last executing test programs: 41.019955549s ago: executing program 4 (id=1139): r0 = memfd_create(&(0x7f0000000200)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90k\x96\x05\r\x84\x87\x1c\b\x8c`\xea)A\x90m\xb6&\xd0\x9d\xb8\x7f\xc6W\x81\xb7\xf9\xbd\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff\xd6\xf2\xfe\xf3]\x15&\x97]mC\v\f\n\x1f\xe2\t\x14\x84\xe0\xa4\xda\xe7\xe8\xd5ue\xf4\xf8\xde\xf3\x00q?[\xba=\x1a\xb2\xdf]\xc0\xeb\x16\xe4\x7f\x17o\x1b\xa4M\xafa\xc7tR?3hH\x18\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xcd\xe3\xb5\xd6\xed1\x10\x8d\x87N\x9c8\xfd\xd0t\xe6?\x9c\x95`\xfc_\'N\x90\xb7\xb5\x0f\xeb\x17{\x1fu\'\xb4=\xbcO@AP1\x9d\x1b\xba%\xca!\x0eRsGT\xdf\xd8;\x9ea\xd0\x01\x0eq~\x00\xfbh\xf7\xc8\x97\\\xc0\\\x17', 0x2) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x6, 0x2012, r0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002d00), &(0x7f0000000140)='./file0\x00', 0x97, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0xc000}}, 0x0, 0x0, 0x0) lsm_get_self_attr(0x64, 0x0, &(0x7f0000000000)=0x5b, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000002400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000c0000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="45000380"], 0x24}}, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000040)={{&(0x7f000030e000/0x2000)=nil, 0x2000}}) r5 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810500000200000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000003c0)={{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, @in=@multicast1, 0x4e20, 0xa, 0x4e21, 0xff4e, 0xa, 0x0, 0x0, 0x2e}, {0x83, 0xfffffffffffffffa, 0x6, 0x0, 0xc32, 0xfffffffffffffffc, 0x1, 0x80}, {0x401, 0x7fffffffffffffff, 0x2, 0x100}, 0x9, 0x0, 0x2, 0x0, 0x2, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d6, 0x6c}, 0x2, @in=@empty, 0x0, 0x3, 0x1, 0x3, 0x4f91b143, 0x5, 0x7dff093b}}, 0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[], 0x58}}, 0x0) syz_io_uring_setup(0x2c0c, &(0x7f0000000400)={0x0, 0x0, 0x4002}, &(0x7f0000000480), &(0x7f00000004c0)) 40.78422856s ago: executing program 4 (id=1141): r0 = syz_usb_connect$hid(0x3, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x85, 0x8, 0x4, 0xff, 0x6}, 0xb0, &(0x7f0000000080)={0x5, 0xf, 0xb0, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x4, 0x5, 0x5, 0xf000, 0x3, [0xc0, 0x3f, 0xff00c0, 0xff00cf, 0x30]}, @generic={0x8b, 0x10, 0xa, "7553ad4d740c75f24700f5ececef7165f20ae54b1748509da192d88e88c16133af37ef472818094d80ef7ec8b43d41f45cf2b66c04349c63f53f7d94520f9dd640e21ab57e2759d54c28625727a10e602e081fe9cc2998f2ca6ff6cc6427b4de80dc37a977af54f04509e2b2807ec366d8beb7d940c5cd9404946666e6fb52f3da79c7a021502ca4"}]}, 0x2, [{0x35, &(0x7f0000000180)=@string={0x35, 0x3, "e6ef2097e958e61757edb54463216a4f3cd30e642f94a2b6bbf9cb5e1866d03f6f9b18c1da565911ec960357fe7196ee3ffe18"}}, {0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x458}}]}) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, &(0x7f0000000240)={0x20, 0x10, 0xc, {0xc, 0x21, "24f284e731236c8603ec"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}, &(0x7f00000002c0)={0x0, 0x22, 0x5, {[@main=@item_012={0x2, 0x0, 0xc, "e203"}, @global=@item_012={0x1, 0x1, 0x0, "13"}]}}, &(0x7f0000000300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x296}}}}, &(0x7f0000000500)={0x2c, &(0x7f0000000380)={0x0, 0xf, 0x24, "cb32c0c281b3ba79e3541a5c157765d0ce92608a774d56643bec79ed9c0c550c9f76a7be"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000440)={0x20, 0x1, 0x59, "c5fcc51002b1b0ed859f34caebb0fc8471376633c1eff98a1bbf2c1cdcaf9c2e99f155b72dce31a7bb24656ece03e2c6ebaaa720b4f87b80b363e54e241d2e7d0b6019ab5c4caf8c756b280903c59150b0301080acd725d002"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x7}}) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000008c0)={0x2c, &(0x7f0000000700)={0x20, 0x24, 0x80, {0x80, 0x10, "113e6e56a5d5117270116dfb459390543734bfc99f1edeed5280bdeeb1b2191cbe40dbae48d69ae53b4bf43243762318cd7e68e0b2756ac0191fbe45b2f5fdc03f82355233febc248d37688d62943f81740a4713020f8b566fb0e9abf218aab3781127d6092cdaa72c08a711a1538535ed30e6a4628360640297955d7074"}}, &(0x7f00000007c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}, 0x0, &(0x7f0000000840)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa, 0x60, 0x6, 0xb, "b582e872", "d24b5cde"}}, &(0x7f0000000880)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4, 0x10, 0x5, 0xc2, 0x5, 0xb, 0x4}}}, &(0x7f0000000d80)={0x84, &(0x7f0000000900)={0x466aaf339ffab49b, 0xe, 0xa8, "1301d160c27def8e7d438989e3545121e627a8d5aaccd0b24d36f5b058b90f8318d2607a6a132ed2c4ad443d36c1c10d4a7009b62bade34360730c052551e69260484db7b7d3cfc9fbaa78e493a1047648c12db46f698e156f12c07ff2f450f56ce2f8da68c7defe474c8431b0411109a1d0360a761e9376597620cf99c79dccff9945940d0d7cba6c67d4a2dff780b1fe9675e695d7f98bccc93443c02d8f483c6ecd765c7e19ea"}, &(0x7f00000009c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000000a40)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000a80)={0x20, 0x0, 0x4, {0x40, 0x2}}, &(0x7f0000000ac0)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000b00)={0x40, 0x9, 0x1, 0x3}, &(0x7f0000000b40)={0x40, 0xb, 0x2, "46b4"}, &(0x7f0000000b80)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000000bc0)={0x40, 0x13, 0x6}, &(0x7f0000000c00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000c40)={0x40, 0x19, 0x2, '~='}, &(0x7f0000000c80)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000cc0)={0x40, 0x1c, 0x1, 0x4c}, &(0x7f0000000d00)={0x40, 0x1e, 0x1}, &(0x7f0000000d40)={0x40, 0x21, 0x1, 0x68}}) syz_usb_connect$cdc_ecm(0x3, 0x7f, &(0x7f0000000e40)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x1, 0x91, 0x40, 0x9, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x2, 0x6, 0x0, 0xfd, {{0xb, 0x24, 0x6, 0x0, 0x0, "b352e76722ad"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x7ac4, 0x6, 0x6, 0x3}, [@ncm={0x6, 0x24, 0x1a, 0x81, 0x14}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0xd}, @obex={0x5, 0x24, 0x15, 0x435b}, @mbim_extended={0x8, 0x24, 0x1c, 0x40, 0xed, 0x5}, @mbim={0xc, 0x24, 0x1b, 0xfa, 0xffff, 0x9, 0x9b, 0x7, 0x3}, @country_functional={0x8, 0x24, 0x7, 0x8, 0xfffa, [0xc]}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0xff, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x0, 0x9}}}}}]}}]}}, &(0x7f0000001040)={0xa, &(0x7f0000000ec0)={0xa, 0x6, 0x310, 0x8, 0x6, 0x9, 0x8, 0x81}, 0x77, &(0x7f0000000f00)={0x5, 0xf, 0x77, 0x5, [@generic={0x42, 0x10, 0x1, "1a3bc5918264a3111e6adf552eda3bb4b1955e2818731a557f264a8d3cdbcbbb74ce0caca709caedd3ce69d1cc2dbc8e442428d87705bbcfd619cd906e10ba"}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "2efef8ec5c2834ade5253d94e0604be1"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x9, 0x4, 0x3}, @wireless={0xb, 0x10, 0x1, 0xc, 0xb0, 0x6, 0x8, 0x1, 0x4}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x5, 0x9, 0xf380}]}, 0x3, [{0x1c, &(0x7f0000000f80)=@string={0x1c, 0x3, "dfc44c6b89b2c62adca0b5200cefaaf40d3cdff69ca92ee663b0"}}, {0x4, &(0x7f0000000fc0)=@lang_id={0x4, 0x3, 0x416}}, {0x4, &(0x7f0000001000)=@lang_id={0x4, 0x3, 0x419}}]}) r1 = syz_usb_connect$cdc_ncm(0x1, 0x14d, &(0x7f0000001080)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x13b, 0x2, 0x1, 0x7f, 0x20, 0x7, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xa, 0x24, 0x6, 0x0, 0x1, "4ab3082ca0"}, {0x5, 0x24, 0x0, 0x92}, {0xd, 0x24, 0xf, 0x1, 0xa93, 0x7f, 0x6de6, 0xd}, {0x6, 0x24, 0x1a, 0x6, 0x28}, [@mdlm_detail={0xc8, 0x24, 0x13, 0x4, "439f662705fe834c7e7ad1ca35079d691df5c31287912f4c83a73938db793ae4bf19d73a9285887ed63150b2693a17cec19e1e6956f71ed61919f5413540b6060301ca21c68779ecfb79de9678048f0e64f765c617fa6878e6841843444182b0af6a34daf7dcd36d8a8d8181d1e6675d83e85658f9187d116b77de51cd8dac2479f6ae4f60a93d5deb8eb9db2e7b9c4d75b8d7f98053f961b9b219f120493c88dbb51837357776da98dbd65641859858778ad898240f46d3310a71caef4dd58583045c94"}, @obex={0x5, 0x24, 0x15, 0x9}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x5}, @mbim_extended={0x8, 0x24, 0x1c, 0x5, 0xc, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x640, 0x4d, 0x4, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0xa3, 0x90}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0xa, 0x9, 0x6}}}}}}}]}}, &(0x7f0000001480)={0xa, &(0x7f0000001200)={0xa, 0x6, 0x250, 0x6, 0x4, 0x95, 0x0, 0x1}, 0xd2, &(0x7f0000001240)={0x5, 0xf, 0xd2, 0x5, [@ssp_cap={0x14, 0x10, 0xa, 0x0, 0x2, 0x6, 0x0, 0xfffd, [0xffff00, 0x0]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x0, 0x8, 0x4}, @wireless={0xb, 0x10, 0x1, 0x18, 0x2, 0x6, 0x4, 0xef07, 0x7}, @generic={0xa4, 0x10, 0xa, "ef0b209d9423901a2a763aa3104c3ef733d8398d8f4fd7c114f7a860dcda7019f657014da71f358e8c9c0b31b6f760357f76341921ab5d1846bc657d5b4aada505ff087775bdb2f4963d8e3662a8c19d5809a7f7d61b3efcc93d62c9c551463604f799aa0280b60134c535e0d19876188b8186e7a787714b85c46d8183ce70988d325e8b3779401365d6e8321ffa668072959796296faf0e639d23fc9918846614"}, @ptm_cap={0x3}]}, 0x2, [{0xfa, &(0x7f0000001340)=@string={0xfa, 0x3, "61e01a712e9eb4a3db89baa4927faa73eac40c6478bc6e92c66f8a01eecd5cdc95d49227368261a586a03325ab313a18b6f669dd36bc44de3ab267eb7597630f6d62295d906ea62196d90e6d68a76f5a2b3b4d86accfaf7129a028df2e09d9cf7355b8c7a00ffdfe70855b82feee62b03d3fa46ce8f371f57c541f66f368bdcb740f8aaf7f5a5d2e697aaf091b3fc768711768512469eb6fd61017510b706330f670be463e15805af478370a7942650b88791942ebcb65cd5ef7effc4da0b1cc85849ddcf030d1f3ce0f096d08158f76fd9155c42aa767f857f32c1ecf269161da2497bb3f703340778683cbbf28cd3d4a9bdc064b37648d"}}, {0x4, &(0x7f0000001440)=@lang_id={0x4, 0x3, 0x40e}}]}) syz_usb_control_io$cdc_ncm(r1, &(0x7f00000015c0)={0x14, &(0x7f00000014c0)={0x0, 0xd, 0x9b, {0x9b, 0x22, "fd27de9f66402d65eec969fe56bfe60c05126f3508591bb275e65c99083c086c98e5177421f2127afcc1cd4ec4445b4246723a8ddaefbc9f0c530597a560235bda0ce9ceb689a21ae4589333553d62584ea875dbcf62b90da125f93e43d2cf87dfa0fc6dd0d24e77c7187c3b4c87d6ee521618aa3fea3fb53761eeeb2051fe46118fd93a323fa687be5653ca133534e752078c8f5d0ab8bf1e"}}, &(0x7f0000001580)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001800)={0x44, &(0x7f0000001600)={0x0, 0x8, 0x11, "095d0136317c8b9c7873e17c2dfeb9cba0"}, &(0x7f0000001640)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001680)={0x0, 0x8, 0x1, 0x9}, &(0x7f00000016c0)={0x20, 0x80, 0x1c, {0x5, 0x2, 0x2, 0x0, 0x1, 0xc, 0x5, 0x2, 0x401, 0x1, 0x4}}, &(0x7f0000001700)={0x20, 0x85, 0x4, 0x34}, &(0x7f0000001740)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000001780)={0x20, 0x87, 0x2, 0x3}, &(0x7f00000017c0)={0x20, 0x89, 0x2, 0x1}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000001880)={0x2, 0x3, 0x5000, 0xa000}, 0x8) r3 = syz_usb_connect$cdc_ecm(0x3, 0xdb, &(0x7f00000018c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc9, 0x1, 0x1, 0xd4, 0x80, 0x8a, [{{0x9, 0x4, 0x0, 0x6, 0x3, 0x2, 0x6, 0x0, 0x1, {{0x6, 0x24, 0x6, 0x0, 0x0, '6'}, {0x5, 0x24, 0x0, 0x8000}, {0xd, 0x24, 0xf, 0x1, 0x5, 0x9, 0x7, 0x5}, [@mdlm_detail={0x7f, 0x24, 0x13, 0x9, "854822797aa68297c3004e0fbeda6b9cb1c32d86b2209d25e44967ec826b2cac5816fa0a65982f2c96db90bb346cebc1f06591dead8f1f34b6a4ab7a1b66ddc92997e512517d80083da688633bedca15decec157fad4cbd250ec6df8450eeeb441346a4fb3462352b0851bdd7788b13d279fd1fb71a669c00c8fa8"}, @call_mgmt={0x5, 0x24, 0x1, 0x3, 0x5}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x8, 0x81, 0x3a, 0x8}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x30, 0x0, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x1, 0xf8, 0xc}}}}}]}}]}}, &(0x7f0000001cc0)={0xa, &(0x7f00000019c0)={0xa, 0x6, 0x201, 0x2, 0x8, 0x5, 0x8, 0x27}, 0x3c, &(0x7f0000001a00)={0x5, 0xf, 0x3c, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x14, 0x8, 0x7, 0x7fff}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x4, 0x8, 0x6, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "9e6c53e0d4505d30ac65617e2e9848c3"}, @wireless={0xb, 0x10, 0x1, 0x0, 0x84, 0x3, 0x1, 0xe, 0x47}, @ext_cap={0x7, 0x10, 0x2, 0x26, 0x4, 0xb, 0x4}]}, 0x5, [{0x4, &(0x7f0000001a40)=@lang_id={0x4, 0x3, 0x409}}, {0xb9, &(0x7f0000001a80)=@string={0xb9, 0x3, "50c90737aaa74597ae785f8225f727d0c81b46ed2b3fd8a75f0e5dd6f58a8d73cdf175010ef944857db500ae321457793aeeafdac574cf38a65a4f53683e043979bf8fff4a5bf9894a4beccef9ee7dfec54c34d095022ec89f0c2f9cff9b4d11b2703c61ceeddea35db840ce1d455ed14a41f740c4feb2b03834ea908de66a5705ec63bbb0463f0f6b00de298b09674ec6970fc242a29ffa7887989d70cc5d579de51e4a1685f955e4584efef8a431ddcfb0fc8740531a"}}, {0x4, &(0x7f0000001b40)=@lang_id={0x4, 0x3, 0x1009}}, {0x27, &(0x7f0000001b80)=@string={0x27, 0x3, "bbed5cfff6afa49843d50f56d8aceb23b12feb32617010ac07d59481151ff41fe497cd8b5c"}}, {0xe0, &(0x7f0000001bc0)=@string={0xe0, 0x3, "e32b5134a0d6b4e2baa21f65bd7aeb85eca5f134130bb7d88b61d6ff91f10eead9e9cda34de60b54b6a6d061428c57e82bf968bfcb7f8b0bb5e55bcbfa0130a234da2f26e1f886b9dcdf2a4242639338c3d8535eb82f34f1c39fed026545caa94cc30f5ff7e637b59c52ac2709c4fc5bd12f661b07e2111aa00f80af3a7c6da0c6c719b6b1f72dc3a31cbf25b02ddd596ff4af44b04d5f6da4cf926a7f2ac10fa59ee23c6fd4520a4daa962aef8c714015b9165e0ad1f783efeb24780fd254c42f997fdf30d5be36744003e8b3c16b4a66c789830c334c7a1220bcf4fb1d"}}]}) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000001dc0)={0x14, &(0x7f0000001d40)={0x40, 0xa, 0x2c, {0x2c, 0xc, "4150ea1109be4e0fd01e59dd5d804ba2bec79ff0c77259474db12366c2dc09e27b231a755ffbcd7a9e59"}}, &(0x7f0000001d80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001ec0)={0x1c, &(0x7f0000001e00)={0x20, 0xf1406e0a29925fd6, 0x34, "ff9c545750af169016550862f6d64df85b2a92cebe93cfbb6ad37d170ecff13dedfa6002a9b325c3becd84319eee4146fc2ce987"}, &(0x7f0000001e40)={0x0, 0xa, 0x1, 0x54}, &(0x7f0000001e80)={0x0, 0x8, 0x1, 0xe}}) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000002140)={0x2c, &(0x7f0000001f00)={0x0, 0x21, 0x90, {0x90, 0x5, "555e43d7aa2d618e3bbf87e2db7cfd9cbda44425c51f39a52bb96a35aa935a1d26c39c29884d1d7e94063ab7d11b5ef8062041a84e129a4df5f22379d6bc2de4b304dc099744b8bf8026a6d77261f3cb981a2d42882f73d60ff0c7561e238a34e4cee1de7d8e7152e5bba6ac566f9cc7fc0264d201157ddfc217334076f5596bdcf4785885e51e9261fc7c58f9d3"}}, &(0x7f0000001fc0)={0x0, 0x3, 0x83, @string={0x83, 0x3, "1f103f6598c8a86017c06131791cbfa73dcb7d762699628d44fe7f671aff134343fd905c9b4b06f4485a6526abe00ee1f9ff28465df33ecf40d691ff55923702eed5d5bb86bde4242103a6e91fb9d174a323019e4c4e442410e7a3aded9623d81134d90ddcd25c3e408c687d11dcbb31fc85eda78e343fdfc4899e6d231220ddce"}}, &(0x7f0000002080)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0xc, 0xe4, 0x4, 0x5, 0xffff, 0x2}]}}, &(0x7f00000020c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x60, 0xfc, 0x2, '7S9n', 'x9)\f'}}, &(0x7f0000002100)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xcb, 0x18, 0x1, 0x3, 0x2, 0x7, 0x87a0}}}, &(0x7f0000002640)={0x84, &(0x7f0000002180)={0x0, 0x13, 0xbb, "70db74d1420a70ced11c286cba3b68410b56857f68817b6acb622728bafd28f2f3b8dd9e331a9480c9f535ed83137a0f6c5d20a22d8e7c11e9c39bb511bdeacd3009cf47a03a51bf1ae394599e4559aa5c352387dfed7fc02e047fca049418cd411dc25aaebf93d7ee599d3bb74048657c11d02e642d8172ce57e170df07b2092958b07f754dc80e9b2f5c1b8531e1121bbcddc115660d5b8475529488cbb1e0e3c60c8b860d0ccfd4066ad07b7bd639417c211eb858b29bdb99a5"}, &(0x7f0000002280)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000022c0)={0x0, 0x8, 0x1, 0x6}, &(0x7f0000002300)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000002340)={0x20, 0x0, 0x8, {0xe0, 0x20, [0xf00]}}, &(0x7f0000002380)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000023c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000002400)={0x40, 0xb, 0x2, "bda4"}, &(0x7f0000002440)={0x40, 0xf, 0x2, 0x81}, &(0x7f0000002480)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}}, &(0x7f00000024c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000002500)={0x40, 0x19, 0x2, 'pb'}, &(0x7f0000002540)={0x40, 0x1a, 0x2, 0x3}, &(0x7f0000002580)={0x40, 0x1c, 0x1, 0x3}, &(0x7f00000025c0)={0x40, 0x1e, 0x1, 0xaa}, &(0x7f0000002600)={0x40, 0x21, 0x1, 0xc}}) r4 = syz_usb_connect$cdc_ncm(0x6, 0x8e, &(0x7f0000002700)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7c, 0x2, 0x1, 0xff, 0x20, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x1, "df1c06910535"}, {0x5, 0x24, 0x0, 0xfff9}, {0xd, 0x24, 0xf, 0x1, 0x9, 0x1800, 0xa2f2, 0xd}, {0x6, 0x24, 0x1a, 0xa, 0x1}, [@dmm={0x7, 0x24, 0x14, 0x3ff, 0xfffe}, @network_terminal={0x7, 0x24, 0xa, 0xc6, 0x40, 0x1c}, @mbim={0xc, 0x24, 0x1b, 0x6, 0x101, 0x9, 0x3, 0xd30, 0x7f}]}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x1, 0x60}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x28, 0x9, 0x7, 0xf2}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x1, 0xf5, 0x7}}}}}}}]}}, &(0x7f0000002940)={0xa, &(0x7f00000027c0)={0xa, 0x6, 0x200, 0x3, 0x0, 0x0, 0x40, 0x7}, 0xc2, &(0x7f0000002800)={0x5, 0xf, 0xc2, 0x3, [@generic={0x9e, 0x10, 0xa, "5292df2deee7d528fdd2471000555d2e296142ef0a16e9663f138e8bd077caa61ec6e76a6c196b88c6e05bd92bfa4b9ecf3f1b033ccbf219f9a8b8f0f60fb52f0e765dc803889016cd0a5c44cbb6dbf0ea83af9bfaf67c0b8c68ea8e493bbb19b5d7993f48c57237ec7987ccf7076690050b775750fdbab933def6630667288172c73f13186da2217754b36c98af05d0f93e49ee2b7287654a09b4"}, @wireless={0xb, 0x10, 0x1, 0xc, 0x80, 0xff, 0x3, 0xc4d0, 0x8}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "33ff563262f90e34cbd4883196222baf"}]}, 0x1, [{0x26, &(0x7f0000002900)=@string={0x26, 0x3, "cd9057f453e6e28f1e8e34b5aeefaf985a96c697ab8c56365043ce3cbfbf3ef1c6fde8bf"}}]}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000003640), 0x2c200, 0x0) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000004b80)={0x0, 0x1f, "6c6c069e33d6b6c364b65fc1327010fc25df220c1ec92655b00d444c8cec7b"}, &(0x7f0000004bc0)=0x27) setsockopt$inet_sctp_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000004c00)={r6, 0x1, 0xeac, 0x9, 0x2}, 0x14) listen(r5, 0x7) socket$igmp(0x2, 0x3, 0x2) syz_usb_control_io$cdc_ncm(r4, &(0x7f0000004d00)={0x14, &(0x7f0000004c40)={0x0, 0x22, 0x7a, {0x7a, 0xf50977a160b07b20, "1eac1737135497403560af9616ceda05cdad71e945f7168395db337d557855ea9a8f29cdba0737ea60ae7502f3fae608c7bb8c7b813bd1658dd1c0a3050b2390eb8fef09360e736649031b71e965ba8a0b9e583f8f7a49ca001ede406e654ce3df29644933cc2b621847be88637f0dc61a8f261845aad0ae"}}, &(0x7f0000004cc0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000004f80)={0x44, &(0x7f0000004d40)={0x40, 0x14, 0xa2, "681f8c2aada62299d356b53269e43a60febe6b964ffbee924f7c1a4c1146004f339854c5798cb919c4bfa11ebdd87194395edaf8fc59290ead2037e99d08e87236f58b52402f0eee37b059addf0f987cc4902ce10a54c3e8b97188724350001f861611aee458c3a4c645951ec7a2b8beff1d45fe597f157c72ea0b8b5dd525290cf718b0491d4d0ee74fa90434eab11e3fc99b63d0482862f95c1318fabcf3bff52d"}, &(0x7f0000004e00)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000004e40)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000004e80)={0x20, 0x80, 0x1c, {0x3, 0x2, 0x5d, 0xfff, 0x718, 0x1, 0xfff8, 0x0, 0x7, 0x3, 0x0, 0x58}}, &(0x7f0000004ec0)={0x20, 0x85, 0x4, 0x6}, 0x0, &(0x7f0000004f00)={0x20, 0x87, 0x2, 0x3}, &(0x7f0000004f40)={0x20, 0x89, 0x2}}) r7 = syz_usb_connect$cdc_ncm(0x6, 0xd1, &(0x7f0000005000)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xbf, 0x2, 0x1, 0x10, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "f0"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x7, 0x8, 0x4, 0xfe}, {0x6, 0x24, 0x1a, 0xff, 0x2}, [@country_functional={0xc, 0x24, 0x7, 0xa, 0x2, [0x4, 0x8, 0x1]}, @country_functional={0x12, 0x24, 0x7, 0x4, 0xfffd, [0x8, 0x1, 0x10, 0xff1a, 0x5, 0x0]}, @mdlm={0x15, 0x24, 0x12, 0xcb2a}, @obex={0x5, 0x24, 0x15, 0x4}, @mdlm={0x15, 0x24, 0x12, 0x100}, @mdlm={0x15, 0x24, 0x12, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x0, 0x40}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0xc, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x22, 0x9, 0x2}}}}}}}]}}, &(0x7f0000005300)={0xa, &(0x7f0000005100)={0xa, 0x6, 0x201, 0x7, 0x6, 0x3, 0x40, 0x60}, 0x2f, &(0x7f0000005140)={0x5, 0xf, 0x2f, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x8, 0x7f, 0x9, 0x80}, @wireless={0xb, 0x10, 0x1, 0x2, 0xaeca41a5b538d40, 0x3, 0x2, 0xd30, 0xf}, @wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x3, 0xf5, 0x8, 0x1}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x7, 0xd, 0x4464}, @ptm_cap={0x3}]}, 0x3, [{0x4, &(0x7f0000005180)=@lang_id={0x4, 0x3, 0x1401}}, {0x4, &(0x7f00000051c0)=@lang_id={0x4, 0x3, 0x1c09}}, {0xf9, &(0x7f0000005200)=@string={0xf9, 0x3, "31538c6468cc5fffbc87e4b0699f25a63e69dd779be2586c6be6369a79da296050cf172f849e6ec14c736e8ba5dbdd1ab910b531a60434ecb46e440a1b51b7b4e076b3138201cb7a6816a3d9547a0b1aa82d78a538c15593087087abffe2fbab3f5ba7188fb4d056e069dfe4e4e3283f63ac1c316d3392506d55327fc184bef566c60b2d8604340f6ed20810d0c63bbd0c0cfec2e48b5f09bbc30c85f4be2a23c08ed7b4bb5b2666382f153eb6fe9d7bb5bc843f3a55945126e9a6e377d0e94d94a80729c7a9ec5c442c360eab98d5c6c9a71b382f8d0f98e994a1a6bd044fa3d6aa3222330536ed300f0e039e22162743105020b195c8"}}]}) syz_usb_control_io(r7, &(0x7f00000055c0)={0x2c, &(0x7f0000005340)={0x40, 0x31, 0xc9, {0xc9, 0x13, "8b3a7c09f6a30bab88089c977aa221327cefada10edcc0986c488db85499f6c82ea2be0dcbaee1d8658b3b8796eca1c28d5a87f63ce7a2984c845c38735d1f0df5e26a9a4b1b698d2d02cfebc93e47c71b7bef0cb07839760758819b4a1151e66e023650e2beae5a60d7693bf872afff3558c3a129017831732ab75fe7c2be6dbeaf23da433ebb2e7639ff9e6080e608408a2dc67590c7cb5f1e38789b8c6ec50591c91e7d9a18a4bfeaf667a7e306e1f912ae5fa9bd711839f9d5e7aed531a3a83ad680c04226"}}, &(0x7f0000005440)={0x0, 0x3, 0x98, @string={0x98, 0x3, "efcde538e2d0ba11796cf36b9b993d70c5346ee8ecb2cbfe556c09e993bad3e49730ac3df50b921bb4c1acf67af9e9f76df751e9cd6cc35bdce44f174dc813062d43b900ae63fb2dd7cc503626b4d82fe6eef2f2dac06ac7e39a5dd43089a97ce660580959d93f9296482199b81d2278226abfe76d28bdb6b907d4b75723c0087ea4b0ab725eafc99908a34e3e97a2f49108a8253fb6"}}, &(0x7f0000005500)={0x0, 0xf, 0x5, {0x5, 0xf, 0x5}}, &(0x7f0000005540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x3, 0x1, "e505b346", "6430db5d"}}, &(0x7f0000005580)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xb, 0x4, 0xa, 0x40, 0xdb, 0x0, 0x3}}}, &(0x7f0000005b00)={0x84, &(0x7f0000005600)={0x0, 0x1, 0xfe, "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"}, &(0x7f0000005740)={0x0, 0xa, 0x1, 0xb}, &(0x7f0000005780)={0x0, 0x8, 0x1}, &(0x7f00000057c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000005800)={0x20, 0x0, 0x4, {0x160, 0x40}}, &(0x7f0000005840)={0x40, 0x7, 0x2, 0xfff}, &(0x7f0000005880)={0x40, 0x9, 0x1, 0x7}, &(0x7f00000058c0)={0x40, 0xb, 0x2, "f4f4"}, &(0x7f0000005900)={0x40, 0xf, 0x2, 0x8b}, &(0x7f0000005940)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000005980)={0x40, 0x17, 0x6, @remote}, &(0x7f00000059c0)={0x40, 0x19, 0x2, "2ee5"}, &(0x7f0000005a00)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000005a40)={0x40, 0x1c, 0x1, 0x4}, &(0x7f0000005a80)={0x40, 0x1e, 0x1, 0x7d}, &(0x7f0000005ac0)={0x40, 0x21, 0x1, 0x1}}) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000005c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000005cc0)={&(0x7f0000005bc0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005c80)={&(0x7f0000005c40)={0x28, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x800) r10 = openat(0xffffffffffffff9c, &(0x7f0000005d00)='./file0\x00', 0xc4c80, 0x36) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r10, 0x84, 0x1f, &(0x7f0000005d40)={r6, @in6={{0xa, 0x4e24, 0x4, @empty, 0x5}}, 0x0, 0x5}, 0x90) syz_usb_connect$cdc_ncm(0x4, 0x7c, &(0x7f0000005e00)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6a, 