last executing test programs: 1m5.873590236s ago: executing program 3 (id=2972): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) close(0x3) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3", 0x4) r2 = accept4(r1, 0x0, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r4, 0x2000009) sendfile(r3, r4, 0x0, 0x6) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r5 = open$dir(&(0x7f0000000200)='./file0\x00', 0x0, 0xa2) open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r5, r6, 0x3, 0x0) sendmsg$alg(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x800}, 0x4000010) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x3e8, 0x0, 0xfffffffffffffd25) 1m4.964493384s ago: executing program 3 (id=2977): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x401, 0xee, 0x20000000, 0x4, 0x5}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, 0x0, 0x10000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0xf, 0x1}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x2}]}}}]}, 0x44}}, 0x8880) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc, 0x0}) ioctl$IOMMU_IOAS_ALLOW_IOVAS(0xffffffffffffffff, 0x3b82, &(0x7f00000000c0)={0x18, r4, 0x2, 0x0, &(0x7f0000000040)=[{0x8, 0x9}, {0x0, 0x7}]}) 1m4.535388329s ago: executing program 3 (id=2980): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@bridge_getvlan={0x18, 0x72, 0x112c96ce12743aa7, 0x70bd2b, 0x25dfdbfe, {0x7, 0x0, 0x0, r3}}, 0x18}, 0x1, 0x0, 0x0, 0x200400d6}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r5, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x50, r6, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x29, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x4e66}, @broadcast, @device_a, @random="fc06000000a6", {0x5, 0x6}, @value=@ver_80211n={0x0, 0xbe, 0x3, 0x2, 0x0, 0x1}}, 0x8000, 0x29, @default, @val={0x1, 0x1, [{0x4}]}, @void}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 55.437548193s ago: executing program 4 (id=3001): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, 0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x60, 0x185100}) io_uring_enter(r4, 0x7277, 0x0, 0x28, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a'], 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 53.267916817s ago: executing program 4 (id=3006): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x2500, &(0x7f0000000000)={&(0x7f0000000440)={0x50, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x29, 0x33, @assoc_resp={{{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x4e66}, @broadcast, @device_a, @random="fc9d11a88da6", {0x5, 0x6}, @value=@ver_80211n={0x0, 0xbe, 0x3, 0x2, 0x0, 0x1}}, 0x8000, 0x29, @default, @val={0x1, 0x1, [{0x4}]}, @void}}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 52.140291422s ago: executing program 1 (id=3007): syz_usb_connect(0x1, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000b80)=""/4096, 0x1000}, {0x0}], 0x2, 0x80000001, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000180), 0x14d802, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000240)='./file1\x00', 0x183142, 0x2f) ftruncate(r3, 0x2007ffc) sendfile(r2, r3, 0x0, 0x800000009) (fail_nth: 1) symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00') 50.453557398s ago: executing program 4 (id=3008): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x48e80, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x200) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) fallocate(r2, 0x1, 0x100000000, 0x10000) syz_usb_connect(0x0, 0x70, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100145d75210450c2860a6cc000000010902ad000000dba874"], 0x0) 50.069532839s ago: executing program 1 (id=3011): socket$nl_route(0x10, 0x3, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x10000000001, 0x0, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x88) sendmmsg$inet6(r1, &(0x7f0000000840)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x2, @mcast1, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000b80)='\x00\x00', 0x2}], 0x1}}, {{&(0x7f0000000440)={0xa, 0x4e22, 0xfff, @mcast1, 0x8}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000700)="3a2368df5a119ac9637b561f12d7541134ab5c7535814c6d47ef86af1fc2884952e3a67f00879a5464a8262d5a0f986a1cc836960711364a4aa448b8e76ea0d91e146b58fd6bbee8255202e86d75beb54eb58aa55d9e4046c5decd9185aeaab32e74f22d22ee2eca61489ae8489fe97d4190ca4d5d08cdb4395ec2e8034392f517fc9a0da3e06cd85d79a76f77eb02697beb264d71497efe62f4bc3353d2ac83233301274f48403a6cd49dff1147b626ddc20e7f", 0xb4}, {&(0x7f0000000bc0)="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", 0x1000}, {&(0x7f0000000480)="b77ea182f57c2bd2df", 0x9}, {&(0x7f0000000540)="0080ba67da1509844d0bcc2c545874970ea9515b15a3b83ee9b3b7f9da16807dbe710ecde5575b40da05bd4971d74df4306d6cd05a365bd49f7c269f63a3dbf5d5c79eec8e0fed51a331dd72f875db132df48edb2b29613b098cab6803988c2370d689acb4043a", 0x67}], 0x4, &(0x7f0000001bc0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x8}}, @rthdr={{0x48, 0x29, 0x39, {0x67, 0x6, 0x2, 0x81, 0x0, [@remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x7}}, @dstopts={{0x118, 0x29, 0x37, {0xb4, 0x20, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x38, {0x3, 0xc, 0x92, 0x7f, [0x6, 0xa, 0x8, 0x9, 0xa, 0xa62]}}, @calipso={0x7, 0x38, {0x3, 0xc, 0xc, 0x6f36, [0xffffffffffff8001, 0x8, 0x8, 0x7, 0x1, 0x4]}}, @enc_lim={0x4, 0x1, 0x9}, @pad1, @pad1, @generic={0xed, 0x7b, "132d41b498134faae35fc4fe62ae2d75fd9fa8f876f5b5dc0953e688ee019817d900b834e07ba5539093e384eb5cb976377fe9a39283fd1e011447374f1857a95e5f93fa4b33fede27b009a89d596138a260c59b94ef11dd92016d27ddfc778fa6a4d5f9c76976dd5ad314f071fc24dd425c21f6cf07ce26fd20f6"}]}}}, @hopopts_2292={{0x90, 0x29, 0x36, {0x32, 0xf, '\x00', [@ra={0x5, 0x2, 0xb1}, @pad1, @pad1, @jumbo, @calipso={0x7, 0x20, {0x0, 0x6, 0x78, 0x9, [0x4, 0xffffffff, 0x1ff]}}, @calipso={0x7, 0x38, {0x3, 0xc, 0xe0, 0x9, [0x7fffffff, 0x8000000000, 0x2, 0x39a00000000, 0xe51b, 0x4]}}, @enc_lim={0x4, 0x1, 0x1}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}], 0x220}}], 0x3, 0xc004) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000680)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x8, @dev={0xfe, 0x80, '\x00', 0x41}}, {0xa, 0x1, 0x7, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x4}, r3}}, 0x8f) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0xa, 0x3, 0x3, @local, 0x6}, r3}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r2, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {0x0, r4, r2}}, 0x18) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f0000000940)="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", 0x11c}], 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="800000000000000017010000020000006b0000000ebc281566c99e185311a408b6d1d1a7946243d147e306940c218af814e4ad30a82e6b6204aba161719083cfcb0c9e9e30fa965b28aad5d39c13395b3311c7caa3778325aa920e1abf211f0644a31ef821fa89d775d8a3abe2dcdbfa5f2551d5e34e0153eb02bd3364411a00"], 0x80}], 0x1, 0x4040880) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_open_dev$vcsn(&(0x7f0000000040), 0xffffffffffff8001, 0x40040) epoll_create(0x0) connect$pppl2tp(r6, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3, 0x0, {0xa, 0x4e22, 0x2, @local, 0x1}}}, 0x32) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0) 49.432601809s ago: executing program 1 (id=3012): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x8000) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x20, 0x18, 0x111, 0x1, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x2, 0x0, 0x8}, [@RTA_METRICS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4805}, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x705000, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x1000) ppoll(&(0x7f0000000040)=[{r3, 0x9620}], 0x1, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r3, 0x0) ioctl$SNDCTL_DSP_SETFMT(r3, 0xc0045005, &(0x7f0000000000)=0x4000) 49.16819697s ago: executing program 4 (id=3013): r0 = memfd_create(&(0x7f0000000c40)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x97\xf5G\x97A\xc2\xd8\xf0Uq\xe6+\xa5l\x94\v\xb6\a\x17\\\xfb\x04!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\xa3\xdfyJ\xa2\xf3F\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\x99I\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\xa1\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xe9k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9\x0f\x82\xdbs\xc7\x00_\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\x93j\xe8\xcfOKC\x0f\xef\x0e\xafe\xb5*\x89\x18\xb2w\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xffY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xd1\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96\xb8\x02\x13pA\x19\tf\x12\x88\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcc\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xbf\xe8\xb9\x02\xdaYQ<\xf2\xad\xe7\xd3\x95\xf5-,-Lh\xf7H\xd3\x86\x0e\x90\xe4\x18\xa5\xf0?\x11\f=\rk\xaa\x00\xed\x92\xf9\x98\x8e\xde|\xaa\x9a\xf5\x9d\x99Y\x1c\x15\x88O\xb3\x9a\xe3\xb2\x9f\x80/\xf7\xfe\x964\xd2\xf8W1\xc8\\\x16\x87\xf0w\xb4\x04\x05\x92\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8cz\xd1n\x1cl\xf4\x1ai4\xa1\xe3E\xbd\xcci\xbe\xe4! \xfd\x85\a\xab\x82', 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xe, 0x12, r0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r2}, &(0x7f0000000080), &(0x7f00000001c0)) accept$alg(r2, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0xc6943) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r3, 0xc01864c6, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r3, 0xc00464c9, &(0x7f0000000140)={r4}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f0000000800)={r4}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000000)=@v2={0x2, @adiantum, 0x3, '\x00', @a}) fallocate(r0, 0x0, 0x56d, 0x400) 48.885634223s ago: executing program 4 (id=3015): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, 0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x60, 0x185100}) io_uring_enter(r4, 0x7277, 0x0, 0x28, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a'], 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r8, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 48.619602051s ago: executing program 0 (id=3016): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000020c0)=ANY=[@ANYBLOB="1201010200000010f3044d0740000102030109022d"], 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x8000000, 0x0, 0x0, 0x1}, 0x20) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000002200)=ANY=[@ANYBLOB="1201000300005c7118bba8a440000102030109021b0001018140150904006d010701010509050102ff030d090d"], &(0x7f0000002440)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x201, 0x6, 0x1, 0x2, 0x10, 0xd}, 0x5, &(0x7f0000002280)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x2024}}, {0xe, &(0x7f0000002400)=@string={0xe, 0x3, "c422d81f7246c032ffa16f48"}}]}) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r3, &(0x7f00000010c0)=""/4096, 0x1000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x8, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r6, 0x8ba6, 0x8}, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x4, 0xda86dac7fad6502f}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r8 = socket$inet6(0xa, 0x0, 0x3) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x4c21, 0x0, @empty, 0x4}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="38cd68", 0x3}], 0x1}}], 0x1, 0x4830) 47.974969316s ago: executing program 1 (id=3018): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) userfaultfd(0x80001) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r3 = fspick(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xa, 0x11, 0xffffffffffffffff, 0xa70e9000) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bond0\x00'}) writev(r3, &(0x7f0000000ac0), 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000010a0b04000000000000000002000000140000001100010000000000000000000000000a"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x24048800) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x0, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x18, 0x0, 0x0, @uid}]}]}, 0x2c}}, 0x0) setsockopt$packet_int(r4, 0x107, 0x14, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) io_uring_setup(0x2e39, &(0x7f0000000240)={0x0, 0x630b, 0x4000, 0x4, 0x63}) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x3f, 0x2000, &(0x7f0000ffe000/0x2000)=nil}) r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x3, 0x0) ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000380)={"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"}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"/288], 0x128}}, 0x0) 46.811389005s ago: executing program 2 (id=3020): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x18, &(0x7f0000000040)=@req3={0x0, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001440), 0x2202, 0x0) io_setup(0x104, &(0x7f0000000180)=0x0) io_submit(r2, 0x1, &(0x7f00000006c0)=[&(0x7f0000000080)={0x0, 0x0, 0x22, 0x1, 0x4, r1, &(0x7f0000000340)="12d0", 0x2, 0x7fff}]) 46.424936489s ago: executing program 2 (id=3021): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DESTROY(r0, &(0x7f0000001900)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="14001399b85ca22f94b8bf83f56fffdbdf2518090000000000fc00000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x810) fsopen(&(0x7f0000000000)='dax\x00', 0x0) 46.205635382s ago: executing program 4 (id=3022): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x3f, &(0x7f00000020c0)=ANY=[@ANYBLOB="1201010200000010f3044d0740000102030109022d"], 0x0) mlock2(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x8000000, 0x0, 0x0, 0x1}, 0x20) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000180)) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000002200)=ANY=[@ANYBLOB="1201000300005c7118bba8a440000102030109021b0001018140150904006d010701010509050102ff030d090d"], &(0x7f0000002440)={0xa, &(0x7f0000002240)={0xa, 0x6, 0x201, 0x6, 0x1, 0x2, 0x10, 0xd}, 0x5, &(0x7f0000002280)={0x5, 0xf, 0x5}, 0x2, [{0x4, &(0x7f00000023c0)=@lang_id={0x4, 0x3, 0x2024}}, {0xe, &(0x7f0000002400)=@string={0xe, 0x3, "c422d81f7246c032ffa16f48"}}]}) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff) keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000) keyctl$read(0xb, r3, &(0x7f00000010c0)=""/4096, 0x1000) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000040)={0x8, 0x0}, 0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000001c0)={r6, 0x8ba6, 0x8}, 0xc) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd23, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x4, 0xda86dac7fad6502f}, {}, {0xfff2, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) r7 = socket$inet6(0xa, 0x0, 0x3) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x4c21, 0x0, @empty, 0x4}, 0x1c) sendmmsg$inet6(r7, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)="38cd68", 0x3}], 0x1}}], 0x1, 0x4830) 46.013716933s ago: executing program 2 (id=3023): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='7'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_IO(r1, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffe, 0x6, 0xfa, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000000)="1c3513000000", &(0x7f00000001c0)=""/4103, 0x0, 0x0, 0x0, 0x0}) 45.651584596s ago: executing program 2 (id=3024): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0xf0b, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000580)=@generic={&(0x7f00000004c0)='./file0\x00', r2}, 0x18) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000140)={0x5, 0x0, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000034d564b0000000001"]) r4 = getpgrp(0xffffffffffffffff) process_vm_readv(r4, &(0x7f0000000100)=[{&(0x7f0000000000)=""/139, 0x8b}, {&(0x7f00000000c0)=""/34, 0x22}, {&(0x7f0000000240)=""/160, 0xa0}, {&(0x7f0000000180)=""/115, 0x73}], 0x4, &(0x7f0000000480)=[{&(0x7f0000000340)=""/132, 0x84}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}], 0x3, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r3, 0x4068aea3, &(0x7f0000000600)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 45.387154549s ago: executing program 0 (id=3025): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x301, 0x0) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000180)={0x80000005, 0x1, &(0x7f0000000040)=[0x68b], &(0x7f0000000100)=[0x0, 0x5fb, 0x7, 0xd], &(0x7f0000000140), &(0x7f0000000140)=[0x8, 0x5, 0x23, 0x3]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000000080)='./file1\x00', 0x0, 0x1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) unlinkat(r2, &(0x7f00000000c0)='./file1\x00', 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=ANY=[@ANYBLOB="180000001500010029bd7000fedbdf252d"], 0x18}}, 0x20000000) listen(r3, 0x8) 45.079711367s ago: executing program 2 (id=3026): setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mlock2(&(0x7f00006e8000/0x2000)=nil, 0x2000, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f00000000c0)=0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000380)={0x0, 0x2, 0x1, [0x4, 0xfd7f, 0x4, 0x6, 0x5ef329c], [0x4, 0x2, 0x3, 0x40, 0x100000001, 0x4, 0xffffffffffffffff, 0x8, 0xe22c, 0x0, 0x8, 0x74f9, 0xffffffffffffffff, 0x9c87, 0x2, 0x6, 0x6, 0x5, 0x8, 0x7fff, 0xfff, 0xbf4, 0x3, 0x326, 0x9, 0x80000000, 0x4, 0xea, 0x1ff, 0x7, 0x3, 0xffffffffffffffc0, 0x6, 0x4, 0x400, 0x8e, 0x10001, 0x7fffffffffffffff, 0x0, 0xd02b, 0x2, 0x7, 0x7ff, 0x5, 0x8, 0xfffffffffffffff6, 0xfff, 0x5, 0x0, 0x40, 0x9, 0x7f, 0xffffffff, 0x7b13, 0x7fffffff, 0x4, 0x8000000000000001, 0x5, 0x4, 0x6, 0x4, 0x7, 0x7, 0x2, 0x6, 0x3, 0xb, 0x4, 0x12000000000, 0x7d1, 0x0, 0x0, 0x1, 0x10001, 0x3, 0x7, 0x2, 0x7, 0xb, 0x3a46, 0x8, 0x9, 0x4, 0x10001, 0x5, 0x6, 0x4, 0x4581, 0x8000, 0x8000000000000000, 0x4, 0x8d, 0x100000000, 0xa63, 0x9, 0x73, 0xfffffffffffffffb, 0xfffffffffffffffc, 0x8, 0xffffffffffff7fff, 0xfffffffffffffff6, 0xed36, 0x8, 0x0, 0xcd, 0x9, 0x401, 0x8, 0x3, 0x2, 0x4, 0x400, 0x9, 0x6, 0x2, 0x3, 0x8, 0xb, 0x2, 0x4, 0x9]}) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000ac0)={{r1}, r2, 0x2, @inherit={0x70, &(0x7f0000000180)={0x1, 0x5, 0xffffffff, 0x6, {0x4, 0x100000000, 0x2000000000, 0x8d, 0xffffffffffffffff}, [0x3, 0x8000000000000000, 0x0, 0xffffffffffffff81, 0x6]}}, @devid=r3}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r4, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_io_uring_setup(0x462a, &(0x7f0000000200)={0x0, 0x3b62, 0x200, 0x3, 0x38f}, &(0x7f0000000280), &(0x7f0000000340)) r6 = io_uring_setup(0x1243, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r6, 0x14, 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$KVM_SIGNAL_MSI(r8, 0x4020aea5, &(0x7f0000000340)={0x2000, 0xe6ef4001, 0x1, 0x1, 0x9}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000657000/0x3000)=nil, 0x3000, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) dup(r9) 45.078774744s ago: executing program 0 (id=3027): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f000001f480), 0x2, 0x0) r2 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002140)={0x50, 0x0, r3, {0x7, 0x29, 0x0, 0x0, 0x0, 0x5}}, 0x50) read$FUSE(r1, &(0x7f0000002900)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r5}, &(0x7f0000000080)) read$FUSE(r1, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) syz_fuse_handle_req(r1, &(0x7f00000070c0)="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", 0x2000, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006d00)={0x20, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2}}, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB], 0x50) socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_RESVSP(r2, 0x80086601, 0x0) 45.078441581s ago: executing program 1 (id=3028): r0 = socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x9, &(0x7f0000000000)=0x1) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@un=@file={0x0, './file0/file0\x00'}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x28}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000005c0)={r4, 0x11, 0x6, @broadcast}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newtclass={0xfffffffffffffecc, 0x28, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x6, 0x4}, {0xffe0, 0xfff1}, {0xe, 0xc}}, [@TCA_RATE={0x0, 0x5, {0x8, 0x1a}}, @TCA_RATE={0x0, 0x5, {0x1}}, @tclass_kind_options=@c_red]}, 0x62}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 44.869765687s ago: executing program 3 (id=2981): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r1, 0x80044dfe, &(0x7f0000000300)) r2 = syz_usb_connect(0x0, 0x68, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000340)={0x1c, &(0x7f0000000240)={0x20, 0xf, 0x1, 'T'}, 0x0, 0x0}) listen(r0, 0x6) r3 = signalfd(0xffffffffffffffff, &(0x7f0000000c80)={[0xfffffffffffffffe]}, 0x8) r4 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0xa1c1, 0x100, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000002c00)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100), 0x1, 0x40, 0x1}) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xf00, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x1401, 0x7fc32be5eb343aa7}, 0x5c}}, 0x0) io_uring_enter(r4, 0x627, 0xc1040000, 0x20, 0x0, 0x0) r7 = syz_io_uring_setup(0x3924, 0x0, &(0x7f0000000780)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x2def, 0x0, 0x0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_INFO(r3, 0x81204101, &(0x7f00000014c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x10, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0xd124}}) openat$vmci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x880e, 0x0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x200c4001, 0x0, 0x0) r10 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/cpuinfo\x00', 0x0, 0x0) writev(r10, &(0x7f0000000000)=[{&(0x7f00000004c0)="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", 0xc00}], 0x1) preadv(r10, &(0x7f0000000480)=[{&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000200)=""/249, 0xf7}], 0x2, 0x800, 0x0) 43.628016183s ago: executing program 0 (id=3029): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a010200000000000000000200000009"], 