0 has an invalid interface number: 126 but max is 0 [ 153.599664][ T1217] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 153.613398][ T5929] spcp8x5 3-1:0.201: device disconnected [ 153.622840][ T1217] usb 1-1: config 0 has no interface number 0 [ 153.640098][ T1217] usb 1-1: config 0 interface 126 has no altsetting 0 [ 153.725426][ T1217] usb 1-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=df.8e [ 153.739691][ T1217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.748752][ T1217] usb 1-1: Product: syz [ 153.753388][ T1217] usb 1-1: Manufacturer: syz [ 153.771076][ T1217] usb 1-1: SerialNumber: syz [ 153.796803][ T1217] usb 1-1: config 0 descriptor?? [ 153.869143][ T1217] zaurus 1-1:0.126: More than one union descriptor, skipping ... [ 153.926046][ T1217] zaurus 1-1:0.126: skipping garbage [ 153.931965][ T1217] usb 1-1: bad CDC descriptors [ 154.206257][ T6750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'. [ 154.597391][ T1217] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 154.793105][ T1217] usb 6-1: Using ep0 maxpacket: 32 [ 154.808315][ T1217] usb 6-1: unable to get BOS descriptor or descriptor too short [ 154.823910][ T1217] usb 6-1: config index 0 descriptor too short (expected 34347, got 43) [ 154.833227][ T1217] usb 6-1: config 31 has too many interfaces: 196, using maximum allowed: 32 [ 154.846492][ T1217] usb 6-1: config 31 has an invalid descriptor of length 0, skipping remainder of the config [ 154.864084][ T1217] usb 6-1: config 31 has 1 interface, different from the descriptor's value: 196 [ 154.874635][ T1217] usb 6-1: config 31 has no interface number 0 [ 154.888443][ T1217] usb 6-1: config 31 interface 81 altsetting 3 has an endpoint descriptor with address 0x93, changing to 0x83 [ 154.905554][ T1217] usb 6-1: config 31 interface 81 altsetting 3 endpoint 0x83 has invalid wMaxPacketSize 0 [ 154.926347][ T1217] usb 6-1: config 31 interface 81 altsetting 3 bulk endpoint 0x83 has invalid maxpacket 0 [ 155.057585][ T1217] usb 6-1: config 31 interface 81 has no altsetting 0 [ 155.080340][ T1217] usb 6-1: string descriptor 0 read error: -22 [ 155.086982][ T1217] usb 6-1: New USB device found, idVendor=0dfc, idProduct=0001, bcdDevice=24.ac [ 155.113552][ T1217] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.260902][ T1217] input: USB Touchscreen 0dfc:0001 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:31.81/input/input20 [ 155.711260][ T1217] usb 6-1: USB disconnect, device number 4 [ 156.849417][ T5834] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 156.916651][ T5834] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 156.972484][ T5834] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 157.030892][ T5834] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 157.084085][ T5834] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 157.128985][ T5834] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 157.183712][ T5834] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 157.360948][ T1217] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 157.534311][ T5941] usb 1-1: USB disconnect, device number 16 [ 157.546265][ T5834] usb 4-1: USB disconnect, device number 17 [ 157.638230][ T6797] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 157.647299][ T5911] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 157.743490][ T6797] netlink: 28 bytes leftover after parsing attributes in process `syz.3.193'. [ 157.804727][ T1217] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 157.829481][ T1217] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.904851][ T1217] usb 3-1: Product: syz [ 157.917335][ T1217] usb 3-1: Manufacturer: syz [ 157.942300][ T1217] usb 3-1: SerialNumber: syz [ 157.965055][ T5911] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 157.973823][ T1217] usb 3-1: config 0 descriptor?? [ 158.016600][ T1217] ch341 3-1:0.0: ch341-uart converter detected [ 158.050768][ T5911] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 158.083002][ T5911] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 158.240367][ T5911] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.320909][ T5911] usb 6-1: config 0 descriptor?? [ 158.375381][ T5911] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 158.390276][ T1217] usb 3-1: failed to send control message: -71 [ 158.412743][ T5911] dvb-usb: bulk message failed: -22 (3/0) [ 158.450805][ T1217] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71 [ 158.490180][ T5911] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 158.511640][ T6797] team0: Port device team_slave_1 removed [ 158.538698][ T5911] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 158.549292][ T1217] usb 3-1: USB disconnect, device number 13 [ 158.564385][ T5911] usb 6-1: media controller created [ 158.580117][ T6815] netlink: 4 bytes leftover after parsing attributes in process `syz.2.197'. [ 158.630854][ T5911] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 158.656123][ T1217] ch341 3-1:0.0: device disconnected [ 158.671242][ T6821] Dead loop on virtual device ip6_vti0, fix it urgently! [ 158.690649][ T5911] dvb-usb: bulk message failed: -22 (6/0) [ 158.698058][ T5911] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 158.750752][ C1] sd 0:0:1:0: [sda] tag#1234 FAILED Result: hostbyte=DID_ERROR driverbyte=DRIVER_OK cmd_age=0s [ 158.761793][ C1] sd 0:0:1:0: [sda] tag#1234 CDB: Write(6) 0a 00 4e 23 00 00 04 01 00 00 00 00 [ 158.784030][ T5911] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input21 [ 158.831890][ T5911] dvb-usb: schedule remote query interval to 150 msecs. [ 158.890678][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'. [ 158.900782][ T5911] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 159.262502][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 159.283248][ T5911] dvb-usb: error while querying for an remote control event. [ 159.527994][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 159.563125][ T5911] dvb-usb: error while querying for an remote control event. [ 159.748052][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 159.754526][ T5911] dvb-usb: error while querying for an remote control event. [ 160.156365][ T5918] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 160.321219][ T5918] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 160.354077][ T5918] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 160.410859][ T5911] dvb-usb: bulk message failed: -22 (1/0) [ 160.467464][ T5911] dvb-usb: error while querying for an remote control event. [ 160.614436][ T5918] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 160.657202][ T5918] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 160.702666][ T5918] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 160.757270][ T5918] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 160.786775][ T977] dvb-usb: bulk message failed: -22 (1/0) [ 160.807353][ T977] dvb-usb: error while querying for an remote control event. [ 160.817634][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 160.827507][ T5918] usb 4-1: Product: syz [ 160.831908][ T5918] usb 4-1: Manufacturer: syz [ 160.843972][ T5918] cdc_wdm 4-1:1.0: skipping garbage [ 160.849401][ T5918] cdc_wdm 4-1:1.0: skipping garbage [ 160.862368][ T5918] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 160.869248][ T5918] cdc_wdm 4-1:1.0: Unknown control protocol [ 160.905932][ T5918] usb 6-1: USB disconnect, device number 5 [ 161.066513][ T977] usb 4-1: USB disconnect, device number 18 [ 161.079342][ T5918] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 161.761569][ T977] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 161.769508][ T5918] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 161.816144][ T6855] netlink: 666 bytes leftover after parsing attributes in process `syz.2.203'. [ 161.881354][ T6845] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 161.987163][ T5918] usb 6-1: device descriptor read/64, error -71 [ 162.015227][ T977] usb 4-1: Using ep0 maxpacket: 8 [ 162.047643][ T977] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.232067][ T977] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 162.264916][ T977] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 162.290554][ T1217] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 162.290993][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.337086][ T977] usb 4-1: Product: ÑŠ [ 162.351415][ T977] usb 4-1: Manufacturer: á Š [ 162.377174][ T5918] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 162.390743][ T977] usb 4-1: SerialNumber: П [ 162.464909][ T1217] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 162.502352][ T1217] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.527273][ T5918] usb 6-1: device descriptor read/64, error -71 [ 162.548830][ T1217] usb 3-1: config 0 descriptor?? [ 162.564008][ T977] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 162.607147][ T977] cdc_ncm 4-1:1.0: bind() failure [ 162.643982][ T977] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 162.672909][ T977] cdc_ncm 4-1:1.1: bind() failure [ 162.697838][ T5918] usb usb6-port1: attempt power