0x2, 0x1, 0x5, 0x0, 0x9, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "82"}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0xabc, 0x3b31, 0x3, 0x80}, {0x6, 0x24, 0x1a, 0x6, 0x8}, [@mbim_extended={0x8, 0x24, 0x1c, 0x7, 0x40, 0x4}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x3}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x0, 0x80, 0x2}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xb, 0x8, 0x6}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x1, 0x1, 0x40}}}}}}}]}}, &(0x7f00000062c0)={0xa, &(0x7f0000005e80)={0xa, 0x6, 0x200, 0x55, 0x2, 0x8, 0x40, 0x3}, 0x5, &(0x7f0000005ec0)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000005f00)=@lang_id={0x4, 0x3, 0x801}}, {0xca, &(0x7f0000005f40)=@string={0xca, 0x3, "1b67200c3b0b9a0ffbc78e324f17b6a87a43b4da6fe76ba3a291332e3d4248585fa0f546addf9fd0ae76a9031855f9ae686a7f50d93b2e995010a19f6c7f553ef161937644c5c72d5e50a9035522d0b8eb9e36d84795d878eb51e85fa9f4725deedc05e94339416f79bec3c510261ec772f15887a3fc70f114128976e9286f3f558d62af0c49d09216bba8ff0678fb629d2bcf3bd41419b51c782a879830c62f284ced15916643130fb3bff9e1ef7c1c8ed69dd68b7720165a9ede8d54059a77d9405227bbf7dc9c"}}, {0xc9, &(0x7f0000006040)=@string={0xc9, 0x3, "54331ae0f494bc925b5c2bed9fd6fabcb114a98b46b27b1fc1e34c83e4061e3813e2d880771fd7b657a6825d0bcd5cf661ff1260af934d25bd25cb08824c4b63a4ed9e9d28de3a100652200122d70e6a3416cf027d4a3eb611dd51c982697ee6f53aa0e2a03d5fcae61517e469b14adbe5eb46604def959997ab5b285c143e3b51dc83dc9bc6e9930bbfbef2b7023bbe010a1f631d1524f7a5c2a855027b457ea82f5bee649804c28291ad5301ff0f4f7d663fbff57b3850e6b2fd37c8890049ddce73486316e7"}}, {0x4, &(0x7f0000006140)=@lang_id={0x4, 0x3, 0xccb1}}, {0xae, &(0x7f0000006180)=@string={0xae, 0x3, "a170d8077175f6ad79d3f09099560dc4837a90cacac1ced3158e573d9df026a07d5af83bcc4ba7985c68774d0ec7eb933832ed8fad5356ea372fd09c58faa5dd1b635a7a2c657c42802fa6c809ce768cb79d44298d3f8c2b2858e567c31357fe5ed9646977f395d22a465dc248833f0bc60757788b308231694ce1165ed4e70d3e4e9c283af0021af8c69aff6f16c90a012500048bfb569752420207e3a4bd4c92b20bce720b74d1214e5fe7"}}, {0x51, &(0x7f0000006240)=@string={0x51, 0x3, "f8eafda801f42d1abb8680e9525374aa846318f7840c624965398931b888c6008efce3aa45e461524024fc051764482cceaa3e4655737f80030ed968f67f9e1bbfd5dbda5bad51500b6dcbaf3c60d0"}}]}) 29.138880218s ago: executing program 0 (id=1172): userfaultfd(0x80801) syz_usb_connect(0x3, 0x7b, &(0x7f0000000340)={{0x12, 0x1, 0x0, 0xb5, 0x8f, 0x55, 0x40, 0x582, 0xb9d5, 0x73f7, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x8, 0x0, 0x7, 0xff, 0xf5, 0x6a, 0x0, [@uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x7f, 0x4, 0xe}]}], [{{0x9, 0x5, 0x80, 0x2, 0x3ff, 0x1, 0xe}}, {{0x9, 0x5, 0x80, 0x0, 0x200, 0xb, 0x1, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0xc, 0x1}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff, 0x3, 0x4, 0xa, [@generic={0x2, 0x2}]}}, {{0x9, 0x5, 0xf, 0x10, 0x200, 0x9, 0x7f, 0x4}}, {{0x9, 0x5, 0x6, 0xc, 0x10, 0xd1, 0xfd, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x4, 0x401}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0x3, 0x8, 0x2}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x1, 0x1, 0x1}}]}}]}}]}}, 0x0) 28.957062057s ago: executing program 0 (id=1175): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x0, 0x11, 0x148, 0x0, 0x0, 0x178, 0x2a8, 0x2a8, 0x178, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_emit_ethernet(0x66, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r0, &(0x7f0000000180)=""/97, 0x61) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000040)={0x0, 0xff, 0x0, 0x0, "cccf6b3d79281e285e89024a2866ebaa10fe00c15dc352ec0f119204d2d2c0b8"}) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)) syz_usb_connect$uac1(0x0, 0xda, &(0x7f0000000c00)=ANY=[@ANYBLOB], &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0}) socket$key(0xf, 0x3, 0x2) syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f0000003600)=""/120) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0]) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020}, 0x2020) write$FUSE_NOTIFY_INVAL_INODE(r2, 0x0, 0x0) write$FUSE_OPEN(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000004000000080000bd21009cf7f8329d2c0c31000080000000d103c4db30b9c8068c9d3e2cfe984638f6ac71b641b5e20bc3bf4ce96802aa2eafacfbe7335cad4f90b7a1508bb5afc36ce0bd7e805c780f331ff85f9e8ac880f23017fef66872c2db9d3beea2b6dc5f3f81311a75352e01dcca89caec4eff5a070388ef5e38e99a8dc90c3b6e34abc807d35e37e1af9b70f589ff9c7001bfad635074b160bc896639b40553475165e8799ee69d76bb3327c540e3af2b0c164e010edeb52ab2", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0xac}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0x51}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r3}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 28.317726474s ago: executing program 2 (id=1181): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001440)=ANY=[@ANYBLOB="12010000abd1a0407b0726228bca00853300000109021200010000000009040000003a92"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$kcm(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000080)=ANY=[@ANYBLOB="66696c7403b1da1d707a305c000000000000000000000000000008000000000000000000"], 0x0) r2 = socket(0x2, 0x3, 0x81) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f000066e000/0x2000)=nil, 0x2000) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000140)='bridge0\x00', 0x52c) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f00000000c0)=@abs={0x0, 0x7, 0xd0000e0}, 0x6e) fchdir(0xffffffffffffffff) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000380)={0x0, 0x39}) socket$nl_generic(0x10, 0x3, 0x10) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) syz_open_dev$vim2m(&(0x7f0000000340), 0x8001, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x9c0903, 0x0, '\x00', @ptr}}) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfffffffe}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) add_key(&(0x7f0000000040)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) preadv(r6, 0x0, 0x0, 0x0, 0x0) 25.691594036s ago: executing program 0 (id=1183): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) lseek(r1, 0x5, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={@loopback, 0x1, 0x0, 0x10, 0x0, [{@multicast1}]}}) r2 = openat$vicodec1(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_S_PARM(r2, 0xc0cc5616, &(0x7f0000000080)={0xa, @output={0x0, 0x0, {0xd4, 0x10}, 0x2, 0x80000001}}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2, 0x0) r6 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$setstatus(r6, 0x4, 0x2400) open(0x0, 0x26080, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="410100000a000200bbbbbbbbbbbb"], 0x30}}, 0x0) r7 = socket$l2tp6(0xa, 0x2, 0x73) bind$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmmsg$inet6(r7, &(0x7f0000000480)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="280000000000000029000000050000000002020100000000ff0200000000000000000000000000c9f9a61301"], 0x28}}], 0x1, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x2, @remote, 'team_slave_1\x00'}}, 0x1e) ioctl$PPPOEIOCDFWD(0xffffffffffffffff, 0x80047437, 0x1000000000000) close(r0) 25.150501526s ago: executing program 2 (id=1185): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_open_dev$usbfs(0x0, 0xb, 0x101301) fspick(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x1, 0x0, 0x0, {[@mss={0x2, 0x4, 0xfff}]}}}}}}}, 0x0) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x3c, r3, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_PW_TYPE={0x6}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x3c}}, 0x20) 24.742161606s ago: executing program 2 (id=1187): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001001800b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 24.684664358s ago: executing program 0 (id=1188): syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401"], 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card3/oss_mixer\x00', 0x2, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0) (async) syz_clone(0x0, &(0x7f0000000140)="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", 0x490, 0x0, 0x0, 0x0) (async) mbind(&(0x7f0000f8d000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010000000000000000000000000096eb1ae723262bf220b2bc04fa49b2b7a3ee7079cecda15f97025083743cf7988046e4f7d94e932993c8898bf27a676d7035d593c6831664032e57add804a8a333650c768dcddfa3b94e4557dfb101472d8ea3d603407f8257629e2ed1c9e30064755443203a1b94e7dc3279e23a3c256be66fb83d1140f0b6ec70fc8b8c5013e3a90483ee49ebb791476a31945bc29988e8a6dac1cecb8fedc7f605", @ANYRES32=0x0, @ANYBLOB="0220000000000000140003006d6163766c616e31000000000000000008000a00", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x0) (async) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x2002, 0x0) (async) close(r2) (async) fcntl$setpipe(r0, 0x407, 0x7fff) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) (async) syz_usb_connect(0x2, 0x0, 0x0, 0x0) (async) syz_open_dev$sg(0x0, 0x0, 0x840) (async) r4 = syz_open_procfs(0x0, &(0x7f0000000480)='net/ip6_tables_names\x00') pread64(r4, &(0x7f0000000600)=""/9, 0x9, 0x9) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r4) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x364, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x334, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x1}}, @TCA_CHOKE_STAB={0x104, 0x2, "dd4cba57b9dddaadf18e8ce4644351af5627af30de41554869ee8cf83d25a295e430a13f9f86b63a64583ca13177a16f3d5d65af287769a9f3562e0461c36e6f588ccd959a8ccf752b0c7b6fda0068b9c3417e359dc7582461625434931aff51bb85c8d408b9e73a069276c7d9e49cd8566535f74882093700af5a49ce9b0d863cd0fcd36c2a82519af2097dc5fc7a967e5d686e813e71b9652de97a25a2ea856fda3ed90c1785c18243762b9c476377a1db7816ce11b83303af0e7ee446244868a3c09c7407edae018bc4bbad121ccceeeaf945bc438b921d0dfb9c795e5b718ecb1c17d917c181e3b2dfaecccefa251a009598bc898ac620caf11970fa5b34"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x9}]}}]}, 0x364}}, 0x0) (async) r7 = socket$kcm(0x10, 0x2, 0x0) socket$key(0xf, 0x3, 0x2) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x10, 0x0, 0x0) (async) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) 24.144543457s ago: executing program 2 (id=1189): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x2, 0x34343452, 0x3, 0x303, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}) 23.537679978s ago: executing program 2 (id=1191): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x9, 0x14, 0xbf, 0x20, 0xac8, 0xc301, 0x82d5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x53, 0x8, 0x98}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000cc0)="13", 0x1}, {&(0x7f00000007c0)="b5", 0x1}, {&(0x7f00000005c0)="ef", 0x1}, {&(0x7f0000000380)="cb", 0x1}, {&(0x7f00000003c0)="e7", 0x1}, {&(0x7f0000000b00)="c8", 0x1}, {&(0x7f0000000040)="b148b0", 0x3}, {&(0x7f00000000c0)="f6259dca", 0x4}, {&(0x7f0000000100)="56f020", 0x3}], 0x9, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x21, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@ldst={0x0, 0x2, 0x1, 0x9, 0x0, 0x80}, @exit, @ringbuf_query, @exit, @cb_func={0x18, 0x4}, @call={0x85, 0x0, 0x0, 0x7f}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x6, 0xc, &(0x7f0000000100)=""/12, 0x40f00, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x1287d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000380)={0x0, r3}, 0x10) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) fdatasync(r4) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_GET_TSC(0x43, 0x0) r6 = socket(0x11, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r6, &(0x7f0000000180)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r6, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000300)}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000200001000000000000fdffff80000000000000000000000008000d"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$sysctl(r5, &(0x7f0000000300)='1\x00', 0xffffff4a) write$sysctl(r5, &(0x7f0000000000)='2\x00', 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r10 = syz_io_uring_setup(0x24b9, 0x0, &(0x7f0000000100), &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) io_uring_register$IORING_UNREGISTER_RING_FDS(r10, 0x15, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, 0x0}], 0x1) 21.782080407s ago: executing program 1 (id=1192): r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8) mkdir(&(0x7f0000000080)='./control\x00', 0x88) close(r0) r1 = inotify_init1(0x0) fcntl$setstatus(r0, 0x4, 0x2c00) r2 = gettid() fcntl$setown(r0, 0x8, r2) fcntl$setsig(r1, 0xa, 0xe) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960) rmdir(&(0x7f0000000100)='./control\x00') r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@remote, 0x4e22, 0xeb, 0x4e20, 0x1, 0xa, 0x80, 0x120, 0x73}, {0x5, 0x9, 0x0, 0xeb, 0x70000, 0x5, 0x4, 0x3}, {0x8, 0x7, 0x80000001, 0x400}, 0x6, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in=@rand_addr=0x64010101, 0x4d5, 0x33}, 0x2, @in=@private=0xa010102, 0x3502, 0x4, 0x2, 0x1, 0x201, 0x9, 0xb03}}, 0xe8) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[], 0x0) 20.913402778s ago: executing program 4 (id=1142): r0 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) sendto$inet6(r0, &(0x7f00000002c0)="1c0000001200050f0c1000000049b23e9b200a0008002ec000000001", 0x1c, 0x0, 0x0, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x9b0902, 0x0, '\x00', @value64}}) 20.597983757s ago: executing program 4 (id=1194): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0) syz_usb_disconnect(r1) poll(&(0x7f0000000740)=[{r2}], 0x1, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r3 = syz_io_uring_setup(0x55e1, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000280)=@un=@file={0x0, './file0\x00'}}) io_uring_enter(r3, 0x4d92, 0x0, 0x0, 0x0, 0x7d) 18.529698609s ago: executing program 2 (id=1195): ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0xd, 0xfffffffffffffffd, 0x4}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) (async) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_pidfd_open(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x1a9001) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r6, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r6, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r7, 0x0, 0x5, 0x1ffffffff}) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000380)={0xc}) r9 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r9, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r8, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r10, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000080)={0x28, 0x2, r11, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000040)}) (async) ioctl$IOMMU_HWPT_ALLOC$TEST(r6, 0x3b89, &(0x7f0000000080)={0x28, 0x2, r11, r7, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000040)}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x28, r5, 0x5, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)={0x28, r5, 0x5, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings]}, 0x28}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0x7ff, 0x0, 0x0, 0x2736c9c8, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) 18.383033015s ago: executing program 4 (id=1196): r0 = socket$qrtr(0x2a, 0x2, 0x0) syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036b40f202104a000e1c80000000109024500010000000009040000020202ff00052406000105240000000d240f010000000000f2"], 0x0) sendmsg$sock(r0, &(0x7f0000000740)={&(0x7f00000001c0)=@qipcrtr={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)='w', 0x1}, {0x0}], 0x2}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5421, &(0x7f00000000c0)=0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000180)=0x1, 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) close(r1) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@nat={'nat\x00', 0x19, 0x3, 0x3a2, [0x20000780, 0x0, 0x0, 0x200008c6, 0x200008f6], 0x0, &(0x7f0000000040), &(0x7f0000000b40)=ANY=[@ANYBLOB="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"]}, 0x510) 18.375129876s ago: executing program 0 (id=1197): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000a0000000000000000000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bf8100000000000007010000a8d5b100bfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001002000b705000008000000850000000800000095"], &(0x7f0000000300)='GPL\x00', 0x3, 0xff7, &(0x7f0000001e00)=""/4087, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 18.210806127s ago: executing program 1 (id=1198): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) mq_open(0x0, 0x80, 0x9, &(0x7f0000000000)={0x0, 0x0, 0x1, 0xfffffffffffffffb}) capset(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x2, &(0x7f0000000140)=0xfffffffffffffff7) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) keyctl$setperm(0x5, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) munmap(&(0x7f0000ece000/0x2000)=nil, 0x2000) socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) add_key$user(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) timer_create(0x0, 0x0, 0x0) dup(0xffffffffffffffff) unshare(0x26020280) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 17.997848892s ago: executing program 0 (id=1199): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x3, 0x6) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f0000000200)='./bus\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001a00010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="0000000008000200000000001400", @ANYRES64=r2], 0x38}}, 0x0) r3 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffefe, 0x10100, 0x80004, 0x198, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b702000000000000060000000000000005000000c40000009500000000000000adbd474a8d316bbefea59d8186778c7cb106d7747d90ca283f884e0206d9106f69eeb7bbc32e2b8a280d3428e6334cabbe3a88ee6f3a4c42077b828c29afe4a9"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xb579, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) r8 = socket(0x2c, 0x803, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r8, 0x84, 0xf, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f00000006c0)={'vxcan1\x00', 0x0}) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r10, &(0x7f0000000040)={&(0x7f0000000080)={0x1d, r9, 0x10000000}, 0x10, &(0x7f00000003c0)={&(0x7f0000000180)={0x4, 0x0, 0x0, {0x0, 0xea60}, {}, {}, 0x1, @can={{}, 0xfc, 0x0, 0x4, 0x0, "63bad47c2fbf2948"}}, 0x48}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r12 = gettid() fcntl$lock(r11, 0x26, &(0x7f0000002000)={0x1, 0x0, 0x20003, 0x803, r12}) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="2400000076000907000000000000000007020000", @ANYRES32=0x0, @ANYBLOB="0c000d80080003000000003a"], 0x24}, 0x1, 0x5502000000000000}, 0x0) r13 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r13, 0xc0285700, &(0x7f0000000180)={0x1000, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"}) 15.502026668s ago: executing program 3 (id=1200): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[@ANYBLOB="120100001517ee40f00a057a0000010203010902120001000000000904000000ff0549008691375f4b0d5ff4ca19d3048f393b76d7f49c509c8032d510771e8f9ef2abb2cbcc9e00e313acbb1bd2bbf1db7c"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40500000000000071109600000000000600000000000000950000000000000059e9185050077ed5a63981908f3ae2e1678e54e135fdfa4ba0cba0781e40a2c733fe75d03463d6ac98fa0d6b478f29df9fb8c6ee6d09a9a489f52b3f1d8fe337"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000ac0)={0x0, 0x0, 0x11, "0790fcc6c83ed711efba22764d06f291ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_pidfd_open(0x0, 0x0) setns(0xffffffffffffffff, 0x4000000) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000001c0)={0x5e, 0x1c, '\x00', [@generic={0x8, 0x56, "573d7321210b803a0d72b68903d3d5488afd1b77f307a3fb62c4de05d6d4e3d1364c8f9c3357acd74a41fff9bb7c92f343528520e21564c5a0401a8f2c354c1669e392491e24af8aa3c8b7996b7f47ea66b0da49c300"}, @enc_lim={0x4, 0x1, 0x4}, @ra={0x5, 0x2, 0x100}, @generic={0x2, 0x3f, "1423ca3df9fb6fcb10ad46987efe3ca62eb3f31d6390ae1ff32f2a39d4a3cfe51618919dfc0c0d99624319cb67c4a35d97c30ed7954ae0e5765006ba1c1f3f"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x2, 0x6, [0x7f, 0x80, 0x9, 0x401, 0x1ff, 0x7, 0x3]}}]}, 0xf0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r3, 0x400, 0x1) truncate(&(0x7f0000000000)='./file1\x00', 0x0) close(r3) syz_emit_ethernet(0x46, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff0000c500000086dd602f6092c8f8a30354c0000000000000000000766ff1a00ecf746a6f772a690d8c00000000bbff02000000000000000000000000000186009372ea8afb959960d1778d6de841ea9e2b5ae050bb80ca5e289a071d3849b73a55734f4a48bd37195587c123c5732678ac13d38818d61a84803a2d"], 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) 10.988943404s ago: executing program 4 (id=1201): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0x1ffffe, 0x10100, 0x0, 0x0, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) bind$unix(r1, &(0x7f0000000080)=@abs={0x0, 0x0, 0x4e23}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000040), 0x4) r6 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, 0x0, 0x0) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50}, 0x50) write$FUSE_DIRENT(r6, &(0x7f0000000140)={0x30, 0x0, 0x0, [{0x1, 0x4, 0x2, 0x6, '{-'}]}, 0x30) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, "77746a315690a576", "07f217bd2e511e465bbbd5de32b495b2f9044677d4d588360663af84db44be59", "9bba8c07", "f37f20e2ff799aae"}, 0x38) write$binfmt_aout(r5, 0x0, 0xfdef) close(r5) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643d94ff7efbf70e4edbdcc1d3d645b9747194d9d87884b4e973ce9d97aa2a21a8956ef936e07542a9b28586ab377b096f94f10812275eb3c0e54d89ee1946e19ced30cea71122898056a141226ba14c40a1f47bd4bda3ceb4aa18ea5a6f6bd7038df7000000000000", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r8, &(0x7f00000077c0)={0x2020}, 0x2020) syz_fuse_handle_req(r8, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.85514271s ago: executing program 1 (id=1202): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={r1, @in={{0x2, 0x4e20, @local}}, 0x0, 0x0, 0x989, 0x0, 0x50, 0xc, 0x4}, 0x9c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) ioctl$KVM_SET_CPUID2(r4, 0x4008ae90, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000100000000000400000000000000000000000000ffff"]) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="01"]) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r0, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) writev(r0, &(0x7f0000000580)=[{&(0x7f00000003c0)='k', 0x1600}], 0x1) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56041, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000001300)={"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"}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000000), 0xfea7) r8 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_STD(r8, 0x40085618, &(0x7f0000000040)=0x10000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0) write(r0, &(0x7f0000000340)="99", 0x1) 7.551336023s ago: executing program 3 (id=1205): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, &(0x7f0000000100)=@get={0x1, &(0x7f00000000c0)=""/21, 0x8}) (async) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x73, 