0x68}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003"], 0xe8}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x400000000000000}, 0x0) 43.487265032s ago: executing program 2 (id=3030): syz_usb_connect$cdc_ncm(0x6, 0x72, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x109, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf7, 0x1, 0x1, 0x9, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0xa, {{0x9, 0x24, 0x6, 0x0, 0x0, "03ecbb62"}, {0x5, 0x24, 0x0, 0x25a}, {0xd, 0x24, 0xf, 0x1, 0x58, 0x0, 0x6, 0xce}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @mdlm_detail={0x99, 0x24, 0x13, 0x94, "b25940649f3d2145d1440d0807837420b91302df0575c8a6c1633dc1545bb87dd840459ec16bf7ce9a12f8ce62cd02706d948e8df1272d86d088b8ffceee4bd54b73bddb07b6a88add58a2e566ef77c620ffd834ac17345c7f3cc253ca1877e5525006017a75eb45bc653ced12caa79f28009d67029b67430dbcd4ec55e5936d6002d8d4a6d95030542155047907268399c4869796"}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x2c}, @dmm={0x7, 0x24, 0x14, 0xfff}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x5, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x1, 0x18}}, {{0x9, 0x5, 0x3, 0x2, 0x3fe, 0xd6, 0x2, 0x11}}}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x110, 0x7, 0xff, 0x4, 0x8, 0x9e}, 0xf7, &(0x7f00000006c0)={0x5, 0xf, 0xf7, 0x4, [@generic={0xc9, 0x10, 0xa, "77af458ed3a42c0e66c9f088d568a3c9921e0e2322def92e13d4d8c950a8553ebf2036e4d0a8e4e5e8e5c3d28c079225f72ad51743ee91eeb595ca3effb16374f8dab47d33a1a8d3240f2e1a272d805b9fe8261f160b6d404b619065dcd0db91bb96c5f9758f79f85ec5460a3382044a195fc9c45d8dd76e95666d1bab2fce4e7409cc77cfdd21d46c682aef04070374b2f30a701cce6c563ee2d37b1cd9e70a4216761c622b5ea461d675e5a34374f8fe6f47cbbf4e47ac46c4879618fd0bfc2e0f33130f5d"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x4, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "4493ffa072562e9d37e49033d973d273"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x8, 0x1, 0x12, 0x5}]}, 0x6, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x73, &(0x7f00000007c0)=@string={0x73, 0x3, "f6b71a45784f88c21c1b74e518e5d1582bca5e793338c4d61dac8baa490194e1634aa3d06b1ab5055989bd4fa8c30c627f65e4666e430b24c8d55af497e61af51ccc31eb5be3fb1ec116cb28b9334a43c05358dc969d2d21a6ae55de01095dfd9a7b2f6cafcfc5d703c3b452cca909bef9"}}, {0x1b, &(0x7f0000000500)=@string={0x1b, 0x3, "dfd27988187924fedc5aec96e213f6e344c3a8bd869203287f"}}, {0x89, &(0x7f0000000840)=@string={0x89, 0x3, "dafcb4f93497d711cd1fd6b9056a41233fb771190601697dcf47813ae3ca0721e1db05acdea928e1927050332ae5b27ddf650ed8f61851993ca13cf22b915a04dfbd02b845456141c77f36fb2b7d553505ba9f892631460dfb857f25ce1aacc516f4015a4e551dedd09514925ebfe136ddbae73d4afc8930bb9bc537e3c6b8cc3dec11f72c8e56"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xc01}}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c5", 0x27}], 0x1}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7fff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x4, 0x4e, &(0x7f0000000100)={{0x12, 0x1, 0x433fbb8e51f4c3f1, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c, 0x1, 0x1, 0x0, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, '<'}, {0x5, 0x24, 0x0, 0x788}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x3ff, 0x0, 0xb}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x5, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xe, 0x5}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0xa, 0x2, 0x8, 0x10, 0x6}, 0x15e, &(0x7f00000001c0)={0x5, 0xf, 0x15e, 0x6, [@ss_container_id={0xfffffff5, 0x10, 0x4, 0xd, "8f5d4dd24b5d9cfea52e048d3fcfced8"}, @ssp_cap={0x5, 0x10, 0xa, 0x1, 0x2, 0x8, 0xf, 0x8, [0xff3f6f, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "2d5a08c1574139db3dc35e6b29a09446"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "86e9ef54a3dfe96cefd36fa1ba7c265c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2c, 0x10, 0x6}, @generic={0xff, 0x10, 0x4, "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"}]}, 0x3, [{0x57, &(0x7f0000000340)=@string={0x57, 0x3, "42d4aa75a0ae6d8f96d4fb0e52fa29afaff98e3e63b0fae78662ed56ba30deba8b09725ac37399b5dce30467380c213f9dbe1454594b06c2d1285dcc92b76a05b2c95cdf67fac437035b377f98b494c522f50a6080"}}, {0x66, &(0x7f00000003c0)=@string={0x66, 0x3, "ccafbdca29192155d17dc4efb486f28e8ea4b81d8968d4ace1e368f0960db50d8081d7f8672050e5fbaf39cbacf8882b8ab9c7ebfedd80324c937123b33397bc2bc8aab8303cc5841cfef8fdafa012a33efbb1b31bc6002ff7ae0deab6d68f23238a61c2"}}, {0xc4, &(0x7f0000000440)=@lang_id={0x0, 0x3, 0x41a}}]}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x18, r5, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) write$char_usb(r0, 0x0, 0x56) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) ioctl$PPPIOCGIDLE64(r6, 0x8010743f, &(0x7f00000000c0)) 43.126712682s ago: executing program 0 (id=3031): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0x10e, &(0x7f0000000140)={0x0, 0x334e, 0x10, 0x3, 0x801}, 0x0, &(0x7f0000000300)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x60, 0x185100}) io_uring_enter(r4, 0x7277, 0x0, 0x28, 0x0, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x5f, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000014000780080008400000000008001240ffffffe80500010006000000050005000200000005000400000000000900020073797a31000000000d000300686173683a6e6574"], 0x5c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB='\a'], 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32, @ANYBLOB="0c00990000000000000000000800a115ffff0000080026008d03000008009f"], 0x40}}, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 41.749990465s ago: executing program 1 (id=3033): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x5}]}, 0x28}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=0x0], 0x40}}, 0x0) 41.67255855s ago: executing program 3 (id=3034): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000240)={0x2, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6, 0x0, 0x0, 0x6}]}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0xf000000, &(0x7f0000000140)={0x11, 0x8100, r3, 0x1, 0x0, 0x6, @local}, 0x14) 41.330029961s ago: executing program 3 (id=3035): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) modify_ldt$write(0x1, &(0x7f0000004180)={0xc, 0x20000000}, 0xffffffffffffffca) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) syz_open_pts(r4, 0x604200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) fstatfs(r3, &(0x7f00000003c0)=""/146) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, r5, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000004780)=[{&(0x7f00000002c0)='.', 0x1}], 0x1}}], 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1}}}}}}, 0x0) r7 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010003c85f620823040c00bf2e010203010902120001080600220904ff010071c0d9083ae76225a82009a568955f7e88848837b42ce5f5bff32975f1c4c59613c11839feef3fe47ef6d50604947e95b39f1709199afe34ae7e0c29627db8d11c31954a5b044e69426f0d087e2a56858c9e7b91b3e82a7b7a7c55a64e775363dfa68bb9e85f7e47761283fb86d837895c52cea6476181"], &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x63}) syz_usb_control_io$hid(r7, 0x0, 0x0) 38.490776822s ago: executing program 0 (id=3036): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0x3, 0x3}, 0x20) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f0000003c40)={0x2020}, 0x2020) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000100)) r3 = shmget$private(0x0, 0x13000, 0x8, &(0x7f0000feb000/0x13000)=nil) shmat(r3, &(0x7f0000fee000/0x3000)=nil, 0x400c) getpeername$l2tp(r0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000140)) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000003880)="dc", 0x1}], 0x1}}], 0x40000000000032a, 0x8008) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xa3da, 0x8, 0x2, 0x10a}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x76, 0x0, r7, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003880)}, 0x0, 0xe3d08660d3cd4684}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r10 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x189000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r10, 0x80044dfb, &(0x7f0000000100)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) 10.44878911s ago: executing program 32 (id=3036): r0 = socket(0x40000000015, 0x5, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2={0xff, 0x5}, 0x0, 0x0, 0x3, 0x3}, 0x20) r2 = syz_open_procfs(0x0, 0x0) read$FUSE(r2, &(0x7f0000003c40)={0x2020}, 0x2020) capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000100)) r3 = shmget$private(0x0, 0x13000, 0x8, &(0x7f0000feb000/0x13000)=nil) shmat(r3, &(0x7f0000fee000/0x3000)=nil, 0x400c) getpeername$l2tp(r0, 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS64(r4, 0xc0385720, &(0x7f0000000140)) add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x3}, &(0x7f0000000400)='_', 0x1, 0xfffffffffffffffe) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r2) add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) syz_usb_connect(0x0, 0x24, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003d40)=[{{0x0, 0x0, &(0x7f00000039c0)=[{&(0x7f0000003880)="dc", 0x1}], 0x1}}], 0x40000000000032a, 0x8008) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_io_uring_setup(0x3ac6, &(0x7f00000001c0)={0x0, 0xa3da, 0x8, 0x2, 0x10a}, &(0x7f0000000180)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000380)=@IORING_OP_SENDMSG={0x9, 0x76, 0x0, r7, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003880)}, 0x0, 0xe3d08660d3cd4684}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) syz_open_dev$vbi(0x0, 0x0, 0x2) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r9, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r10 = openat$mixer(0xffffffffffffff9c, &(0x7f0000003fc0), 0x189000, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r10, 0x80044dfb, &(0x7f0000000100)) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb45, 0x9, 0x8, 0x0, 0x3}, 0x0) 4.262265118s ago: executing program 33 (id=3033): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_LLADDR={0xa, 0x5}]}, 0x28}}, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRES32=0x0, @ANYRES64=r2, @ANYRES32=0x0], 0x40}}, 0x0) 1.003872909s ago: executing program 34 (id=3030): syz_usb_connect$cdc_ncm(0x6, 0x72, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_connect$cdc_ecm(0x0, 0x109, &(0x7f0000000580)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xf7, 0x1, 0x1, 0x9, 0x20, 0x8, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0xa, {{0x9, 0x24, 0x6, 0x0, 0x0, "03ecbb62"}, {0x5, 0x24, 0x0, 0x25a}, {0xd, 0x24, 0xf, 0x1, 0x58, 0x0, 0x6, 0xce}, [@call_mgmt={0x5, 0x24, 0x1, 0x3, 0x9}, @mdlm_detail={0x99, 0x24, 0x13, 0x94, "b25940649f3d2145d1440d0807837420b91302df0575c8a6c1633dc1545bb87dd840459ec16bf7ce9a12f8ce62cd02706d948e8df1272d86d088b8ffceee4bd54b73bddb07b6a88add58a2e566ef77c620ffd834ac17345c7f3cc253ca1877e5525006017a75eb45bc653ced12caa79f28009d67029b67430dbcd4ec55e5936d6002d8d4a6d95030542155047907268399c4869796"}, @ncm={0x6, 0x24, 0x1a, 0x9, 0x2c}, @dmm={0x7, 0x24, 0x14, 0xfff}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x5, 0x8}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x10, 0x6, 0x1, 0x18}}, {{0x9, 0x5, 0x3, 0x2, 0x3fe, 0xd6, 0x2, 0x11}}}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000480)={0xa, 0x6, 0x110, 0x7, 0xff, 0x4, 0x8, 0x9e}, 0xf7, &(0x7f00000006c0)={0x5, 0xf, 0xf7, 0x4, [@generic={0xc9, 0x10, 0xa, "77af458ed3a42c0e66c9f088d568a3c9921e0e2322def92e13d4d8c950a8553ebf2036e4d0a8e4e5e8e5c3d28c079225f72ad51743ee91eeb595ca3effb16374f8dab47d33a1a8d3240f2e1a272d805b9fe8261f160b6d404b619065dcd0db91bb96c5f9758f79f85ec5460a3382044a195fc9c45d8dd76e95666d1bab2fce4e7409cc77cfdd21d46c682aef04070374b2f30a701cce6c563ee2d37b1cd9e70a4216761c622b5ea461d675e5a34374f8fe6f47cbbf4e47ac46c4879618fd0bfc2e0f33130f5d"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x9, 0x4, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "4493ffa072562e9d37e49033d973d273"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x8, 0x1, 0x12, 0x5}]}, 0x6, [{0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x73, &(0x7f00000007c0)=@string={0x73, 0x3, "f6b71a45784f88c21c1b74e518e5d1582bca5e793338c4d61dac8baa490194e1634aa3d06b1ab5055989bd4fa8c30c627f65e4666e430b24c8d55af497e61af51ccc31eb5be3fb1ec116cb28b9334a43c05358dc969d2d21a6ae55de01095dfd9a7b2f6cafcfc5d703c3b452cca909bef9"}}, {0x1b, &(0x7f0000000500)=@string={0x1b, 0x3, "dfd27988187924fedc5aec96e213f6e344c3a8bd869203287f"}}, {0x89, &(0x7f0000000840)=@string={0x89, 0x3, "dafcb4f93497d711cd1fd6b9056a41233fb771190601697dcf47813ae3ca0721e1db05acdea928e1927050332ae5b27ddf650ed8f61851993ca13cf22b915a04dfbd02b845456141c77f36fb2b7d553505ba9f892631460dfb857f25ce1aacc516f4015a4e551dedd09514925ebfe136ddbae73d4afc8930bb9bc537e3c6b8cc3dec11f72c8e56"}}, {0x4, &(0x7f0000000900)=@lang_id={0x4, 0x3, 0x3009}}, {0x4, &(0x7f0000000940)=@lang_id={0x4, 0x3, 0xc01}}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c5", 0x27}], 0x1}, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7fff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect$cdc_ecm(0x4, 0x4e, &(0x7f0000000100)={{0x12, 0x1, 0x433fbb8e51f4c3f1, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3c, 0x1, 0x1, 0x0, 0x50, 0x7, [{{0x9, 0x4, 0x0, 0x8, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, '<'}, {0x5, 0x24, 0x0, 0x788}, {0xd, 0x24, 0xf, 0x1, 0xf, 0x3ff, 0x0, 0xb}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x6, 0x5, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xe, 0x5}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x201, 0xa, 0x2, 0x8, 0x10, 0x6}, 0x15e, &(0x7f00000001c0)={0x5, 0xf, 0x15e, 0x6, [@ss_container_id={0xfffffff5, 0x10, 0x4, 0xd, "8f5d4dd24b5d9cfea52e048d3fcfced8"}, @ssp_cap={0x5, 0x10, 0xa, 0x1, 0x2, 0x8, 0xf, 0x8, [0xff3f6f, 0xff0000]}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "2d5a08c1574139db3dc35e6b29a09446"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "86e9ef54a3dfe96cefd36fa1ba7c265c"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x2c, 0x10, 0x6}, @generic={0xff, 0x10, 0x4, "f45ec576b61e2af7e817dde37b95482eeee5ba874d8e591286d1d077419fa846c419a4d8bb8c3f77d717163b57b0f86744aad3fbd7d98d2453b68f660074f462699bfc2de14295d0b4a85659703fc64447e56513a375fe3f52b8b36ec98f973da9ee02ab741b1c7eb920ea8643cc144d7d9dc20394b55762c92e3154705cf9218748a683c089dfb1ae5fe80807eee79758774f05667f913d0624d623ade722d75a7c0ee9fbeee4fe1e9069a5b7e52e332a37b3b6d0dd70550f86078cf01c031e7318bf1b0f7d0448e96a921b34a4186df0b2d76e04177922f98c55dace83685a5a69744cc9598c0e3f607939be24ecb548dfcdf26394b8cf911e041c"}]}, 0x3, [{0x57, &(0x7f0000000340)=@string={0x57, 0x3, "42d4aa75a0ae6d8f96d4fb0e52fa29afaff98e3e63b0fae78662ed56ba30deba8b09725ac37399b5dce30467380c213f9dbe1454594b06c2d1285dcc92b76a05b2c95cdf67fac437035b377f98b494c522f50a6080"}}, {0x66, &(0x7f00000003c0)=@string={0x66, 0x3, "ccafbdca29192155d17dc4efb486f28e8ea4b81d8968d4ace1e368f0960db50d8081d7f8672050e5fbaf39cbacf8882b8ab9c7ebfedd80324c937123b33397bc2bc8aab8303cc5841cfef8fdafa012a33efbb1b31bc6002ff7ae0deab6d68f23238a61c2"}}, {0xc4, &(0x7f0000000440)=@lang_id={0x0, 0x3, 0x41a}}]}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r4) sendmsg$TIPC_NL_PUBL_GET(r4, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={&(0x7f0000000000)={0x18, r5, 0x341, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000814}, 0x14) write$char_usb(r0, 0x0, 0x56) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x40000) ioctl$PPPIOCGIDLE64(r6, 0x8010743f, &(0x7f00000000c0)) 0s ago: executing program 35 (id=3035): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = memfd_create(&(0x7f0000000480)='\xd1\xbd\x01\x9b\xd4\n\xa6\xb7\xa9kE\x10Bx\xd0\x05\xe9\xd57\xc9\xc3\tC8\xa0F\x91\x9e\x98\x17\xa9\xb7\xc5\xac\xafv\xff\x81/\x00\x98\x89\xeb\xb1Ot\xc5h\xc4f\xdf\x832\xc3\x9bW\x89<7\xf9\xfc\xf8\x89\x1e\xe5\xf6.\xa0\xfc\xc7\xf3\x01,\x17\xd4\xec3\x17\xe8x\xca?H\x813\xc0o57d\x82 \x89K\x14Dr\xe4\xc0K2\xd7\x12bu\x9ao\xf8H\xa6\xbf\xea\x11T\xcf*\x10\x9d', 0x4) modify_ldt$write(0x1, &(0x7f0000004180)={0xc, 0x20000000}, 0xffffffffffffffca) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) syz_open_pts(r4, 0x604200) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xfd, 0x0, 0x7fff0000}]}) fstatfs(r3, &(0x7f00000003c0)=""/146) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x3c, r5, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xfff}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x40000) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, &(0x7f0000004780)=[{&(0x7f00000002c0)='.', 0x1}], 0x1}}], 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x16, 0x1}}}}}}, 0x0) r7 = syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010003c85f620823040c00bf2e010203010902120001080600220904ff010071c0d9083ae76225a82009a568955f7e88848837b42ce5f5bff32975f1c4c59613c11839feef3fe47ef6d50604947e95b39f1709199afe34ae7e0c29627db8d11c31954a5b044e69426f0d087e2a56858c9e7b91b3e82a7b7a7c55a64e775363dfa68bb9e85f7e47761283fb86d837895c52cea6476181"], &(0x7f00000023c0)={0x0, 0x0, 0x0, 0x0, 0x63}) syz_usb_control_io$hid(r7, 0x0, 0x0) kernel console output (not intermixed with test programs): et driver failed with error -71 [ 828.970382][ T9] usb 5-1: USB disconnect, device number 126 [ 828.980379][T10374] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 829.043924][T10374] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.080245][T10374] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 829.306919][T10374] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 829.387369][T16024] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2872'. [ 829.796328][T10374] usb 2-1: USB disconnect, device number 3 [ 829.803504][T10374] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 829.893344][T16024] team0 (unregistering): Port device team_slave_0 removed [ 830.097606][T16038] vimc link validate: Scaler:src:16x16 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 830.259910][T16024] team0 (unregistering): Port device team_slave_1 removed [ 831.033988][T10374] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 831.230655][T10374] usb 4-1: Using ep0 maxpacket: 16 [ 832.249426][ T5907] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 832.441797][ T5907] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 832.454665][ T9] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 832.485463][ T5907] usb 5-1: config 0 interface 0 has no altsetting 0 [ 832.506514][ T5907] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 832.522291][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 832.541777][ T5907] usb 5-1: Product: syz [ 832.565694][ T5907] usb 5-1: Manufacturer: syz [ 832.577940][ T5907] usb 5-1: SerialNumber: syz [ 832.636367][ T5907] usb 5-1: config 0 descriptor?? [ 832.663773][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 832.665620][ T5907] usb 5-1: selecting invalid altsetting 0 [ 833.215748][T16080] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 833.225771][T16080] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 833.256324][ T5915] usb 5-1: USB disconnect, device number 127 [ 834.359758][T10374] usb 4-1: unable to get BOS descriptor or descriptor too short [ 834.380300][T10374] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 834.403577][T10374] usb 4-1: can't read configurations, error -71 [ 835.047174][T10374] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 835.343785][T10374] usb 4-1: Using ep0 maxpacket: 16 [ 835.382719][ T5907] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 835.396536][T10374] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 835.418181][T10374] usb 4-1: config 0 has no interface number 0 [ 835.774044][T10374] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 835.801325][T10374] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 835.830753][T10374] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 835.840086][T10374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.851897][T10374] usb 4-1: Product: syz [ 835.877440][T10374] usb 4-1: Manufacturer: syz [ 835.972332][T10374] usb 4-1: SerialNumber: syz [ 836.084670][ T5907] usb 2-1: too many configurations: 52, using maximum allowed: 8 [ 836.141701][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 836.164518][T10374] usb 4-1: config 0 descriptor?? [ 836.171265][T16089] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 836.203311][ T9] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 836.203319][ T5907] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 836.218775][T16089] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 836.276434][ T9] usb 3-1: can't read configurations, error -71 [ 836.303166][T16105] FAULT_INJECTION: forcing a failure. [ 836.303166][T16105] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 836.329325][ T5907] usb 2-1: can't read configurations, error -61 [ 836.466608][T16105] CPU: 0 UID: 0 PID: 16105 Comm: syz.2.2883 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 836.466639][T16105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 836.466652][T16105] Call Trace: [ 836.466660][T16105] [ 836.466669][T16105] dump_stack_lvl+0x189/0x250 [ 836.466701][T16105] ? __pfx____ratelimit+0x10/0x10 [ 836.466717][T16105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 836.466733][T16105] ? __pfx__printk+0x10/0x10 [ 836.466746][T16105] ? fs_reclaim_acquire+0x7d/0x100 [ 836.466771][T16105] should_fail_ex+0x414/0x560 [ 836.466802][T16105] prepare_alloc_pages+0x213/0x610 [ 836.466835][T16105] __alloc_frozen_pages_noprof+0x123/0x370 [ 836.466856][T16105] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 836.466874][T16105] ? policy_nodemask+0x27c/0x720 [ 836.466884][T16105] ? mfill_atomic_install_pte+0x766/0x9a0 [ 836.466900][T16105] alloc_pages_mpol+0x232/0x4a0 [ 836.466922][T16105] vma_alloc_folio_noprof+0xe4/0x200 [ 836.466946][T16105] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 836.466968][T16105] ? __pfx___might_resched+0x10/0x10 [ 836.466996][T16105] ? percpu_ref_put+0xf9/0x180 [ 836.467012][T16105] mfill_atomic_pte_copy+0x8b/0x3d0 [ 836.467027][T16105] ? mm_alloc_pmd+0x246/0x410 [ 836.467041][T16105] mfill_atomic_copy+0x56a/0x12f0 [ 