cycle [ 162.741797][ T977] usb 4-1: USB disconnect, device number 19 [ 162.974215][ T1217] ath6kl: Failed to submit usb control message: -71 [ 163.002467][ T1217] ath6kl: unable to send the bmi data to the device: -71 [ 163.039103][ T1217] ath6kl: Unable to send get target info: -71 [ 163.098242][ T1217] ath6kl: Failed to init ath6kl core: -71 [ 163.137563][ T5918] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 163.178919][ T5918] usb 6-1: device descriptor read/8, error -71 [ 163.190504][ T1217] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 163.374881][ T1217] usb 3-1: USB disconnect, device number 14 [ 163.489185][ T6876] netlink: 24 bytes leftover after parsing attributes in process `syz.1.201'. [ 163.521251][ T5918] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 163.521677][ T5941] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 163.663125][ T5918] usb 6-1: device descriptor read/8, error -71 [ 163.697190][ T977] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 163.787663][ T5918] usb usb6-port1: unable to enumerate USB device [ 163.857690][ T977] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 163.898333][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.912916][ T5941] usb 4-1: config 0 has an invalid interface number: 126 but max is 0 [ 163.932235][ T977] usb 1-1: config 0 descriptor?? [ 163.939874][ T5941] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 163.974968][ T977] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 164.034485][ T5941] usb 4-1: config 0 has no interface number 0 [ 164.082067][ T5941] usb 4-1: config 0 interface 126 has no altsetting 0 [ 164.139298][ T5941] usb 4-1: New USB device found, idVendor=04dd, idProduct=8007, bcdDevice=df.8e [ 164.156432][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.181161][ T977] gspca_cpia1: usb_control_msg 05, error -71 [ 164.187594][ T5941] usb 4-1: Product: syz [ 164.198613][ T5941] usb 4-1: Manufacturer: syz [ 164.209881][ T977] gspca_cpia1: usb_control_msg 01, error -71 [ 164.216683][ T5941] usb 4-1: SerialNumber: syz [ 164.238735][ T977] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0) [ 164.268520][ T5941] usb 4-1: config 0 descriptor?? [ 164.319715][ T977] usb 1-1: USB disconnect, device number 17 [ 164.330718][ T5941] zaurus 4-1:0.126: More than one union descriptor, skipping ... [ 164.392052][ T5941] zaurus 4-1:0.126: skipping garbage [ 164.413061][ T5941] usb 4-1: bad CDC descriptors [ 164.559082][ T6871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.204'. [ 165.477285][ T977] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 165.627192][ T977] usb 1-1: Using ep0 maxpacket: 16 [ 165.642025][ T977] usb 1-1: config index 0 descriptor too short (expected 65201, got 78) [ 165.670586][ T977] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 165.705060][ T977] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 165.747220][ T5918] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 165.762238][ T977] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 165.799526][ T977] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 165.811257][ T977] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 165.833123][ T977] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 165.856224][ T977] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 165.867398][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 165.905446][ T977] usb 1-1: SerialNumber: syz [ 165.977740][ T5918] usb 6-1: Using ep0 maxpacket: 8 [ 165.993563][ T5918] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 166.032910][ T5918] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 166.055371][ T977] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 166.074767][ T977] cdc_acm 1-1:1.0: probe with driver cdc_acm failed with error -12 [ 166.095467][ T5918] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 166.136456][ T5918] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 166.182783][ T5918] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 166.196790][ T5918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.279521][ T977] usb 1-1: USB disconnect, device number 18 [ 166.463154][ T5918] usb 6-1: usb_control_msg returned -71 [ 166.552549][ T5918] usbtmc 6-1:16.0: can't read capabilities [ 166.777475][ T5941] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 166.785671][ T5918] usb 6-1: USB disconnect, device number 10 [ 166.937476][ T5941] usb 2-1: Using ep0 maxpacket: 32 [ 167.004364][ T5941] usb 2-1: config index 0 descriptor too short (expected 29220, got 36) [ 167.028654][ T5941] usb 2-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 167.080626][ T5941] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 167.112430][ T5834] usb 4-1: USB disconnect, device number 20 [ 167.243433][ T5941] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 167.289384][ T5941] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 167.343205][ T5941] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 167.487539][ T5941] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 167.542019][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.027435][ T977] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 168.028318][ T5941] usb 2-1: config 0 descriptor?? [ 168.228595][ T5834] usb 1-1: new full-speed USB device number 19 using dummy_hcd [ 168.248355][ T977] usb 3-1: Using ep0 maxpacket: 32 [ 168.270918][ T977] usb 3-1: config index 0 descriptor too short (expected 156, got 27) [ 168.303878][ T977] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 168.340565][ T5941] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 168.379630][ T5927] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 168.392489][ T977] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 168.445149][ T977] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 168.491740][ T5941] usb 2-1: USB disconnect, device number 10 [ 168.493506][ T6953] netlink: 24 bytes leftover after parsing attributes in process `syz.3.217'. [ 168.516338][ T5834] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 168.518285][ T977] usb 3-1: config 0 interface 0 has no altsetting 0 [ 168.576492][ T5941] usblp0: removed [ 168.657289][ T5834] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 168.707137][ T5927] usb 6-1: Using ep0 maxpacket: 8 [ 168.708061][ T977] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 168.723623][ T5834] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 168.733501][ T977] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 168.735990][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.754927][ T5927] usb 6-1: config index 0 descriptor too short (expected 46935, got 18) [ 168.765612][ T5927] usb 6-1: config 184 has too many interfaces: 116, using maximum allowed: 32 [ 168.774031][ T977] usb 3-1: Product: syz [ 168.822888][ T977] usb 3-1: Manufacturer: syz [ 168.826818][ T5927] usb 6-1: config 184 has an invalid descriptor of length 0, skipping remainder of the config [ 168.847932][ T977] usb 3-1: SerialNumber: syz [ 168.978296][ T977] usb 3-1: config 0 descriptor?? [ 169.002957][ T5834] usb 1-1: config 0 descriptor?? [ 169.019056][ T977] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 169.050263][ T5927] usb 6-1: config 184 has 0 interfaces, different from the descriptor's value: 116 [ 169.053530][ T977] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 169.073719][ T5834] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 169.114162][ T5834] dvb-usb: bulk message failed: -22 (3/0) [ 169.141977][ T5927] usb 6-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 169.165622][ T5927] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.177512][ T5834] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 169.194374][ T5834] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 169.218943][ T5927] usb 6-1: Product: syz [ 169.223243][ T5927] usb 6-1: Manufacturer: syz [ 169.248201][ T5834] usb 1-1: media controller created [ 169.266577][ T5927] usb 6-1: SerialNumber: syz [ 169.291545][ T5834] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 172.105124][ T977] usb 3-1: USB disconnect, device number 15 [ 172.221375][ T977] ldusb 3-1:0.0: LD USB Device #0 now disconnected [ 172.852217][ T5834] dvb-usb: bulk message failed: -22 (6/0) [ 172.863247][ T1217] sched: DL replenish lagged too much [ 173.617391][ T5834] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 175.660039][ T5834] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input22 [ 176.847936][ T5834] dvb-usb: schedule remote query interval to 150 msecs. [ 176.998607][ T5834] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 177.018873][ T5941] dvb-usb: bulk message failed: -22 (1/0) [ 177.024691][ T5941] dvb-usb: error while querying for an remote control event. [ 177.337383][ T5834] usb 1-1: USB disconnect, device number 19 [ 177.908819][ T5834] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 177.966277][ T6968] binder: 6965:6968 ioctl c018620c 200000000640 returned -22 [ 178.190963][ T6968] binder: 6965:6968 ioctl c0045516 200000000380 returned -22 [ 178.560667][ T5834] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 