0x0) (async) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000000000)={0x1a, {"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", 0x1000}}, 0x1006) ioctl$VIDIOC_TRY_DECODER_CMD(r1, 0xc0585605, &(0x7f0000000100)={0x1, 0x1, @raw_data}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$unix(0x1, 0x5, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000020000000000a01040000000000000000010000000900010073797a30000000002c000000050001020000000f03000000070000000900010073797a30000000000900030073797a310000000030000000060a010400000000000000000100000008000b400000000008000940000000030900010073797a3000000000140000001100010000000000000000000000000aa8f9f22fc035c0788c9ec98d670a7ab97254247c3a21459eb1999277211277fffaa479b2c01dca728d7092be10d58442ef25085ecca3b8709b347868ecdc3d6a9843f8ce7568d3b2285a3c33dff90035cba82c054b7aeb596e1dfd7a009d08c623fca31fcd71d10667569df7e592f83f6f42112a527b0e"], 0xa4}}, 0x0) mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2, &(0x7f0000000180)=0x64, 0x8, 0x0) r5 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, 0x0) (async) r6 = syz_io_uring_setup(0x1f2e, &(0x7f0000001380)={0x0, 0x0, 0x40}, &(0x7f0000001400), &(0x7f0000001440)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r6, 0xb, &(0x7f0000000140)=[@ioring_restriction_sqe_op={0x1, 0x63b3f41388fb8d45}], 0x1) write$apparmor_current(r5, &(0x7f0000000100)=ANY=[@ANYBLOB='permhat 0m0000000000000002^'], 0x1b) (async) r7 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$RTC_WKALM_SET(r7, 0x4028700f, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r8 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0xd175, 0x82800) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r8, 0x81785501, 0x0) 7.038134831s ago: executing program 1 (id=1206): r0 = syz_io_uring_setup(0x55e1, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000280)=@un=@file={0x0, './file0\x00'}}) io_uring_enter(r0, 0x4d92, 0x0, 0x0, 0x0, 0x7d) 7.009505821s ago: executing program 3 (id=1207): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0x1c8, 0x1c8, 0xffffffff, 0x4, &(0x7f0000000840), {[{{@ip={@private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 'veth1\x00', 'bond0\x00', {0xff}, {}, 0x5e, 0x2, 0x4c}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x2}}}, {{@ip={@broadcast, @loopback, 0xff000000, 0xffffff, 'veth0_to_bond\x00', 'dvmrp1\x00', {}, {}, 0x4, 0x0, 0x9}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x400, 0x10}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000000)={0x13, 0x10, 0x7, {0x0, r2, 0x1}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) write$RDMA_USER_CM_CMD_MIGRATE_ID(0xffffffffffffffff, &(0x7f0000000800)={0x12, 0x10, 0xfa00, {&(0x7f0000000380), r2, r3}}, 0x18) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000b00)={&(0x7f0000001340)=@hci={0x1f, 0x0, 0x2}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)="6203a105d755af176510122f1eafbcf72be12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e24732faf215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7dfd652684d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca2d74d9a4de33", 0xda}, {&(0x7f00000014c0)="294f28dfe56d898ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0105869a804dd2a44cb2e32e2bf367e9d01a5e7380cc4fc8e7c9044cc4750b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a36a8b449955e83e91b379c179017f8f4657d1b22eca6bca33036d33e1a684059c53cea91c8f637ac780ab2bcf85f774b0d4e5876fe9aee4724b7cb59731c97e70ebd706003994eb07de2f3c6a9448c3206cff6d290b433f331c2399", 0xbe}, {&(0x7f0000000040)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdceb48bbd3b52d4c229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5f63c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be9f653f977f16", 0xb8}, {&(0x7f0000000440)="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", 0x358}, {&(0x7f0000000280)="b8d35a42b724f5117efd3ff06558a16b478b", 0x12}, {&(0x7f000001f4c0)="550c6d32758c9c16ffa4f109b112c63389068bee461d1744b4bf458233d3294ababe6c28c97e2640f849c401a026827bfb3d48b3b006ca", 0x37}, {&(0x7f0000000340)="87", 0x1}], 0x7}, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000002c0), 0x161c01, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) ppoll(&(0x7f0000000140)=[{}], 0x1, 0x0, 0x0, 0x0) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r4, 0xaf01, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000480)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c0001000004000904000001c6cbea000905", @ANYRES64], 0x0) socket$packet(0x11, 0x2, 0x300) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r5, 0x0, 0xfdaa) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x4) ioctl$KDGKBLED(0xffffffffffffffff, 0x4b64, &(0x7f0000000040)) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000100)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) r6 = openat$sequencer(0xffffff9c, &(0x7f0000000140), 0x1002, 0x0) ioctl$SNDCTL_SEQ_GETINCOUNT(r6, 0x80045105, &(0x7f0000000180)) 6.642955896s ago: executing program 1 (id=1208): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/custom0\x00', 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x100, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in=@remote, 0x0, 0x4}}, 0xe8) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x4c, 0x0, &(0x7f0000000600)=[@release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000680)={@fda={0x66646185, 0x1, 0x0, 0x40}, @flat=@weak_binder={0x77622a85, 0x1001, 0x3}, @flat=@weak_binder={0x77622a85, 0xb, 0x3}}, &(0x7f0000000540)={0x0, 0x20, 0x38}}}], 0x0, 0x0, 0x0}) r4 = dup3(r1, r0, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x101, 0x2, 0x1, {0xa, 0x4e22, 0x6, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x4}}}, 0x32) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYRES8=r1, @ANYBLOB="b4f45e66c0b1dc1f5ae851670687fc", @ANYRES16=r0], 0x34}}, 0x20) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000300)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000000)=[@increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0}) r9 = dup3(r8, r7, 0x0) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0xffffffff7ffffffc) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r7, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 5.970293155s ago: executing program 1 (id=1209): sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200058c0}, 0x40000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x98}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde, 0x0, 0x0, 0x8}, {0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000300)=0x1) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000600)={"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"}) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0x0, 0x7ffffffd}, 0x20) connect$l2tp6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x20) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000802, r7, &(0x7f0000000580)={0xfffffffffffffffd, 0x2524, 0x3ff, 0x10000, 0x5, 0xa, 0x4, 0x600000000000000, 0x2}) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f91324fc60", 0x8c0}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000001200)={0x1d, r9}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000bc0)=@bridge_delneigh={0x9c, 0x1d, 0x100, 0x70bd25, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x0, 0x20, 0x88, 0x1}, [@NDA_FLAGS_EXT={0x8}, @NDA_FDB_EXT_ATTRS={0x2c, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x2}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0xe}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9}, @NFEA_DONT_REFRESH={0x4}, @NFEA_DONT_REFRESH={0x4}]}, @NDA_FLAGS_EXT={0x8, 0xf, 0x3e7000403ba28ae1}, @NDA_IFINDEX={0x8}, @NDA_DST_IPV4={0x8, 0x1, @rand_addr=0x64010102}, @NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_IFINDEX={0x8, 0x8, r9}, @NDA_FDB_EXT_ATTRS={0x1c, 0xe, 0x0, 0x1, [@NFEA_DONT_REFRESH={0x4}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x9d}, @NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5}, @NFEA_DONT_REFRESH={0x4}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x40800}, 0x810) sendmsg$nl_generic(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000a00)=ANY=[@ANYBLOB="200040002d0000012abd560023e2ce6c601955b2001100445ddc28d1156385b08ee123d891aca4b0f22c05a9dcb2eb77f7d69f624048b54f83b6d24e76800d8d0f4406959f2315b0b5f3b2aeb9897a07a960e9951633c5f00dfe1ac3640334700a1cc7a75fd8fd9a88c6e9b78f959931fc081eabc066b0109a30234d930173e983199a2fe62593f3d87231c4db0a515544ae6d8dcb4d1df9819e26bc382fd57f88d5737963e6f4f564b27849a049644ea6ad284116963ffcb0"], 0x20}, 0x1, 0x0, 0x0, 0x2009004}, 0x4000014) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x54, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000040)={0xb, 0x3, 0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.635715196s ago: executing program 3 (id=1210): r0 = openat$rdma_cm(0xffffff9c, &(0x7f00000006c0), 0x2, 0x0) (async) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f00000001c0)=0x0) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="02180000100000000000000000000000030006000000000002000004000000000000000000000000080012000000000000000000000000003000000000000000000000000000000002000001000000000000000000000000fc020000000000000000000000000000030005000000000002"], 0x80}}, 0x0) (async) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd_index=0x3}) (async) io_uring_enter(r1, 0x2def, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000880)={0xc, 0x8, 0xfa00, {0x0}}, 0x10) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000d00)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000cc0)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000d40)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x40000, @loopback}, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, r5}}, 0x48) (async) mq_open(&(0x7f0000000040)='/dev/infiniband/rdma_cm\x00', 0x800, 0x1, &(0x7f0000000140)={0xdf65, 0x6, 0x7}) 2.632639898s ago: executing program 3 (id=1211): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x573b0fe9, 0x0, {{0x26, 0x4, 0x0, 0x1, 0x98, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x1000, 0x5, 0x0, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x34, 0xc0, 0x3, 0x0, [{@multicast1, 0x5}, {@dev, 0x659}, {@broadcast, 0x8000}, {@empty}, {@multicast1, 0xffd200}, {@private=0xfffffffd}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast2, 0x3}, {@private=0xa010101}, {}, {@broadcast}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@private, @rand_addr]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f00000000c0)=0x100000, 0x4) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x2f) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @random="c5f9772bb146", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x10, 0x300}}}}}}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000004c0)={0x3, @pix_mp={0x3, 0x5, 0x43564548, 0x2, 0xd, [{}, {0x7ff, 0x2}, {0x8}, {0xe, 0x7}, {0x9, 0xfffffffc}, {0x1, 0x9}, {0x1, 0x1}, {0x10000, 0x40000}], 0x6, 0x6, 0xc, 0x0, 0x7}}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000280)={&(0x7f00000000c0)="1004b1ce3ece5ebbaf0852c84b9fcec8516ab78e1c714198784ca463ff181a1dd552fe399aeddfdd9a27ccf659790d546b3ca877b990ad912ca4b37ea5cf0d1916b79c09849aa07a9fabcc5207d001f4823750c3084a3b0054489a443bcbc071ad725b763fa9b384689636dc691aac455b5e1c031601b18fc455e5237f", &(0x7f0000000380)=""/186, &(0x7f0000000180)="954936237f1068f7e94a22a3ab287f975d11a9550b62c4a6a98776f44e655b2950ee8c9c752898cf220f", &(0x7f0000000440)="8019709d61162e5206094b830c8696aa90e9a0c329af9c970f951384416347bca5890fa2bd2ff5e26491385f04d674566782ab9a54a5208fb2778fdf0a1562ef65f1d912d82786a871248b421ce3608c89ca1c3156607d17ac3966ee8a01a19035f52bb8570c", 0x7, r4, 0x4}, 0x38) r5 = dup(r1) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) rt_sigaction(0x1b, &(0x7f0000000680)={&(0x7f00000005c0)="c4e1e973f53d660f3ace0c22023e0f38f621c403d95fc1000f525d820fddc364662e660fdb39c4e30d5fe811f3400fa7e8c4c15b7d99f2760000", 0x2, &(0x7f0000000600)="f30f43d13e26460f00a081ae9757c4419d152d00000021810a3e2333338f8878c0d3d866430f6f81090000000fe5b20df0ffffc46179d63065438095cc00000000c461e55d6fba", {[0x9af7]}}, &(0x7f0000000740)={&(0x7f00000006c0)="c4e2859ee9470f0f189a420fdf6e43f30f10c6672e0fc67afd0ec4224db7a446000000806664f3a545834800908f6844a20b26c483e921a0636a000032", 0x0, &(0x7f0000000700)="d82cc1410ff7ed660f5dc8c403d50cf900c483d15e68a90f8fa978d280834cc85cc48195eda203000000470f381cbb77cb0000a5c481d9fd39"}, 0x8, &(0x7f0000000780)) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) 0s ago: executing program 3 (id=1213): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100003afe0620e6040b000001010203010902240001000010000904140002a024260009050602ff03000000090582020800000000"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x4000010, 0xffffffffffffffff, 0x0) write$P9_RWALK(r2, &(0x7f00000001c0)=ANY=[@ANYBLOB="160000006f010001200400"/22], 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x800c10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f00000002c0)={0x50, 0x0, r5, {0x7, 0x1f, 0xffffffff, 0x90c20, 0x0, 0xfffc}}, 0x50) r6 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r6, 0xc0884113, &(0x7f0000000280)={0x0, 0x7ff, 0xfffffff8, 0x2, 0xff, 0x0, 0x9, 0x0, 0x9, 0x81, 0x9, 0x5}) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f00000093c0)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x78, 0x0, 0x8, {0x3fe, 0xfffffffd, 0x0, {0x0, 0x0, 0x4000000, 0x400000000000000, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x8000, 0xfffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) write$binfmt_elf32(r7, &(0x7f0000000d00)=ANY=[], 0x1001) io_setup(0x1fe, &(0x7f0000000200)=0x0) io_submit(r8, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r7, 0x0}]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x401) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0xc000, 0x0, 0x0) kernel console output (not intermixed with test programs): c+0xf2/0x340 [ 396.219702][T11500] ? __get_vm_area_node+0x23d/0x270 [ 396.224911][T11500] __vmalloc_node_range_noprof+0x691/0x13f0 [ 396.230807][T11500] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 396.236780][T11500] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 396.243096][T11500] ? vb2_vmalloc_alloc+0xf2/0x340 [ 396.248128][T11500] ? __get_vm_area_node+0x23d/0x270 [ 396.253343][T11500] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 396.259229][T11500] ? vb2_vmalloc_alloc+0xf2/0x340 [ 396.264261][T11500] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 396.270592][T11500] ? __kasan_kmalloc+0x98/0xb0 [ 396.275455][T11500] ? vb2_vmalloc_alloc+0xb5/0x340 [ 396.280482][T11500] vmalloc_user_noprof+0x74/0x80 [ 396.285443][T11500] ? vb2_vmalloc_alloc+0xf2/0x340 [ 396.290466][T11500] vb2_vmalloc_alloc+0xf2/0x340 [ 396.295331][T11500] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 396.300778][T11500] __vb2_queue_alloc+0xa0b/0x16f0 [ 396.305811][T11500] vb2_core_create_bufs+0x825/0x1040 [ 396.311103][T11500] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 396.316827][T11500] ? __pfx___might_resched+0x10/0x10 [ 396.322104][T11500] ? vb2_set_flags_and_caps+0x2f7/0x5e0 [ 396.327675][T11500] vb2_create_bufs+0x60e/0xdd0 [ 396.332429][T11500] ? __pfx_vb2_create_bufs+0x10/0x10 [ 396.337699][T11500] ? __mutex_lock+0x2ef/0xd70 [ 396.342359][T11500] ? vb2_set_flags_and_caps+0x2f7/0x5e0 [ 396.347897][T11500] vb2_ioctl_create_bufs+0x2b7/0x400 [ 396.353170][T11500] v4l_create_bufs+0x18b/0x2a0 [ 396.357929][T11500] __video_do_ioctl+0xc23/0xdd0 [ 396.362776][T11500] ? __pfx___video_do_ioctl+0x10/0x10 [ 396.368138][T11500] ? __might_fault+0xc6/0x120 [ 396.372801][T11500] video_usercopy+0x89b/0x1180 [ 396.377568][T11500] ? __pfx___video_do_ioctl+0x10/0x10 [ 396.382936][T11500] ? __pfx_video_usercopy+0x10/0x10 [ 396.388127][T11500] ? __fget_files+0x29/0x470 [ 396.392706][T11500] ? __fget_files+0x3f3/0x470 [ 396.397369][T11500] v4l2_ioctl+0x189/0x1e0 [ 396.401688][T11500] ? __pfx_v4l2_ioctl+0x10/0x10 [ 396.406530][T11500] __se_sys_ioctl+0xf9/0x170 [ 396.411114][T11500] do_syscall_64+0xf3/0x230 [ 396.415622][T11500] ? clear_bhb_loop+0x35/0x90 [ 396.420290][T11500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.426191][T11500] RIP: 0033:0x7f411137dff9 [ 396.430595][T11500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.450201][T11500] RSP: 002b:00007f41121c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 396.458620][T11500] RAX: ffffffffffffffda RBX: 00007f4111535f80 RCX: 00007f411137dff9 [ 396.466580][T11500] RDX: 0000000020000140 RSI: 00000000c100565c RDI: 0000000000000005 [ 396.474541][T11500] RBP: 00007f41113f0296 R08: 0000000000000000 R09: 0000000000000000 [ 396.482528][T11500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 396.490505][T11500] R13: 0000000000000000 R14: 00007f4111535f80 R15: 00007f411165fa28 [ 396.498483][T11500] [ 396.556940][T11500] Mem-Info: [ 396.564796][T11500] active_anon:10629 inactive_anon:1 isolated_anon:0 [ 396.564796][T11500] active_file:18823 inactive_file:38448 isolated_file:0 [ 396.564796][T11500] unevictable:768 dirty:269 writeback:0 [ 396.564796][T11500] slab_reclaimable:9504 slab_unreclaimable:101982 [ 396.564796][T11500] mapped:22893 shmem:5327 pagetables:929 [ 396.564796][T11500] sec_pagetables:0 bounce:0 [ 396.564796][T11500] kernel_misc_reclaimable:0 [ 396.564796][T11500] free:1293729 free_pcp:3666 free_cma:0 [ 396.611768][ T941] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 396.643241][ T941] usb 3-1: device descriptor read/8, error -71 [ 396.646956][T11500] Node 0 active_anon:42616kB inactive_anon:4kB active_file:75288kB inactive_file:153716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:91568kB dirty:1072kB writeback:0kB shmem:19772kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10524kB pagetables:3716kB sec_pagetables:0kB all_unreclaimable? no [ 396.699051][T11500] Node 1 active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:4kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 396.734532][T11500] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 396.734803][T11500] lowmem_reserve[]: 0 2465 2466 0 0 [ 396.734833][T11500] Node 0 DMA32 free:1239980kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:42676kB inactive_anon:4kB active_file:75288kB inactive_file:152880kB unevictable:1536kB writepending:1068kB present:3129332kB managed:2552500kB mlocked:0kB bounce:0kB free_pcp:2644kB local_pcp:1588kB free_cma:0kB [ 396.734867][T11500] lowmem_reserve[]: 0 0 0 0 0 [ 396.734895][T11500] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:836kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 396.734926][T11500] lowmem_reserve[]: 0 0 0 0 0 [ 396.734953][T11500] Node 1 Normal free:3931152kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:4kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 396.734986][T11500] lowmem_reserve[]: 0 0 0 0 0 [ 396.735013][T11500] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 396.735137][T11500] Node 0 DMA32: 9*4kB (UME) 281*8kB (ME) 206*16kB (UME) 296*32kB (ME) 275*64kB (ME) 123*128kB (UME) 66*256kB (UME) 32*512kB (ME) 17*1024kB (UM) 5*2048kB (UME) 276*4096kB (UM) = 1239820kB [ 396.735253][T11500] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 396.735323][T11500] Node 1 Normal: 170*4kB (UME) 59*8kB (UME) 35*16kB (UE) 153*32kB (UME) 81*64kB (UME) 22*128kB (UME) 15*256kB (UME) 8*512kB (UM) 5*1024kB (UME) 4*2048kB (UE) 951*4096kB (M) = 3931152kB [ 396.735453][T11500] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 396.735465][T11500] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 396.735475][T11500] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 396.735485][T11500] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 396.735495][T11500] 62599 total pagecache pages [ 396.735501][T11500] 1 pages in swap cache [ 396.735508][T11500] Free swap = 124432kB [ 396.735514][T11500] Total swap = 124996kB [ 396.735520][T11500] 2097051 pages RAM [ 396.735526][T11500] 0 pages HighMem/MovableOnly [ 396.735531][T11500] 427076 pages reserved [ 396.735536][T11500] 0 pages cma reserved [ 396.911872][ T941] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 396.960260][ T941] usb 3-1: device descriptor read/8, error -71 [ 397.093454][ T941] usb usb3-port1: unable to enumerate USB device [ 397.300353][ T5354] usb 4-1: new high-speed USB device number 90 using dummy_hcd [ 397.314429][T11555] program syz.4.1063 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 397.423043][ T5285] usb 1-1: USB disconnect, device number 77 [ 397.450129][ T5354] usb 4-1: Using ep0 maxpacket: 32 [ 397.456990][ T5354] usb 4-1: config 0 has an invalid interface number: 219 but max is 0 [ 397.482490][ T5354] usb 4-1: config 0 has no interface number 0 [ 397.500181][ T5354] usb 4-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 397.554551][ T5354] usb 4-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 397.600773][ T5354] usb 4-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024 [ 397.640129][ T5354] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 397.681855][ T5354] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 397.700508][ T5346] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 397.712442][ T5354] usb 4-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 397.752127][ T5354] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9 [ 397.771148][ T5354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 397.779219][ T5354] usb 4-1: Product: syz [ 397.804224][ T5354] usb 4-1: Manufacturer: syz [ 397.820161][ T5354] usb 4-1: SerialNumber: syz [ 397.826694][ T5354] usb 4-1: config 0 descriptor?? [ 397.841064][T11551] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 397.848362][T11551] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22 [ 397.871174][T11579] input: syz0 as /devices/virtual/input/input84 [ 397.890718][ T5346] usb 5-1: Using ep0 maxpacket: 8 [ 397.914149][ T5346] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 397.925489][ T5346] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 8 [ 397.941582][ T5346] usb 5-1: config 1 interface 0 has no altsetting 0 [ 397.988267][ T5346] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 398.000616][ T5280] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 398.012849][ T5346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.028747][ T5346] usb 5-1: Product: Й [ 398.048193][ T5346] usb 5-1: Manufacturer: Ж [ 398.057310][ T5346] usb 5-1: SerialNumber: syz [ 398.078978][T11560] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 398.094404][T11560] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 398.129134][T11551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.148981][T11551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.211217][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 398.227294][ T5354] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz) [ 398.240705][ T5354] etas_es58x 4-1:0.219: could not retrieve the product info string [ 398.248298][ T5280] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 398.266623][ T5280] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 398.290174][ T5280] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 398.294796][ T5354] usb 4-1: USB disconnect, device number 90 [ 398.330355][ T5354] etas_es58x 4-1:0.219: Disconnecting syz syz [ 398.331155][T11560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.354792][T11560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.370429][ T5280] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.393693][T11560] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.428210][T11560] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.443061][ T5280] usb 1-1: config 0 descriptor?? [ 398.505747][ T5346] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 398.544361][ T5346] usb 5-1: USB disconnect, device number 75 [ 398.862393][T11585] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.869749][T11585] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.879817][T11585] bridge0: entered allmulticast mode [ 398.897664][ T5280] plantronics 0003:047F:FFFF.0022: unknown main item tag 0x0 [ 398.905984][ T5280] plantronics 0003:047F:FFFF.0022: No inputs registered, leaving [ 398.921297][ T5280] plantronics 0003:047F:FFFF.0022: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 399.110340][ T5284] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 399.220304][ T5280] usb 4-1: new high-speed USB device number 91 using dummy_hcd [ 399.270243][ T5284] usb 3-1: Using ep0 maxpacket: 16 [ 399.281633][ T5284] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA5, changing to 0x85 [ 399.299701][ T5284] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 104 [ 399.300193][ T5346] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 399.310527][ T5284] usb 3-1: New USB device found, idVendor=094c, idProduct=0000, bcdDevice= 0.00 [ 399.341914][ T5284] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 399.361478][ T5284] usb 3-1: config 0 descriptor?? [ 399.367396][T11587] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 399.420157][ T5280] usb 4-1: Using ep0 maxpacket: 32 [ 399.428543][ T5280] usb 4-1: unable to get BOS descriptor or descriptor too short [ 399.437932][ T5280] usb 4-1: config 12 has an invalid interface number: 184 but max is 0 [ 399.458185][ T5280] usb 4-1: config 12 has no interface number 0 [ 399.467188][ T5280] usb 4-1: New USB device found, idVendor=0499, idProduct=100d, bcdDevice=84.a2 [ 399.476818][ T5280] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.485216][ T5280] usb 4-1: Product: syz [ 399.489476][ T5280] usb 4-1: Manufacturer: syz [ 399.494433][ T5346] usb 5-1: Using ep0 maxpacket: 32 [ 399.499664][ T5280] usb 4-1: SerialNumber: syz [ 399.505985][ T5346] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 399.515362][ T5346] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 399.532502][ T5346] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 399.544026][ T5346] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 399.558359][ T5346] usb 5-1: config 0 interface 0 has no altsetting 0 [ 399.568360][ T5346] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 399.579600][ T5346] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 399.585332][T11599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.588577][ T5346] usb 5-1: Product: syz [ 399.602343][ T5346] usb 5-1: Manufacturer: syz [ 399.607051][ T5346] usb 5-1: SerialNumber: syz [ 399.626090][T11599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.626737][ T5346] usb 5-1: config 0 descriptor?? [ 399.648133][ T5346] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 399.656990][ T5284] usb 3-1: USB disconnect, device number 80 [ 399.667507][ T5346] ldusb 5-1:0.0: LD USB Device #1 now attached to major 180 minor 1 [ 399.742928][ T5280] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 399.778845][ T5280] snd-usb-audio 4-1:12.184: probe with driver snd-usb-audio failed with error -2 [ 399.796575][ T5280] usb 4-1: USB disconnect, device number 91 [ 399.821985][ T5341] udevd[5341]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:12.184/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 399.925590][ T5346] usb 5-1: USB disconnect, device number 76 [ 399.946579][ T5346] ldusb 5-1:0.0: LD USB Device #1 now disconnected [ 400.340868][ T5346] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 400.355256][ T5284] usb 1-1: reset high-speed USB device number 78 using dummy_hcd [ 400.501705][ T5346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 400.530769][ T5346] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 400.557624][ T5346] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 400.585868][ T5346] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 400.599874][ T5346] usb 5-1: New USB device found, idVendor=0451, idProduct=3410, bcdDevice=ef.1e [ 400.617547][ T5346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.625906][ T5346] usb 5-1: Product: syz [ 400.637113][ T5346] usb 5-1: Manufacturer: syz [ 400.642125][ T5346] usb 5-1: SerialNumber: syz [ 400.648927][ T5346] usb 5-1: config 0 descriptor?? [ 400.663587][ T5346] ti_usb_3410_5052 5-1:0.0: TI USB 3410 1 port adapter converter detected [ 400.690624][ T5346] usb 5-1: TI USB 3410 1 port adapter converter now attached to ttyUSB0 [ 400.700167][ T5281] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 401.015024][ T5281] usb 3-1: Using ep0 maxpacket: 8 [ 401.033603][ T5281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.046206][ T5281] usb 3-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice=c3.34 [ 401.070101][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.078179][ T5281] usb 3-1: Product: syz [ 401.101427][ T5281] usb 3-1: Manufacturer: syz [ 401.107893][ T5281] usb 3-1: SerialNumber: syz [ 401.127699][ T5281] usb 3-1: config 0 descriptor?? [ 401.142923][ T5281] sisusb 3-1:0.0: Invalid USB2VGA device [ 401.150604][ T5285] usb 4-1: new high-speed USB device number 92 using dummy_hcd [ 401.166002][ T5281] sisusb 3-1:0.0: probe with driver sisusb failed with error -22 [ 401.208474][ T5346] usb 5-1: USB disconnect, device number 77 [ 401.224429][ T5346] ti_usb_3410_5052_1 ttyUSB0: TI USB 3410 1 port adapter converter now disconnected from ttyUSB0 [ 401.245942][ T5346] ti_usb_3410_5052 5-1:0.0: device disconnected [ 401.315077][ T5285] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 236, changing to 11 [ 401.327069][ T5285] usb 4-1: config 0 interface 0 altsetting 64 endpoint 0x81 has invalid wMaxPacketSize 0 [ 401.339475][ T5332] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.363223][ T5281] usb 3-1: USB disconnect, device number 81 [ 401.373483][ T5285] usb 4-1: config 0 interface 0 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 401.400743][ T5285] usb 4-1: config 0 interface 0 has no altsetting 0 [ 401.417043][ T5285] usb 4-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00 [ 401.437295][ T5285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 401.458045][ T5285] usb 4-1: config 0 descriptor?? [ 401.586516][ T5332] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.734052][ T5332] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.846396][ T4623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 401.857829][ T4623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 401.887349][ T4623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 401.899906][ T5285] lenovo 0003:17EF:6067.0023: hidraw1: USB HID v0.00 Device [HID 17ef:6067] on usb-dummy_hcd.3-1/input0 [ 401.914184][ T4623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 401.925443][ T4623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 401.933897][ T4623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 401.959343][ T5332] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.102783][ T5354] usb 1-1: USB disconnect, device number 78 [ 402.190235][T11621] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 402.216991][ T4623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 402.220456][ T5299] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 402.227555][ T4623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 402.242976][ T4623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 402.263717][ T4623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 402.272293][ T4623] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 402.281300][ T4623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 402.380234][ T5332] bridge_slave_1: left allmulticast mode [ 402.385932][ T5332] bridge_slave_1: left promiscuous mode [ 402.394325][ T5332] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.402813][ T5299] usb 5-1: Using ep0 maxpacket: 8 [ 402.409474][ T5332] bridge_slave_0: left allmulticast mode [ 402.414341][ T5299] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 402.419493][ T5332] bridge_slave_0: left promiscuous mode [ 402.430663][ T5299] usb 5-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 8 [ 402.434647][ T5332] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.450235][ T5346] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 402.467926][T11627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.468503][ T5299] usb 5-1: config 1 interface 0 has no altsetting 0 [ 402.493056][T11627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.499575][ T5299] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 402.511281][ T5299] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.519309][ T5299] usb 5-1: Product: Й [ 402.525793][ T5299] usb 5-1: Manufacturer: Ж [ 402.530481][ T5299] usb 5-1: SerialNumber: syz [ 402.538186][T11618] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 402.546133][T11618] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 402.614026][ T5346] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 402.622982][ T5346] usb 3-1: config 0 has no interface number 0 [ 402.629116][ T5346] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 402.640454][ T5346] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.641358][ T5284] usb 4-1: USB disconnect, device number 92 [ 402.650408][ T5346] usb 3-1: New USB device found, idVendor=5543, idProduct=0522, bcdDevice= 0.00 [ 402.665446][ T5346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.733158][ T5346] usb 3-1: config 0 descriptor?? [ 402.757611][T11618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.785687][T11618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.799696][T11618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.817502][T11618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.857468][ T5299] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 402.878333][ T5299] usb 5-1: USB disconnect, device number 78 [ 403.147768][ T5346] uclogic 0003:5543:0522.0024: unknown main item tag 0x0 [ 403.155561][ T5346] uclogic 0003:5543:0522.0024: unknown main item tag 0x0 [ 403.167165][ T5346] uclogic 0003:5543:0522.0024: unknown main item tag 0x0 [ 403.174490][ T5346] uclogic 0003:5543:0522.0024: unknown main item tag 0x0 [ 403.186669][ T5346] uclogic 0003:5543:0522.0024: unknown main item tag 0x0 [ 403.201109][ T5346] uclogic 0003:5543:0522.0024: No inputs registered, leaving [ 403.239801][ T5346] uclogic 0003:5543:0522.0024: hidraw0: USB HID v0.00 Device [HID 5543:0522] on usb-dummy_hcd.2-1/input2 [ 403.299274][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1091'. [ 403.506130][ T5332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.534407][ T5332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.573176][ T5332] bond0 (unregistering): Released all slaves [ 403.859236][T11619] chnl_net:caif_netlink_parms(): no params data found [ 404.040539][ T4623] Bluetooth: hci0: command tx timeout [ 404.045245][ T5299] usb 3-1: USB disconnect, device number 82 [ 404.285368][ T5332] hsr_slave_0: left promiscuous mode [ 404.293568][ T5332] hsr_slave_1: left promiscuous mode [ 404.313674][ T5332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.351367][ T5332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.360917][ T4623] Bluetooth: hci2: command tx timeout [ 404.377308][ T5332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.397219][ T5332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.422190][ T5332] veth1_macvtap: left promiscuous mode [ 404.427886][ T5332] veth0_macvtap: left promiscuous mode [ 404.434039][ T5332] veth1_vlan: left promiscuous mode [ 404.439521][ T5332] veth0_vlan: left promiscuous mode [ 404.492040][T11682] binder: BINDER_SET_CONTEXT_MGR already set [ 404.498076][T11682] binder: 11680:11682 ioctl 40046207 0 returned -16 [ 405.093691][ T5332] team0 (unregistering): Port device team_slave_1 removed [ 405.143672][ T5332] team0 (unregistering): Port device team_slave_0 removed [ 405.701398][T11682] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 405.708697][T11682] IPv6: NLM_F_CREATE should be set when creating new route [ 405.716062][T11682] IPv6: NLM_F_CREATE should be set when creating new route [ 405.805887][ T5284] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 405.822131][T11619] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.829568][T11619] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.837945][T11619] bridge_slave_0: entered allmulticast mode [ 405.845109][T11619] bridge_slave_0: entered promiscuous mode [ 405.855546][T11619] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.863138][T11619] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.870571][T11619] bridge_slave_1: entered allmulticast mode [ 405.877129][T11619] bridge_slave_1: entered promiscuous mode [ 405.925904][T11625] chnl_net:caif_netlink_parms(): no params data found [ 405.969058][T11619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.989452][ T5284] usb 3-1: Using ep0 maxpacket: 16 [ 406.005483][ T5284] usb 3-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76 [ 406.020373][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.034046][ T5284] usb 3-1: Product: syz [ 406.038339][ T5284] usb 3-1: Manufacturer: syz [ 406.048406][ T5284] usb 3-1: SerialNumber: syz [ 406.059142][T11619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.083037][ T5284] usb 3-1: config 0 descriptor?? [ 406.120365][ T4623] Bluetooth: hci0: command tx timeout [ 406.245816][T11619] team0: Port device team_slave_0 added [ 406.295134][T11619] team0: Port device team_slave_1 added [ 406.318404][T11691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.364406][T11691] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.376245][T11625] bridge0: port 1(bridge_slave_0) entered blocking state [ 406.404759][T11625] bridge0: port 1(bridge_slave_0) entered disabled state [ 406.440298][T11625] bridge_slave_0: entered allmulticast mode [ 406.447707][T11625] bridge_slave_0: entered promiscuous mode [ 406.457584][ T4623] Bluetooth: hci2: command tx timeout [ 406.508232][T11619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.516424][T11619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.545949][T11619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.558987][T11625] bridge0: port 2(bridge_slave_1) entered blocking state [ 406.594324][T11625] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.630382][T11625] bridge_slave_1: entered allmulticast mode [ 406.647715][T11625] bridge_slave_1: entered promiscuous mode [ 406.712755][T11619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.740061][T11619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 406.770405][ T5760] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 406.800308][T11619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.880193][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 406.900180][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 406.908914][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 406.930365][ T5760] usb 5-1: device descriptor read/64, error -71 [ 406.939855][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 406.948641][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 406.957418][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 407.033263][T11619] hsr_slave_0: entered promiscuous mode [ 407.055706][T11619] hsr_slave_1: entered promiscuous mode [ 407.066334][T11619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.074032][T11619] Cannot create hsr debugfs directory [ 407.084955][T11625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.097233][T11625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.139447][T11625] team0: Port device team_slave_0 added [ 407.149338][T11625] team0: Port device team_slave_1 added [ 407.170275][ T5760] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 407.183365][T11625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.190937][T11625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.217675][T11625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 407.238744][T11625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 407.248755][T11625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 407.279831][T11625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 407.330654][ T5760] usb 5-1: device descriptor read/64, error -71 [ 407.387162][ T5332] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.451407][ T5760] usb usb5-port1: attempt power cycle [ 407.513774][T11625] hsr_slave_0: entered promiscuous mode [ 407.529419][T11625] hsr_slave_1: entered promiscuous mode [ 407.536882][T11625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 407.545789][T11625] Cannot create hsr debugfs directory [ 407.583727][ T5332] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.632851][ T5284] usb_8dev 3-1:0.0 can0: sending command message failed [ 407.671249][ T5284] usb_8dev 3-1:0.0 can0: can't get firmware version [ 407.752982][ T5332] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 407.805139][ T5760] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 407.830893][ T5760] usb 5-1: device descriptor read/8, error -71 [ 407.901224][ T5284] usb_8dev 3-1:0.0: probe with driver usb_8dev failed with error -22 [ 407.924655][ T5284] usb 3-1: USB disconnect, device number 83 [ 407.969837][ T5332] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.101491][ T5760] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 408.134111][ T5760] usb 5-1: device descriptor read/8, error -71 [ 408.200197][ T4623] Bluetooth: hci0: command tx timeout [ 408.256221][ T5760] usb usb5-port1: unable to enumerate USB device [ 408.290166][ T5284] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 408.322716][T11716] chnl_net:caif_netlink_parms(): no params data found [ 408.450422][ T5284] usb 3-1: Using ep0 maxpacket: 32 [ 408.481256][ T5284] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 408.502812][ T5284] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.511856][ T5284] usb 3-1: Product: syz [ 408.516062][ T5284] usb 3-1: Manufacturer: syz [ 408.521296][ T5284] usb 3-1: SerialNumber: syz [ 408.530387][ T4623] Bluetooth: hci2: command tx timeout [ 408.545626][ T5284] usb 3-1: config 0 descriptor?? [ 408.568191][ T5284] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 408.591336][ T5332] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.614602][T11716] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.622154][T11716] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.629379][T11716] bridge_slave_0: entered allmulticast mode [ 408.636598][T11716] bridge_slave_0: entered promiscuous mode [ 408.675570][ T5332] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.689468][T11716] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.697151][T11716] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.704918][T11716] bridge_slave_1: entered allmulticast mode [ 408.712014][T11716] bridge_slave_1: entered promiscuous mode [ 408.775786][ T5332] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.813836][T11716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.826624][T11716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.847616][T11619] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 408.882082][ T5332] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.907670][T11619] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 408.924180][T11716] team0: Port device team_slave_0 added [ 408.933674][T11716] team0: Port device team_slave_1 added [ 408.954653][T11619] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 408.984270][T11619] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 409.000790][ T4623] Bluetooth: hci4: command tx timeout [ 409.020575][T11716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 409.027557][T11716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.055753][T11716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 409.087395][T11716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 409.096381][T11716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 409.122513][T11716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.235669][ T5332] bridge_slave_1: left allmulticast mode [ 409.246863][ T5332] bridge_slave_1: left promiscuous mode [ 409.254705][ T5332] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.271771][ T5332] bridge_slave_0: left allmulticast mode [ 409.277455][ T5332] bridge_slave_0: left promiscuous mode [ 409.284555][ T5332] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.299677][ T5332] bridge_slave_1: left allmulticast mode [ 409.305842][ T5332] bridge_slave_1: left promiscuous mode [ 409.311653][ T5332] bridge0: port 2(bridge_slave_1) entered disabled state [ 409.321360][ T5332] bridge_slave_0: left allmulticast mode [ 409.327039][ T5332] bridge_slave_0: left promiscuous mode [ 409.334137][ T5332] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.402440][ T5284] gspca_stk1135: reg_w 0x5 err -71 [ 409.409317][ T5284] gspca_stk1135: serial bus timeout: status=0x00 [ 409.416720][ T5284] gspca_stk1135: Sensor write failed [ 409.430078][ T5284] gspca_stk1135: serial bus timeout: status=0x00 [ 409.436430][ T5284] gspca_stk1135: Sensor write failed [ 409.442447][ T5284] gspca_stk1135: serial bus timeout: status=0x00 [ 409.448808][ T5284] gspca_stk1135: Sensor read failed [ 409.454506][ T5284] gspca_stk1135: serial bus timeout: status=0x00 [ 409.462695][ T5284] gspca_stk1135: Sensor read failed [ 409.467921][ T5284] gspca_stk1135: Detected sensor type unknown (0x0) [ 409.475089][ T5284] gspca_stk1135: serial bus timeout: status=0x00 [ 409.481750][ T5284] gspca_stk1135: Sensor read failed [ 409.488259][ T5284] gspca_stk1135: serial bus timeout: status=0x00 [ 409.496578][ T5284] gspca_stk1135: Sensor read failed [ 409.502171][ T5284] gspca_stk1135: serial bus timeout: status=0x00 [ 409.508524][ T5284] gspca_stk1135: Sensor write failed [ 409.514414][ T5284] gspca_stk1135: serial bus timeout: status=0x00 [ 409.521172][ T5284] gspca_stk1135: Sensor write failed [ 409.526526][ T5284] stk1135 3-1:0.0: probe with driver stk1135 failed with error -71 [ 409.540697][ T5284] usb 3-1: USB disconnect, device number 84 [ 410.218424][ T5332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.245056][ T5332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.247056][ T5332] bond0 (unregistering): Released all slaves [ 410.283017][ T4623] Bluetooth: hci0: command tx timeout [ 410.419324][ T5332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 410.424046][ T5332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 410.429490][ T5332] bond0 (unregistering): Released all slaves [ 410.532302][T11716] hsr_slave_0: entered