836.467072][T16105] ? __pfx_mfill_atomic_copy+0x10/0x10 [ 836.467109][T16105] userfaultfd_ioctl+0x29ba/0x4bc0 [ 836.467144][T16105] ? do_syscall_64+0xfa/0x3b0 [ 836.467159][T16105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.467176][T16105] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 836.467197][T16105] ? do_vfs_ioctl+0x12ba/0x1990 [ 836.467224][T16105] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 836.467259][T16105] ? kasan_quarantine_put+0xdd/0x220 [ 836.467296][T16105] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 836.467309][T16105] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 836.467322][T16105] ? tomoyo_path_number_perm+0x4e2/0x5a0 [ 836.467333][T16105] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 836.467351][T16105] ? vfs_write+0x8d8/0xa90 [ 836.467416][T16105] ? ksys_write+0x1e1/0x250 [ 836.467441][T16105] ? bpf_lsm_file_ioctl+0x9/0x20 [ 836.467457][T16105] ? __pfx_userfaultfd_ioctl+0x10/0x10 [ 836.467473][T16105] __se_sys_ioctl+0xfc/0x170 [ 836.467489][T16105] do_syscall_64+0xfa/0x3b0 [ 836.467498][T16105] ? lockdep_hardirqs_on+0x9c/0x150 [ 836.467525][T16105] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.467544][T16105] ? clear_bhb_loop+0x60/0xb0 [ 836.467569][T16105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 836.467588][T16105] RIP: 0033:0x7f91e6d8e929 [ 836.467600][T16105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 836.467610][T16105] RSP: 002b:00007f91e7cd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 836.467622][T16105] RAX: ffffffffffffffda RBX: 00007f91e6fb5fa0 RCX: 00007f91e6d8e929 [ 836.467630][T16105] RDX: 0000200000000000 RSI: 00000000c028aa03 RDI: 0000000000000003 [ 836.467636][T16105] RBP: 00007f91e7cd0090 R08: 0000000000000000 R09: 0000000000000000 [ 836.467643][T16105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 836.467651][T16105] R13: 0000000000000000 R14: 00007f91e6fb5fa0 R15: 00007f91e70dfa28 [ 836.467681][T16105] [ 836.472138][T16089] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 836.844923][T16089] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 836.853767][ T5907] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 836.910121][T10374] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 836.973693][T10374] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 837.085119][T10374] asix 4-1:0.251: probe with driver asix failed with error -5 [ 837.184161][ T5907] usb 2-1: too many configurations: 52, using maximum allowed: 8 [ 837.312866][ T5907] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 837.320663][ T5907] usb 2-1: can't read configurations, error -61 [ 837.382812][ T5907] usb usb2-port1: attempt power cycle [ 837.793879][ T5907] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 837.824954][ T5907] usb 2-1: too many configurations: 52, using maximum allowed: 8 [ 837.866370][ T5907] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 837.876014][ T5907] usb 2-1: can't read configurations, error -71 [ 838.479492][T10379] usb 4-1: USB disconnect, device number 3 [ 838.568007][T16142] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 838.574569][T16142] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 838.639426][T16142] vhci_hcd vhci_hcd.0: Device attached [ 838.833844][ T9] vhci_hcd: vhci_device speed not set [ 838.954850][ T9] usb 41-1: new full-speed USB device number 4 using vhci_hcd [ 839.094522][ T5907] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 839.323815][ T5907] usb 4-1: Using ep0 maxpacket: 16 [ 839.500332][T16143] vhci_hcd: connection reset by peer [ 839.508618][ T12] vhci_hcd: stop threads [ 839.593042][ T12] vhci_hcd: release socket [ 839.604241][ T12] vhci_hcd: disconnect device [ 841.533763][T10379] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 841.803902][T10379] usb 2-1: Using ep0 maxpacket: 8 [ 841.927071][T10379] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 841.963889][T10379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 841.985967][T10379] usb 2-1: Product: syz [ 842.000375][T10379] usb 2-1: Manufacturer: syz [ 842.043828][T10379] usb 2-1: SerialNumber: syz [ 842.067562][T10379] usb 2-1: config 0 descriptor?? [ 842.089511][T10379] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 842.948392][ T5907] usb 4-1: unable to get BOS descriptor or descriptor too short [ 842.974348][ T5907] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 843.075755][ T5907] usb 4-1: can't read configurations, error -71 [ 843.108484][T16175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 843.119444][T16175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 843.314043][T10380] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 843.400192][T16197] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2902'. [ 843.410111][T10379] gspca_sonixj: reg_w1 err -110 [ 843.454122][T10379] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 843.493906][T10380] usb 1-1: Using ep0 maxpacket: 16 [ 843.527064][T10380] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 843.540287][T10380] usb 1-1: config 0 has no interface number 0 [ 843.578798][T10380] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 843.628892][T10380] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 843.662169][T10380] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 843.671652][T10380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.679866][T10380] usb 1-1: Product: syz [ 843.686261][T10380] usb 1-1: Manufacturer: syz [ 843.704555][T10380] usb 1-1: SerialNumber: syz [ 843.724953][T10380] usb 1-1: config 0 descriptor?? [ 843.731163][T16192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 843.740167][T16192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 843.833924][ T5907] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 843.928358][ T5838] usb 3-1: new high-speed USB device number 116 using dummy_hcd [ 843.952362][T16190] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 843.961208][T16190] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 843.996223][ T5907] usb 4-1: unable to get BOS descriptor or descriptor too short [ 844.006212][ T5907] usb 4-1: not running at top speed; connect to a high speed hub [ 844.018276][ T5907] usb 4-1: config 9 has an invalid interface number: 87 but max is 0 [ 844.027503][ T5907] usb 4-1: config 9 has no interface number 0 [ 844.034039][ T5907] usb 4-1: config 9 interface 87 altsetting 127 endpoint 0x4 has invalid maxpacket 512, setting to 64 [ 844.045589][ T5907] usb 4-1: config 9 interface 87 has no altsetting 0 [ 844.055509][ T5907] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=a8.d0 [ 844.065323][ T5907] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.073428][ T5907] usb 4-1: Product: syz [ 844.078014][ T5907] usb 4-1: Manufacturer: syz [ 844.082656][ T5907] usb 4-1: SerialNumber: syz [ 844.088009][ T5838] usb 3-1: Using ep0 maxpacket: 8 [ 844.102164][ T5838] usb 3-1: config 9 has an invalid interface number: 244 but max is 3 [ 844.111006][ T5838] usb 3-1: config 9 has an invalid interface number: 32 but max is 3 [ 844.119845][ T5838] usb 3-1: config 9 has an invalid interface number: 42 but max is 3 [ 844.130142][ T5838] usb 3-1: config 9 has an invalid interface number: 67 but max is 3 [ 844.138955][ T5838] usb 3-1: config 9 has an invalid interface number: 58 but max is 3 [ 844.147577][ T5838] usb 3-1: config 9 has 5 interfaces, different from the descriptor's value: 4 [ 844.156646][ T9] vhci_hcd: vhci_device speed not set [ 844.157149][ T5838] usb 3-1: config 9 has no interface number 0 [ 844.168862][ T5838] usb 3-1: config 9 has no interface number 1 [ 844.175454][ T5838] usb 3-1: config 9 has no interface number 2 [ 844.182776][T10380] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 844.182814][ T5838] usb 3-1: config 9 has no interface number 3 [ 844.182834][ T5838] usb 3-1: config 9 has no interface number 4 [ 844.206537][ T5838] usb 3-1: config 9 interface 244 altsetting 185 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 844.215177][T10380] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 844.228534][ T5838] usb 3-1: config 9 interface 32 altsetting 7 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 844.237999][T10380] asix 1-1:0.251: probe with driver asix failed with error -5 [ 844.240284][ T5838] usb 3-1: config 9 interface 32 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 844.258523][ T5838] usb 3-1: config 9 interface 42 altsetting 12 has an endpoint descriptor with address 0x63, changing to 0x3 [ 844.281188][ T5838] usb 3-1: config 9 interface 42 altsetting 12 endpoint 0x3 has invalid maxpacket 1806, setting to 64 [ 844.300680][ T5838] usb 3-1: config 9 interface 42 altsetting 12 has a duplicate endpoint with address 0x9, skipping [ 844.321601][ T5838] usb 3-1: config 9 interface 42 altsetting 12 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 844.333394][ T5838] usb 3-1: config 9 interface 42 altsetting 12 has an endpoint descriptor with address 0x68, changing to 0x8 [ 844.363775][ T5838] usb 3-1: config 9 interface 42 altsetting 12 has a duplicate endpoint with address 0x8, skipping [ 844.375377][ T5838] usb 3-1: config 9 interface 42 altsetting 12 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 844.387180][ T5838] usb 3-1: config 9 interface 42 altsetting 12 has a duplicate endpoint with address 0x6, skipping [ 844.410494][ T5838] usb 3-1: config 9 interface 42 altsetting 12 has a duplicate endpoint with address 0x5, skipping [ 844.434568][ T5838] usb 3-1: config 9 interface 42 altsetting 12 has an invalid descriptor for endpoint zero, skipping [ 844.499255][ T5838] usb 3-1: config 9 interface 42 altsetting 12 has 13 endpoint descriptors, different from the interface descriptor's value: 12 [ 844.855823][ T5838] usb 3-1: config 9 interface 67 altsetting 2 has a duplicate endpoint with address 0xC, skipping [ 844.897258][ T5838] usb 3-1: config 9 interface 67 altsetting 2 endpoint 0xF has invalid maxpacket 1023, setting to 64 [ 844.948869][ T5838] usb 3-1: config 9 interface 67 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 844.951106][T10380] usb 2-1: USB disconnect, device number 8 [ 845.007771][ T5838] usb 3-1: too many endpoints for config 9 interface 58 altsetting 165: 135, using maximum allowed: 30 [ 845.048720][ T5838] usb 3-1: config 9 interface 58 altsetting 165 has a duplicate endpoint with address 0x1, skipping [ 845.073789][ T5838] usb 3-1: config 9 interface 58 altsetting 165 has a duplicate endpoint with address 0x1, skipping [ 845.103947][ T5838] usb 3-1: config 9 interface 58 altsetting 165 has a duplicate endpoint with address 0x9, skipping [ 845.116664][ T5838] usb 3-1: config 9 interface 58 altsetting 165 has a duplicate endpoint with address 0xD, skipping [ 845.143763][ T5838] usb 3-1: config 9 interface 58 altsetting 165 has a duplicate endpoint with address 0x9, skipping [ 845.173740][ T5838] usb 3-1: config 9 interface 58 altsetting 165 has a duplicate endpoint with address 0xF, skipping [ 845.194108][ T5838] usb 3-1: config 9 interface 58 altsetting 165 has a duplicate endpoint with address 0x6, skipping [ 845.215342][ T5838] usb 3-1: config 9 interface 58 altsetting 165 has a duplicate endpoint with address 0x5, skipping [ 845.243787][ T5838] usb 3-1: config 9 interface 58 altsetting 165 has 8 endpoint descriptors, different from the interface descriptor's value: 135 [ 845.273708][ T5838] usb 3-1: config 9 interface 244 has no altsetting 0 [ 845.280582][ T5838] usb 3-1: config 9 interface 32 has no altsetting 0 [ 845.303709][ T5838] usb 3-1: config 9 interface 42 has no altsetting 0 [ 845.310526][ T5838] usb 3-1: config 9 interface 67 has no altsetting 0 [ 845.326361][ T5838] usb 3-1: config 9 interface 58 has no altsetting 0 [ 845.338646][ T5838] usb 3-1: New USB device found, idVendor=03ee, idProduct=6906, bcdDevice= 0.03 [ 845.369609][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.378979][ T5838] usb 3-1: Product: íƒèº¿ç¼‡ã•¨á ã„©çµŠí—±á¬„Ꜧɯ锠잱â®â³‚麔ä»êŒåˆšê›‚禃䳧篾쾓 [ 845.404027][ T5838] usb 3-1: Manufacturer: 훬뻶㽵쒗ባᅹஞ椣礲ʹ᣺ꤔ渵íµá¥£ç½ªáŽ‚å–迠릒äœâ¡§ê ­èƒºçš´í…ˆçƒ´êˆé„Šë†½á¬›å‹¥â¦†ä•ˆå¾™çŒ›è¾¼à¤ã¼ ä¯·î‘…ꕷ梔畿秮屗áˆæ’（䰨å«ëª¯ä­ëŒ«á¹·ï§˜ä’且몽殿洵㩮䤙෻ﳊ㙴ℜ䣲ë¶èšï–室㉡醾宜銫ÒﹽꙌⓙﾞ엡䚭í‚戤㶿 [ 845.463731][ T5838] usb 3-1: SerialNumber: 孼洉ࡉꩉæ¾è·£ë–楚젓뺞ê¯ì¢ªí‰ŸçŸƒá¦žèª‰ç¡…箾ꈠ젒∃ƶÍ銻멄嚾鮓瞱戙屔ꩽࢿ䒬瓊ẽ羷ྙ個⨔븑ꡃ꠺婲檱燛뽎├븮ɑℷ⵿姙↌쫩ؒ锆ãŸì¸šè†—⮼궥೚å±å½â‹¨Þ£å©ºæ”ˆæ´™â¡œç£¢ç£˜é­Œï¤ƒ [ 845.848534][ T5838] usb-storage 3-1:9.244: USB Mass Storage device detected [ 845.991839][ T5838] usb-storage 3-1:9.244: Quirks match for vid 03ee pid 6906: 20 [ 846.092758][ T5838] usb-storage 3-1:9.32: USB Mass Storage device detected [ 846.139293][ T5838] usb-storage 3-1:9.32: Quirks match for vid 03ee pid 6906: 20 [ 846.171345][ T9] usb 1-1: USB disconnect, device number 16 [ 846.366815][ T5838] usb-storage 3-1:9.42: USB Mass Storage device detected [ 846.397698][ T5838] usb-storage 3-1:9.42: Quirks match for vid 03ee pid 6906: 20 [ 846.516848][ T5838] usbhid 3-1:9.42: couldn't find an input interrupt endpoint [ 846.565506][ T5838] usb-storage 3-1:9.67: USB Mass Storage device detected [ 846.617323][ T5838] usb-storage 3-1:9.67: Quirks match for vid 03ee pid 6906: 20 [ 846.625412][ T5907] usb 4-1: USB disconnect, device number 5 [ 846.787576][ T5838] usb-storage 3-1:9.58: USB Mass Storage device detected [ 846.825516][ T5838] usb-storage 3-1:9.58: Quirks match for vid 03ee pid 6906: 20 [ 847.228999][ T5838] usb 3-1: USB disconnect, device number 116 [ 847.343743][ T5907] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 847.613967][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 847.843911][ T5838] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 848.028572][ T5838] usb 3-1: Using ep0 maxpacket: 16 [ 848.037751][ T5838] usb 3-1: config 0 has an invalid interface number: 251 but max is 0 [ 848.089538][ T5838] usb 3-1: config 0 has no interface number 0 [ 848.153750][ T5838] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 848.192591][ T5838] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 848.244035][ T5838] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 848.280169][ T5838] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 848.308717][ T5838] usb 3-1: Product: syz [ 848.334797][ T5838] usb 3-1: Manufacturer: syz [ 848.346387][ T5838] usb 3-1: SerialNumber: syz [ 848.360391][ T5838] usb 3-1: config 0 descriptor?? [ 848.376246][T16255] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 848.383948][T16255] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 848.503820][T10380] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 848.605638][T16255] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 848.639386][T16255] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 848.691421][T10380] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 848.713254][T10380] usb 2-1: config 0 has no interface number 0 [ 848.742247][T10380] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 848.785479][T10380] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 848.851834][ T5838] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 848.873596][T10380] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 848.882806][T10380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.898007][ T5838] asix 3-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 848.932308][ T5838] asix 3-1:0.251: probe with driver asix failed with error -5 [ 849.048815][T10380] usb 2-1: config 0 descriptor?? [ 849.064778][T16268] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 849.111469][T10380] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 849.279666][T16268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.314298][T16268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.406449][T16268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 849.440895][T16268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 849.582473][T10379] usb 2-1: USB disconnect, device number 9 [ 850.472114][T10379] usb 3-1: USB disconnect, device number 117 [ 850.726639][ T5907] usb 5-1: unable to get BOS descriptor or descriptor too short [ 850.751264][ T5907] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 850.943469][ T5907] usb 5-1: can't read configurations, error -71 [ 851.029743][T16293] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 851.036300][T16293] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 851.053424][T16293] vhci_hcd vhci_hcd.0: Device attached [ 851.073744][ T5838] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 851.234055][T10374] vhci_hcd: vhci_device speed not set [ 851.253721][ T5838] usb 2-1: Using ep0 maxpacket: 16 [ 851.261204][ T5838] usb 2-1: config 0 has an invalid interface number: 8 but max is 0 [ 851.273376][ T5838] usb 2-1: config 0 has no interface number 0 [ 851.292699][ T5838] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 851.304356][T10374] usb 41-1: new full-speed USB device number 5 using vhci_hcd [ 851.345027][ T5838] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 851.359644][ T5838] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 851.377481][ T5838] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 851.391399][ T5838] usb 2-1: Product: syz [ 851.396799][ T5838] usb 2-1: SerialNumber: syz [ 851.406504][ T5838] usb 2-1: config 0 descriptor?? [ 851.456534][ T5838] cm109 2-1:0.8: invalid payload size 0, expected 4 [ 851.465564][ T5838] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input48 [ 851.662611][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 851.983720][T16295] vhci_hcd: connection reset by peer [ 852.004007][ T12] vhci_hcd: stop threads [ 852.011832][ T12] vhci_hcd: release socket [ 852.026066][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 852.034935][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 852.042056][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 852.049312][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 852.056651][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 852.063905][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 852.071060][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 852.079413][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 852.086699][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 852.094063][ C1] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 852.106661][ T5907] usb 2-1: USB disconnect, device number 10 [ 852.112618][ C1] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 852.123051][ T12] vhci_hcd: disconnect device [ 852.156514][ T5907] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 852.673736][T10373] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 852.881898][T10373] usb 3-1: config 0 has no interfaces? [ 852.939107][T10373] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 853.063555][T10373] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.071692][T10373] usb 3-1: Product: syz [ 853.109585][T10373] usb 3-1: Manufacturer: syz [ 853.138321][T10373] usb 3-1: SerialNumber: syz [ 853.172816][T10373] usb 3-1: config 0 descriptor?? [ 853.196583][T16318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2934'. [ 853.233907][T16318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2934'. [ 853.587091][T16325] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.2936'. [ 853.664044][T10379] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 853.675604][T16325] FAULT_INJECTION: forcing a failure. [ 853.675604][T16325] name failslab, interval 1, probability 0, space 0, times 0 [ 853.807130][T16325] CPU: 1 UID: 0 PID: 16325 Comm: syz.0.2936 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 853.807160][T16325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 853.807172][T16325] Call Trace: [ 853.807181][T16325] [ 853.807190][T16325] dump_stack_lvl+0x189/0x250 [ 853.807225][T16325] ? __pfx____ratelimit+0x10/0x10 [ 853.807255][T16325] ? __pfx_dump_stack_lvl+0x10/0x10 [ 853.807284][T16325] ? __pfx__printk+0x10/0x10 [ 853.807310][T16325] ? __pfx___might_resched+0x10/0x10 [ 853.807339][T16325] ? fs_reclaim_acquire+0x7d/0x100 [ 853.807367][T16325] should_fail_ex+0x414/0x560 [ 853.807397][T16325] should_failslab+0xa8/0x100 [ 853.807420][T16325] __kmalloc_noprof+0xcb/0x4f0 [ 853.807443][T16325] ? fib_nl2rule+0x2f5/0x19f0 [ 853.807471][T16325] fib_nl2rule+0x2f5/0x19f0 [ 853.807502][T16325] ? __pfx_fib_nl2rule+0x10/0x10 [ 853.807526][T16325] ? __nla_parse+0x40/0x60 [ 853.807563][T16325] fib_newrule+0x2c8/0xf20 [ 853.807595][T16325] ? __pfx_fib_newrule+0x10/0x10 [ 853.807654][T16325] ? __pfx_fib_nl_newrule+0x10/0x10 [ 853.807677][T16325] rtnetlink_rcv_msg+0x7cf/0xb70 [ 853.807702][T16325] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 853.807722][T16325] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 853.807741][T16325] ? ref_tracker_free+0x63a/0x7d0 [ 853.807766][T16325] ? __copy_skb_header+0xa7/0x550 [ 853.807793][T16325] ? __pfx_ref_tracker_free+0x10/0x10 [ 853.807819][T16325] ? __skb_clone+0x63/0x7a0 [ 853.807849][T16325] netlink_rcv_skb+0x205/0x470 [ 853.807873][T16325] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 853.807893][T16325] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 853.807926][T16325] ? netlink_deliver_tap+0x2e/0x1b0 [ 853.807947][T16325] ? netlink_deliver_tap+0x2e/0x1b0 [ 853.807974][T16325] netlink_unicast+0x758/0x8d0 [ 853.808005][T16325] netlink_sendmsg+0x805/0xb30 [ 853.808039][T16325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 853.808066][T16325] ? aa_sock_msg_perm+0x94/0x160 [ 853.808093][T16325] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 853.808117][T16325] ? __pfx_netlink_sendmsg+0x10/0x10 [ 853.808142][T16325] __sock_sendmsg+0x21c/0x270 [ 853.808175][T16325] ____sys_sendmsg+0x52d/0x830 [ 853.808205][T16325] ? __pfx_____sys_sendmsg+0x10/0x10 [ 853.808239][T16325] ? import_iovec+0x74/0xa0 [ 853.808262][T16325] ___sys_sendmsg+0x21f/0x2a0 [ 853.808288][T16325] ? __pfx____sys_sendmsg+0x10/0x10 [ 853.808354][T16325] ? __might_fault+0xb0/0x130 [ 853.808377][T16325] __sys_sendmmsg+0x227/0x430 [ 853.808408][T16325] ? __pfx___sys_sendmmsg+0x10/0x10 [ 853.808430][T16325] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 853.808475][T16325] ? ksys_write+0x22a/0x250 [ 853.808496][T16325] ? __pfx_ksys_write+0x10/0x10 [ 853.808512][T16325] ? rcu_is_watching+0x15/0xb0 [ 853.808554][T16325] __x64_sys_sendmmsg+0xa0/0xc0 [ 853.808582][T16325] do_syscall_64+0xfa/0x3b0 [ 853.808599][T16325] ? lockdep_hardirqs_on+0x9c/0x150 [ 853.808627][T16325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.808646][T16325] ? clear_bhb_loop+0x60/0xb0 [ 853.808669][T16325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.808689][T16325] RIP: 0033:0x7f872d38e929 [ 853.808707][T16325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.808726][T16325] RSP: 002b:00007f872e248038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 853.808748][T16325] RAX: ffffffffffffffda RBX: 00007f872d5b5fa0 RCX: 00007f872d38e929 [ 853.808763][T16325] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 853.808777][T16325] RBP: 00007f872e248090 R08: 0000000000000000 R09: 0000000000000000 [ 853.808790][T16325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 853.808803][T16325] R13: 0000000000000000 R14: 00007f872d5b5fa0 R15: 00007f872d6dfa28 [ 853.808833][T16325] [ 854.491534][T10379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 854.667219][T10379] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0 [ 854.701320][T10379] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0 [ 854.742543][T10379] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 0 [ 854.796950][T10379] usb 5-1: New USB device found, idVendor=0bfd, idProduct=0017, bcdDevice=2f.a3 [ 854.832767][T10379] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 854.888196][T10379] usb 5-1: Product: syz [ 854.934989][T10379] usb 5-1: Manufacturer: syz [ 854.948260][T10379] usb 5-1: SerialNumber: syz [ 854.953769][T10373] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 855.000009][T10379] usb 5-1: config 0 descriptor?? [ 855.036220][T10379] kvaser_usb 5-1:0.0: error -EMSGSIZE: Cannot get software info [ 855.062139][T10379] kvaser_usb 5-1:0.0: probe with driver kvaser_usb failed with error -90 [ 855.113946][T10373] usb 1-1: Using ep0 maxpacket: 16 [ 855.127589][T10373] usb 1-1: config 0 has an invalid interface number: 251 but max is 0 [ 855.152693][T10373] usb 1-1: config 0 has no interface number 0 [ 855.171445][T10373] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 855.202966][T10373] usb 1-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 855.244075][T10379] usb 5-1: USB disconnect, device number 4 [ 855.246850][T10373] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 855.293960][T10373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.311855][T10373] usb 1-1: Product: syz [ 855.321226][T10373] usb 1-1: Manufacturer: syz [ 855.343690][T10373] usb 1-1: SerialNumber: syz [ 855.362636][T10373] usb 1-1: config 0 descriptor?? [ 855.393002][T16327] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 855.418601][T16327] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 855.438903][T10379] usb 3-1: USB disconnect, device number 118 [ 855.532284][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 855.532301][ T30] audit: type=1326 audit(1750294081.134:8541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16322 comm="syz.3.