198.109880][ T5834] usb 1-1: device descriptor read/all, error -71 [ 200.577710][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 200.584181][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 212.441296][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 212.447824][ T51] Bluetooth: hci2: command 0x0406 tx timeout [ 212.453897][ T51] Bluetooth: hci3: command 0x0406 tx timeout [ 212.460597][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 221.196003][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 221.212227][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 221.231465][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 221.257463][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 221.287506][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 221.358987][ T5837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 221.369304][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 221.388813][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 221.437959][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.446582][ T5837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 221.459551][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.467642][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 221.482645][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.507618][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.517871][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.767692][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 221.799331][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 221.809298][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 221.828301][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 221.836085][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 222.000621][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 222.021771][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 222.031096][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 222.043606][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 222.057870][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 223.364351][ T5846] Bluetooth: hci0: command tx timeout [ 223.517177][ T5846] Bluetooth: hci2: command tx timeout [ 223.598486][ T5846] Bluetooth: hci3: command tx timeout [ 223.917258][ T5846] Bluetooth: hci4: command tx timeout [ 224.157373][ T5846] Bluetooth: hci5: command tx timeout [ 225.438328][ T5846] Bluetooth: hci0: command tx timeout [ 225.601176][ T5846] Bluetooth: hci2: command tx timeout [ 225.677519][ T5846] Bluetooth: hci3: command tx timeout [ 225.997201][ T5846] Bluetooth: hci4: command tx timeout [ 226.367265][ T5846] Bluetooth: hci5: command tx timeout [ 227.518360][ T5846] Bluetooth: hci0: command tx timeout [ 227.677149][ T5846] Bluetooth: hci2: command tx timeout [ 227.757372][ T5846] Bluetooth: hci3: command tx timeout [ 228.077616][ T5846] Bluetooth: hci4: command tx timeout [ 228.397272][ T5846] Bluetooth: hci5: command tx timeout [ 233.307154][ T5846] Bluetooth: hci0: command tx timeout [ 233.312653][ T5846] Bluetooth: hci2: command tx timeout [ 233.318215][ T5850] Bluetooth: hci3: command tx timeout [ 233.323680][ T5850] Bluetooth: hci4: command tx timeout [ 233.329182][ T5837] Bluetooth: hci5: command tx timeout [ 235.703179][ T7008] chnl_net:caif_netlink_parms(): no params data found [ 236.304334][ T7011] chnl_net:caif_netlink_parms(): no params data found [ 236.353498][ T7012] chnl_net:caif_netlink_parms(): no params data found [ 237.225388][ T7008] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.239504][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.255035][ T7008] bridge_slave_0: entered allmulticast mode [ 237.297343][ T7008] bridge_slave_0: entered promiscuous mode [ 237.325477][ T7007] chnl_net:caif_netlink_parms(): no params data found [ 237.460232][ T7014] chnl_net:caif_netlink_parms(): no params data found [ 237.515759][ T7008] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.544952][ T7008] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.587501][ T7008] bridge_slave_1: entered allmulticast mode [ 237.619155][ T7008] bridge_slave_1: entered promiscuous mode [ 238.194153][ T7011] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.235247][ T7011] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.295416][ T7011] bridge_slave_0: entered allmulticast mode [ 238.339160][ T7011] bridge_slave_0: entered promiscuous mode [ 238.873841][ T7008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.901110][ T7011] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.916375][ T7011] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.938390][ T7011] bridge_slave_1: entered allmulticast mode [ 238.946612][ T7011] bridge_slave_1: entered promiscuous mode [ 239.092699][ T7012] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.106046][ T7012] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.116226][ T7012] bridge_slave_0: entered allmulticast mode [ 239.139311][ T7012] bridge_slave_0: entered promiscuous mode [ 239.159531][ T7012] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.166741][ T7012] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.184544][ T7012] bridge_slave_1: entered allmulticast mode [ 239.214991][ T7012] bridge_slave_1: entered promiscuous mode [ 239.321799][ T7008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.685718][ T7011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.827520][ T7008] team0: Port device team_slave_0 added [ 239.939054][ T7011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.963293][ T7012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.141247][ T7008] team0: Port device team_slave_1 added [ 240.245887][ T7007] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.256789][ T7007] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.279567][ T7007] bridge_slave_0: entered allmulticast mode [ 240.297647][ T7007] bridge_slave_0: entered promiscuous mode [ 240.485300][ T7012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.645172][ T7014] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.660514][ T7014] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.672716][ T7014] bridge_slave_0: entered allmulticast mode [ 240.685935][ T7014] bridge_slave_0: entered promiscuous mode [ 240.704976][ T7014] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.717966][ T7014] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.725292][ T7014] bridge_slave_1: entered allmulticast mode [ 240.749772][ T7014] bridge_slave_1: entered promiscuous mode [ 240.953789][ T7007] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.972617][ T7007] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.990939][ T7007] bridge_slave_1: entered allmulticast mode [ 241.004925][ T7007] bridge_slave_1: entered promiscuous mode [ 241.020267][ T7011] team0: Port device team_slave_0 added [ 241.256554][ T7008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.274627][ T7008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.314356][ T7008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.336792][ T7008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.356449][ T7008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.395555][ T7008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.611449][ T7011] team0: Port device team_slave_1 added [ 241.710763][ T7012] team0: Port device team_slave_0 added [ 241.812337][ T7014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.010593][ T7007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 242.146596][ T7012] team0: Port device team_slave_1 added [ 242.254162][ T7014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.386628][ T7007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 242.514264][ T7011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.534518][ T7011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.573894][ T7011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.675163][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.691275][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.727183][ T7012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.880300][ T7008] hsr_slave_0: entered promiscuous mode [ 242.904341][ T7008] hsr_slave_1: entered promiscuous mode [ 242.912085][ T7008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 242.927350][ T7008] Cannot create hsr debugfs directory [ 243.050313][ T7007] team0: Port device team_slave_0 added [ 243.071992][ T7011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.093054][ T7011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.130204][ T7011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.151428][ T7012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.165089][ T7012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.207186][ T7012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.512646][ T7007] team0: Port device team_slave_1 added [ 243.569872][ T7014] team0: Port device team_slave_0 added [ 243.792656][ T7014] team0: Port device team_slave_1 added [ 244.016406][ T7007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.023673][ T7007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.057512][ T7007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.175150][ T7012] hsr_slave_0: entered promiscuous mode [ 244.183587][ T7012] hsr_slave_1: entered promiscuous mode [ 244.198339][ T7012] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.205980][ T7012] Cannot create hsr debugfs directory [ 244.571676][ T7007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.584967][ T7007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.624031][ T7007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.759936][ T7014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.766965][ T7014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.825613][ T7014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.114489][ T7014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.147202][ T7014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.181553][ T7014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 245.213080][ T7011] hsr_slave_0: entered promiscuous mode [ 245.225401][ T7011] hsr_slave_1: entered promiscuous mode [ 245.251601][ T7011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.267357][ T7011] Cannot create hsr debugfs directory [ 245.421451][ T7007] hsr_slave_0: entered promiscuous mode [ 245.432395][ T7007] hsr_slave_1: entered promiscuous mode [ 245.471383][ T7007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.483748][ T7007] Cannot create hsr debugfs directory [ 246.173770][ T7014] hsr_slave_0: entered promiscuous mode [ 246.188443][ T7014] hsr_slave_1: entered promiscuous mode [ 246.195102][ T7014] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.207074][ T7014] Cannot create hsr debugfs directory [ 247.751114][ T7008] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 247.911410][ T7008] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 247.950585][ T7008] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 248.017214][ T7008] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 248.259707][ T7011] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 248.392624][ T7011] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 248.494888][ T7011] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 248.609687][ T7011] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 248.737485][ T7012] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 248.769236][ T7012] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 248.861830][ T7012] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 248.895829][ T7012] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 249.103739][ T7008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.548919][ T7007] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 256.576433][ T7007] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 256.654905][ T7007] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 256.756501][ T7007] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 256.844959][ T7008] 8021q: adding VLAN 0 to HW filter on device team0 [ 257.170703][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.177960][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 257.261008][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.268271][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.186825][ T7012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.484977][ T7007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.549648][ T7012] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.626286][ T7007] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.762033][ T7008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 258.862095][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.869363][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.095517][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.102784][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 259.179632][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.190999][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.202519][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.212176][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.220697][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 259.300130][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.307380][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 259.963037][ T1148] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.970316][ T1148] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.886962][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.893761][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.360127][ T5850] Bluetooth: hci1: command tx timeout [ 262.110224][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 262.130155][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 262.140591][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 262.150100][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 262.159874][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 262.555065][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 262.566721][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 262.588814][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 262.599041][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 262.609343][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 263.444953][ T5850] Bluetooth: hci1: command tx timeout [ 263.751433][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 263.780775][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 263.789798][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 263.798716][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 263.807535][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 263.966275][ T7142] chnl_net:caif_netlink_parms(): no params data found [ 264.318773][ T5846] Bluetooth: hci3: command tx timeout [ 264.638255][ T5846] Bluetooth: hci2: command tx timeout [ 265.374618][ T7142] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.425621][ T7142] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.467508][ T7142] bridge_slave_0: entered allmulticast mode [ 265.475573][ T7142] bridge_slave_0: entered promiscuous mode [ 265.518283][ T5846] Bluetooth: hci1: command tx timeout [ 265.630945][ T7142] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.665611][ T7142] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.707853][ T7142] bridge_slave_1: entered allmulticast mode [ 265.747574][ T7142] bridge_slave_1: entered promiscuous mode [ 265.933426][ T5846] Bluetooth: hci0: command tx timeout [ 266.167476][ T7142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.351541][ T7142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.398337][ T5846] Bluetooth: hci3: command tx timeout [ 266.718427][ T5846] Bluetooth: hci2: command tx timeout [ 266.847644][ T7142] team0: Port device team_slave_0 added [ 267.274339][ T7142] team0: Port device team_slave_1 added [ 267.597745][ T5846] Bluetooth: hci1: command tx timeout [ 267.925326][ T7142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.972275][ T7142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.027098][ T5846] Bluetooth: hci0: command tx timeout [ 268.127525][ T7142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.223754][ T7166] chnl_net:caif_netlink_parms(): no params data found [ 268.343285][ T7142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.399481][ T7142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.487286][ T5846] Bluetooth: hci3: command tx timeout [ 268.567235][ T7142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.756050][ T7155] chnl_net:caif_netlink_parms(): no params data found [ 268.782732][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.800304][ T5850] Bluetooth: hci2: command tx timeout [ 268.806342][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.815231][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.837575][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.845693][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.912099][ T7159] chnl_net:caif_netlink_parms(): no params data found [ 269.654878][ T7142] hsr_slave_0: entered promiscuous mode [ 269.698613][ T7142] hsr_slave_1: entered promiscuous mode [ 269.711792][ T7142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 269.748705][ T7142] Cannot create hsr debugfs directory [ 270.077391][ T5846] Bluetooth: hci0: command tx timeout [ 270.557663][ T5846] Bluetooth: hci3: command tx timeout [ 270.851902][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.880810][ T5846] Bluetooth: hci2: command tx timeout [ 270.897173][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.904522][ T7166] bridge_slave_0: entered allmulticast mode [ 270.957977][ T5846] Bluetooth: hci4: command tx timeout [ 270.977564][ T7166] bridge_slave_0: entered promiscuous mode [ 271.191073][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.217304][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.224939][ T7166] bridge_slave_1: entered allmulticast mode [ 271.310226][ T7166] bridge_slave_1: entered promiscuous mode [ 272.162079][ T5846] Bluetooth: hci0: command tx timeout [ 272.225912][ T7166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.276365][ T7159] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.291684][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.337732][ T7159] bridge_slave_0: entered allmulticast mode [ 272.349347][ T7159] bridge_slave_0: entered promiscuous mode [ 272.402140][ T7155] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.417189][ T7155] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.424636][ T7155] bridge_slave_0: entered allmulticast mode [ 272.479763][ T7155] bridge_slave_0: entered promiscuous mode [ 272.657930][ T7166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.687676][ T7159] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.694990][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.747936][ T7159] bridge_slave_1: entered allmulticast mode [ 272.756013][ T7159] bridge_slave_1: entered promiscuous mode [ 272.958288][ T7155] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.965506][ T7155] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.026379][ T7155] bridge_slave_1: entered allmulticast mode [ 273.041128][ T5846] Bluetooth: hci4: command tx timeout [ 273.049150][ T7155] bridge_slave_1: entered promiscuous mode [ 273.703843][ T7159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.892902][ T7155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.100873][ T7166] team0: Port device team_slave_0 added [ 274.146757][ T7166] team0: Port device team_slave_1 added [ 274.205582][ T7159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.404877][ T7155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.956208][ T7159] team0: Port device team_slave_0 added [ 275.091249][ T7155] team0: Port device team_slave_0 added [ 275.117824][ T5850] Bluetooth: hci4: command tx timeout [ 275.160781][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.177333][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.246619][ T7166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.269904][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.276909][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.319615][ T7166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.383918][ T7159] team0: Port device team_slave_1 added [ 275.478503][ T7155] team0: Port device team_slave_1 added [ 276.162789][ T7166] hsr_slave_0: entered promiscuous mode [ 276.178432][ T7166] hsr_slave_1: entered promiscuous mode [ 276.198281][ T7166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.205931][ T7166] Cannot create hsr debugfs directory [ 276.245883][ T7159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.262421][ T7159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.299684][ T7159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.356679][ T7159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.372377][ T7159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.416462][ T7159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.441060][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.467372][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.511345][ T7155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.609137][ T7155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.616154][ T7155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.663877][ T7155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.197403][ T5850] Bluetooth: hci4: command tx timeout [ 277.272004][ T7155] hsr_slave_0: entered promiscuous mode [ 277.298491][ T7155] hsr_slave_1: entered promiscuous mode [ 277.316017][ T7155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.332218][ T7155] Cannot create hsr debugfs directory [ 277.373907][ T7159] hsr_slave_0: entered promiscuous mode [ 277.389965][ T7159] hsr_slave_1: entered promiscuous mode [ 277.396461][ T7159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.415129][ T7159] Cannot create hsr debugfs directory [ 278.156374][ T7212] chnl_net:caif_netlink_parms(): no params data found [ 279.540681][ T7212] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.568723][ T7212] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.576182][ T7212] bridge_slave_0: entered allmulticast mode [ 279.599569][ T7212] bridge_slave_0: entered promiscuous mode [ 279.618782][ T7212] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.627741][ T7212] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.635328][ T7212] bridge_slave_1: entered allmulticast mode [ 279.680954][ T7212] bridge_slave_1: entered promiscuous mode [ 279.951825][ T7212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.980468][ T7212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.271382][ T7212] team0: Port device team_slave_0 added [ 280.291028][ T7212] team0: Port device team_slave_1 added [ 280.490061][ T7212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.507164][ T7212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.545999][ T7212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.595946][ T7212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.607293][ T7212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.656121][ T7212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.915273][ T7212] hsr_slave_0: entered promiscuous mode [ 280.943687][ T7212] hsr_slave_1: entered promiscuous mode [ 280.959036][ T7212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 280.966664][ T7212] Cannot create hsr debugfs directory [ 281.739155][ T1169] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.237288][ T5846] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 319.247453][ T5846] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 319.256096][ T5846] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 319.266061][ T5846] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 319.279414][ T5846] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 320.122440][ T7284] chnl_net:caif_netlink_parms(): no params data found [ 321.272685][ T5850] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 321.281741][ T5850] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 321.290444][ T5850] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 321.300094][ T5850] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 321.308187][ T5850] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 321.357362][ T5850] Bluetooth: hci6: command tx timeout [ 321.377624][ T5846] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 321.388528][ T5846] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 321.399864][ T5846] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 321.408728][ T5846] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 321.422896][ T5846] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 321.782550][ T7284] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.826085][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.857619][ T7284] bridge_slave_0: entered allmulticast mode [ 321.869884][ T7284] bridge_slave_0: entered promiscuous mode [ 321.898424][ T7284] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.905735][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.927597][ T7284] bridge_slave_1: entered allmulticast mode [ 321.955744][ T7284] bridge_slave_1: entered promiscuous mode [ 322.331051][ T1306] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.337686][ T1306] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.453848][ T7284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.511655][ T7284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.878728][ T7284] team0: Port device team_slave_0 added [ 322.948676][ T7284] team0: Port device team_slave_1 added [ 323.166076][ T5850] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 323.175722][ T5850] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 323.184123][ T5850] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 323.199976][ T5850] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 323.209097][ T5850] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 323.354152][ T7284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.373182][ T5850] Bluetooth: hci7: command tx timeout [ 323.388489][ T7284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.431353][ T7284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.447723][ T5850] Bluetooth: hci6: command tx timeout [ 323.473077][ T7284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.497182][ T7284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.537433][ T5850] Bluetooth: hci8: command tx timeout [ 323.556583][ T7284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.209926][ T7284] hsr_slave_0: entered promiscuous mode [ 324.216941][ T7284] hsr_slave_1: entered promiscuous mode [ 324.261253][ T7284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 324.287855][ T7284] Cannot create hsr debugfs directory [ 324.737603][ T7296] chnl_net:caif_netlink_parms(): no params data found [ 325.234554][ T7295] chnl_net:caif_netlink_parms(): no params data found [ 325.277410][ T5850] Bluetooth: hci9: command tx timeout [ 325.437594][ T5850] Bluetooth: hci7: command tx timeout [ 325.518817][ T5850] Bluetooth: hci6: command tx timeout [ 325.600155][ T5850] Bluetooth: hci8: command tx timeout [ 326.253888][ T7296] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.267996][ T7296] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.275384][ T7296] bridge_slave_0: entered allmulticast mode [ 326.305950][ T7296] bridge_slave_0: entered promiscuous mode [ 326.330372][ T7296] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.362111][ T7296] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.377319][ T7296] bridge_slave_1: entered allmulticast mode [ 326.398951][ T7296] bridge_slave_1: entered promiscuous mode [ 326.416596][ T7300] chnl_net:caif_netlink_parms(): no params data found [ 326.785551][ T7295] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.813251][ T7295] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.832864][ T7295] bridge_slave_0: entered allmulticast mode [ 326.859588][ T7295] bridge_slave_0: entered promiscuous mode [ 326.879002][ T7295] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.886230][ T7295] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.907626][ T7295] bridge_slave_1: entered allmulticast mode [ 326.939461][ T7295] bridge_slave_1: entered promiscuous mode [ 326.962633][ T7296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.989100][ T7296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.358945][ T5850] Bluetooth: hci9: command tx timeout [ 327.525889][ T7295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.536929][ T5850] Bluetooth: hci7: command tx timeout [ 327.599551][ T5850] Bluetooth: hci6: command tx timeout [ 327.677232][ T5850] Bluetooth: hci8: command tx timeout [ 327.865730][ T7295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.035719][ T7296] team0: Port device team_slave_0 added [ 328.098636][ T7296] team0: Port device team_slave_1 added [ 328.354893][ T7295] team0: Port device team_slave_0 added [ 328.553292][ T5846] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 328.563249][ T5846] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 328.573473][ T5846] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 328.626330][ T5846] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 328.634672][ T5846] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 328.781075][ T7296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.800871][ T7296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.865078][ T7296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.886217][ T7295] team0: Port device team_slave_1 added [ 329.031004][ T7300] bridge0: port 1(bridge_slave_0) entered blocking state [ 329.049637][ T7300] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.067308][ T7300] bridge_slave_0: entered allmulticast mode [ 329.087591][ T7300] bridge_slave_0: entered promiscuous mode [ 329.109213][ T7300] bridge0: port 2(bridge_slave_1) entered blocking state [ 329.116905][ T7300] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.137588][ T7300] bridge_slave_1: entered allmulticast mode [ 329.159663][ T7300] bridge_slave_1: entered promiscuous mode [ 329.251742][ T7296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.287652][ T7296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.343812][ T7296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.437936][ T5846] Bluetooth: hci9: command tx timeout [ 329.486104][ T7295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.513490][ T7295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.566781][ T7295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.600490][ T5846] Bluetooth: hci7: command tx timeout [ 329.735755][ T7295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.757683][ T5846] Bluetooth: hci8: command tx timeout [ 329.763193][ T7295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.827912][ T7295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.989797][ T7300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 330.279587][ T7300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 330.492576][ T7296] hsr_slave_0: entered promiscuous mode [ 330.505971][ T7296] hsr_slave_1: entered promiscuous mode [ 330.530082][ T7296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.557568][ T7296] Cannot create hsr debugfs directory [ 330.694300][ T7295] hsr_slave_0: entered promiscuous mode [ 330.715254][ T7295] hsr_slave_1: entered promiscuous mode [ 330.721419][ T5846] Bluetooth: hci10: command tx timeout [ 330.747637][ T7295] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.757404][ T7295] Cannot create hsr debugfs directory [ 331.090817][ T7300] team0: Port device team_slave_0 added [ 331.111312][ T7300] team0: Port device team_slave_1 added [ 331.518332][ T5846] Bluetooth: hci9: command tx timeout [ 331.687574][ T7300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 331.694607][ T7300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 331.762611][ T7300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 332.012956][ T7300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 332.034820][ T7300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 332.095631][ T7300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 332.635783][ T7300] hsr_slave_0: entered promiscuous mode [ 332.667978][ T7300] hsr_slave_1: entered promiscuous mode [ 332.674734][ T7300] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 332.702171][ T7300] Cannot create hsr debugfs directory [ 332.802799][ T5846] Bluetooth: hci10: command tx timeout [ 333.614342][ T7322] chnl_net:caif_netlink_parms(): no params data found [ 334.261100][ T7322] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.277444][ T7322] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.284841][ T7322] bridge_slave_0: entered allmulticast mode [ 334.328387][ T7322] bridge_slave_0: entered promiscuous mode [ 334.349805][ T7322] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.357390][ T7322] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.368704][ T7322] bridge_slave_1: entered allmulticast mode [ 334.387976][ T7322] bridge_slave_1: entered promiscuous mode [ 334.673334][ T7322] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.702221][ T7322] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.878824][ T5846] Bluetooth: hci10: command tx timeout [ 334.991044][ T7322] team0: Port device team_slave_0 added [ 335.020014][ T7322] team0: Port device team_slave_1 added [ 335.210512][ T7322] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.227189][ T7322] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.297323][ T7322] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.451335][ T7322] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.467163][ T7322] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.514527][ T7322] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.789620][ T7322] hsr_slave_0: entered promiscuous mode [ 335.796768][ T7322] hsr_slave_1: entered promiscuous mode [ 335.818251][ T7322] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.825879][ T7322] Cannot create hsr debugfs directory [ 336.958214][ T5846] Bluetooth: hci10: command tx timeout [ 344.883210][ T5838] Bluetooth: hci5: command 0x0406 tx timeout [ 368.405481][ T31] INFO: task syz-executor:5855 blocked for more than 143 seconds. [ 368.413713][ T31] Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 [ 368.447270][ T31] Blocked by coredump. [ 368.451929][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 368.491807][ T31] task:syz-executor state:D stack:21448 pid:5855 tgid:5855 ppid:1 task_flags:0x40054c flags:0x00004006 [ 368.543293][ T31] Call Trace: [ 368.546664][ T31] [ 368.626127][ T31] __schedule+0x16f5/0x4d00 [ 368.639102][ T31] ? __lock_acquire+0xa91/0xd20 [ 368.694462][ T31] ? schedule+0x165/0x360 [ 368.732105][ T31] ? __pfx___schedule+0x10/0x10 [ 368.757255][ T31] ? schedule+0x91/0x360 [ 368.761609][ T31] schedule+0x165/0x360 [ 368.765817][ T31] schedule_preempt_disabled+0x13/0x30 [ 368.797872][ T31] __mutex_lock+0x724/0xe80 [ 368.802484][ T31] ? __mutex_lock+0x51b/0xe80 [ 368.831814][ T31] ? rcu_barrier+0x4c/0x570 [ 368.836409][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 368.867465][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 368.873227][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 368.907372][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 368.912600][ T31] rcu_barrier+0x4c/0x570 [ 368.925629][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 368.944949][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 368.958390][ T31] netdev_run_todo+0x327/0xea0 [ 368.963242][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 368.987225][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 368.992603][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 369.007085][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.012500][ T31] ? netdev_state_change+0x1ca/0x220 [ 369.036693][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 369.057304][ T31] tun_chr_close+0x13c/0x1c0 [ 369.062016][ T31] __fput+0x44c/0xa70 [ 369.066066][ T31] task_work_run+0x1d1/0x260 [ 369.087459][ T31] ? __pfx_task_work_run+0x10/0x10 [ 369.092675][ T31] ? kmem_cache_free+0x18f/0x400 [ 369.106837][ T31] do_exit+0x6ad/0x22e0 [ 369.127214][ T31] ? do_raw_spin_lock+0x121/0x290 [ 369.132347][ T31] ? __pfx_do_exit+0x10/0x10 [ 369.150153][ T31] do_group_exit+0x21c/0x2d0 [ 369.154840][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.177410][ T31] get_signal+0x1286/0x1340 [ 369.182062][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 369.197574][ T31] ? fput_close_sync+0x119/0x200 [ 369.202610][ T31] ? kmem_cache_free+0x309/0x400 [ 369.219400][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 369.225672][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 369.260538][ T31] exit_to_user_mode_loop+0x75/0x110 [ 369.265936][ T31] do_syscall_64+0x2bd/0x3b0 [ 369.287202][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 369.292598][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.317281][ T31] ? clear_bhb_loop+0x60/0xb0 [ 369.322158][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.337070][ T31] RIP: 0033:0x7f768f98d33c [ 369.357344][ T31] RSP: 002b:00007f768fcdfd80 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 369.365872][ T31] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f768f98d33c [ 369.397262][ T31] RDX: 0000000000000030 RSI: 00007f768fcdfe40 RDI: 00000000000000f9 [ 369.405776][ T31] RBP: 00007f768fcdfdec R08: 0000000000000000 R09: 0079746972756365 [ 369.427214][ T31] R10: 00007f768fb817e0 R11: 0000000000000246 R12: 0000000000000035 [ 369.446047][ T31] R13: 000000000000005b R14: 000000000002b8d6 R15: 00007f768fcdfe40 [ 369.467401][ T31] [ 369.470652][ T31] [ 369.470652][ T31] Showing all locks held in the system: [ 369.507636][ T31] 4 locks held by ksoftirqd/1/23: [ 369.512824][ T31] 1 lock held by khungtaskd/31: [ 369.527190][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 369.577783][ T31] 6 locks held by kworker/u8:7/1169: [ 369.583154][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 369.617548][ T31] #1: ffffc90003b8fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 369.637563][ T31] #2: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 369.665963][ T31] #3: ffff8880568be0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 369.683006][ T31] #4: ffff8880568bf250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 369.710413][ T31] #5: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.738304][ T31] 3 locks held by kworker/u8:8/1336: [ 369.743672][ T31] 2 locks held by getty/5596: [ 369.767152][ T31] #0: ffff888034b5a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 369.787415][ T31] #1: ffffc900036c32f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 369.820726][ T31] 2 locks held by kworker/1:3/5839: [ 369.826004][ T31] 1 lock held by syz-executor/5853: [ 369.848447][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.867078][ T31] 1 lock held by syz-executor/5855: [ 369.872346][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.904068][ T31] 1 lock held by syz.5.214/6937: [ 369.909792][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.947963][ T31] 1 lock held by syz.3.218/6958: [ 369.953107][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 369.987477][ T31] 1 lock held by syz-executor/7007: [ 369.992778][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 370.025224][ T31] 1 lock held by syz-executor/7008: [ 370.044708][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 370.078512][ T31] 1 lock held by syz-executor/7011: [ 370.083814][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 370.107252][ T31] 1 lock held by syz-executor/7012: [ 370.112539][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 370.137451][ T31] 7 locks held by syz-executor/7014: [ 370.156538][ T31] #0: ffff888034d28428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 370.177587][ T31] #1: ffff888066f54088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 370.207194][ T31] #2: ffff888026b930f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 370.227386][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 370.247549][ T31] #4: ffff888056a680e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 370.287590][ T31] #5: ffff888056a69250 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 370.307547][ T31] #6: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 370.332732][ T31] 4 locks held by syz-executor/7142: [ 370.347448][ T31] #0: ffff888034d28428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 370.382137][ T31] #1: ffff888067fc4888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 370.408114][ T31] #2: ffff888026b930f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 370.427296][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 370.454720][ T31] 4 locks held by syz-executor/7155: [ 370.463747][ T31] #0: ffff888034d28428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 370.494139][ T31] #1: ffff888065235c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 370.518835][ T31] #2: ffff888026b930f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 370.547212][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 370.567269][ T31] 4 locks held by syz-executor/7159: [ 370.591324][ T31] #0: ffff888034d28428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 370.617211][ T31] #1: ffff88804b511088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 370.637673][ T31] #2: ffff888026b930f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 370.657167][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 370.677072][ T31] 4 locks held by syz-executor/7166: [ 370.682426][ T31] #0: ffff888034d28428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 370.717561][ T31] #1: ffff888035005888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 370.747498][ T31] #2: ffff888026b930f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 370.767170][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 370.797582][ T31] 4 locks held by syz-executor/7212: [ 370.802941][ T31] #0: ffff888034d28428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 370.837116][ T31] #1: ffff888037fcd888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 370.857681][ T31] #2: ffff888026b930f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 370.880389][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 370.907419][ T31] 4 locks held by syz-executor/7284: [ 370.912784][ T31] #0: ffff888034d28428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 370.947544][ T31] #1: ffff88804444e888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 370.977617][ T31] #2: ffff888026b930f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 371.007247][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 371.032471][ T31] 4 locks held by syz-executor/7295: [ 371.057178][ T31] #0: ffff888034d28428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 371.066205][ T31] #1: ffff8880384c8c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 371.097333][ T31] #2: ffff888026b930f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 371.117673][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 371.141057][ T31] 4 locks held by syz-executor/7296: [ 371.146433][ T31] #0: ffff888034d28428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 371.177368][ T31] #1: ffff888038467488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 371.217685][ T31] #2: ffff888026b930f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 371.228776][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 371.254677][ T31] 4 locks held by syz-executor/7300: [ 371.271628][ T31] #0: ffff888034d28428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 371.298630][ T31] #1: ffff888068e8e488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 371.317401][ T31] #2: ffff888026b930f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 371.343097][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 371.360749][ T31] 4 locks held by syz-executor/7322: [ 371.377241][ T31] #0: ffff888034d28428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 371.386451][ T31] #1: ffff888089df6888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 371.424195][ T31] #2: ffff888026b930f8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 371.437657][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 371.465582][ T31] [ 371.468789][ T31] ============================================= [ 371.468789][ T31] [ 371.494166][ T31] NMI backtrace for cpu 0 [ 371.494198][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 371.494226][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 371.494239][ T31] Call Trace: [ 371.494247][ T31] [ 371.494257][ T31] dump_stack_lvl+0x189/0x250 [ 371.494293][ T31] ? __wake_up_klogd+0xd9/0x110 [ 371.494322][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 371.494356][ T31] ? __pfx__printk+0x10/0x10 [ 371.494394][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 371.494426][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 371.494452][ T31] ? _printk+0xcf/0x120 [ 371.494480][ T31] ? __pfx__printk+0x10/0x10 [ 371.494505][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 371.494538][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 371.494570][ T31] watchdog+0xfee/0x1030 [ 371.494601][ T31] ? watchdog+0x1de/0x1030 [ 371.494638][ T31] kthread+0x70e/0x8a0 [ 371.494666][ T31] ? __pfx_watchdog+0x10/0x10 [ 371.494694][ T31] ? __pfx_kthread+0x10/0x10 [ 371.494720][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 371.494751][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.494781][ T31] ? __pfx_kthread+0x10/0x10 [ 371.494806][ T31] ret_from_fork+0x3f9/0x770 [ 371.494840][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 371.494877][ T31] ? __switch_to_asm+0x39/0x70 [ 371.494898][ T31] ? __switch_to_asm+0x33/0x70 [ 371.494919][ T31] ? __pfx_kthread+0x10/0x10 [ 371.494944][ T31] ret_from_fork_asm+0x1a/0x30 [ 371.494984][ T31] [ 371.494992][ T31] Sending NMI from CPU 0 to CPUs 1: [ 371.658813][ C1] NMI backtrace for cpu 1 [ 371.658836][ C1] CPU: 1 UID: 0 PID: 5839 Comm: kworker/1:3 Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 371.658858][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 371.658870][ C1] Workqueue: events_power_efficient neigh_periodic_work [ 371.658895][ C1] RIP: 0010:unwind_next_frame+0x1831/0x2390 [ 371.658927][ C1] Code: 58 80 3c 28 00 74 05 e8 fd 27 b1 00 4d 8b 66 38 49 8d 7e 08 48 89 f8 48 c1 e8 03 80 3c 28 00 74 05 e8 e3 27 b1 00 4d 8b 6e 08 <4d> 8d 7e 10 4c 89 f8 48 c1 e8 03 80 3c 28 00 74 08 4c 89 ff e8 c6 [ 371.658943][ C1] RSP: 0018:ffffc90000a07cb8 EFLAGS: 00000246 [ 371.658957][ C1] RAX: 1ffff92000140fb2 RBX: ffffffff90bb3401 RCX: 0000000000000001 [ 371.658970][ C1] RDX: ffffc90000a07dc8 RSI: dffffc0000000000 RDI: ffffc90000a07d90 [ 371.658984][ C1] RBP: dffffc0000000000 R08: ffffc90000a086f0 R09: 0000000000000000 [ 371.658996][ C1] R10: ffffc90000a07dd8 R11: fffff52000140fbd R12: ffffc90000a08700 [ 371.659009][ C1] R13: ffffc90000a01000 R14: ffffc90000a07d88 R15: ffffffff81729af5 [ 371.659023][ C1] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 371.659037][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 371.659050][ C1] CR2: 00002000002ac000 CR3: 000000000df38000 CR4: 00000000003526f0 [ 371.659065][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 371.659075][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 371.659087][ C1] Call Trace: [ 371.659094][ C1] [ 371.659105][ C1] ? unwind_next_frame+0xa5/0x2390 [ 371.659133][ C1] ? nft_do_chain+0x409/0x1920 [ 371.659159][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 371.659180][ C1] arch_stack_walk+0x11c/0x150 [ 371.659200][ C1] ? nft_do_chain_inet+0x25d/0x340 [ 371.659226][ C1] stack_trace_save+0x9c/0xe0 [ 371.659245][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 371.659264][ C1] ? __asan_memset+0x22/0x50 [ 371.659306][ C1] ? __pfx_ipv4_synproxy_hook+0x10/0x10 [ 371.659327][ C1] ? ipv4_synproxy_hook+0x242/0xcd0 [ 371.659351][ C1] kasan_save_stack+0x3e/0x60 [ 371.659377][ C1] ? kasan_save_stack+0x3e/0x60 [ 371.659402][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 371.659424][ C1] ? call_rcu+0x142/0x990 [ 371.659439][ C1] ? skb_release_head_state+0x71/0x250 [ 371.659461][ C1] ? consume_skb+0x60/0xf0 [ 371.659480][ C1] ? nft_synproxy_eval_v4+0x376/0x560 [ 371.659505][ C1] ? nft_synproxy_do_eval+0x345/0x570 [ 371.659530][ C1] ? nft_do_chain+0x409/0x1920 [ 371.659577][ C1] kasan_record_aux_stack+0xbd/0xd0 [ 371.659600][ C1] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 371.659625][ C1] call_rcu+0x142/0x990 [ 371.659644][ C1] ? rcuref_put+0x1b7/0x210 [ 371.659669][ C1] ? __pfx_call_rcu+0x10/0x10 [ 371.659685][ C1] ? percpu_counter_add_batch+0xea/0x1e0 [ 371.659709][ C1] ? dst_release+0x126/0x1b0 [ 371.659735][ C1] skb_release_head_state+0x71/0x250 [ 371.659759][ C1] consume_skb+0x60/0xf0 [ 371.659779][ C1] nft_synproxy_eval_v4+0x376/0x560 [ 371.659809][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 371.659839][ C1] ? kasan_record_aux_stack+0xbd/0xd0 [ 371.659864][ C1] ? nf_ip_checksum+0x13c/0x510 [ 371.659891][ C1] nft_synproxy_do_eval+0x345/0x570 [ 371.659915][ C1] ? kthread+0x70e/0x8a0 [ 371.659933][ C1] ? ret_from_fork+0x3f9/0x770 [ 371.659957][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 371.659980][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 371.660014][ C1] nft_do_chain+0x409/0x1920 [ 371.660046][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 371.660090][ C1] nft_do_chain_inet+0x25d/0x340 [ 371.660115][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 371.660140][ C1] ? ipt_do_table+0x2a3/0x1640 [ 371.660162][ C1] ? nf_nat_ipv4_local_in+0x223/0x720 [ 371.660183][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 371.660208][ C1] nf_hook_slow+0xc5/0x220 [ 371.660231][ C1] NF_HOOK+0x206/0x3a0 [ 371.660251][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 371.660272][ C1] ? NF_HOOK+0x9a/0x3a0 [ 371.660291][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 371.660309][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 371.660332][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 371.660353][ C1] ? skb_dst+0x4f/0xd0 [ 371.660373][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 371.660395][ C1] NF_HOOK+0x309/0x3a0 [ 371.660415][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 371.660435][ C1] ? NF_HOOK+0x9a/0x3a0 [ 371.660453][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 371.660471][ C1] ? ip_rcv_core+0x7f7/0xd00 [ 371.660492][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 371.660517][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 371.660536][ C1] __netif_receive_skb+0x143/0x380 [ 371.660554][ C1] ? process_backlog+0x2d5/0x14f0 [ 371.660574][ C1] process_backlog+0x60e/0x14f0 [ 371.660592][ C1] ? __lock_acquire+0xab9/0xd20 [ 371.660625][ C1] ? __pfx_process_backlog+0x10/0x10 [ 371.660648][ C1] __napi_poll+0xc7/0x480 [ 371.660663][ C1] ? net_rx_action+0x46d/0xe30 [ 371.660683][ C1] net_rx_action+0x707/0xe30 [ 371.660701][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 371.660736][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 371.660773][ C1] handle_softirqs+0x286/0x870 [ 371.660803][ C1] ? do_softirq+0xec/0x180 [ 371.660837][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 371.660866][ C1] ? neigh_periodic_work+0xb41/0xd60 [ 371.660886][ C1] do_softirq+0xec/0x180 [ 371.660911][ C1] [ 371.660917][ C1] [ 371.660924][ C1] ? __pfx_do_softirq+0x10/0x10 [ 371.660949][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 371.660975][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.661005][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 371.661030][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 371.661057][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 371.661086][ C1] ? neigh_periodic_work+0xb41/0xd60 [ 371.661106][ C1] ? neigh_periodic_work+0xb41/0xd60 [ 371.661126][ C1] neigh_periodic_work+0xb41/0xd60 [ 371.661148][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 371.661177][ C1] process_scheduled_works+0xae1/0x17b0 [ 371.661219][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 371.661256][ C1] worker_thread+0x8a0/0xda0 [ 371.661285][ C1] kthread+0x70e/0x8a0 [ 371.661306][ C1] ? __pfx_worker_thread+0x10/0x10 [ 371.661334][ C1] ? __pfx_kthread+0x10/0x10 [ 371.661355][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 371.661379][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 371.661405][ C1] ? __pfx_kthread+0x10/0x10 [ 371.661437][ C1] ret_from_fork+0x3f9/0x770 [ 371.661463][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 371.661491][ C1] ? __switch_to_asm+0x39/0x70 [ 371.661508][ C1] ? __switch_to_asm+0x33/0x70 [ 371.661525][ C1] ? __pfx_kthread+0x10/0x10 [ 371.661544][ C1] ret_from_fork_asm+0x1a/0x30 [ 371.661571][ C1] [ 372.464988][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 372.471914][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00024-g9afe652958c3 #0 PREEMPT(full) [ 372.483762][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 372.493858][ T31] Call Trace: [ 372.497187][ T31] [ 372.500167][ T31] dump_stack_lvl+0x99/0x250 [ 372.504811][ T31] ? __asan_memcpy+0x40/0x70 [ 372.509452][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.514715][ T31] ? __pfx__printk+0x10/0x10 [ 372.519469][ T31] panic+0x2db/0x790 [ 372.523424][ T31] ? __pfx_panic+0x10/0x10 [ 372.527894][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 372.533763][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 372.539182][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 372.545390][ T31] watchdog+0x102d/0x1030 [ 372.549800][ T31] ? watchdog+0x1de/0x1030 [ 372.554270][ T31] kthread+0x70e/0x8a0 [ 372.558384][ T31] ? __pfx_watchdog+0x10/0x10 [ 372.563109][ T31] ? __pfx_kthread+0x10/0x10 [ 372.567743][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 372.572994][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 372.578252][ T31] ? __pfx_kthread+0x10/0x10 [ 372.582883][ T31] ret_from_fork+0x3f9/0x770 [ 372.587579][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 372.592786][ T31] ? __switch_to_asm+0x39/0x70 [ 372.597593][ T31] ? __switch_to_asm+0x33/0x70 [ 372.602397][ T31] ? __pfx_kthread+0x10/0x10 [ 372.607057][ T31] ret_from_fork_asm+0x1a/0x30 [ 372.611968][ T31] [ 372.615322][ T31] Kernel Offset: disabled [ 372.619662][ T31] Rebooting in 86400 seconds..