promiscuous mode [ 410.550954][T11716] hsr_slave_1: entered promiscuous mode [ 410.565991][T11716] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 410.583807][T11716] Cannot create hsr debugfs directory [ 410.606052][ T4623] Bluetooth: hci2: command tx timeout [ 411.081738][ T4623] Bluetooth: hci4: command tx timeout [ 411.215904][T11619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.386214][T11625] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 411.443364][ T5332] hsr_slave_0: left promiscuous mode [ 411.457262][ T5332] hsr_slave_1: left promiscuous mode [ 411.497830][ T5332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.520934][ T5332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.546489][ T5332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.556735][ T5332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.576618][ T5332] hsr_slave_0: left promiscuous mode [ 411.593368][ T5332] hsr_slave_1: left promiscuous mode [ 411.608796][ T5332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.634082][ T5332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.676424][ T5332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.716053][ T5332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.776837][ T5332] veth1_macvtap: left promiscuous mode [ 411.782667][ T5332] veth0_macvtap: left promiscuous mode [ 411.788271][ T5332] veth1_vlan: left promiscuous mode [ 411.813035][ T5332] veth0_vlan: left promiscuous mode [ 411.871547][ T5332] veth1_macvtap: left promiscuous mode [ 411.877125][ T5332] veth0_macvtap: left promiscuous mode [ 411.888328][ T5332] veth1_vlan: left promiscuous mode [ 411.895954][ T5332] veth0_vlan: left promiscuous mode [ 413.014099][ T5332] team0 (unregistering): Port device team_slave_1 removed [ 413.066111][ T5332] team0 (unregistering): Port device team_slave_0 removed [ 413.150253][ T5760] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 413.163462][ T4623] Bluetooth: hci4: command tx timeout [ 413.331728][ T5760] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 413.340468][ T5760] usb 3-1: config 0 has no interface number 0 [ 413.349993][ T5760] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 413.359180][ T5760] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.367545][ T5760] usb 3-1: Product: syz [ 413.372025][ T5760] usb 3-1: Manufacturer: syz [ 413.377508][ T5760] usb 3-1: SerialNumber: syz [ 413.389632][ T5760] usb 3-1: config 0 descriptor?? [ 413.411501][ T5760] ims_pcu 3-1:0.41: probe with driver ims_pcu failed with error -22 [ 413.986635][ T5332] team0 (unregistering): Port device team_slave_1 removed [ 414.033446][ T5332] team0 (unregistering): Port device team_slave_0 removed [ 414.529168][T11625] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 414.538656][T11625] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 414.606593][ T5760] usb 3-1: USB disconnect, device number 85 [ 414.608144][T11619] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.627997][T11625] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 414.690610][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.697727][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.721556][ T7596] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.728678][ T7596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.018019][T11625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.084053][T11619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.108415][T11625] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.201997][ T5330] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.209152][ T5330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.257060][ T4623] Bluetooth: hci4: command tx timeout [ 415.316394][ T2880] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.323526][ T2880] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.547587][T11716] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 415.574278][T11716] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 415.585776][T11813] binder: 11811:11813 ioctl c0306201 20000080 returned -14 [ 415.606210][T11619] veth0_vlan: entered promiscuous mode [ 415.654443][T11716] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 415.655185][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 415.673757][T11813] binder: 11811:11813 ioctl c0306201 200003c0 returned -14 [ 415.686064][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 415.697398][T11716] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 415.704656][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 415.736800][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 415.745535][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 415.753173][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 415.865224][T11619] veth1_vlan: entered promiscuous mode [ 415.979883][T11625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.103807][ T5332] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.166060][T11619] veth0_macvtap: entered promiscuous mode [ 416.251250][ T5332] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.272778][T11619] veth1_macvtap: entered promiscuous mode [ 416.327715][ T5332] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.435133][ T5332] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.473455][T11619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.484819][T11619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.490326][ T5284] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 416.495278][T11619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.513502][T11619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.524200][T11619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.534869][T11619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.546522][T11619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.557184][T11625] veth0_vlan: entered promiscuous mode [ 416.629215][T11619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.641617][ T5284] usb 3-1: device descriptor read/64, error -71 [ 416.647051][T11619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.659004][T11619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.671045][T11619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.681262][T11619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.695189][T11619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.716825][T11619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.729739][T11619] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.747810][T11619] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.758008][T11619] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.768844][T11619] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.792453][T11625] veth1_vlan: entered promiscuous mode [ 416.900818][ T5284] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 416.946224][T11818] chnl_net:caif_netlink_parms(): no params data found [ 416.965176][T11716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.981516][ T5332] bridge_slave_1: left allmulticast mode [ 416.988134][ T5332] bridge_slave_1: left promiscuous mode [ 416.994102][ T5332] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.007079][ T5332] bridge_slave_0: left allmulticast mode [ 417.014808][ T5332] bridge_slave_0: left promiscuous mode [ 417.023235][ T5332] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.077102][ T5284] usb 3-1: device descriptor read/64, error -71 [ 417.200490][ T5284] usb usb3-port1: attempt power cycle [ 417.388497][ T5332] team0: Port device bond0 removed [ 417.396721][ T5332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.409515][ T5332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.420718][ T5332] bond0 (unregistering): Released all slaves [ 417.564285][T11716] 8021q: adding VLAN 0 to HW filter on device team0 [ 417.570295][ T2880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 417.576761][T11625] veth0_macvtap: entered promiscuous mode [ 417.581425][ T5284] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 417.607719][ T2880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.612486][T11625] veth1_macvtap: entered promiscuous mode [ 417.653965][ T5284] usb 3-1: device descriptor read/8, error -71 [ 417.677622][ T7596] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.684758][ T7596] bridge0: port 1(bridge_slave_0) entered forwarding state [ 417.693761][ T7596] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.700895][ T7596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 417.740392][T11818] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.747536][T11818] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.754893][T11818] bridge_slave_0: entered allmulticast mode [ 417.763822][T11818] bridge_slave_0: entered promiscuous mode [ 417.785162][T11818] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.793734][T11818] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.801684][T11818] bridge_slave_1: entered allmulticast mode [ 417.808335][T11818] bridge_slave_1: entered promiscuous mode [ 417.810271][ T5238] Bluetooth: hci1: command tx timeout [ 417.844375][ T5332] hsr_slave_0: left promiscuous mode [ 417.855040][ T5332] hsr_slave_1: left promiscuous mode [ 417.861918][ T5332] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.869414][ T5332] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.883261][ T5332] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.891202][ T5332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.900262][ T5284] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 417.917837][ T5332] veth1_macvtap: left promiscuous mode [ 417.923534][ T5332] veth0_macvtap: left promiscuous mode [ 417.929101][ T5332] veth1_vlan: left promiscuous mode [ 417.934612][ T5332] veth0_vlan: left promiscuous mode [ 417.940820][ T5284] usb 3-1: device descriptor read/8, error -71 [ 418.051103][ T5284] usb usb3-port1: unable to enumerate USB device [ 418.413596][ T5332] team0 (unregistering): Port device team_slave_1 removed [ 418.459297][ T5332] team0 (unregistering): Port device team_slave_0 removed [ 418.920794][ T5346] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 419.030116][T11625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.030126][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 419.030144][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 419.065364][T11625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.083858][T11625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.088785][ T5346] usb 3-1: Using ep0 maxpacket: 16 [ 419.097488][T11625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.112468][ T5346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 419.119786][T11625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 419.130190][ T5346] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 419.141695][T11625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.149185][ T5346] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 419.168717][ T5346] usb 3-1: New USB device found, idVendor=056a, idProduct=2a22, bcdDevice=32.49 [ 419.171516][T11625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 419.178088][ T5346] usb 3-1: New USB device strings: Mfr=132, Product=0, SerialNumber=0 [ 419.197282][T11625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.208084][ T5346] usb 3-1: Manufacturer: syz [ 419.218666][T11625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.221412][ T5346] usb 3-1: config 0 descriptor?? [ 419.246731][T11625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.260136][T11625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.271953][T11625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 419.284033][T11625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 419.296049][T11625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 419.315757][T11818] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 419.389154][T11625] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.399719][T11625] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.420303][T11625] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.429086][T11625] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 419.528315][T11818] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 419.656945][T11818] team0: Port device team_slave_0 added [ 419.685424][T11818] team0: Port device team_slave_1 added [ 419.783885][ T5346] wacom 0003:056A:2A22.0025: Unknown device_type for 'syz'. Ignoring. [ 419.818496][T11818] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 419.827852][T11818] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 419.862486][T11818] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 419.880199][ T5238] Bluetooth: hci1: command tx timeout [ 419.916969][T11818] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 419.954521][T11818] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.029506][T11818] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.052294][T11716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.112118][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.160170][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.229766][T11818] hsr_slave_0: entered promiscuous mode [ 420.237823][T11818] hsr_slave_1: entered promiscuous mode [ 420.396887][ T7596] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.416314][ T7596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.704422][T11716] veth0_vlan: entered promiscuous mode [ 420.783012][T11716] veth1_vlan: entered promiscuous mode [ 420.842437][T11716] veth0_macvtap: entered promiscuous mode [ 420.848483][ T941] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 420.872803][T11716] veth1_macvtap: entered promiscuous mode [ 420.964847][T11716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 420.983585][T11716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.005300][T11716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.024679][T11716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.036514][T11716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.047242][ T941] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 421.056229][ T941] usb 1-1: config 0 has no interface number 0 [ 421.063756][T11716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.073799][ T941] usb 1-1: config 0 interface 41 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 421.083981][T11716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 421.094744][ T941] usb 1-1: config 0 interface 41 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 421.108130][T11716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.118946][ T941] usb 1-1: config 0 interface 41 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 421.138493][ T941] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=8c.ca [ 421.148694][ T941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.169815][T11716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.183617][ T941] usb 1-1: Product: syz [ 421.187843][ T941] usb 1-1: Manufacturer: syz [ 421.198848][T11716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.214938][ T941] usb 1-1: SerialNumber: syz [ 421.222360][ T941] usb 1-1: config 0 descriptor?? [ 421.228664][T11893] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 421.240803][T11716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.253314][ T941] usbtest 1-1:0.41: Linux gadget zero [ 421.258735][ T941] usbtest 1-1:0.41: high-speed {control in/out bulk-in bulk-out} tests (+alt) [ 421.260111][ T5285] usb 2-1: new high-speed USB device number 97 using dummy_hcd [ 421.268548][T11716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.298218][T11716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.316298][T11716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.328680][T11716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.339360][T11716] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 421.350087][T11716] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 421.363542][T11716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.382965][T11716] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.392252][T11716] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.402554][T11716] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.411758][T11716] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.453194][ T5285] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 421.459786][ T941] usb 1-1: USB disconnect, device number 79 [ 421.477315][ T5285] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 421.533440][ T5285] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 421.557822][ T5285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 421.591207][T11901] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 421.617224][ T5285] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 421.638838][ T5332] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.675613][ T5332] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.688213][T11818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 421.724112][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 421.729452][T11818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 421.749901][ T5285] usb 3-1: USB disconnect, device number 90 [ 421.772254][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 421.803265][T11818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 421.876808][T11818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 421.981803][ T5238] Bluetooth: hci1: command tx timeout [ 422.006851][T11926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.102931][T11926] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.192352][T11928] bridge0: entered allmulticast mode [ 422.234754][T11818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.290180][ T5346] usb 2-1: USB disconnect, device number 97 [ 422.323424][T11818] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.331668][ T941] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 422.387263][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.394502][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.484869][ T941] usb 3-1: device descriptor read/64, error -71 [ 422.487185][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.498383][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.642194][T11818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.733375][T11818] veth0_vlan: entered promiscuous mode [ 422.740208][ T941] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 422.744009][T11818] veth1_vlan: entered promiscuous mode [ 422.804684][T11818] veth0_macvtap: entered promiscuous mode [ 422.845124][T11818] veth1_macvtap: entered promiscuous mode [ 422.860187][ T5283] usb 4-1: new high-speed USB device number 93 using dummy_hcd [ 422.870502][ T941] usb 3-1: device descriptor read/64, error -71 [ 422.902271][T11818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.932642][T11818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.932682][T11818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.932702][T11818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.932720][T11818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.932734][T11818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.932747][T11818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.932761][T11818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.932779][T11818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.932794][T11818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.935477][T11818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.949148][T11950] netlink: 'syz.0.1126': attribute type 10 has an invalid length. [ 422.968546][T11950] team0: Failed to send options change via netlink (err -105) [ 423.080341][ T941] usb usb3-port1: attempt power cycle [ 423.088497][T11950] team0: Port device netdevsim0 added [ 423.098936][ T52] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 423.100320][ T5283] usb 4-1: Using ep0 maxpacket: 32 [ 423.101920][ T5283] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 423.104327][ T5283] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 423.104346][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 423.104359][ T5283] usb 4-1: Product: syz [ 423.104368][ T5283] usb 4-1: Manufacturer: syz [ 423.104382][ T5283] usb 4-1: SerialNumber: syz [ 423.107337][T11818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.107352][T11818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.107360][T11818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.107369][T11818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.107379][T11818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.107387][T11818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.107395][T11818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.107403][T11818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.107410][T11818] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.107418][T11818] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.108331][T11818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.128019][ T5283] usb 4-1: config 0 descriptor?? [ 423.137336][T11818] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.137374][T11818] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.137402][T11818] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.137430][T11818] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.141183][T11953] netlink: 'syz.0.1126': attribute type 10 has an invalid length. [ 423.156108][T11942] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 423.215415][T11917] usb 2-1: new high-speed USB device number 98 using dummy_hcd [ 423.217799][T11953] team0: Failed to send options change via netlink (err -105) [ 423.217927][T11953] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 423.218762][T11953] team0: Port device netdevsim0 removed [ 423.222335][T11953] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 423.362055][T11917] usb 2-1: Using ep0 maxpacket: 8 [ 423.370942][T11917] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 423.370966][T11917] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 423.370981][T11917] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 423.370995][T11917] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 423.371018][T11917] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 423.371033][T11917] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.420174][ T941] usb 3-1: new high-speed USB device number 93 using dummy_hcd [ 423.428187][ T5330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.428209][ T5330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.440844][ T941] usb 3-1: device descriptor read/8, error -71 [ 423.496005][ T5330] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.496095][ T5330] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.594668][T11917] usb 2-1: usb_control_msg returned -32 [ 423.594709][T11917] usbtmc 2-1:16.0: can't read capabilities [ 423.680398][ T941] usb 3-1: new high-speed USB device number 94 using dummy_hcd [ 423.705539][ T941] usb 3-1: device descriptor read/8, error -71 [ 423.810609][ T941] usb usb3-port1: unable to enumerate USB device [ 424.052756][ T5238] Bluetooth: hci1: command tx timeout [ 424.270252][ T941] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 424.480427][ T941] usb 5-1: Using ep0 maxpacket: 8 [ 424.489337][ T941] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 424.502922][ T941] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.523218][ T941] usb 5-1: Product: syz [ 424.527753][ T941] usb 5-1: Manufacturer: syz [ 424.534025][ T941] usb 5-1: SerialNumber: syz [ 424.551239][ T941] usb 5-1: config 0 descriptor?? [ 424.576537][ T941] gspca_main: sq930x-2.14.0 probing 2770:930c [ 425.100309][ T941] gspca_sq930x: reg_r 001f failed -110 [ 425.106128][ T941] sq930x 5-1:0.0: probe with driver sq930x failed with error -110 [ 425.300191][ T5285] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 425.460189][ T5285] usb 3-1: Using ep0 maxpacket: 32 [ 425.476525][ T5285] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 425.495362][ T5285] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 425.506789][ T5285] usb 3-1: config 0 has no interface number 0 [ 425.514083][ T5285] usb 3-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10 [ 425.528101][ T5285] usb 3-1: config 0 interface 8 has no altsetting 0 [ 425.529559][ T941] usb 4-1: USB disconnect, device number 93 [ 425.537640][ T5285] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb [ 425.555418][ T5285] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.565725][ T5285] usb 3-1: Product: syz [ 425.588518][ T5285] usb 3-1: Manufacturer: syz [ 425.608923][ T5285] usb 3-1: SerialNumber: syz [ 425.637004][ T5285] usb 3-1: config 0 descriptor?? [ 425.855239][T11995] team0: entered promiscuous mode [ 425.860637][T11995] team_slave_0: entered promiscuous mode [ 425.866525][T11995] team_slave_1: entered promiscuous mode [ 425.934942][T11997] team_slave_1: left promiscuous mode [ 425.960316][T11997] team0: Port device team_slave_1 removed [ 425.997584][ T941] usb 2-1: USB disconnect, device number 98 [ 426.470234][ T941] usb 2-1: new high-speed USB device number 99 using dummy_hcd [ 426.640904][ T941] usb 2-1: Using ep0 maxpacket: 8 [ 426.666457][ T941] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 426.698427][ T941] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 426.721816][ T941] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 426.735189][ T941] usb 2-1: Product: syz [ 426.739450][ T941] usb 2-1: Manufacturer: syz [ 426.754901][ T941] usb 2-1: SerialNumber: syz [ 426.809843][ T5283] usb 5-1: USB disconnect, device number 83 [ 426.837545][ T5285] ath6kl: Failed to submit usb control message: -71 [ 426.856581][ T5285] ath6kl: unable to send the bmi data to the device: -71 [ 426.872198][ T5285] ath6kl: Unable to send get target info: -71 [ 426.902431][ T5285] ath6kl: Failed to init ath6kl core: -71 [ 426.938739][ T5285] ath6kl_usb 3-1:0.8: probe with driver ath6kl_usb failed with error -71 [ 426.983395][ T941] usb 2-1: Invalid connection information received from device [ 427.020418][ T5285] usb 3-1: USB disconnect, device number 95 [ 427.188234][T12002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.207833][T12002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.294283][ T941] usb 2-1: USB disconnect, device number 99 [ 427.448874][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.615525][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.817263][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.926519][ T4623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 427.938766][ T4623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 427.966034][ T4623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 427.993256][ T4623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 428.020351][ T4623] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 428.027798][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.038621][ T4623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 428.306364][ T4623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 428.318278][ T4623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 428.332063][ T4623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 428.344416][ T4623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 428.357727][ T4623] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 428.365788][ T4623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 428.403194][ T35] bridge_slave_1: left allmulticast mode [ 428.408929][ T35] bridge_slave_1: left promiscuous mode [ 428.432285][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.451692][ T35] bridge_slave_0: left allmulticast mode [ 428.463742][ T35] bridge_slave_0: left promiscuous mode [ 428.469539][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.688506][T12032] netlink: 'syz.1.1150': attribute type 62 has an invalid length. [ 428.718470][T12032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1150'. [ 429.242780][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.266864][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.279725][ T35] bond0 (unregistering): Released all slaves [ 429.320714][T11994] team0: left promiscuous mode [ 429.325542][T11994] team_slave_0: left promiscuous mode [ 429.820279][ T5285] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 430.000860][ T5285] usb 1-1: Using ep0 maxpacket: 8 [ 430.024457][ T5285] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 64 [ 430.040893][ T5285] usb 1-1: config 1 interface 0 altsetting 8 bulk endpoint 0x3 has invalid maxpacket 8 [ 430.081636][ T5285] usb 1-1: config 1 interface 0 has no altsetting 0 [ 430.122898][ T5238] Bluetooth: hci1: command tx timeout [ 430.140611][ T5285] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 430.149883][ T5285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.158348][ T5285] usb 1-1: Product: Й [ 430.163413][ T5285] usb 1-1: Manufacturer: Ж [ 430.168545][ T5285] usb 1-1: SerialNumber: syz [ 430.187461][T12043] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 430.195177][T12043] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 430.261914][T12022] chnl_net:caif_netlink_parms(): no params data found [ 430.450478][ T5238] Bluetooth: hci4: command tx timeout [ 430.530373][T12043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.539429][T12043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.572741][T12043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.614958][T12043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 430.630292][ T35] hsr_slave_0: left promiscuous mode [ 430.658662][ T5285] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71 [ 430.685660][ T5285] usb 1-1: USB disconnect, device number 80 [ 430.723682][ T35] hsr_slave_1: left promiscuous mode [ 430.783311][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.810950][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.822240][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.829709][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.936677][ T35] veth1_macvtap: left promiscuous mode [ 430.960253][ T35] veth0_macvtap: left promiscuous mode [ 430.965906][ T35] veth1_vlan: left promiscuous mode [ 431.007641][ T35] veth0_vlan: left promiscuous mode [ 431.374860][ T29] audit: type=1326 audit(1728787971.653:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314b97dff9 code=0x7ffc0000 [ 431.454957][ T29] audit: type=1326 audit(1728787971.703:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f314b97dff9 code=0x7ffc0000 [ 431.539126][ T29] audit: type=1326 audit(1728787971.703:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f314b97e033 code=0x7ffc0000 [ 431.589784][ T29] audit: type=1326 audit(1728787971.703:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f314b97e033 code=0x7ffc0000 [ 431.669076][ T29] audit: type=1326 audit(1728787971.713:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314b97dff9 code=0x7ffc0000 [ 431.708382][ T29] audit: type=1326 audit(1728787971.723:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f314b97dff9 code=0x7ffc0000 [ 431.771671][ T29] audit: type=1326 audit(1728787971.773:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314b97dff9 code=0x7ffc0000 [ 431.794224][ T29] audit: type=1326 audit(1728787971.773:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314b97dff9 code=0x7ffc0000 [ 431.817239][ T29] audit: type=1326 audit(1728787971.773:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f314b97c990 code=0x7ffc0000 [ 431.840298][ T29] audit: type=1326 audit(1728787971.773:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12072 comm="syz.0.1153" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f314b97dff9 code=0x7ffc0000 [ 432.227573][ T5238] Bluetooth: hci1: command tx timeout [ 432.273447][ T941] usb 2-1: new high-speed USB device number 100 using dummy_hcd [ 432.468614][ T941] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 432.487589][ T941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.512178][ T941] usb 2-1: config 0 descriptor?? [ 432.522121][ T5238] Bluetooth: hci4: command tx timeout [ 432.987220][ T941] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 432.996143][ T941] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 433.013223][ T941] [drm:udl_init] *ERROR* Selecting channel failed [ 433.034724][ T941] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 433.044567][ T941] [drm] Initialized udl on minor 2 [ 433.071355][ T941] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 433.080460][ T5354] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 433.086047][ T941] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 433.098332][ T35] team0 (unregistering): Port device team_slave_1 removed [ 433.108078][ T941] usb 2-1: USB disconnect, device number 100 [ 433.114250][T11917] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 433.135430][T11917] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 433.196731][ T35] team0 (unregistering): Port device team_slave_0 removed [ 433.276141][ T5354] usb 3-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 433.298132][ T5354] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.307721][ T5354] usb 3-1: Product: syz [ 433.312324][ T5354] usb 3-1: Manufacturer: syz [ 433.316965][ T5354] usb 3-1: SerialNumber: syz [ 433.326328][ T5354] usb 3-1: config 0 descriptor?? [ 433.561852][ T5354] usb 3-1: USB disconnect, device number 96 [ 433.842069][ T5284] usb 2-1: new high-speed USB device number 101 using dummy_hcd [ 433.895987][T12027] chnl_net:caif_netlink_parms(): no params data found [ 433.940206][T12091] bridge_slave_0: left allmulticast mode [ 433.946335][T12091] bridge_slave_0: left promiscuous mode [ 433.953199][T12091] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.964391][T12091] bridge_slave_1: left allmulticast mode [ 433.970442][T12091] bridge_slave_1: left promiscuous mode [ 433.976257][T12091] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.986077][T12091] bond0: (slave bond_slave_0): Releasing backup interface [ 434.001329][T12091] bond0: (slave bond_slave_1): Releasing backup interface [ 434.011971][ T5284] usb 2-1: Using ep0 maxpacket: 8 [ 434.018937][ T5284] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 434.034022][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.062529][ T5284] usb 2-1: config 0 descriptor?? [ 434.068296][T12091] team0: Port device team_slave_0 removed [ 434.085378][T12091] team0: Port device team_slave_1 removed [ 434.092648][T12091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.101594][T12091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.111206][T12091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.118684][T12091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.207244][T12092] netlink: 1080 bytes leftover after parsing attributes in process `syz.0.1159'. [ 434.290482][ T5238] Bluetooth: hci1: command tx timeout [ 434.488834][T12022] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.506735][T12022] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.518266][T12022] bridge_slave_0: entered allmulticast mode [ 434.537374][T12022] bridge_slave_0: entered promiscuous mode [ 434.549466][T12022] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.574008][T12022] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.589871][T12022] bridge_slave_1: entered allmulticast mode [ 434.597785][T12022] bridge_slave_1: entered promiscuous mode [ 434.610456][ T5238] Bluetooth: hci4: command tx timeout [ 434.627453][T12027] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.645988][T12027] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.663283][T12027] bridge_slave_0: entered allmulticast mode [ 434.678034][T12027] bridge_slave_0: entered promiscuous mode [ 434.727527][T12027] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.743063][T12027] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.755667][T12027] bridge_slave_1: entered allmulticast mode [ 434.766066][T12027] bridge_slave_1: entered promiscuous mode [ 434.788516][T12022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.859558][T12022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.875065][T12027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.915326][T12027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.948246][T12022] team0: Port device team_slave_0 added [ 434.978504][T12022] team0: Port device team_slave_1 added [ 435.021340][T12022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.028389][T12022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.055949][T12022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.072867][T12022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.081124][T12022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.108336][T12022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.142533][T12027] team0: Port device team_slave_0 added [ 435.151845][T12027] team0: Port device team_slave_1 added [ 435.238948][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.283036][T12027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 435.296819][T12027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.330829][T12027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 435.352697][T12027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 435.364291][T12027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 435.404375][T12027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 435.491011][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.579273][T12022] hsr_slave_0: entered promiscuous mode [ 435.591340][T12022] hsr_slave_1: entered promiscuous mode [ 435.628790][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.687375][T12027] hsr_slave_0: entered promiscuous mode [ 435.694258][T12027] hsr_slave_1: entered promiscuous mode [ 435.701512][T11917] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 435.711608][T12027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.719198][T12027] Cannot create hsr debugfs directory [ 435.753331][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.765147][ T5284] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 435.775343][ T5284] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 435.799501][ T5284] asix 2-1:0.0: probe with driver asix failed with error -71 [ 435.843730][ T5284] usb 2-1: USB disconnect, device number 101 [ 435.868403][T11917] usb 1-1: Using ep0 maxpacket: 8 [ 435.895278][T11917] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 435.930660][T11917] usb 1-1: config 179 has no interface number 0 [ 435.936999][T11917] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 435.959053][T11917] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 435.972939][T11917] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 435.984370][T11917] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 435.994678][T11917] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 436.010818][T11917] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 436.019973][T11917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.036574][T12124] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 436.046188][T11917] xpad 1-1:179.65: probe with driver xpad failed with error -5 [ 436.302523][ T35] bridge_slave_1: left allmulticast mode [ 436.308235][ T35] bridge_slave_1: left promiscuous mode [ 436.323271][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 436.348090][ T35] bridge_slave_0: left allmulticast mode [ 436.360481][ T5238] Bluetooth: hci1: command tx timeout [ 436.367908][ T35] bridge_slave_0: left promiscuous mode [ 436.380235][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 436.681069][ T5280] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 436.695972][ T5238] Bluetooth: hci4: command tx timeout [ 436.840794][ T5280] usb 3-1: Using ep0 maxpacket: 32 [ 436.865038][ T5280] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 436.878217][ T5280] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8 [ 436.887948][ T5280] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.896360][ T5280] usb 3-1: Product: syz [ 436.900998][ T5280] usb 3-1: Manufacturer: syz [ 436.905644][ T5280] usb 3-1: SerialNumber: syz [ 436.913407][ T5280] usb 3-1: config 0 descriptor?? [ 436.978525][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 436.991232][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 437.002826][ T35] bond0 (unregistering): Released all slaves [ 437.129506][ T5280] ath6kl: Failed to submit usb control message: -71 [ 437.137516][ T5280] ath6kl: unable to send the bmi data to the device: -71 [ 437.146387][ T5280] ath6kl: Unable to send get target info: -71 [ 437.154184][ T5280] ath6kl: Failed to init ath6kl core: -71 [ 437.165660][ T5284] usb 1-1: USB disconnect, device number 81 [ 437.171398][ T5280] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 437.203407][ T5280] usb 3-1: USB disconnect, device number 97 [ 437.435587][ T35] hsr_slave_0: left promiscuous mode [ 437.448870][ T35] hsr_slave_1: left promiscuous mode [ 437.456295][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 437.464360][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 437.472780][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 437.480944][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 437.503709][ T35] veth1_macvtap: left promiscuous mode [ 437.509306][ T35] veth0_macvtap: left promiscuous mode [ 437.515747][ T35] veth1_vlan: left promiscuous mode [ 437.521230][ T35] veth0_vlan: left promiscuous mode [ 437.729778][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1171'. [ 438.021293][ T5284] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 438.076278][ T35] team0 (unregistering): Port device team_slave_1 removed [ 438.129347][ T35] team0 (unregistering): Port device team_slave_0 removed [ 438.198425][ T5284] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 438.214857][ T5284] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 438.224392][ T5284] usb 1-1: config 0 has no interface number 0 [ 438.231046][ T5284] usb 1-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 438.242700][ T5284] usb 1-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 438.254007][ T5284] usb 1-1: config 0 interface 8 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023 [ 438.265741][ T5284] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0xF has invalid maxpacket 512, setting to 64 [ 438.277796][ T5284] usb 1-1: config 0 interface 8 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 438.294361][ T5284] usb 1-1: New USB device found, idVendor=0582, idProduct=b9d5, bcdDevice=73.f7 [ 438.304119][ T5284] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.315198][ T5284] usb 1-1: config 0 descriptor?? [ 438.325266][T12164] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 438.333434][T12164] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 438.548002][ T5354] usb 1-1: USB disconnect, device number 82 [ 438.837325][T12160] netlink: 'syz.1.1170': attribute type 10 has an invalid length. [ 438.858109][T12160] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1170'. [ 438.873369][T12160] bridge0: port 3(batadv0) entered blocking state [ 438.879958][T12160] bridge0: port 3(batadv0) entered disabled state [ 438.895184][T12160] batadv0: entered allmulticast mode [ 438.904628][T12160] batadv0: entered promiscuous mode [ 438.916482][T12160] bridge0: port 3(batadv0) entered blocking state [ 438.923088][T12160] bridge0: port 3(batadv0) entered forwarding state [ 439.232337][ T5332] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 439.241940][ T5332] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 439.510138][ T5354] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 439.618383][T12199] sit1: entered promiscuous mode [ 439.629975][T12199] sit1: entered allmulticast mode [ 439.670700][ T5354] usb 1-1: Using ep0 maxpacket: 8 [ 439.682913][ T5354] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 439.696849][ T5354] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 439.709182][ T5354] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 439.721850][ T5354] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 439.754602][ T5354] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 439.811205][ T5354] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 439.818669][ T5354] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 439.887174][ T5354] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 439.939017][ T5354] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 439.993720][T12027] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 440.002246][ T5354] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 440.030485][T12209] fuse: Bad value for 'group_id' [ 440.035665][T12209] fuse: Bad value for 'group_id' [ 440.042135][ T5354] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 440.049706][ T5354] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 440.063154][T12027] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 440.070738][ T5354] usb 1-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 440.087505][ T5354] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 440.099175][ T5354] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 440.150376][T11300] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 440.151120][T12027] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 440.168369][ T5354] usb 1-1: string descriptor 0 read error: -22 [ 440.178556][ T5354] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 440.207654][ T5354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.282168][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.288502][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.323510][T12027] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 440.381309][ T5354] adutux 1-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 440.410351][T11300] usb 3-1: no configurations [ 440.415532][T11300] usb 3-1: can't read configurations, error -22 [ 440.496335][T12022] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 440.590624][T12022] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 440.610435][T11300] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 440.624616][T12231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 