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4bdf2ab19 code=0x7ffc0000 [ 855.565257][ T30] audit: type=1326 audit(1750294081.134:8542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16322 comm="syz.3.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bdf8e929 code=0x7ffc0000 [ 855.596906][ T30] audit: type=1326 audit(1750294081.134:8543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16322 comm="syz.3.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4bdf2ab19 code=0x7ffc0000 [ 855.624149][ T30] audit: type=1326 audit(1750294081.134:8544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16322 comm="syz.3.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bdf8e929 code=0x7ffc0000 [ 855.647258][T16327] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 855.660248][ T30] audit: type=1326 audit(1750294081.134:8545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16322 comm="syz.3.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4bdf2ab19 code=0x7ffc0000 [ 855.683604][ T30] audit: type=1326 audit(1750294081.134:8546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16322 comm="syz.3.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bdf8e929 code=0x7ffc0000 [ 855.684516][T16327] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 855.755847][ T30] audit: type=1326 audit(1750294081.134:8547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16322 comm="syz.3.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bdf8e929 code=0x7ffc0000 [ 855.791284][ T30] audit: type=1326 audit(1750294081.134:8548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16322 comm="syz.3.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4bdf2ab19 code=0x7ffc0000 [ 855.824574][ T30] audit: type=1326 audit(1750294081.134:8549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16322 comm="syz.3.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fe4bdf2ab19 code=0x7ffc0000 [ 855.862540][T16337] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2941'. [ 855.872507][ T30] audit: type=1326 audit(1750294081.134:8550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16322 comm="syz.3.2935" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4bdf8e929 code=0x7ffc0000 [ 855.992961][T10373] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 856.033443][T10373] asix 1-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 856.710397][T10374] vhci_hcd: vhci_device speed not set [ 856.790743][T10373] asix 1-1:0.251: probe with driver asix failed with error -5 [ 856.838283][T16352] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 856.921551][T16353] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2942'. [ 857.079247][T16355] FAULT_INJECTION: forcing a failure. [ 857.079247][T16355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 857.123746][T16355] CPU: 0 UID: 0 PID: 16355 Comm: syz.3.2945 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 857.123775][T16355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 857.123786][T16355] Call Trace: [ 857.123793][T16355] [ 857.123802][T16355] dump_stack_lvl+0x189/0x250 [ 857.123836][T16355] ? __pfx____ratelimit+0x10/0x10 [ 857.123865][T16355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 857.123895][T16355] ? __pfx__printk+0x10/0x10 [ 857.123917][T16355] ? __might_fault+0xb0/0x130 [ 857.123949][T16355] should_fail_ex+0x414/0x560 [ 857.123979][T16355] _copy_from_user+0x2d/0xb0 [ 857.124000][T16355] kstrtouint_from_user+0xc4/0x170 [ 857.124032][T16355] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 857.124077][T16355] proc_fail_nth_write+0x88/0x240 [ 857.124102][T16355] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 857.124133][T16355] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 857.124158][T16355] vfs_write+0x27e/0xa90 [ 857.124198][T16355] ? __pfx_vfs_write+0x10/0x10 [ 857.124236][T16355] ? __fget_files+0x2a/0x420 [ 857.124264][T16355] ? __fget_files+0x3a0/0x420 [ 857.124284][T16355] ? __fget_files+0x2a/0x420 [ 857.124315][T16355] ksys_write+0x145/0x250 [ 857.124336][T16355] ? __pfx_ksys_write+0x10/0x10 [ 857.124352][T16355] ? rcu_is_watching+0x15/0xb0 [ 857.124387][T16355] ? do_syscall_64+0xbe/0x3b0 [ 857.124410][T16355] do_syscall_64+0xfa/0x3b0 [ 857.124426][T16355] ? lockdep_hardirqs_on+0x9c/0x150 [ 857.124453][T16355] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.124470][T16355] ? clear_bhb_loop+0x60/0xb0 [ 857.124493][T16355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.124513][T16355] RIP: 0033:0x7fe4bdf8d3df [ 857.124531][T16355] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 857.124549][T16355] RSP: 002b:00007fe4bee14030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 857.124571][T16355] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe4bdf8d3df [ 857.124585][T16355] RDX: 0000000000000001 RSI: 00007fe4bee140a0 RDI: 0000000000000004 [ 857.124598][T16355] RBP: 00007fe4bee14090 R08: 0000000000000000 R09: 0000000000000000 [ 857.124611][T16355] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 857.124623][T16355] R13: 0000000000000000 R14: 00007fe4be1b5fa0 R15: 00007fe4be2dfa28 [ 857.124655][T16355] [ 857.723779][T10379] usb 1-1: USB disconnect, device number 17 [ 858.114039][T10373] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 858.425623][T10373] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 858.490260][T10373] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 858.513959][T10373] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 858.529004][T10373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.539159][T10373] usb 4-1: Product: syz [ 858.543332][T10373] usb 4-1: Manufacturer: syz [ 858.548187][T10373] usb 4-1: SerialNumber: syz [ 858.633986][T10374] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 858.731648][ T5907] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 858.782017][T16364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.797321][T16364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.828303][T10373] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 858.850481][T10374] usb 3-1: config 0 has no interfaces? [ 858.872237][T10374] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 858.886842][T10374] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 858.895374][T10374] usb 3-1: Product: syz [ 858.899869][T10374] usb 3-1: Manufacturer: syz [ 858.908973][T10374] usb 3-1: SerialNumber: syz [ 858.918837][T16383] bond0: (slave 1!€ÿ): Releasing backup interface [ 858.926155][ T5907] usb 1-1: Using ep0 maxpacket: 8 [ 858.933148][ T5907] usb 1-1: config 0 has an invalid interface number: 154 but max is 0 [ 858.941888][ T5907] usb 1-1: config 0 has no interface number 0 [ 858.957099][T10374] usb 3-1: config 0 descriptor?? [ 858.964056][T10373] usb 4-1: USB disconnect, device number 6 [ 858.971032][ T5907] usb 1-1: config 0 interface 154 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 859.057468][T16364] fuse: Invalid uid '00000000000000000003' [ 859.062292][ T5907] usb 1-1: config 0 interface 154 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 859.074843][T16383] bond0: (slave bond_slave_1): Releasing backup interface [ 859.084192][T16383] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 859.092023][T16383] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 859.100466][T16383] batman_adv: batadv0: Removing interface: macvlan2 [ 859.111538][ T5907] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=9e.bc [ 859.121716][ T5907] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.270304][ T5907] usb 1-1: Product: syz [ 859.278965][ T5907] usb 1-1: Manufacturer: syz [ 859.295536][ T5907] usb 1-1: SerialNumber: syz [ 859.340441][ T5907] usb 1-1: config 0 descriptor?? [ 859.370306][ T5907] appletouch 1-1:0.154: Could not find int-in endpoint [ 859.380514][ T5907] appletouch 1-1:0.154: probe with driver appletouch failed with error -5 [ 859.419030][ T5907] usbhid 1-1:0.154: couldn't find an input interrupt endpoint [ 860.163948][T10374] usb 1-1: USB disconnect, device number 18 [ 860.374888][T16394] snd_dummy snd_dummy.0: control 1:9:195:ÿÿÿÿ£:53367 is already present [ 860.693971][T10374] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 860.743781][ T5907] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 860.843811][T10374] usb 1-1: device descriptor read/64, error -71 [ 860.914673][ T5907] usb 5-1: Using ep0 maxpacket: 16 [ 860.922497][ T5907] usb 5-1: config 0 has an invalid interface number: 251 but max is 0 [ 860.943067][ T5907] usb 5-1: config 0 has no interface number 0 [ 860.973035][ T5907] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 860.987570][ T5907] usb 5-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 861.019261][ T5907] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 861.031869][ T5907] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 861.053144][ T5907] usb 5-1: Product: syz [ 861.058557][ T5907] usb 5-1: Manufacturer: syz [ 861.063600][ T5907] usb 5-1: SerialNumber: syz [ 861.105635][T10374] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 861.123186][ T5907] usb 5-1: config 0 descriptor?? [ 861.167477][T16399] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 861.190578][T16399] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 861.257712][T10380] usb 3-1: USB disconnect, device number 119 [ 861.294331][T10374] usb 1-1: device descriptor read/64, error -71 [ 861.414364][T10374] usb usb1-port1: attempt power cycle [ 861.423912][ T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 861.436204][T16399] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 861.452129][T16399] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 861.484154][T16413] FAULT_INJECTION: forcing a failure. [ 861.484154][T16413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 861.497856][T16413] CPU: 1 UID: 0 PID: 16413 Comm: syz.2.2965 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 861.497888][T16413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 861.497901][T16413] Call Trace: [ 861.497909][T16413] [ 861.497918][T16413] dump_stack_lvl+0x189/0x250 [ 861.497952][T16413] ? __pfx____ratelimit+0x10/0x10 [ 861.497978][T16413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 861.498005][T16413] ? __pfx__printk+0x10/0x10 [ 861.498017][T16413] ? __might_fault+0xb0/0x130 [ 861.498033][T16413] should_fail_ex+0x414/0x560 [ 861.498049][T16413] _copy_to_iter+0x575/0x16f0 [ 861.498071][T16413] ? __pfx__copy_to_iter+0x10/0x10 [ 861.498084][T16413] ? __skb_try_recv_from_queue+0x2b2/0x730 [ 861.498103][T16413] ? __skb_try_recv_datagram+0x3da/0x4e0 [ 861.498121][T16413] __skb_datagram_iter+0xf8/0x990 [ 861.498136][T16413] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 861.498155][T16413] skb_copy_datagram_iter+0xc5/0x230 [ 861.498171][T16413] netlink_recvmsg+0x2ab/0xa30 [ 861.498190][T16413] ? __pfx_netlink_recvmsg+0x10/0x10 [ 861.498204][T16413] ? aa_sock_msg_perm+0x94/0x160 [ 861.498219][T16413] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 861.498233][T16413] ? security_socket_recvmsg+0x7e/0x2e0 [ 861.498250][T16413] ? __pfx_netlink_recvmsg+0x10/0x10 [ 861.498262][T16413] sock_recvmsg+0x22c/0x270 [ 861.498281][T16413] ____sys_recvmsg+0x1c9/0x460 [ 861.498299][T16413] ? __pfx_____sys_recvmsg+0x10/0x10 [ 861.498320][T16413] ? import_iovec+0x74/0xa0 [ 861.498332][T16413] ___sys_recvmsg+0x1b5/0x510 [ 861.498348][T16413] ? __pfx____sys_recvmsg+0x10/0x10 [ 861.498373][T16413] ? __fget_files+0x3a0/0x420 [ 861.498391][T16413] do_recvmmsg+0x307/0x770 [ 861.498408][T16413] ? __pfx_do_recvmmsg+0x10/0x10 [ 861.498428][T16413] ? _copy_from_user+0x94/0xb0 [ 861.498446][T16413] __x64_sys_recvmmsg+0x1af/0x240 [ 861.498462][T16413] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 861.498475][T16413] ? rcu_is_watching+0x15/0xb0 [ 861.498493][T16413] ? do_syscall_64+0xbe/0x3b0 [ 861.498505][T16413] do_syscall_64+0xfa/0x3b0 [ 861.498516][T16413] ? lockdep_hardirqs_on+0x9c/0x150 [ 861.498531][T16413] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.498541][T16413] ? clear_bhb_loop+0x60/0xb0 [ 861.498554][T16413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.498564][T16413] RIP: 0033:0x7f91e6d8e929 [ 861.498574][T16413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 861.498584][T16413] RSP: 002b:00007f91e7cd0038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 861.498597][T16413] RAX: ffffffffffffffda RBX: 00007f91e6fb5fa0 RCX: 00007f91e6d8e929 [ 861.498605][T16413] RDX: 04000000000003b4 RSI: 00002000000037c0 RDI: 0000000000000003 [ 861.498612][T16413] RBP: 00007f91e7cd0090 R08: 0000200000003700 R09: 0000000000000000 [ 861.498619][T16413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.498625][T16413] R13: 0000000000000000 R14: 00007f91e6fb5fa0 R15: 00007f91e70dfa28 [ 861.498640][T16413] [ 861.603805][T10379] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 861.763735][T10374] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 861.765831][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 861.789861][ T5907] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 861.817832][ T9] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 861.841156][ T5907] asix 5-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 861.852644][T10374] usb 1-1: device descriptor read/8, error -71 [ 861.859428][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.888920][ T5907] asix 5-1:0.251: probe with driver asix failed with error -5 [ 861.894298][ T9] usb 4-1: config 0 descriptor?? [ 861.905293][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 862.003782][T10379] usb 2-1: Using ep0 maxpacket: 16 [ 862.010668][T10379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.021907][T10379] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.033183][T10379] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 862.047120][T10379] usb 2-1: New USB device found, idVendor=054c, idProduct=0268, bcdDevice= 0.00 [ 862.066880][T10379] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.090710][T10379] usb 2-1: config 0 descriptor?? [ 862.113728][T10374] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 862.157090][T10374] usb 1-1: device descriptor read/8, error -71 [ 862.262343][T16423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2967'. [ 862.282640][T10374] usb usb1-port1: unable to enumerate USB device [ 862.535488][T10379] sony 0003:054C:0268.0022: item fetching failed at offset 0/2 [ 862.557349][T10379] sony 0003:054C:0268.0022: parse failed [ 862.570882][T10379] sony 0003:054C:0268.0022: probe with driver sony failed with error -22 [ 862.787009][T16407] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 862.797445][T16407] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 862.813009][ T9] gspca_vc032x: reg_w err -71 [ 862.820346][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 862.833673][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 862.844292][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 862.854190][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 862.867261][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 862.881312][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 863.080566][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 863.086146][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 863.091519][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 863.096861][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 863.102171][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 863.107575][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 863.112859][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 863.118187][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 863.123497][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 863.129916][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 863.135274][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 863.140560][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 863.149283][ T9] gspca_vc032x: Unknown sensor... [ 863.161265][ T9] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 863.194553][ T9] usb 4-1: USB disconnect, device number 7 [ 863.222268][T10374] usb 2-1: USB disconnect, device number 11 [ 863.556823][ T5915] usb 5-1: USB disconnect, device number 5 [ 863.727353][T16431] FAULT_INJECTION: forcing a failure. [ 863.727353][T16431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 863.749829][T16431] CPU: 1 UID: 0 PID: 16431 Comm: syz.2.2970 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 863.749855][T16431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 863.749868][T16431] Call Trace: [ 863.749876][T16431] [ 863.749884][T16431] dump_stack_lvl+0x189/0x250 [ 863.749926][T16431] ? __pfx____ratelimit+0x10/0x10 [ 863.749956][T16431] ? __pfx_dump_stack_lvl+0x10/0x10 [ 863.749986][T16431] ? __pfx__printk+0x10/0x10 [ 863.750008][T16431] ? __might_fault+0xb0/0x130 [ 863.750039][T16431] should_fail_ex+0x414/0x560 [ 863.750068][T16431] _copy_from_user+0x2d/0xb0 [ 863.750090][T16431] ___sys_sendmsg+0x158/0x2a0 [ 863.750119][T16431] ? __pfx____sys_sendmsg+0x10/0x10 [ 863.750177][T16431] ? __fget_files+0x2a/0x420 [ 863.750199][T16431] ? __fget_files+0x3a0/0x420 [ 863.750231][T16431] __x64_sys_sendmsg+0x19b/0x260 [ 863.750259][T16431] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 863.750294][T16431] ? __pfx_ksys_write+0x10/0x10 [ 863.750309][T16431] ? rcu_is_watching+0x15/0xb0 [ 863.750344][T16431] ? do_syscall_64+0xbe/0x3b0 [ 863.750367][T16431] do_syscall_64+0xfa/0x3b0 [ 863.750384][T16431] ? lockdep_hardirqs_on+0x9c/0x150 [ 863.750412][T16431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.750432][T16431] ? clear_bhb_loop+0x60/0xb0 [ 863.750456][T16431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.750476][T16431] RIP: 0033:0x7f91e6d8e929 [ 863.750494][T16431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 863.750513][T16431] RSP: 002b:00007f91e7cd0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 863.750534][T16431] RAX: ffffffffffffffda RBX: 00007f91e6fb5fa0 RCX: 00007f91e6d8e929 [ 863.750549][T16431] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000003 [ 863.750568][T16431] RBP: 00007f91e7cd0090 R08: 0000000000000000 R09: 0000000000000000 [ 863.750581][T16431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 863.750594][T16431] R13: 0000000000000000 R14: 00007f91e6fb5fa0 R15: 00007f91e70dfa28 [ 863.750624][T16431] [ 864.234313][ T5915] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 864.429048][ T5915] usb 5-1: config 0 has no interfaces? [ 864.475366][T10374] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 864.609165][ T5915] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 864.642280][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 864.654184][T16384] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 864.678503][ T5915] usb 5-1: Product: syz [ 864.685051][ T5915] usb 5-1: Manufacturer: syz [ 864.708046][ T5915] usb 5-1: SerialNumber: syz [ 864.721867][ T5915] usb 5-1: config 0 descriptor?? [ 864.745497][T10374] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 864.779890][T10374] usb 1-1: config 0 has no interface number 0 [ 864.839283][T16384] usb 2-1: config 0 has no interfaces? [ 864.873929][T10374] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 864.934143][T10374] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 864.945072][T10374] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 864.964388][T10374] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.985192][T10374] usb 1-1: config 0 descriptor?? [ 864.992480][T16443] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 865.056017][T10374] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 865.129235][T16384] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 865.163937][T16384] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.180912][T16384] usb 2-1: Product: syz [ 865.191317][T16384] usb 2-1: Manufacturer: syz [ 865.202612][T16384] usb 2-1: SerialNumber: syz [ 865.210535][T16443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.234105][T16443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.244448][T16384] usb 2-1: config 0 descriptor?? [ 865.551212][T16443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 865.567329][T16443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 865.680768][T16384] usb 1-1: USB disconnect, device number 23 [ 866.719688][ T5154] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 866.756883][ T5154] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 866.769407][ T5154] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 866.780196][ T5154] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 866.788264][ T5154] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 867.347498][T10374] usb 2-1: USB disconnect, device number 12 [ 867.817589][ T5915] usb 5-1: USB disconnect, device number 6 [ 867.903979][T10379] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 868.099244][T16470] chnl_net:caif_netlink_parms(): no params data found [ 868.123949][T10379] usb 3-1: Using ep0 maxpacket: 16 [ 868.131419][T10379] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 868.152376][T10379] usb 3-1: config 0 has no interface number 0 [ 868.178794][T10379] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 868.248556][T10379] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 868.281096][T10379] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 868.306473][T10379] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 868.338534][T10379] usb 3-1: Product: syz [ 868.352994][T10379] usb 3-1: SerialNumber: syz [ 868.387159][T10379] usb 3-1: config 0 descriptor?? [ 868.412535][T10379] cm109 3-1:0.8: invalid payload size 0, expected 4 [ 868.438260][T10379] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input49 [ 868.534708][T10374] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 868.548362][T16470] bridge0: port 1(bridge_slave_0) entered blocking state [ 868.561026][T16470] bridge0: port 1(bridge_slave_0) entered disabled state [ 868.571524][T16470] bridge_slave_0: entered allmulticast mode [ 868.588478][T16470] bridge_slave_0: entered promiscuous mode [ 868.707332][T16470] bridge0: port 2(bridge_slave_1) entered blocking state [ 868.723125][T16470] bridge0: port 2(bridge_slave_1) entered disabled state [ 868.725906][T10374] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 868.754808][T16470] bridge_slave_1: entered allmulticast mode [ 868.782605][T16470] bridge_slave_1: entered promiscuous mode [ 868.788578][T10374] usb 5-1: config 0 has no interface number 0 [ 868.832094][T10374] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 868.885348][ T5840] Bluetooth: hci5: command tx timeout [ 868.905400][T10374] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 868.923900][T10374] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 868.933135][T10374] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.951399][T10374] usb 5-1: config 0 descriptor?? [ 868.957732][T16496] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 868.972910][T10374] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 869.133530][T16470] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.174989][T16470] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.278155][T16499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.312357][T16499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.371648][T16470] team0: Port device team_slave_0 added [ 869.400007][T16470] team0: Port device team_slave_1 added [ 869.437661][T16499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.478312][T16499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.616015][T16470] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 869.639405][T16470] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.693769][T16470] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 869.758991][T16470] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 869.760879][T10379] usb 5-1: USB disconnect, device number 7 [ 869.781795][T16470] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 869.871678][T16507] ptrace attach of "./syz-executor exec"[15784] was attempted by "./syz-executor exec"[16507] [ 869.929565][T16470] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.010724][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 870.114383][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.126455][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.964171][ T5840] Bluetooth: hci5: command tx timeout [ 871.345942][T16531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2993'. [ 872.292799][ C0] cm109_urb_ctl_callback: 31 callbacks suppressed [ 872.292824][ C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 872.293253][T16384] usb 3-1: USB disconnect, device number 120 [ 872.299274][ C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 872.520437][T16384] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 872.941111][ T4524] bond0 (unregistering): Released all slaves [ 872.986150][ T4524] bond1 (unregistering): Released all slaves [ 873.044026][ T5840] Bluetooth: hci5: command tx timeout [ 873.047960][ T4524] bond2 (unregistering): Released all slaves [ 873.161650][ T4524] bond3 (unregistering): Released all slaves [ 873.394446][T16539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2995'. [ 873.519268][T16470] hsr_slave_0: entered promiscuous mode [ 873.526580][T16470] hsr_slave_1: entered promiscuous mode [ 873.532873][T16470] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 873.543915][T16470] Cannot create hsr debugfs directory [ 873.554239][ T4524] _ÐZ`Ô€@ÿÿ: left promiscuous mode [ 873.939578][ T4524] ‰lm;Ê-: left promiscuous mode [ 874.257167][ T4524] tipc: Disabling bearer [ 874.269120][ T4524] tipc: Left network mode [ 874.342213][ T4524] IPVS: stopping master sync thread 6355 ... [ 874.353811][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 874.524048][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 874.550016][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.575225][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.638948][ T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 874.675696][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.738051][ T9] usb 2-1: config 0 descriptor?? [ 875.023785][ T5915] usb 3-1: new low-speed USB device number 121 using dummy_hcd [ 875.132873][ T5840] Bluetooth: hci5: command tx timeout [ 875.197076][ T5915] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 875.231898][ T5915] usb 3-1: config 0 has no interface number 0 [ 875.255881][ T9] savu 0003:1E7D:2D5A.0023: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 875.335369][ T5915] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 875.355454][T16577] fuse: Unknown parameter 'f' [ 875.458178][T16577] SET target dimension over the limit! [ 875.463989][ T5915] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 875.605058][ T5915] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 875.615718][ T5915] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.633924][ T30] kauditd_printk_skb: 160 callbacks suppressed [ 875.633942][ T30] audit: type=1800 audit(1750294101.254:8711): pid=16577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3004" name="file1" dev="tmpfs" ino=2958 res=0 errno=0 [ 875.712026][ T5915] usb 3-1: config 0 descriptor?? [ 875.766427][T16571] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 875.837752][ T5915] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior1 [ 875.941197][ T4524] hsr_slave_0: left promiscuous mode [ 876.051878][ T4524] hsr_slave_1: left promiscuous mode [ 876.086386][T16588] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.148735][T16588] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.221193][ T4524] batadv2 (unregistering): left allmulticast mode [ 876.250624][ T4524] team0 (unregistering): Port device batadv2 removed [ 876.299330][T16592] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.362831][T16592] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.383903][T10374] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 876.524151][ T5915] usb 2-1: reset high-speed USB device number 13 using dummy_hcd [ 876.546192][T10374] usb 1-1: Using ep0 maxpacket: 16 [ 877.779012][T10380] usb 2-1: USB disconnect, device number 13 [ 877.940709][T10380] usb 2-1: new low-speed USB device number 14 using dummy_hcd [ 878.118810][T10380] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 878.127929][T10380] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 878.148987][T10380] usb 2-1: config 0 has no interface number 0 [ 878.156676][T10380] usb 2-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 878.170311][T10380] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 878.196180][T10380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.236925][T10380] usb 2-1: config 0 descriptor?? [ 878.249856][T10380] iowarrior 2-1:0.1: no interrupt-in endpoint found [ 878.487515][T16605] FAULT_INJECTION: forcing a failure. [ 878.487515][T16605] name failslab, interval 1, probability 0, space 0, times 0 [ 878.532910][T16605] CPU: 0 UID: 0 PID: 16605 Comm: syz.1.3007 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 878.532942][T16605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 878.532955][T16605] Call Trace: [ 878.532964][T16605] [ 878.532972][T16605] dump_stack_lvl+0x189/0x250 [ 878.533001][T16605] ? __pfx____ratelimit+0x10/0x10 [ 878.533029][T16605] ? __pfx_dump_stack_lvl+0x10/0x10 [ 878.533058][T16605] ? __pfx__printk+0x10/0x10 [ 878.533082][T16605] ? __pfx___might_resched+0x10/0x10 [ 878.533101][T16605] ? fs_reclaim_acquire+0x7d/0x100 [ 878.533117][T16605] should_fail_ex+0x414/0x560 [ 878.533133][T16605] should_failslab+0xa8/0x100 [ 878.533146][T16605] __kmalloc_cache_noprof+0x70/0x3d0 [ 878.533165][T16605] ? alloc_pipe_info+0xe9/0x4d0 [ 878.533189][T16605] alloc_pipe_info+0xe9/0x4d0 [ 878.533212][T16605] splice_direct_to_actor+0xa5d/0xcc0 [ 878.533235][T16605] ? aa_file_perm+0x11f/0xed0 [ 878.533251][T16605] ? aa_file_perm+0x3e7/0xed0 [ 878.533270][T16605] ? __lock_acquire+0xab9/0xd20 [ 878.533284][T16605] ? __pfx_direct_splice_actor+0x10/0x10 [ 878.533295][T16605] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 878.533315][T16605] ? __pfx_aa_file_perm+0x10/0x10 [ 878.533348][T16605] do_splice_direct+0x181/0x270 [ 878.533371][T16605] ? __pfx_do_splice_direct+0x10/0x10 [ 878.533390][T16605] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 878.533403][T16605] ? bpf_lsm_file_permission+0x9/0x20 [ 878.533417][T16605] ? security_file_permission+0x75/0x290 [ 878.533429][T16605] ? rw_verify_area+0x258/0x650 [ 878.533448][T16605] do_sendfile+0x4da/0x7e0 [ 878.533471][T16605] ? __pfx_vfs_write+0x10/0x10 [ 878.533506][T16605] ? __pfx_do_sendfile+0x10/0x10 [ 878.533530][T16605] ? __fget_files+0x3a0/0x420 [ 878.533549][T16605] __se_sys_sendfile64+0x13e/0x190 [ 878.533562][T16605] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 878.533573][T16605] ? rcu_is_watching+0x15/0xb0 [ 878.533591][T16605] ? do_syscall_64+0xbe/0x3b0 [ 878.533613][T16605] do_syscall_64+0xfa/0x3b0 [ 878.533630][T16605] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.533646][T16605] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 878.533664][T16605] ? clear_bhb_loop+0x60/0xb0 [ 878.533685][T16605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 878.533703][T16605] RIP: 0033:0x7f6ef6f8e929 [ 878.533727][T16605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 878.533744][T16605] RSP: 002b:00007f6ef7df4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 878.533764][T16605] RAX: ffffffffffffffda RBX: 00007f6ef71b5fa0 RCX: 00007f6ef6f8e929 [ 878.533779][T16605] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000005 [ 878.533790][T16605] RBP: 00007f6ef7df4090 R08: 0000000000000000 R09: 0000000000000000 [ 878.533803][T16605] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000001 [ 878.533816][T16605] R13: 0000000000000000 R14: 00007f6ef71b5fa0 R15: 00007f6ef72dfa28 [ 878.533847][T16605] [ 878.876162][T10373] usb 2-1: USB disconnect, device number 14 [ 879.087569][T10373] usb 3-1: USB disconnect, device number 121 [ 879.510958][T16617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3010'. [ 879.528504][T16617] sctp: [Deprecated]: syz.2.3010 (pid 16617) Use of struct sctp_assoc_value in delayed_ack socket option. [ 879.528504][T16617] Use struct sctp_sack_info instead [ 880.157349][T10374] usb 1-1: unable to get BOS descriptor or descriptor too short [ 880.179684][T10374] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 880.212607][T10374] usb 1-1: can't read configurations, error -71 [ 880.278514][T16624] IPv6: Can't replace route, no match found [ 880.310255][ T4524] IPVS: stop unused estimator thread 0... [ 880.387352][T16470] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 880.447785][T16470] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 880.478405][T16470] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 880.516700][T16470] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 880.903305][T16470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 880.993214][T16470] 8021q: adding VLAN 0 to HW filter on device team0 [ 881.500387][T11883] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.507607][T11883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.607205][T11883] bridge0: port 2(bridge_slave_1) entered blocking state [ 881.614444][T11883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 881.723904][T10374] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 882.023897][T10374] usb 1-1: Using ep0 maxpacket: 16 [ 882.714743][T16470] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 882.988659][T16470] veth0_vlan: entered promiscuous mode [ 883.105035][T16470] veth1_vlan: entered promiscuous mode [ 883.319445][T16470] veth0_macvtap: entered promiscuous mode [ 883.363315][T16470] veth1_macvtap: entered promiscuous mode [ 883.509170][T16470] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 883.595669][T16470] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 883.711824][T16470] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.733755][T16470] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.751247][T16470] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.802549][T16470] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 883.943861][T16384] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 884.139063][T10374] usb 1-1: unable to get BOS descriptor or descriptor too short [ 884.153691][T16384] usb 5-1: Using ep0 maxpacket: 16 [ 884.171987][T10374] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 884.198186][T10374] usb 1-1: can't read configurations, error -71 [ 884.224056][T10374] usb usb1-port1: attempt power cycle [ 884.334050][ T3429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.341902][ T3429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.414176][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 884.466860][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 884.653840][T16710] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 3952. macoff=96 [ 885.023974][ T5915] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 885.193747][ T5915] usb 4-1: Using ep0 maxpacket: 16 [ 885.213914][ T5915] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 885.285493][ T5915] usb 4-1: config 0 has no interface number 0 [ 885.311367][ T5915] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 885.530579][ T5915] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 885.639373][ T5915] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 885.660361][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.679699][ T5915] usb 4-1: Product: syz [ 885.700248][ T5915] usb 4-1: Manufacturer: syz [ 885.734689][ T5915] usb 4-1: SerialNumber: syz [ 885.765297][ T5915] usb 4-1: config 0 descriptor?? [ 885.792496][T16716] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 885.801147][T16716] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 886.029562][T16716] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 886.058832][T16716] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 886.179597][T16729] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3029'. [ 886.243091][T16729] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3029'. [ 886.276458][T16729] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3029'. [ 886.305761][ T5915] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 886.342927][ T5915] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -32 [ 886.373988][ T5915] asix 4-1:0.251: probe with driver asix failed with error -5 [ 886.463825][T10380] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 886.640776][T10380] usb 3-1: Using ep0 maxpacket: 16 [ 886.741979][T10380] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x82 has invalid maxpacket 16 [ 886.793830][T10380] usb 3-1: config 1 interface 0 altsetting 6 bulk endpoint 0x3 has invalid maxpacket 1022 [ 886.822535][T10380] usb 3-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 886.838440][T10380] usb 3-1: config 1 interface 0 has no altsetting 0 [ 886.860962][T10380] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 886.875340][T10380] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.893480][T10380] usb 3-1: Product: 틟衹礘︤嫜雬á¢î¶ì„붨銆⠃ [ 886.908567][T10380] usb 3-1: Manufacturer: 럶䔚佸슈ᬜ壑쨫神㠳후ê°êª‹Å‰î†”䩣킣ᩫֵ襙侽쎨戌敿曤ä®â‹í—ˆï‘šîš—찜î›á»»á›â£‹ãŽ¹äŠå€é¶–ℭ꺦à¤ïµç®šæ°¯ì¾¯íŸ…쌃労꧌븉 [ 886.953473][T10380] usb 3-1: SerialNumber: ﳚ領霴ᇗá¿ë§–樅â뜿ᥱĆ絩äŸãªì«£â„‡ê°…꧞炒ã網旟᣶饑ꄼ鄫њ뷟렂䕅䅡翇זּ紫㕕먅覟ㄦെ藻╿ᫎ얬ï–å¨å•Žî´é—鈔뽞㛡ë«ã·§ï±Šã‚‰é®»ãŸ…웣첸踬 [ 887.047396][T16731] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 887.055223][T16731] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 887.637553][T16384] usb 5-1: unable to get BOS descriptor or descriptor too short [ 887.660255][T16384] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 887.701558][T16384] usb 5-1: can't read configurations, error -71 [ 887.849811][ T9] usb 4-1: USB disconnect, device number 8 [ 888.823833][ T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 889.044461][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 890.038370][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 890.459619][ T9] usb 4-1: config 8 has an invalid interface number: 255 but max is 0 [ 890.990950][ T9] usb 4-1: config 8 has no interface number 0 [ 904.867740][ T9] usb 4-1: config 8 interface 255 has no altsetting 0 [ 910.223625][ C1] sched: DL replenish lagged too much [ 919.085919][ T9] usb 4-1: string descriptor 0 read error: -71 [ 919.092554][T10380] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71 [ 919.214705][ T9] usb 4-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 922.804233][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 928.244322][T10380] usb 3-1: USB disconnect, device number 122 [ 928.653782][ T9] usb 4-1: can't set config #8, error -71 [ 929.533740][ T9] usb 4-1: USB disconnect, device number 9 [ 937.331456][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 937.346186][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 945.394215][ T5154] Bluetooth: hci2: command 0x0406 tx timeout [ 952.456719][T15505] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 952.466739][T15505] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 952.475028][T15505] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 952.483359][T15505] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 952.491229][T15505] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 952.574237][ T5154] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 952.715481][T15505] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 952.728768][T15505] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 952.742930][T15505] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 952.754261][T15505] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 952.761973][T15505] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 953.009379][ T5154] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 953.033976][ T5154] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 953.042663][ T5154] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 953.058189][ T5154] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 953.066063][ T5154] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 953.152614][T15505] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 953.163520][T15505] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 953.172156][T15505] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 953.183955][T15505] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 953.192896][T15505] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 953.714086][ T5154] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 953.723257][ T5154] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 953.731652][ T5154] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 