440.679246][T12231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 440.711035][T12022] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 440.757439][T12022] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 440.810728][T11300] usb 3-1: no configurations [ 440.815506][T11300] usb 3-1: can't read configurations, error -22 [ 440.838603][T11300] usb usb3-port1: attempt power cycle [ 441.078116][T12027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.230138][T11300] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 441.246096][T12027] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.262400][T11300] usb 3-1: no configurations [ 441.269443][T11300] usb 3-1: can't read configurations, error -22 [ 441.313474][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.320703][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.337107][ T5284] usb 2-1: new full-speed USB device number 102 using dummy_hcd [ 441.369162][ T5332] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.376367][ T5332] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.410605][T11300] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 441.441356][T11300] usb 3-1: no configurations [ 441.452013][T11300] usb 3-1: can't read configurations, error -22 [ 441.489142][T11300] usb usb3-port1: unable to enumerate USB device [ 441.498671][ T5284] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 441.521923][ T5284] usb 2-1: config 0 has no interface number 0 [ 441.548787][ T5284] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 441.554774][T12022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.597908][ T5284] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 441.639502][ T5284] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 441.679359][ T5284] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 441.711776][ T5284] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 441.745909][T12022] 8021q: adding VLAN 0 to HW filter on device team0 [ 441.751116][ T5284] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 441.775742][ T5284] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.810808][ T5284] usb 2-1: config 0 descriptor?? [ 441.816566][T12027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 441.833567][T12241] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 441.858454][ T5284] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 441.872104][ T5331] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.879249][ T5331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.957645][ T5330] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.964866][ T5330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.066493][T12241] Cannot find del_set index 0 as target [ 442.123931][T12241] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 442.163743][T12241] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 442.203788][T11300] usb 2-1: USB disconnect, device number 102 [ 442.213797][T11300] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 442.271336][T12027] veth0_vlan: entered promiscuous mode [ 442.298524][T12027] veth1_vlan: entered promiscuous mode [ 442.339580][ T5284] usb 1-1: USB disconnect, device number 83 [ 442.370283][T12022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.423310][T12027] veth0_macvtap: entered promiscuous mode [ 442.445415][T12027] veth1_macvtap: entered promiscuous mode [ 442.508330][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.526270][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.539834][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.557444][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.569637][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 442.587147][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.599724][T12027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.616834][T12022] veth0_vlan: entered promiscuous mode [ 442.631669][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.645259][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.657631][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.689602][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.703226][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 442.718491][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.730783][T12027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.757011][T12027] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.772822][T12027] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.786402][T12027] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.799805][T12027] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 442.844958][T12022] veth1_vlan: entered promiscuous mode [ 443.038407][ T5330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.046403][ T5330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.075136][T12022] veth0_macvtap: entered promiscuous mode [ 443.179118][T12022] veth1_macvtap: entered promiscuous mode [ 443.312104][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 443.373968][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 443.462620][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.040451][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.053545][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.086901][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.121444][ T941] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 444.138393][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.158925][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.169498][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.189608][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.215605][T12022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.310219][ T941] usb 1-1: Using ep0 maxpacket: 32 [ 444.321076][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.345362][ T941] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 444.367631][ T941] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 444.390105][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.419359][ T941] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 444.449395][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 444.487391][ T941] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 444.502596][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.547658][ T941] usb 1-1: config 1 has no interface number 0 [ 444.575176][ T941] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 444.642680][ T941] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.671783][ T941] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 445.731839][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.743262][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.754195][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.764826][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.782755][T12022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.863900][T12022] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.882169][T12022] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.940104][T12022] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.987546][T12022] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 446.061701][T12302] fuse: Bad value for 'group_id' [ 446.083291][T12302] fuse: Bad value for 'group_id' [ 446.732960][ T5331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.790728][ T5331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.941533][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.967874][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.742150][T12331] bridge_slave_0: left allmulticast mode [ 447.777745][T12331] bridge_slave_0: left promiscuous mode [ 447.810595][T12331] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.885862][T12331] bridge_slave_1: left allmulticast mode [ 447.912579][T12331] bridge_slave_1: left promiscuous mode [ 447.952842][T12331] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.971249][ T5280] usb 5-1: new high-speed USB device number 84 using dummy_hcd [ 448.057233][T12331] bond0: (slave bond_slave_0): Releasing backup interface [ 448.137126][T12331] bond0: (slave bond_slave_1): Releasing backup interface [ 448.208250][ T5280] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 448.270592][ T5280] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 448.329166][ T5280] usb 5-1: Product: syz [ 448.364669][T12331] team0: Port device team_slave_0 removed [ 448.378721][ T5280] usb 5-1: Manufacturer: syz [ 448.394103][ T5280] usb 5-1: SerialNumber: syz [ 448.427286][ T5280] usb 5-1: config 0 descriptor?? [ 448.513025][T12331] team0: Port device team_slave_1 removed [ 448.565071][T12331] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.663809][T12331] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 448.736377][ T5283] usb 5-1: USB disconnect, device number 84 [ 448.762105][T12331] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.831916][T12331] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.651645][ T941] snd_usb_pod 1-1:1.1: set_interface failed [ 449.657757][ T941] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 449.682542][ T941] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -71 [ 449.785757][ T941] usb 1-1: USB disconnect, device number 84 [ 450.214677][ T5283] usb 5-1: new high-speed USB device number 85 using dummy_hcd [ 451.908511][ T5283] usb 5-1: Using ep0 maxpacket: 32 [ 451.970569][ T5283] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 452.130179][ T5283] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 452.640283][ T5283] usb 5-1: New USB device found, idVendor=0421, idProduct=00a0, bcdDevice=c8.e1 [ 453.875589][ T5283] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.354168][ T5283] usb 5-1: config 0 descriptor?? [ 454.912184][ T5283] usb 5-1: can't set config #0, error -71 [ 456.921313][T11917] sound midiC2D0: rawmidi drain error (avail = 0, buffer_size = 4096) [ 457.196876][ T5283] usb 5-1: USB disconnect, device number 85 [ 457.510766][ T941] usb 4-1: new high-speed USB device number 94 using dummy_hcd [ 460.292207][T12384] fuse: Bad value for 'group_id' [ 460.325793][ T941] usb 4-1: device descriptor read/all, error -71 [ 460.363623][T12384] fuse: Bad value for 'group_id' [ 461.345983][T12407] x_tables: duplicate underflow at hook 2 [ 461.563569][ T4623] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 461.574984][ T4623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 461.583918][ T4623] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 461.592882][ T4623] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 461.601091][ T4623] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 461.614982][ T4623] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 461.754547][ T5238] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 461.762943][ T5280] usb 4-1: new high-speed USB device number 96 using dummy_hcd [ 461.782714][ T5238] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 461.791832][ T5238] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 461.801859][ T5238] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 461.820228][ T5238] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 461.827678][ T5238] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 461.874971][T12414] binder: BINDER_SET_CONTEXT_MGR already set [ 461.931555][T12414] binder: 12413:12414 ioctl 4018620d 20000040 returned -16 [ 462.050227][ T5280] usb 4-1: Using ep0 maxpacket: 32 [ 462.111023][ T5280] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 462.158624][ T5280] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 462.243231][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 462.289396][ T5280] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 462.342860][ T5280] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 462.375379][ T5280] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 462.415328][ T5280] usb 4-1: Product: syz [ 462.429781][ T5280] usb 4-1: Manufacturer: syz [ 462.460192][ T5280] usb 4-1: SerialNumber: syz [ 462.501054][ T5280] usb 4-1: config 0 descriptor?? [ 462.507354][T12407] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 462.560400][ T5280] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 462.609199][T12415] chnl_net:caif_netlink_parms(): no params data found [ 462.617553][ T5280] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 462.754980][T12407] ldusb 4-1:0.0: Write buffer overflow, 64618 bytes dropped [ 463.217236][T12415] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.255002][T12415] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.293976][T12415] bridge_slave_0: entered allmulticast mode [ 463.332329][T12415] bridge_slave_0: entered promiscuous mode [ 463.388432][T12418] chnl_net:caif_netlink_parms(): no params data found [ 463.444200][T12415] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.464110][T12415] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.486564][T12415] bridge_slave_1: entered allmulticast mode [ 463.508304][T12415] bridge_slave_1: entered promiscuous mode [ 463.720401][ T5238] Bluetooth: hci5: command tx timeout [ 463.880301][ T5238] Bluetooth: hci6: command tx timeout [ 463.905400][T12415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.969349][T12415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 464.279730][ T941] usb 4-1: USB disconnect, device number 96 [ 464.295967][T12415] team0: Port device team_slave_0 added [ 464.314935][ T941] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 464.358858][T12418] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.397353][T12418] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.440962][T12418] bridge_slave_0: entered allmulticast mode [ 464.448067][T12418] bridge_slave_0: entered promiscuous mode [ 464.504634][T12415] team0: Port device team_slave_1 added [ 464.663053][T12418] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.681250][T12418] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.699179][T12418] bridge_slave_1: entered allmulticast mode [ 464.709595][T12418] bridge_slave_1: entered promiscuous mode [ 464.804735][T12415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 464.815410][T12415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 464.853649][T12415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 464.986625][T12415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.001484][T12415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.042015][T12415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.069184][T12418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.164122][T12418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.288088][T12415] hsr_slave_0: entered promiscuous mode [ 465.334070][T12415] hsr_slave_1: entered promiscuous mode [ 465.365218][T12415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.378071][T12415] Cannot create hsr debugfs directory [ 465.556387][T12418] team0: Port device team_slave_0 added [ 465.595372][T12418] team0: Port device team_slave_1 added [ 465.800219][ T5238] Bluetooth: hci5: command tx timeout [ 465.845554][T12418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.873114][T12418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.969733][ T5238] Bluetooth: hci6: command tx timeout [ 465.988053][T12418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.018459][T12418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.037114][T12418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.079619][T12418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.378466][T12418] hsr_slave_0: entered promiscuous mode [ 466.422418][T12418] hsr_slave_1: entered promiscuous mode [ 466.469051][T12418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.498767][T12418] Cannot create hsr debugfs directory [ 466.863266][T12415] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.277211][T12415] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.507458][T12415] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.658695][ T4623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 467.671087][ T4623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 467.679381][ T4623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 467.692399][ T4623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 467.701298][ T4623] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 467.708687][ T4623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 467.881027][ T4623] Bluetooth: hci5: command tx timeout [ 467.948539][T12415] bond0: (slave netdevsim0): Releasing backup interface [ 467.973026][T12415] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.040177][ T4623] Bluetooth: hci6: command tx timeout [ 468.370542][T12455] chnl_net:caif_netlink_parms(): no params data found [ 468.450102][ T5283] usb 4-1: new full-speed USB device number 97 using dummy_hcd [ 468.630198][ T5283] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 469.800210][ T4623] Bluetooth: hci7: command tx timeout [ 469.960263][ T4623] Bluetooth: hci5: command tx timeout [ 470.120262][ T4623] Bluetooth: hci6: command tx timeout [ 471.520123][ T5283] usb 4-1: config 0 has no interface number 0 [ 471.692924][ T16] sched: DL replenish lagged too much [ 472.252548][ T4623] Bluetooth: hci7: command tx timeout [ 472.310671][ T5283] usb 4-1: config 0 interface 20 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 475.245518][ T4623] Bluetooth: hci7: command tx timeout [ 475.618393][ T5283] usb 4-1: string descriptor 0 read error: -71 [ 475.629046][ T5283] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 475.647242][ T5283] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 482.730163][ T5238] Bluetooth: hci7: command tx timeout [ 494.450577][ T5283] usb 4-1: config 0 descriptor?? [ 495.271152][ T5283] usb 4-1: can't set config #0, error -71 [ 495.406787][ T5283] usb 4-1: USB disconnect, device number 97 [ 495.686043][ T5241] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 495.696830][ T5241] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 495.721006][T12474] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 495.733383][T12474] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 495.741405][T12474] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 495.749439][T12474] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 496.763060][T12474] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 496.784637][T12474] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 496.793258][T12474] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 496.801676][T12474] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 496.813238][T12474] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 496.827053][T12474] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 497.800314][ T5238] Bluetooth: hci8: command tx timeout [ 498.920283][ T5238] Bluetooth: hci0: command tx timeout [ 499.880237][ T5238] Bluetooth: hci8: command tx timeout [ 501.000277][ T5238] Bluetooth: hci0: command tx timeout [ 501.729053][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.744219][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.960251][ T5238] Bluetooth: hci8: command tx timeout [ 503.089230][ T5238] Bluetooth: hci0: command tx timeout [ 504.040187][ T5238] Bluetooth: hci8: command tx timeout [ 505.161295][ T5238] Bluetooth: hci0: command tx timeout [ 522.180971][T12474] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 522.194208][T12474] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 522.227516][T12474] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 522.237996][T12474] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 522.247936][T12474] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 522.260470][T12474] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 522.333436][T12474] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 522.345175][T12474] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 522.357023][T12474] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 522.369487][T12474] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 522.377528][T12474] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 522.386557][T12474] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 524.363785][T12474] Bluetooth: hci1: command tx timeout [ 524.440894][T12474] Bluetooth: hci2: command tx timeout [ 526.445317][T12474] Bluetooth: hci1: command tx timeout [ 526.520254][T12474] Bluetooth: hci2: command tx timeout [ 527.737043][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 527.748834][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 527.762552][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 527.773362][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 527.782135][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 527.789516][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 528.520264][ T5238] Bluetooth: hci1: command tx timeout [ 528.600272][ T5238] Bluetooth: hci2: command tx timeout [ 529.880464][ T5238] Bluetooth: hci3: command tx timeout [ 530.600447][ T5238] Bluetooth: hci1: command tx timeout [ 530.690130][ T5238] Bluetooth: hci2: command tx timeout [ 531.960364][ T5238] Bluetooth: hci3: command tx timeout [ 534.040537][ T5238] Bluetooth: hci3: command tx timeout [ 536.120669][ T5238] Bluetooth: hci3: command tx timeout [ 545.922235][T12474] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 545.939101][T12474] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 545.948718][T12474] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 545.957634][T12474] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 545.965537][T12474] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 545.973350][T12474] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 548.040273][ T5238] Bluetooth: hci4: command tx timeout [ 550.120370][ T5238] Bluetooth: hci4: command tx timeout [ 552.203744][ T5238] Bluetooth: hci4: command tx timeout [ 554.280210][ T5238] Bluetooth: hci4: command tx timeout [ 556.288941][T12474] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 556.310539][T12474] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 556.321310][T12474] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 556.331957][T12474] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 556.343114][T12474] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 556.350883][T12474] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 558.440251][T12474] Bluetooth: hci9: command tx timeout [ 560.520152][T12474] Bluetooth: hci9: command tx timeout [ 562.600192][T12474] Bluetooth: hci9: command tx timeout [ 563.165790][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.180109][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.680275][T12474] Bluetooth: hci9: command tx timeout [ 583.403922][ T5238] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 583.416232][ T5238] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 583.424962][ T5238] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 583.436447][ T5238] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 583.444308][ T5238] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 583.456683][ T5238] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 583.497552][T12474] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 