953.741774][ T5154] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 953.750156][ T5154] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 954.563898][ T5154] Bluetooth: hci1: command tx timeout [ 954.893400][ T5154] Bluetooth: hci4: command tx timeout [ 955.124069][ T5154] Bluetooth: hci3: command tx timeout [ 955.284052][ T5154] Bluetooth: hci6: command tx timeout [ 955.844191][ T5154] Bluetooth: hci7: command tx timeout [ 956.644202][ T5154] Bluetooth: hci1: command tx timeout [ 956.975595][ T5154] Bluetooth: hci4: command tx timeout [ 957.203875][ T5154] Bluetooth: hci3: command tx timeout [ 957.364015][ T5154] Bluetooth: hci6: command tx timeout [ 957.927655][ T5154] Bluetooth: hci7: command tx timeout [ 958.724370][ T5154] Bluetooth: hci1: command tx timeout [ 959.048860][ T5154] Bluetooth: hci4: command tx timeout [ 959.283936][ T5154] Bluetooth: hci3: command tx timeout [ 959.444152][ T5154] Bluetooth: hci6: command tx timeout [ 960.455057][ T5840] Bluetooth: hci7: command tx timeout [ 960.975221][ T5840] Bluetooth: hci1: command tx timeout [ 961.573773][ T5840] Bluetooth: hci4: command tx timeout [ 961.580069][ T5840] Bluetooth: hci3: command tx timeout [ 961.585704][ T5840] Bluetooth: hci6: command tx timeout [ 963.036177][ T5154] Bluetooth: hci7: command tx timeout [ 964.766069][T11883] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 966.820604][T16768] chnl_net:caif_netlink_parms(): no params data found [ 967.647357][T16773] chnl_net:caif_netlink_parms(): no params data found [ 967.803185][T16775] chnl_net:caif_netlink_parms(): no params data found [ 967.866266][T16766] chnl_net:caif_netlink_parms(): no params data found [ 967.889379][T16768] bridge0: port 1(bridge_slave_0) entered blocking state [ 967.907456][T16768] bridge0: port 1(bridge_slave_0) entered disabled state [ 967.921184][T16768] bridge_slave_0: entered allmulticast mode [ 967.942850][T16768] bridge_slave_0: entered promiscuous mode [ 967.996066][T16771] chnl_net:caif_netlink_parms(): no params data found [ 968.030509][T16768] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.051844][T16768] bridge0: port 2(bridge_slave_1) entered disabled state [ 968.061927][T16768] bridge_slave_1: entered allmulticast mode [ 968.075866][T16768] bridge_slave_1: entered promiscuous mode [ 968.662412][T16768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 968.930278][T16768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 969.299600][T16775] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.317634][T16775] bridge0: port 1(bridge_slave_0) entered disabled state [ 969.333978][T16775] bridge_slave_0: entered allmulticast mode [ 969.356333][T16775] bridge_slave_0: entered promiscuous mode [ 969.376552][T16775] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.389757][T16775] bridge0: port 2(bridge_slave_1) entered disabled state [ 969.404406][T16775] bridge_slave_1: entered allmulticast mode [ 969.422410][T16775] bridge_slave_1: entered promiscuous mode [ 969.886495][T16768] team0: Port device team_slave_0 added [ 969.967277][T16773] bridge0: port 1(bridge_slave_0) entered blocking state [ 969.987978][T16773] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.002945][T16773] bridge_slave_0: entered allmulticast mode [ 970.018254][T16773] bridge_slave_0: entered promiscuous mode [ 970.034315][T16771] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.041473][T16771] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.066963][T16771] bridge_slave_0: entered allmulticast mode [ 970.088240][T16771] bridge_slave_0: entered promiscuous mode [ 970.186573][T16766] bridge0: port 1(bridge_slave_0) entered blocking state [ 970.203816][T16766] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.211112][T16766] bridge_slave_0: entered allmulticast mode [ 970.230657][T16766] bridge_slave_0: entered promiscuous mode [ 970.256438][T16768] team0: Port device team_slave_1 added [ 970.343037][T16773] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.364328][T16773] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.371625][T16773] bridge_slave_1: entered allmulticast mode [ 970.400012][T16773] bridge_slave_1: entered promiscuous mode [ 970.420183][T16771] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.439856][T16771] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.453342][T16771] bridge_slave_1: entered allmulticast mode [ 970.475795][T16771] bridge_slave_1: entered promiscuous mode [ 970.576159][T16766] bridge0: port 2(bridge_slave_1) entered blocking state [ 970.583336][T16766] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.607567][T16766] bridge_slave_1: entered allmulticast mode [ 970.625808][T16766] bridge_slave_1: entered promiscuous mode [ 970.726175][T16775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 970.751035][T16775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.045529][T16771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.427406][T16773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.459850][T16773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.485105][T16771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 971.767408][T16766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 971.784625][T16768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 971.791604][T16768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 971.836372][T16768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 971.887722][T16775] team0: Port device team_slave_0 added [ 972.062715][T16766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 972.162776][T16768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 972.183811][T16768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.228176][T16768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 972.272159][T16775] team0: Port device team_slave_1 added [ 972.487814][T16773] team0: Port device team_slave_0 added [ 972.517159][T16771] team0: Port device team_slave_0 added [ 972.846599][T16773] team0: Port device team_slave_1 added [ 972.854985][T16775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 972.861966][T16775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 972.911906][T16775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 972.943169][T16771] team0: Port device team_slave_1 added [ 973.033357][T16766] team0: Port device team_slave_0 added [ 973.118348][T16775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.133985][T16775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.178120][T16775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.390291][T16766] team0: Port device team_slave_1 added [ 973.516681][T16773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.533674][T16773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.581020][T16773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.697142][T16771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 973.715385][T16771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.780325][T16771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 973.805924][T16771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.812984][T16771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 973.843169][T16771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 973.985224][T16773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 973.992218][T16773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.035769][T16773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 974.146201][T16775] hsr_slave_0: entered promiscuous mode [ 974.164693][T16775] hsr_slave_1: entered promiscuous mode [ 974.184951][T16775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 974.192557][T16775] Cannot create hsr debugfs directory [ 974.241839][T16768] hsr_slave_0: entered promiscuous mode [ 974.262520][T16768] hsr_slave_1: entered promiscuous mode [ 974.284890][T16768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 974.292491][T16768] Cannot create hsr debugfs directory [ 974.312299][T16766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 974.335620][T16766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.379673][T16766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 974.584873][T16766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 974.591859][T16766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 974.632557][T16766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 975.014082][T16773] hsr_slave_0: entered promiscuous mode [ 975.020838][T16773] hsr_slave_1: entered promiscuous mode [ 975.041892][T16773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 975.063185][T16773] Cannot create hsr debugfs directory [ 975.241648][T16771] hsr_slave_0: entered promiscuous mode [ 975.261381][T16771] hsr_slave_1: entered promiscuous mode [ 975.275436][T16771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 975.283106][T16771] Cannot create hsr debugfs directory [ 975.881023][T16766] hsr_slave_0: entered promiscuous mode [ 975.894936][T16766] hsr_slave_1: entered promiscuous mode [ 975.913198][T16766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 975.934021][T16766] Cannot create hsr debugfs directory [ 976.944038][T16775] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.838729][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 980.849129][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 980.857962][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 980.876408][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 980.887224][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 981.447573][T16812] chnl_net:caif_netlink_parms(): no params data found [ 981.772239][T16812] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.792269][T16812] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.804296][T16812] bridge_slave_0: entered allmulticast mode [ 981.827963][T16812] bridge_slave_0: entered promiscuous mode [ 981.850497][T16812] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.872171][T16812] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.884542][T16812] bridge_slave_1: entered allmulticast mode [ 981.892454][T16812] bridge_slave_1: entered promiscuous mode [ 982.111051][T16812] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.139367][T16812] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 982.345999][T16812] team0: Port device team_slave_0 added [ 982.457098][T16812] team0: Port device team_slave_1 added [ 982.644448][T16812] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.651431][T16812] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.692155][T16812] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 982.722297][T16812] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 982.742786][T16812] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 982.784012][T16812] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 982.964845][ T5840] Bluetooth: hci0: command tx timeout [ 982.996486][T16812] hsr_slave_0: entered promiscuous mode [ 983.003297][T16812] hsr_slave_1: entered promiscuous mode [ 983.024312][T16812] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 983.031913][T16812] Cannot create hsr debugfs directory [ 985.044464][ T5840] Bluetooth: hci0: command tx timeout [ 987.124446][ T5840] Bluetooth: hci0: command tx timeout [ 989.204464][ T5840] Bluetooth: hci0: command tx timeout [ 990.077046][ T5154] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 990.087082][ T5154] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 990.095758][ T5154] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 990.104545][ T5154] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 990.116095][ T5154] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 990.290546][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 990.300112][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 990.312595][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 990.325106][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 990.333004][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 991.096963][T16824] chnl_net:caif_netlink_parms(): no params data found [ 991.343326][T16826] chnl_net:caif_netlink_parms(): no params data found [ 991.585960][T16824] bridge0: port 1(bridge_slave_0) entered blocking state [ 991.593203][T16824] bridge0: port 1(bridge_slave_0) entered disabled state [ 991.614345][T16824] bridge_slave_0: entered allmulticast mode [ 991.630461][T16824] bridge_slave_0: entered promiscuous mode [ 991.655827][T16824] bridge0: port 2(bridge_slave_1) entered blocking state [ 991.662992][T16824] bridge0: port 2(bridge_slave_1) entered disabled state [ 991.694483][T16824] bridge_slave_1: entered allmulticast mode [ 991.702473][T16824] bridge_slave_1: entered promiscuous mode [ 992.009589][T16824] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.078259][T16824] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.164713][ T5154] Bluetooth: hci2: command tx timeout [ 992.404386][ T5154] Bluetooth: hci5: command tx timeout [ 992.442543][T16824] team0: Port device team_slave_0 added [ 992.465215][T16826] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.472386][T16826] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.494353][T16826] bridge_slave_0: entered allmulticast mode [ 992.519413][T16826] bridge_slave_0: entered promiscuous mode [ 992.539664][T16824] team0: Port device team_slave_1 added [ 992.652924][T16826] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.660882][T16826] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.682454][T16826] bridge_slave_1: entered allmulticast mode [ 992.704177][T16826] bridge_slave_1: entered promiscuous mode [ 992.971860][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.983407][T16824] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.991006][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.022344][T16824] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.064443][T16824] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 993.093941][T16824] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 993.100927][T16824] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 993.150817][T16824] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 993.181344][T16826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 993.347348][T16826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 993.658157][T16826] team0: Port device team_slave_0 added [ 993.766697][T16824] hsr_slave_0: entered promiscuous mode [ 993.773528][T16824] hsr_slave_1: entered promiscuous mode [ 993.793929][T16824] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 993.801551][T16824] Cannot create hsr debugfs directory [ 993.827272][T16826] team0: Port device team_slave_1 added [ 994.210483][T16826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 994.233984][T16826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 994.266803][ T5154] Bluetooth: hci2: command tx timeout [ 994.289434][T16826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 994.317100][T16826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 994.336280][T16826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 994.378331][T16826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 994.484521][ T5154] Bluetooth: hci5: command tx timeout [ 994.798489][T16826] hsr_slave_0: entered promiscuous mode [ 994.815372][T16826] hsr_slave_1: entered promiscuous mode [ 994.821806][T16826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 994.843940][T16826] Cannot create hsr debugfs directory [ 996.324040][ T5154] Bluetooth: hci2: command tx timeout [ 996.565025][ T5154] Bluetooth: hci5: command tx timeout [ 998.404265][ T5154] Bluetooth: hci2: command tx timeout [ 998.644154][ T5154] Bluetooth: hci5: command tx timeout [ 1011.749833][ T5840] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1011.761188][ T5840] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1011.770062][ T5840] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1011.788063][ T5840] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1011.803893][ T5840] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1012.400885][T16843] chnl_net:caif_netlink_parms(): no params data found [ 1012.797586][T16843] bridge0: port 1(bridge_slave_0) entered blocking state [ 1012.815827][T16843] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.823209][T16843] bridge_slave_0: entered allmulticast mode [ 1012.845999][T16843] bridge_slave_0: entered promiscuous mode [ 1012.865963][T16843] bridge0: port 2(bridge_slave_1) entered blocking state [ 1012.873216][T16843] bridge0: port 2(bridge_slave_1) entered disabled state [ 1012.894646][T16843] bridge_slave_1: entered allmulticast mode [ 1012.914016][T16843] bridge_slave_1: entered promiscuous mode [ 1013.137301][T16843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1013.177013][T16843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1013.456336][T16843] team0: Port device team_slave_0 added [ 1013.563251][T16843] team0: Port device team_slave_1 added [ 1013.787767][T16843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1013.814274][T16843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1013.898751][ T5840] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1013.914685][ T5840] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1013.925674][T15505] Bluetooth: hci8: command tx timeout [ 1013.932095][ T5840] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1013.940579][ T5840] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1013.949654][ T5840] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1013.986495][T16843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1014.043983][T16843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1014.050971][T16843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1014.133970][T16843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1014.411615][T16843] hsr_slave_0: entered promiscuous mode [ 1014.435485][T16843] hsr_slave_1: entered promiscuous mode [ 1014.454034][T16843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1014.461632][T16843] Cannot create hsr debugfs directory [ 1015.316004][T16852] chnl_net:caif_netlink_parms(): no params data found [ 1015.747339][T16852] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.763989][T16852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.775134][T16852] bridge_slave_0: entered allmulticast mode [ 1015.794504][T16852] bridge_slave_0: entered promiscuous mode [ 1015.815475][T16852] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.822724][T16852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1015.846632][T16852] bridge_slave_1: entered allmulticast mode [ 1015.858972][T16852] bridge_slave_1: entered promiscuous mode [ 1016.004497][ T5840] Bluetooth: hci9: command tx timeout [ 1016.011002][ T5840] Bluetooth: hci8: command tx timeout [ 1016.043257][T16852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1016.075680][T16852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1016.279070][T16852] team0: Port device team_slave_0 added [ 1016.305962][T16852] team0: Port device team_slave_1 added [ 1016.519388][T16852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1016.534971][T16852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.594159][T16852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.635802][T16852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.642781][T16852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1016.691037][T16852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1017.089285][T16852] hsr_slave_0: entered promiscuous mode [ 1017.111892][T16852] hsr_slave_1: entered promiscuous mode [ 1017.134920][T16852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1017.142519][T16852] Cannot create hsr debugfs directory [ 1018.084084][ T5154] Bluetooth: hci9: command tx timeout [ 1018.095597][ T5840] Bluetooth: hci8: command tx timeout [ 1020.164139][ T5154] Bluetooth: hci9: command tx timeout [ 1020.172857][ T5840] Bluetooth: hci8: command tx timeout [ 1022.244206][ T5840] Bluetooth: hci9: command tx timeout [ 1042.335703][ T5154] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1042.352308][ T5154] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1042.363089][ T5154] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1042.373137][ T5154] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1042.386392][ T5154] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1043.016994][T16868] chnl_net:caif_netlink_parms(): no params data found [ 1043.416523][T16868] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.433804][T16868] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.441171][T16868] bridge_slave_0: entered allmulticast mode [ 1043.474117][T16868] bridge_slave_0: entered promiscuous mode [ 1043.483431][T16868] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.504445][T16868] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.511863][T16868] bridge_slave_1: entered allmulticast mode [ 1043.534214][T16868] bridge_slave_1: entered promiscuous mode [ 1043.735096][T16868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1043.765923][T16868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1044.021360][T16868] team0: Port device team_slave_0 added [ 1044.051036][T16868] team0: Port device team_slave_1 added [ 1044.198466][T16868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1044.214039][T16868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.274408][T16868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1044.304162][T16868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1044.311143][T16868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1044.363094][T16868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1044.484375][ T5840] Bluetooth: hci10: command tx timeout [ 1044.606187][T16868] hsr_slave_0: entered promiscuous mode [ 1044.624576][T16868] hsr_slave_1: entered promiscuous mode [ 1044.636001][T16868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1044.654083][T16868] Cannot create hsr debugfs directory [ 1046.563973][ T5840] Bluetooth: hci10: command tx timeout [ 1048.653404][ T5840] Bluetooth: hci10: command tx timeout [ 1050.724716][ T5840] Bluetooth: hci10: command tx timeout [ 1050.801876][ T5154] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1050.813296][ T5154] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1050.825298][ T5154] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1050.834292][ T5154] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1050.844159][ T5154] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1050.936312][ T5840] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1050.952439][ T5840] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1050.961933][ T5840] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1050.972877][ T5840] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1050.993893][ T5840] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1051.894873][T16881] chnl_net:caif_netlink_parms(): no params data found [ 1052.004544][T16884] chnl_net:caif_netlink_parms(): no params data found [ 1052.473258][T16881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.485825][T16881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.493188][T16881] bridge_slave_0: entered allmulticast mode [ 1052.526398][T16881] bridge_slave_0: entered promiscuous mode [ 1052.565114][T16881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.572293][T16881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.594666][T16881] bridge_slave_1: entered allmulticast mode [ 1052.608298][T16881] bridge_slave_1: entered promiscuous mode [ 1052.947681][T16881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.964003][ T5840] Bluetooth: hci11: command tx timeout [ 1052.988491][T16881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.014216][T16884] bridge0: port 1(bridge_slave_0) entered blocking state [ 1053.033882][T16884] bridge0: port 1(bridge_slave_0) entered disabled state [ 1053.041323][T16884] bridge_slave_0: entered allmulticast mode [ 1053.049095][ T5840] Bluetooth: hci12: command tx timeout [ 1053.074132][T16884] bridge_slave_0: entered promiscuous mode [ 1053.095988][T16884] bridge0: port 2(bridge_slave_1) entered blocking state [ 1053.103159][T16884] bridge0: port 2(bridge_slave_1) entered disabled state [ 1053.134150][T16884] bridge_slave_1: entered allmulticast mode [ 1053.144469][T16884] bridge_slave_1: entered promiscuous mode [ 1053.475880][T16881] team0: Port device team_slave_0 added [ 1053.488291][T16884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1053.518644][T16884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1053.546453][T16881] team0: Port device team_slave_1 added [ 1053.787930][T16881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.803645][T16881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.873996][T16881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.986196][T16884] team0: Port device team_slave_0 added [ 1054.202030][T16881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1054.226396][T16881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.285023][T16881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1054.332049][T16884] team0: Port device team_slave_1 added [ 1054.412845][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.419523][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.761240][T16881] hsr_slave_0: entered promiscuous mode [ 1054.775831][T16881] hsr_slave_1: entered promiscuous mode [ 1054.782343][T16881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1054.803944][T16881] Cannot create hsr debugfs directory [ 1054.825428][T16884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1054.832409][T16884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1054.881776][T16884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1055.045677][ T5840] Bluetooth: hci11: command tx timeout [ 1055.053003][T16884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1055.063774][T16884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1055.120613][T16884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1055.132439][ T5840] Bluetooth: hci12: command tx timeout [ 1055.555792][T16884] hsr_slave_0: entered promiscuous mode [ 1055.574420][T16884] hsr_slave_1: entered promiscuous mode [ 1055.595601][T16884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1055.603200][T16884] Cannot create hsr debugfs directory [ 1057.124112][ T5840] Bluetooth: hci11: command tx timeout [ 1057.204629][ T5840] Bluetooth: hci12: command tx timeout [ 1059.204178][ T5840] Bluetooth: hci11: command tx timeout [ 1059.284415][ T5840] Bluetooth: hci12: command tx timeout [ 1072.292879][ T5154] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1072.302213][ T5154] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1072.311039][ T5154] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1072.325611][ T5154] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1072.333477][ T5154] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1072.929052][T16901] chnl_net:caif_netlink_parms(): no params data found [ 1073.326246][T16901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.346454][T16901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.354934][T16901] bridge_slave_0: entered allmulticast mode [ 1073.374284][T16901] bridge_slave_0: entered promiscuous mode [ 1073.395421][T16901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.413866][T16901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.421240][T16901] bridge_slave_1: entered allmulticast mode [ 1073.446841][T16901] bridge_slave_1: entered promiscuous mode [ 1073.661901][T16901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.700000][T16901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.978134][T16901] team0: Port device team_slave_0 added [ 1074.008742][T16901] team0: Port device team_slave_1 added [ 1074.192550][T16901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1074.216683][T16901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1074.304253][T16901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1074.356410][T16901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1074.363394][T16901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1074.412423][ T5154] Bluetooth: hci13: command tx timeout [ 1074.466250][T16901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1074.767431][T16901] hsr_slave_0: entered promiscuous mode [ 1074.797588][T16901] hsr_slave_1: entered promiscuous mode [ 1074.805313][T16901] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1074.812897][T16901] Cannot create hsr debugfs directory [ 1075.009868][T16911] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1075.026969][T16911] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1075.044387][T16911] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1075.056454][T16911] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1075.070995][T16911] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1075.888166][T16913] chnl_net:caif_netlink_parms(): no params data found [ 1076.296541][T16913] bridge0: port 1(bridge_slave_0) entered blocking state [ 1076.313809][T16913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1076.321302][T16913] bridge_slave_0: entered allmulticast mode [ 1076.356123][T16913] bridge_slave_0: entered promiscuous mode [ 1076.375864][T16913] bridge0: port 2(bridge_slave_1) entered blocking state [ 1076.383084][T16913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1076.405056][T16913] bridge_slave_1: entered allmulticast mode [ 1076.413142][T16913] bridge_slave_1: entered promiscuous mode [ 1076.484342][T16911] Bluetooth: hci13: command tx timeout [ 1076.596556][T16913] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1076.635916][T16913] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1076.852718][T16913] team0: Port device team_slave_0 added [ 1076.875335][T16913] team0: Port device team_slave_1 added [ 1076.970061][T16911] Bluetooth: hci1: command 0x0406 tx timeout [ 1076.986038][T16911] Bluetooth: hci4: command 0x0406 tx timeout [ 1076.992094][T16911] Bluetooth: hci3: command 0x0406 tx timeout [ 1076.998492][T16910] Bluetooth: hci6: command 0x0406 tx timeout [ 1077.004765][T16910] Bluetooth: hci7: command 0x0406 tx timeout [ 1077.124284][T15505] Bluetooth: hci14: command tx timeout [ 1077.301688][T16913] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1077.323958][T16913] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1077.384588][T16913] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1077.406403][T16913] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1077.413378][T16913] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1077.483855][T16913] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1077.736069][T16913] hsr_slave_0: entered promiscuous mode [ 1077.754716][T16913] hsr_slave_1: entered promiscuous mode [ 1077.773998][T16913] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1077.781598][T16913] Cannot create hsr debugfs directory [ 1078.564525][T16765] Bluetooth: hci13: command tx timeout [ 1079.204208][T16765] Bluetooth: hci14: command tx timeout [ 1080.644591][T16765] Bluetooth: hci13: command tx timeout [ 1081.284092][T16765] Bluetooth: hci14: command tx timeout [ 1083.363996][T16760] Bluetooth: hci14: command tx timeout [ 1102.996462][T16765] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1103.007502][T16765] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 1103.016517][T16765] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 1103.024976][T16765] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 1103.041350][T16765] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 1103.630468][T16928] chnl_net:caif_netlink_parms(): no params data found [ 1104.050811][T16928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1104.074335][T16928] bridge0: port 1(bridge_slave_0) entered disabled state [ 1104.085650][T16928] bridge_slave_0: entered allmulticast mode [ 1104.105061][T16928] bridge_slave_0: entered promiscuous mode [ 1104.126069][T16928] bridge0: port 2(bridge_slave_1) entered blocking state [ 1104.144096][T16928] bridge0: port 2(bridge_slave_1) entered disabled state [ 1104.152805][T16928] bridge_slave_1: entered allmulticast mode [ 1104.175877][T16928] bridge_slave_1: entered promiscuous mode [ 1104.428911][T16928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1104.458189][T16928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1104.758202][T16928] team0: Port device team_slave_0 added [ 1104.791073][T16928] team0: Port device team_slave_1 added [ 1105.024761][T16928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.031759][T16928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.104287][T16928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.124225][T16765] Bluetooth: hci15: command tx timeout [ 1105.142014][T16928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1105.154668][T16928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1105.208349][T16928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1105.465853][T16928] hsr_slave_0: entered promiscuous mode [ 1105.482369][T16928] hsr_slave_1: entered promiscuous mode [ 1105.504091][T16928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1105.512463][T16928] Cannot create hsr debugfs directory [ 1107.204343][T16760] Bluetooth: hci15: command tx timeout [ 1107.684177][T16760] Bluetooth: hci0: command 0x0406 tx timeout [ 1109.284230][T16765] Bluetooth: hci15: command tx timeout [ 1111.366164][T15505] Bluetooth: hci15: command tx timeout [ 1111.380943][T15505] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1111.391623][T15505] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1111.400238][T15505] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1111.415200][T15505] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1111.425937][T15505] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1111.570723][ T5840] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 1111.594371][ T5840] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 1111.602664][ T5840] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 1111.614522][ T5840] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 1111.622460][ T5840] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 1112.614048][T16940] chnl_net:caif_netlink_parms(): no params data found [ 1112.806969][ T5840] Bluetooth: hci2: command 0x0406 tx timeout [ 1112.813043][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 1112.858664][T16945] chnl_net:caif_netlink_parms(): no params data found [ 1113.232041][T16940] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.254161][T16940] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.261650][T16940] bridge_slave_0: entered allmulticast mode [ 1113.286577][T16940] bridge_slave_0: entered promiscuous mode [ 1113.305817][T16940] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.320999][T16940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.345236][T16940] bridge_slave_1: entered allmulticast mode [ 1113.365471][T16940] bridge_slave_1: entered promiscuous mode [ 1113.445496][T16760] Bluetooth: hci16: command tx timeout [ 1113.599299][T16940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1113.684128][T16760] Bluetooth: hci17: command tx timeout [ 1113.735451][T16940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1113.849156][T16945] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.864120][T16945] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.871523][T16945] bridge_slave_0: entered allmulticast mode [ 1113.897259][T16945] bridge_slave_0: entered promiscuous mode [ 1114.059716][T16945] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.084547][T16945] bridge0: port 2(bridge_slave_1) entered disabled state [ 1114.091956][T16945] bridge_slave_1: entered allmulticast mode [ 1114.115328][T16945] bridge_slave_1: entered promiscuous mode [ 1114.133484][T16940] team0: Port device team_slave_0 added [ 1114.257768][T16940] team0: Port device team_slave_1 added [ 1114.468287][T16945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1114.739305][T16945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1114.870462][T16940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1114.893967][T16940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1114.954214][T16940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.076952][T16940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.095756][T16940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1115.154176][T16940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1115.183219][T16945] team0: Port device team_slave_0 added [ 1115.213094][T16945] team0: Port device team_slave_1 added [ 1115.524704][T16760] Bluetooth: hci16: command tx timeout [ 1115.587862][T16940] hsr_slave_0: entered promiscuous mode [ 1115.606110][T16940] hsr_slave_1: entered promiscuous mode [ 1115.619734][T16940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1115.633847][T16940] Cannot create hsr debugfs directory [ 1115.640544][T16945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1115.662764][T16945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1115.724025][T16945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1115.764349][T16760] Bluetooth: hci17: command tx timeout [ 1115.851645][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.858614][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.886432][T16945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1115.905392][T16945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1116.015086][T16945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1116.484165][ T31] INFO: task syz-executor:5842 blocked for more than 143 seconds. [ 1116.492023][ T31] Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 [ 1116.522640][ T31] Blocked by coredump. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1116.544348][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1116.553068][ T31] task:syz-executor state:D stack:21288 pid:5842 tgid:5842 ppid:1 task_flags:0x40054c flags:0x00004006 [ 1116.585594][T16945] hsr_slave_0: entered promiscuous mode [ 1116.611315][T16945] hsr_slave_1: entered promiscuous mode [ 1116.636438][T16945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1116.648050][ T31] Call Trace: [ 1116.651366][ T31] [ 1116.712746][ T31] __schedule+0x16f5/0x4d00 [ 1116.717447][T16945] Cannot create hsr debugfs directory [ 1116.745760][ T31] ? __lock_acquire+0xa91/0xd20 [ 1116.750689][ T31] ? schedule+0x165/0x360 [ 1116.791640][ T31] ? __pfx___schedule+0x10/0x10 [ 1116.804000][ T31] ? schedule+0x91/0x360 [ 1116.808310][ T31] schedule+0x165/0x360 [ 1116.812506][ T31] schedule_preempt_disabled+0x13/0x30 [ 1116.869597][ T31] __mutex_lock+0x724/0xe80 [ 1116.903884][ T31] ? __mutex_lock+0x51b/0xe80 [ 1116.908628][ T31] ? rcu_barrier+0x4c/0x570 [ 1116.913153][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1116.973974][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 1116.979673][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1117.005485][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1117.010664][ T31] rcu_barrier+0x4c/0x570 [ 1117.033749][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1117.038941][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1117.053610][ T31] netdev_run_todo+0x327/0xea0 [ 1117.058441][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 1117.075400][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 1117.080741][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 1117.115185][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1117.120456][ T31] ? netdev_state_change+0x1ca/0x220 [ 1117.153784][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1117.158966][ T31] tun_chr_close+0x13c/0x1c0 [ 1117.173719][ T31] __fput+0x44c/0xa70 [ 1117.177775][ T31] task_work_run+0x1d1/0x260 [ 1117.182392][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1117.204565][ T31] ? kmem_cache_free+0x18f/0x400 [ 1117.209570][ T31] do_exit+0x6ad/0x22e0 [ 1117.226341][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1117.231509][ T31] ? __pfx_do_exit+0x10/0x10 [ 1117.243774][ T31] do_group_exit+0x21c/0x2d0 [ 1117.248419][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1117.263704][ T31] get_signal+0x1286/0x1340 [ 1117.268296][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 1117.284374][ T31] ? do_unlinkat+0x509/0x560 [ 1117.289016][ T31] ? kmem_cache_free+0x18f/0x400 [ 1117.303773][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1117.309984][ T31] ? do_unlinkat+0x509/0x560 [ 1117.327037][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1117.332562][ T31] exit_to_user_mode_loop+0x75/0x110 [ 1117.364337][ T31] do_syscall_64+0x2bd/0x3b0 [ 1117.368987][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1117.383679][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.390021][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1117.395567][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.401490][ T31] RIP: 0033:0x7f6ef6f8ded7 [ 1117.423790][ T31] RSP: 002b:00007f6ef72decb8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 1117.445004][ T31] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007f6ef6f8ded7 [ 1117.453029][ T31] RDX: 00007f6ef72dece0 RSI: 00007f6ef72ded70 RDI: 00007f6ef72ded70 [ 1117.483934][ T31] RBP: 00007f6ef72ded70 R08: 0000000000000000 R09: 0000000000000000 [ 1117.493051][ T31] R10: 0000000000000100 R11: 0000000000000206 R12: 00007f6ef72dfe00 [ 1117.515730][ T31] R13: 00007f6ef7010925 R14: 00000000000d7f64 R15: 00007f6ef72dfe40 [ 1117.531853][ T31] [ 1117.536830][ T31] INFO: task syz-executor:15784 blocked for more than 144 seconds. [ 1117.578421][ T31] Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 [ 1117.616804][T16760] Bluetooth: hci16: command tx timeout [ 1117.654053][ T31] Blocked by coredump. [ 1117.658707][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1117.701666][ T31] task:syz-executor state:D stack:21928 pid:15784 tgid:15784 ppid:1 task_flags:0x40054c flags:0x00004006 [ 1117.765391][ T31] Call Trace: [ 1117.778093][ T31] [ 1117.781078][ T31] __schedule+0x16f5/0x4d00 [ 1117.803668][ T31] ? __lock_acquire+0xa91/0xd20 [ 1117.808581][ T31] ? schedule+0x165/0x360 [ 1117.812941][ T31] ? __pfx___schedule+0x10/0x10 [ 1117.846414][T16760] Bluetooth: hci17: command tx timeout [ 1117.884827][ T31] ? schedule+0x91/0x360 [ 1117.889144][ T31] schedule+0x165/0x360 [ 1117.893328][ T31] schedule_preempt_disabled+0x13/0x30 [ 1117.941678][ T31] __mutex_lock+0x724/0xe80 [ 1117.963687][ T31] ? __mutex_lock+0x51b/0xe80 [ 1117.968424][ T31] ? rcu_barrier+0x4c/0x570 [ 1117.972949][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1118.038331][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 1118.073619][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1118.079665][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1118.133660][ T31] rcu_barrier+0x4c/0x570 [ 1118.138062][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1118.143197][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1118.224137][ T31] netdev_run_todo+0x327/0xea0 [ 1118.228972][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 1118.263724][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 1118.269069][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 1118.314610][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1118.319883][ T31] ? netdev_state_change+0x1ca/0x220 [ 1118.353994][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1118.359196][ T31] tun_chr_close+0x13c/0x1c0 [ 1118.406248][ T31] __fput+0x44c/0xa70 [ 1118.410314][ T31] task_work_run+0x1d1/0x260 [ 1118.453791][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1118.458974][ T31] ? kmem_cache_free+0x18f/0x400 [ 1118.494030][ T31] do_exit+0x6ad/0x22e0 [ 1118.498253][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1118.503301][ T31] ? __pfx_do_exit+0x10/0x10 [ 1118.553740][ T31] do_group_exit+0x21c/0x2d0 [ 1118.583871][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1118.589151][ T31] get_signal+0x1286/0x1340 [ 1118.613880][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 1118.654150][ T31] ? fput_close_sync+0x119/0x200 [ 1118.660062][ T31] ? kmem_cache_free+0x309/0x400 [ 1118.686504][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1118.692749][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1118.713730][ T31] exit_to_user_mode_loop+0x75/0x110 [ 1118.719086][ T31] do_syscall_64+0x2bd/0x3b0 [ 1118.735126][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1118.740391][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.760835][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1118.775356][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1118.781343][ T31] RIP: 0033:0x7f91e6d8d33c [ 1118.804185][ T31] RSP: 002b:00007f91e70dfd80 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1118.812655][ T31] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f91e6d8d33c [ 1118.833411][ T31] RDX: 0000000000000030 RSI: 00007f91e70dfe40 RDI: 00000000000000f9 [ 1118.853733][ T31] RBP: 00007f91e70dfdec R08: 0000000000000000 R09: 0079746972756365 [ 1118.873723][ T31] R10: 00007f91e6f817e0 R11: 0000000000000246 R12: 000000000000002e [ 1118.881883][ T31] R13: 000000000000001e R14: 00000000000d8aaa R15: 00007f91e70dfe40 [ 1118.914122][ T31] [ 1118.917271][ T31] INFO: task syz-executor:16470 blocked for more than 145 seconds. [ 1118.933693][ T31] Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 [ 1118.941363][ T31] Blocked by coredump. [ 1118.964035][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1118.980393][ T31] task:syz-executor state:D stack:21768 pid:16470 tgid:16470 ppid:1 task_flags:0x40054c flags:0x00004006 [ 1119.013809][ T31] Call Trace: [ 1119.017140][ T31] [ 1119.020087][ T31] __schedule+0x16f5/0x4d00 [ 1119.033792][ T31] ? __lock_acquire+0xa91/0xd20 [ 1119.038702][ T31] ? schedule+0x165/0x360 [ 1119.043064][ T31] ? __pfx___schedule+0x10/0x10 [ 1119.065325][ T31] ? schedule+0x91/0x360 [ 1119.083792][ T31] schedule+0x165/0x360 [ 1119.088020][ T31] schedule_preempt_disabled+0x13/0x30 [ 1119.105270][ T31] __mutex_lock+0x724/0xe80 [ 1119.109823][ T31] ? __mutex_lock+0x51b/0xe80 [ 1119.127689][ T31] ? rcu_barrier+0x4c/0x570 [ 1119.132244][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 1119.154236][ T31] ? __mutex_unlock_slowpath+0x68a/0x700 [ 1119.159930][ T31] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1119.175125][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1119.180306][ T31] rcu_barrier+0x4c/0x570 [ 1119.204300][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1119.209479][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1119.223702][ T31] netdev_run_todo+0x327/0xea0 [ 1119.228532][ T31] ? __pfx_netif_state_change+0x10/0x10 [ 1119.243747][ T31] ? __pfx_netdev_run_todo+0x10/0x10 [ 1119.249090][ T31] ? kasan_quarantine_put+0xdd/0x220 [ 1119.264100][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1119.269365][ T31] ? netdev_state_change+0x1ca/0x220 [ 1119.294262][ T31] ? __pfx_tun_chr_close+0x10/0x10 [ 1119.299443][ T31] tun_chr_close+0x13c/0x1c0 [ 1119.314120][ T31] __fput+0x44c/0xa70 [ 1119.318170][ T31] task_work_run+0x1d1/0x260 [ 1119.322787][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1119.344196][ T31] ? kmem_cache_free+0x18f/0x400 [ 1119.349430][ T31] do_exit+0x6ad/0x22e0 [ 1119.364526][ T31] ? do_raw_spin_lock+0x121/0x290 [ 1119.369613][ T31] ? __pfx_do_exit+0x10/0x10 [ 1119.383685][ T31] do_group_exit+0x21c/0x2d0 [ 1119.388334][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1119.408932][ T31] get_signal+0x1286/0x1340 [ 1119.423928][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 1119.429531][ T31] ? fput_close_sync+0x119/0x200 [ 1119.444852][ T31] ? kmem_cache_free+0x309/0x400 [ 1119.449908][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1119.473992][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 1119.480964][ T31] exit_to_user_mode_loop+0x75/0x110 [ 1119.494132][ T31] do_syscall_64+0x2bd/0x3b0 [ 1119.498769][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1119.523911][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.530050][ T31] ? clear_bhb_loop+0x60/0xb0 [ 1119.545187][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1119.551133][ T31] RIP: 0033:0x7f90d958d33c [ 1119.563437][ T31] RSP: 002b:00007f90d98dfd80 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1119.579874][ T31] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f90d958d33c [ 1119.604448][ T31] RDX: 0000000000000030 RSI: 00007f90d98dfe40 RDI: 00000000000000f9 [ 1119.612475][ T31] RBP: 00007f90d98dfdec R08: 0000000000000000 R09: 0079746972756365 [ 1119.634439][ T31] R10: 00007f90d97817e0 R11: 0000000000000246 R12: 0000000000000003 [ 1119.642462][ T31] R13: 000000000000004f R14: 00000000000d8ee6 R15: 00007f90d98dfe40 [ 1119.674047][ T31] [ 1119.685091][T16760] Bluetooth: hci16: command tx timeout [ 1119.691265][ T31] [ 1119.691265][ T31] Showing all locks held in the system: [ 1119.714355][ T31] 3 locks held by kworker/u8:0/12: [ 1119.719524][ T31] 1 lock held by khungtaskd/31: [ 1119.743627][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1119.767663][ T31] 2 locks held by getty/5598: [ 1119.772387][ T31] #0: ffff8880357520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1119.803917][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 1119.823678][ T31] 1 lock held by syz-executor/5842: [ 1119.828924][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1119.853887][ T31] 6 locks held by kworker/1:11/10389: [ 1119.859308][ T31] 6 locks held by kworker/u8:8/11883: [ 1119.883960][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1119.913935][ T31] #1: ffffc9001b13fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1119.925364][T16765] Bluetooth: hci17: command tx timeout [ 1119.945094][ T31] #2: ffffffff8f5036d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 1119.963894][ T31] #3: ffff88807aae60e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 1119.985213][ T31] #4: ffff88807aae7250 (&devlink->lock_key#3){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 1120.014021][ T31] #5: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1120.034041][ T31] 1 lock held by syz-executor/15784: [ 1120.039368][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1120.063807][ T31] 1 lock held by syz-executor/16470: [ 1120.069138][ T31] #0: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1120.103871][ T31] 2 locks held by kworker/1:1/16752: [ 1120.109210][ T31] 4 locks held by syz-executor/16766: [ 1120.124097][ T31] #0: ffff888035716428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 1120.133067][ T31] #1: ffff88805a103088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1120.166047][ T31] #2: ffff8880274d8c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 1120.195677][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1120.223844][ T31] 4 locks held by syz-executor/16768: [ 1120.229266][ T31] #0: ffff888035716428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 1120.253769][ T31] #1: ffff8880357d4088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1120.275248][ T31] #2: ffff8880274d8c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 1120.296685][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1120.324280][ T31] 4 locks held by syz-executor/16771: [ 1120.329706][ T31] #0: ffff888035716428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 1120.349755][ T31] #1: ffff888029aa3888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1120.374075][ T31] #2: ffff8880274d8c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 1120.399221][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1120.425268][ T31] 4 locks held by syz-executor/16773: [ 1120.430681][ T31] #0: ffff888035716428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 1120.454175][ T31] #1: ffff8880551ca088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1120.474117][ T31] #2: ffff8880274d8c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 1120.501516][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1120.523738][ T31] 7 locks held by syz-executor/16775: [ 1120.529151][ T31] #0: ffff888035716428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 1120.564264][ T31] #1: ffff88805a2ac488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1120.583762][ T31] #2: ffff8880274d8c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 1120.605556][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1120.633808][ T31] #4: ffff88807e2d10e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 1120.654126][ T31] #5: ffff88807e2d2250 (&devlink->lock_key#5){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 1120.673832][ T31] #6: ffffffff8e144780 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1120.694204][ T31] 4 locks held by syz-executor/16812: [ 1120.699615][ T31] #0: ffff888035716428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 1120.734122][ T31] #1: ffff888032fb4488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1120.754990][ T31] #2: ffff8880274d8c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 1120.773656][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1120.792583][ T31] 4 locks held by syz-executor/16824: [ 1120.804325][ T31] #0: ffff888035716428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 1120.825693][ T31] #1: ffff888039bd7488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1120.853717][ T31] #2: ffff8880274d8c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 1120.885986][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1120.903765][ T31] 4 locks held by syz-executor/16826: [ 1120.909186][ T31] #0: ffff888035716428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 1120.935144][ T31] #1: ffff8880826ddc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1120.971739][ T31] #2: ffff8880274d8c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 1120.984640][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1121.003812][ T31] 4 locks held by syz-executor/16843: [ 1121.009223][ T31] #0: ffff888035716428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 1121.033763][ T31] #1: ffff88808cc85488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1121.055297][ T31] #2: ffff8880274d8c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 1121.084090][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1121.103960][ T31] 4 locks held by syz-executor/16852: [ 1121.109379][ T31] #0: ffff888035716428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 1121.134151][ T31] #1: ffff888087fcb888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1121.158592][ T31] #2: ffff8880274d8c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 1121.184051][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1121.205674][ T31] 4 locks held by syz-executor/16868: [ 1121.211090][ T31] #0: ffff888035716428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 1121.244079][ T31] #1: ffff88809642e088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1121.265239][ T31] #2: ffff8880274d8c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 1121.285339][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1121.315527][ T31] 4 locks held by syz-executor/16881: [ 1121.322376][ T31] #0: ffff888035716428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 1121.343832][ T31] #1: ffff88808eb53088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1121.364228][ T31] #2: ffff8880274d8c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 1121.383777][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1121.409261][ T31] 4 locks held by syz-executor/16884: [ 1121.423057][ T31] #0: ffff888035716428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 1121.444600][ T31] #1: ffff888099e4ac88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1121.463727][ T31] #2: ffff8880274d8c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 1121.493902][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1121.513744][ T31] 4 locks held by syz-executor/16901: [ 1121.519154][ T31] #0: ffff888035716428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 1121.553998][ T31] #1: ffff8880a0bf9088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1121.573650][ T31] #2: ffff8880274d8c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 1121.595175][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1121.613925][ T31] 4 locks held by syz-executor/16913: [ 1121.627977][ T31] #0: ffff888035716428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 1121.645825][ T31] #1: ffff888098e25488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1121.674534][ T31] #2: ffff8880274d8c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 1121.693673][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1121.715431][ T31] 4 locks held by syz-executor/16928: [ 1121.720840][ T31] #0: ffff888035716428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 1121.753965][ T31] #1: ffff8880aae74488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 1121.773819][ T31] #2: ffff8880274d8c38 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 1121.804010][ T31] #3: ffffffff8edaaf68 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 1121.823746][ T31] 3 locks held by syz-executor/16940: [ 1121.829155][ T31] #0: ffff88809957cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 1121.854236][ T31] #1: ffff88809957c078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1121.884068][ T31] #2: ffffffff8f678328 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1121.902955][ T31] 5 locks held by syz-executor/16945: [ 1121.913952][ T31] #0: ffff88809a520d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 1121.938900][ T31] #1: ffff88809a520078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 1121.964027][ T31] #2: ffffffff8f678328 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 1121.985453][ T31] #3: ffff88805f1d3338 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 1122.003991][ T31] #4: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 1122.035647][ T31] [ 1122.039406][ T31] ============================================= [ 1122.039406][ T31] [ 1122.063789][ T31] NMI backtrace for cpu 0 [ 1122.063808][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 1122.063831][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1122.063844][ T31] Call Trace: [ 1122.063852][ T31] [ 1122.063860][ T31] dump_stack_lvl+0x189/0x250 [ 1122.063892][ T31] ? __wake_up_klogd+0xd9/0x110 [ 1122.063918][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1122.063946][ T31] ? __pfx__printk+0x10/0x10 [ 1122.063980][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 1122.064008][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1122.064029][ T31] ? _printk+0xcf/0x120 [ 1122.064054][ T31] ? __pfx__printk+0x10/0x10 [ 1122.064077][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1122.064105][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1122.064133][ T31] watchdog+0xfee/0x1030 [ 1122.064160][ T31] ? watchdog+0x1de/0x1030 [ 1122.064193][ T31] kthread+0x70e/0x8a0 [ 1122.064218][ T31] ? __pfx_watchdog+0x10/0x10 [ 1122.064242][ T31] ? __pfx_kthread+0x10/0x10 [ 1122.064265][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1122.064291][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1122.064317][ T31] ? __pfx_kthread+0x10/0x10 [ 1122.064340][ T31] ret_from_fork+0x3f9/0x770 [ 1122.064387][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1122.064428][ T31] ? __switch_to_asm+0x39/0x70 [ 1122.064447][ T31] ? __switch_to_asm+0x33/0x70 [ 1122.064466][ T31] ? __pfx_kthread+0x10/0x10 [ 1122.064488][ T31] ret_from_fork_asm+0x1a/0x30 [ 1122.064523][ T31] [ 1122.064530][ T31] Sending NMI from CPU 0 to CPUs 1: [ 1122.227596][ C1] NMI backtrace for cpu 1 [ 1122.227613][ C1] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 1122.227643][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1122.227656][ C1] Workqueue: bat_events batadv_nc_worker [ 1122.227683][ C1] RIP: 0010:unwind_next_frame+0x12ea/0x2390 [ 1122.227711][ C1] Code: 00 3a 88 8b 89 de e8 d5 e2 b4 ff e9 43 06 00 00 49 89 d5 48 89 d5 48 89 d8 48 29 e8 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 <48> 83 e0 fe 4c 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 [ 1122.227727][ C1] RSP: 0018:ffffc90000a08778 EFLAGS: 00000246 [ 1122.227741][ C1] RAX: 0000000000000000 RBX: ffffffff8fb54d98 RCX: 0000000000000000 [ 1122.227754][ C1] RDX: ffffffff8fb54d98 RSI: ffffffff9030f420 RDI: ffffffff8be28b20 [ 1122.227768][ C1] RBP: ffffffff8fb54d98 R08: 0000000000000001 R09: ffffffff81729af5 [ 1122.227781][ C1] R10: ffffc90000a08898 R11: ffffffff81acf690 R12: ffffffff8185a655 [ 1122.227794][ C1] R13: ffffffff8fb54d98 R14: ffffc90000a08848 R15: 00000000000085a6 [ 1122.227808][ C1] FS: 0000000000000000(0000) GS:ffff888125d51000(0000) knlGS:0000000000000000 [ 1122.227823][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1122.227835][ C1] CR2: 00007f0c30c8d803 CR3: 000000000df38000 CR4: 00000000003526f0 [ 1122.227851][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1122.227862][ C1] DR3: 3a810b1eb6134bdc DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1122.227874][ C1] Call Trace: [ 1122.227881][ C1] [ 1122.227892][ C1] ? unwind_next_frame+0xa5/0x2390 [ 1122.227918][ C1] ? handle_softirqs+0x286/0x870 [ 1122.227944][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1122.227965][ C1] arch_stack_walk+0x11c/0x150 [ 1122.227984][ C1] ? handle_softirqs+0x286/0x870 [ 1122.228009][ C1] stack_trace_save+0x9c/0xe0 [ 1122.228027][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1122.228049][ C1] ? __lock_acquire+0xab9/0xd20 [ 1122.228072][ C1] kasan_save_track+0x3e/0x80 [ 1122.228096][ C1] ? kasan_save_track+0x3e/0x80 [ 1122.228119][ C1] ? kasan_save_free_info+0x46/0x50 [ 1122.228139][ C1] ? __kasan_slab_free+0x62/0x70 [ 1122.228154][ C1] ? kfree+0x18e/0x440 [ 1122.228177][ C1] ? slab_free_after_rcu_debug+0x60/0x2a0 [ 1122.228198][ C1] ? rcu_core+0xca5/0x1710 [ 1122.228220][ C1] ? handle_softirqs+0x286/0x870 [ 1122.228265][ C1] kasan_save_free_info+0x46/0x50 [ 1122.228285][ C1] __kasan_slab_free+0x62/0x70 [ 1122.228300][ C1] ? slab_free_after_rcu_debug+0x60/0x2a0 [ 1122.228322][ C1] kfree+0x18e/0x440 [ 1122.228346][ C1] ? rcu_core+0xc34/0x1710 [ 1122.228368][ C1] slab_free_after_rcu_debug+0x60/0x2a0 [ 1122.228391][ C1] ? __pfx_slab_free_after_rcu_debug+0x10/0x10 [ 1122.228412][ C1] ? rcu_core+0xc34/0x1710 [ 1122.228435][ C1] rcu_core+0xca5/0x1710 [ 1122.228465][ C1] ? __pfx_rcu_core+0x10/0x10 [ 1122.228492][ C1] ? sched_balance_domains+0x121/0x9e0 [ 1122.228518][ C1] ? sched_balance_domains+0x8be/0x9e0 [ 1122.228544][ C1] ? sched_balance_domains+0x121/0x9e0 [ 1122.228569][ C1] handle_softirqs+0x286/0x870 [ 1122.228595][ C1] ? do_softirq+0xec/0x180 [ 1122.228620][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 1122.228652][ C1] ? batadv_nc_purge_paths+0x318/0x3b0 [ 1122.228676][ C1] do_softirq+0xec/0x180 [ 1122.228699][ C1] [ 1122.228705][ C1] [ 1122.228712][ C1] ? __pfx_do_softirq+0x10/0x10 [ 1122.228734][ C1] ? __lock_acquire+0xab9/0xd20 [ 1122.228760][ C1] ? lockdep_softirqs_on+0x13b/0x1c0 [ 1122.228783][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 1122.228807][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 1122.228832][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 1122.228852][ C1] ? batadv_nc_purge_paths+0x318/0x3b0 [ 1122.228873][ C1] ? __pfx_batadv_nc_to_purge_nc_path_coding+0x10/0x10 [ 1122.228899][ C1] batadv_nc_purge_paths+0x318/0x3b0 [ 1122.228928][ C1] batadv_nc_worker+0x328/0x610 [ 1122.228950][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 1122.228976][ C1] process_scheduled_works+0xae1/0x17b0 [ 1122.229012][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 1122.229044][ C1] worker_thread+0x8a0/0xda0 [ 1122.229070][ C1] kthread+0x70e/0x8a0 [ 1122.229089][ C1] ? __pfx_worker_thread+0x10/0x10 [ 1122.229114][ C1] ? __pfx_kthread+0x10/0x10 [ 1122.229133][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 1122.229155][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 1122.229178][ C1] ? __pfx_kthread+0x10/0x10 [ 1122.229197][ C1] ret_from_fork+0x3f9/0x770 [ 1122.229221][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1122.229246][ C1] ? __switch_to_asm+0x39/0x70 [ 1122.229263][ C1] ? __switch_to_asm+0x33/0x70 [ 1122.229280][ C1] ? __pfx_kthread+0x10/0x10 [ 1122.229299][ C1] ret_from_fork_asm+0x1a/0x30 [ 1122.229323][ C1] [ 1122.752237][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 1122.759139][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc2-syzkaller-00047-g52da431bf03b #0 PREEMPT(full) [ 1122.770965][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1122.781042][ T31] Call Trace: [ 1122.784349][ T31] [ 1122.787297][ T31] dump_stack_lvl+0x99/0x250 [ 1122.791917][ T31] ? __asan_memcpy+0x40/0x70 [ 1122.796565][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1122.801787][ T31] ? __pfx__printk+0x10/0x10 [ 1122.806404][ T31] panic+0x2db/0x790 [ 1122.810328][ T31] ? __pfx_panic+0x10/0x10 [ 1122.814769][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 1122.820609][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 1122.826016][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 1122.832209][ T31] watchdog+0x102d/0x1030 [ 1122.836565][ T31] ? watchdog+0x1de/0x1030 [ 1122.841010][ T31] kthread+0x70e/0x8a0 [ 1122.845096][ T31] ? __pfx_watchdog+0x10/0x10 [ 1122.849794][ T31] ? __pfx_kthread+0x10/0x10 [ 1122.854401][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1122.859623][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 1122.864841][ T31] ? __pfx_kthread+0x10/0x10 [ 1122.869446][ T31] ret_from_fork+0x3f9/0x770 [ 1122.874060][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 1122.879195][ T31] ? __switch_to_asm+0x39/0x70 [ 1122.883969][ T31] ? __switch_to_asm+0x33/0x70 [ 1122.888746][ T31] ? __pfx_kthread+0x10/0x10 [ 1122.893353][ T31] ret_from_fork_asm+0x1a/0x30 [ 1122.898151][ T31] [ 1122.901426][ T31] Kernel Offset: disabled [ 1122.905748][ T31] Rebooting in 86400 seconds..