583.512705][T12474] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 583.521542][T12474] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 583.530121][T12474] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 583.540545][T12474] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 583.548099][T12474] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 585.560453][ T5241] Bluetooth: hci10: command tx timeout [ 585.640292][ T5241] Bluetooth: hci11: command tx timeout [ 585.720180][ T5241] Bluetooth: hci5: command 0x0406 tx timeout [ 585.726422][ T5241] Bluetooth: hci6: command 0x0406 tx timeout [ 587.640407][T12474] Bluetooth: hci10: command tx timeout [ 587.720305][T12474] Bluetooth: hci11: command tx timeout [ 588.234905][ T5238] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 588.244704][ T5238] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 588.254336][ T5238] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 588.265705][ T5238] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 588.274970][ T5238] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 588.282561][ T5238] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 589.720402][ T5238] Bluetooth: hci10: command tx timeout [ 589.800204][ T5238] Bluetooth: hci11: command tx timeout [ 590.360209][ T5238] Bluetooth: hci12: command tx timeout [ 590.845353][ T5238] Bluetooth: hci7: command 0x0406 tx timeout [ 591.800385][T12474] Bluetooth: hci10: command tx timeout [ 591.880247][T12474] Bluetooth: hci11: command tx timeout [ 592.440894][T12474] Bluetooth: hci12: command tx timeout [ 594.317311][T12455] bridge0: port 1(bridge_slave_0) entered blocking state [ 594.331054][T12455] bridge0: port 1(bridge_slave_0) entered disabled state [ 594.338343][T12455] bridge_slave_0: entered allmulticast mode [ 594.358594][T12455] bridge_slave_0: entered promiscuous mode [ 594.521393][T12474] Bluetooth: hci12: command tx timeout [ 596.600231][T12474] Bluetooth: hci12: command tx timeout [ 606.876643][ T5238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 606.893040][ T5238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 606.912512][ T5238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 606.929557][ T5238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 606.939845][ T5238] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 606.947504][ T5238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 609.000349][ T5238] Bluetooth: hci7: command tx timeout [ 611.080351][ T5238] Bluetooth: hci7: command tx timeout [ 613.162238][ T5238] Bluetooth: hci7: command tx timeout [ 615.240115][ T5238] Bluetooth: hci7: command tx timeout [ 617.069513][T12474] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 617.079323][T12474] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 617.090105][T12474] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 617.103057][T12474] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 617.110820][T12474] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 617.118320][T12474] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 619.160129][ T5238] Bluetooth: hci13: command tx timeout [ 621.240197][ T5238] Bluetooth: hci13: command tx timeout [ 621.576088][ T5238] Bluetooth: hci0: command 0x0406 tx timeout [ 621.582301][T12474] Bluetooth: hci8: command 0x0406 tx timeout [ 623.320235][ T4623] Bluetooth: hci13: command tx timeout [ 624.610630][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.616970][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.400143][ T4623] Bluetooth: hci13: command tx timeout [ 644.862496][T12514] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 644.873034][T12514] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 644.882193][T12514] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 644.893914][T12514] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 644.909827][T12514] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 644.917401][T12514] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 645.032873][T12514] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 645.047893][T12514] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 645.058258][T12514] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 645.067064][T12514] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 645.075124][T12514] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 645.093732][T12514] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 646.367613][ T30] INFO: task kworker/u8:3:52 blocked for more than 143 seconds. [ 646.379933][ T30] Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 646.387604][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 646.430287][ T30] task:kworker/u8:3 state:D stack:21264 pid:52 tgid:52 ppid:2 flags:0x00004000 [ 646.499981][ T30] Workqueue: netns cleanup_net [ 646.504853][ T30] Call Trace: [ 646.508154][ T30] [ 646.537348][ T30] __schedule+0x1895/0x4b30 [ 646.603500][ T30] ? __pfx___schedule+0x10/0x10 [ 646.620408][ T30] ? __pfx_lock_release+0x10/0x10 [ 646.625509][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 646.672256][ T30] ? kthread_data+0x52/0xd0 [ 646.676836][ T30] ? schedule+0x90/0x320 [ 646.702897][ T30] ? wq_worker_sleeping+0x66/0x240 [ 646.708099][ T30] ? schedule+0x90/0x320 [ 646.730256][ T30] schedule+0x14b/0x320 [ 646.734477][ T30] schedule_preempt_disabled+0x13/0x30 [ 646.750052][ T30] __mutex_lock+0x6a7/0xd70 [ 646.754624][ T30] ? __mutex_lock+0x52a/0xd70 [ 646.759334][ T30] ? cleanup_net+0x6af/0xcc0 [ 646.782072][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 646.787185][ T30] ? bpf_prog_array_free+0x34/0x40 [ 646.801853][ T30] cleanup_net+0x6af/0xcc0 [ 646.806345][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 646.820189][ T30] ? process_scheduled_works+0x976/0x1850 [ 646.825979][ T30] process_scheduled_works+0xa63/0x1850 [ 646.842970][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 646.860216][ T30] ? assign_work+0x364/0x3d0 [ 646.865199][ T30] worker_thread+0x870/0xd30 [ 646.869844][ T30] ? __kthread_parkme+0x169/0x1d0 [ 646.887367][ T30] ? __pfx_worker_thread+0x10/0x10 [ 646.897488][ T30] kthread+0x2f0/0x390 [ 646.907606][ T30] ? __pfx_worker_thread+0x10/0x10 [ 646.917761][ T30] ? __pfx_kthread+0x10/0x10 [ 646.930091][ T30] ret_from_fork+0x4b/0x80 [ 646.934559][ T30] ? __pfx_kthread+0x10/0x10 [ 646.939176][ T30] ret_from_fork_asm+0x1a/0x30 [ 646.956526][ T30] [ 646.959733][ T30] INFO: task kworker/u8:8:5330 blocked for more than 143 seconds. [ 646.980925][ T30] Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 646.988620][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 647.001696][ T30] task:kworker/u8:8 state:D stack:21208 pid:5330 tgid:5330 ppid:2 flags:0x00004000 [ 647.012394][T12514] Bluetooth: hci14: command tx timeout [ 647.030768][ T30] Workqueue: events_unbound linkwatch_event [ 647.036742][ T30] Call Trace: [ 647.053825][ T30] [ 647.056814][ T30] __schedule+0x1895/0x4b30 [ 647.070414][ T30] ? __pfx___schedule+0x10/0x10 [ 647.075750][ T30] ? __pfx_lock_release+0x10/0x10 [ 647.090408][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 647.096779][ T30] ? kthread_data+0x52/0xd0 [ 647.111223][ T30] ? schedule+0x90/0x320 [ 647.115692][ T30] ? wq_worker_sleeping+0x66/0x240 [ 647.139823][ T30] ? schedule+0x90/0x320 [ 647.145155][ T30] schedule+0x14b/0x320 [ 647.149359][ T30] schedule_preempt_disabled+0x13/0x30 [ 647.160155][T12514] Bluetooth: hci15: command tx timeout [ 647.167148][T12514] Bluetooth: hci1: command 0x0406 tx timeout [ 647.173347][ T4623] Bluetooth: hci2: command 0x0406 tx timeout [ 647.192034][ T30] __mutex_lock+0x6a7/0xd70 [ 647.196829][ T30] ? __mutex_lock+0x52a/0xd70 [ 647.210309][ T30] ? linkwatch_event+0xe/0x60 [ 647.215209][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 647.231458][ T30] ? process_scheduled_works+0x976/0x1850 [ 647.237381][ T30] linkwatch_event+0xe/0x60 [ 647.252831][ T30] process_scheduled_works+0xa63/0x1850 [ 647.268594][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 647.278792][ T30] ? assign_work+0x364/0x3d0 [ 647.290237][ T30] worker_thread+0x870/0xd30 [ 647.294890][ T30] ? __kthread_parkme+0x169/0x1d0 [ 647.310053][ T30] ? __pfx_worker_thread+0x10/0x10 [ 647.315231][ T30] kthread+0x2f0/0x390 [ 647.319324][ T30] ? __pfx_worker_thread+0x10/0x10 [ 647.342271][ T30] ? __pfx_kthread+0x10/0x10 [ 647.346921][ T30] ret_from_fork+0x4b/0x80 [ 647.359383][ T30] ? __pfx_kthread+0x10/0x10 [ 647.370052][ T30] ret_from_fork_asm+0x1a/0x30 [ 647.374884][ T30] [ 647.388682][ T30] INFO: task syz-executor:11619 blocked for more than 144 seconds. [ 647.410438][ T30] Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 647.418120][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 647.438231][ T30] task:syz-executor state:D stack:20992 pid:11619 tgid:11619 ppid:1 flags:0x00004006 [ 647.452295][ T30] Call Trace: [ 647.455619][ T30] [ 647.458575][ T30] __schedule+0x1895/0x4b30 [ 647.470755][ T30] ? __pfx___schedule+0x10/0x10 [ 647.475762][ T30] ? __pfx_lock_release+0x10/0x10 [ 647.491754][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 647.497284][ T30] ? schedule+0x90/0x320 [ 647.510002][ T30] schedule+0x14b/0x320 [ 647.514226][ T30] schedule_preempt_disabled+0x13/0x30 [ 647.519725][ T30] __mutex_lock+0x6a7/0xd70 [ 647.536839][ T30] ? __mutex_lock+0x52a/0xd70 [ 647.546367][ T30] ? tun_chr_close+0x3b/0x1b0 [ 647.557211][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 647.570149][ T30] ? __pfx_call_rcu+0x10/0x10 [ 647.574893][ T30] tun_chr_close+0x3b/0x1b0 [ 647.579423][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 647.599372][ T30] __fput+0x23f/0x880 [ 647.607277][ T30] task_work_run+0x24f/0x310 [ 647.618988][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 647.629454][ T30] ? __pfx_task_work_run+0x10/0x10 [ 647.641072][ T30] ? do_exit+0xa2a/0x28e0 [ 647.652090][ T30] ? kmem_cache_free+0x1a2/0x420 [ 647.657083][ T30] ? do_exit+0xa2a/0x28e0 [ 647.672941][ T30] do_exit+0xa2f/0x28e0 [ 647.677158][ T30] ? __pfx_do_exit+0x10/0x10 [ 647.690726][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 647.696572][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 647.710312][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 647.716699][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 647.743955][ T30] do_group_exit+0x207/0x2c0 [ 647.748611][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 647.760129][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 647.765393][ T30] get_signal+0x16a3/0x1740 [ 647.784206][ T30] ? __pfx_get_signal+0x10/0x10 [ 647.789408][ T30] ? __x64_sys_newfstatat+0x145/0x1a0 [ 647.807387][ T30] arch_do_signal_or_restart+0x96/0x860 [ 647.817760][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 647.832057][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 647.838103][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 647.855309][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 647.865845][ T30] do_syscall_64+0x100/0x230 [ 647.879524][ T30] ? clear_bhb_loop+0x35/0x90 [ 647.889480][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.901500][ T30] RIP: 0033:0x7f464a37c80a [ 647.905970][ T30] RSP: 002b:00007f464a65ecc8 EFLAGS: 00000286 ORIG_RAX: 0000000000000106 [ 647.926928][ T30] RAX: 0000000000000000 RBX: 00007f464a3f0134 RCX: 00007f464a37c80a [ 647.937610][ T30] RDX: 00007f464a65ecf0 RSI: 00007f464a65ed80 RDI: 00000000ffffff9c [ 647.950056][ T30] RBP: 00007f464a65ed80 R08: 0000000000000000 R09: 0000000000000000 [ 647.958077][ T30] R10: 0000000000000100 R11: 0000000000000286 R12: 00007f464a65fe00 [ 647.979885][ T30] R13: 00007f464a3f0134 R14: 0000000000000005 R15: 00007f464a65fe40 [ 648.003635][ T30] [ 648.015426][ T30] INFO: task syz-executor:12027 blocked for more than 145 seconds. [ 648.036964][ T30] Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 648.053144][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 648.069960][ T30] task:syz-executor state:D stack:20560 pid:12027 tgid:12027 ppid:1 flags:0x00004006 [ 648.093212][ T30] Call Trace: [ 648.096560][ T30] [ 648.099520][ T30] __schedule+0x1895/0x4b30 [ 648.115113][ T30] ? __pfx___schedule+0x10/0x10 [ 648.126937][ T30] ? __pfx_lock_release+0x10/0x10 [ 648.138730][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 648.149108][ T30] ? schedule+0x90/0x320 [ 648.159292][ T30] schedule+0x14b/0x320 [ 648.163963][ T30] schedule_preempt_disabled+0x13/0x30 [ 648.169467][ T30] __mutex_lock+0x6a7/0xd70 [ 648.187144][ T30] ? __mutex_lock+0x52a/0xd70 [ 648.194928][ T30] ? tun_chr_close+0x3b/0x1b0 [ 648.200337][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 648.205411][ T30] ? __pfx_call_rcu+0x10/0x10 [ 648.220017][ T30] tun_chr_close+0x3b/0x1b0 [ 648.224572][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 648.229709][ T30] __fput+0x23f/0x880 [ 648.245548][ T30] task_work_run+0x24f/0x310 [ 648.256859][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 648.267097][ T30] ? __pfx_task_work_run+0x10/0x10 [ 648.279575][ T30] ? do_exit+0xa2a/0x28e0 [ 648.290122][ T30] ? kmem_cache_free+0x1a2/0x420 [ 648.295151][ T30] ? do_exit+0xa2a/0x28e0 [ 648.307427][ T30] do_exit+0xa2f/0x28e0 [ 648.317012][ T30] ? __pfx_do_exit+0x10/0x10 [ 648.328636][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 648.339859][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 648.345943][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 648.361077][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 648.372236][ T30] do_group_exit+0x207/0x2c0 [ 648.376879][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 648.397414][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 648.403092][ T30] get_signal+0x16a3/0x1740 [ 648.407659][ T30] ? __pfx_get_signal+0x10/0x10 [ 648.425907][ T30] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 648.438525][ T30] arch_do_signal_or_restart+0x96/0x860 [ 648.449455][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 648.459944][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 648.465995][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 648.486823][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 648.499714][ T30] do_syscall_64+0x100/0x230 [ 648.504778][ T30] ? clear_bhb_loop+0x35/0x90 [ 648.509523][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.527936][ T30] RIP: 0033:0x7f749efb00e5 [ 648.536880][ T30] RSP: 002b:00007f749f25fd50 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 648.550094][ T30] RAX: 0000000000000000 RBX: 000000000000001d RCX: 00007f749efb00e5 [ 648.558127][ T30] RDX: 00007f749f25fd90 RSI: 0000000000000000 RDI: 0000000000000000 [ 648.577145][ T30] RBP: 00007f749f25fdec R08: 0000000000000000 R09: 7fffffffffffffff [ 648.598530][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032 [ 648.611827][ T30] R13: 00000000000724d5 R14: 00000000000724ca R15: 00007f749f25fe40 [ 648.619870][ T30] [ 648.635517][ T30] INFO: task syz.2.1195:12352 blocked for more than 145 seconds. [ 648.653675][ T30] Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 648.668470][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 648.682244][ T30] task:syz.2.1195 state:D stack:23664 pid:12352 tgid:12351 ppid:11105 flags:0x00004002 [ 648.707819][ T30] Call Trace: [ 648.711603][ T30] [ 648.714574][ T30] __schedule+0x1895/0x4b30 [ 648.719138][ T30] ? __pfx___schedule+0x10/0x10 [ 648.737773][ T30] ? __pfx_lock_release+0x10/0x10 [ 648.747771][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 648.759626][ T30] ? schedule+0x90/0x320 [ 648.774061][ T30] schedule+0x14b/0x320 [ 648.778288][ T30] schedule_preempt_disabled+0x13/0x30 [ 648.797929][ T30] __mutex_lock+0x6a7/0xd70 [ 648.807075][ T30] ? __mutex_lock+0x52a/0xd70 [ 648.819667][ T30] ? tun_chr_close+0x3b/0x1b0 [ 648.829109][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 648.840177][ T30] ? __pfx_call_rcu+0x10/0x10 [ 648.845088][ T30] tun_chr_close+0x3b/0x1b0 [ 648.849616][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 648.865315][ T30] __fput+0x23f/0x880 [ 648.869366][ T30] task_work_run+0x24f/0x310 [ 648.886417][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 648.896051][ T30] ? __pfx_task_work_run+0x10/0x10 [ 648.909698][ T30] ? do_exit+0xa2a/0x28e0 [ 648.916455][ T30] ? kmem_cache_free+0x1a2/0x420 [ 648.931567][ T30] ? do_exit+0xa2a/0x28e0 [ 648.935964][ T30] do_exit+0xa2f/0x28e0 [ 648.950502][ T30] ? __pfx_do_exit+0x10/0x10 [ 648.955153][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 648.970388][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 648.976436][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 648.994001][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 649.008228][ T30] do_group_exit+0x207/0x2c0 [ 649.016616][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 649.030105][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 649.035381][ T30] get_signal+0x16a3/0x1740 [ 649.050852][ T30] ? __pfx_get_signal+0x10/0x10 [ 649.055761][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 649.070043][ T30] arch_do_signal_or_restart+0x96/0x860 [ 649.075651][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 649.082429][T12474] Bluetooth: hci14: command tx timeout [ 649.101433][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 649.107492][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 649.123886][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 649.129502][ T30] do_syscall_64+0x100/0x230 [ 649.148324][ T30] ? clear_bhb_loop+0x35/0x90 [ 649.153236][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.159170][ T30] RIP: 0033:0x7f2ffb77c990 [ 649.174625][ T30] RSP: 002b:00007f2ffc4e5b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 649.189557][ T30] RAX: 000000000000000a RBX: 0000000000141101 RCX: 00007f2ffb77c990 [ 649.203304][ T30] RDX: 0000000000141101 RSI: 00007f2ffc4e5c10 RDI: 00000000ffffff9c [ 649.221941][ T30] RBP: 00007f2ffc4e5c10 R08: 0000000000000000 R09: 0000000000000000 [ 649.239452][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 649.248405][T12474] Bluetooth: hci15: command tx timeout [ 649.266755][ T30] R13: 0000000000000000 R14: 00007f2ffb935f80 R15: 00007f2ffba5fa28 [ 649.281021][ T30] [ 649.284482][ T30] INFO: task syz-executor:12415 blocked for more than 146 seconds. [ 649.300036][ T30] Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 649.321532][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 649.339175][ T30] task:syz-executor state:D stack:21728 pid:12415 tgid:12415 ppid:1 flags:0x00000004 [ 649.352837][ T30] Call Trace: [ 649.356153][ T30] [ 649.359110][ T30] __schedule+0x1895/0x4b30 [ 649.370980][ T30] ? __pfx___schedule+0x10/0x10 [ 649.375889][ T30] ? __pfx_lock_release+0x10/0x10 [ 649.391570][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 649.397094][ T30] ? schedule+0x90/0x320 [ 649.408078][ T30] schedule+0x14b/0x320 [ 649.421151][ T30] schedule_preempt_disabled+0x13/0x30 [ 649.426658][ T30] __mutex_lock+0x6a7/0xd70 [ 649.438927][ T30] ? __mutex_lock+0x52a/0xd70 [ 649.446480][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 649.459729][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 649.467445][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 649.480503][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 649.485667][ T30] ? __lock_acquire+0x1384/0x2050 [ 649.500338][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 649.505868][ T30] netlink_rcv_skb+0x1e3/0x430 [ 649.523409][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 649.528930][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 649.545279][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 649.555806][ T30] netlink_unicast+0x7f6/0x990 [ 649.567641][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 649.579034][ T30] ? __virt_addr_valid+0x183/0x530 [ 649.591391][ T30] ? __check_object_size+0x48e/0x900 [ 649.596730][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 649.612893][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.618241][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 649.635641][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 649.650026][ T30] __sock_sendmsg+0x221/0x270 [ 649.654850][ T30] __sys_sendto+0x39b/0x4f0 [ 649.659382][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 649.674597][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 649.688183][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 649.700115][ T30] ? exc_page_fault+0x590/0x8c0 [ 649.705029][ T30] __x64_sys_sendto+0xde/0x100 [ 649.709844][ T30] do_syscall_64+0xf3/0x230 [ 649.726441][ T30] ? clear_bhb_loop+0x35/0x90 [ 649.736509][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 649.749453][ T30] RIP: 0033:0x7f508637fe8c [ 649.757822][ T30] RSP: 002b:00007f508665f5b0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 649.770016][ T30] RAX: ffffffffffffffda RBX: 00007f50870635c0 RCX: 00007f508637fe8c [ 649.778045][ T30] RDX: 0000000000000030 RSI: 00007f5087063610 RDI: 0000000000000006 [ 649.797186][ T30] RBP: 0000000000000000 R08: 00007f508665f604 R09: 000000000000000c [ 649.829242][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 649.840677][ T30] R13: 0000000000000000 R14: 00007f5087063610 R15: 0000000000000000 [ 649.848725][ T30] [ 649.860085][ T30] INFO: task syz-executor:12418 blocked for more than 146 seconds. [ 649.868030][ T30] Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 649.894215][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 649.910779][ T30] task:syz-executor state:D stack:21728 pid:12418 tgid:12418 ppid:1 flags:0x00004004 [ 649.934439][ T30] Call Trace: [ 649.937791][ T30] [ 649.945786][ T30] __schedule+0x1895/0x4b30 [ 649.956672][ T30] ? __pfx___schedule+0x10/0x10 [ 649.965407][ T30] ? __pfx_lock_release+0x10/0x10 [ 649.978773][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 649.988038][ T30] ? schedule+0x90/0x320 [ 649.999420][ T30] schedule+0x14b/0x320 [ 650.004082][ T30] schedule_preempt_disabled+0x13/0x30 [ 650.019485][ T30] __mutex_lock+0x6a7/0xd70 [ 650.039619][ T30] ? do_raw_spin_unlock+0x13c/0x8b0 [ 650.045452][ T30] ? __mutex_lock+0x52a/0xd70 [ 650.060066][ T30] ? nsim_destroy+0x71/0x5c0 [ 650.064754][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 650.069810][ T30] ? __pfx_mntput_no_expire+0x10/0x10 [ 650.086859][ T30] ? _raw_spin_unlock+0x28/0x50 [ 650.096607][ T30] ? simple_release_fs+0x9c/0xd0 [ 650.107568][ T30] nsim_destroy+0x71/0x5c0 [ 650.116970][ T30] __nsim_dev_port_del+0x14b/0x1b0 [ 650.130758][ T30] nsim_dev_reload_destroy+0x28a/0x490 [ 650.136283][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 650.153856][ T30] nsim_drv_remove+0x58/0x160 [ 650.158607][ T30] device_release_driver_internal+0x4a9/0x7c0 [ 650.170043][ T30] bus_remove_device+0x34f/0x420 [ 650.175047][ T30] device_del+0x57a/0x9b0 [ 650.179411][ T30] ? __pfx_device_del+0x10/0x10 [ 650.195928][ T30] device_unregister+0x20/0xc0 [ 650.219615][ T30] del_device_store+0x363/0x480 [ 650.230075][ T30] ? __pfx_del_device_store+0x10/0x10 [ 650.235514][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 650.253066][ T30] ? bus_attr_store+0x4f/0xb0 [ 650.257812][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 650.270078][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 650.275428][ T30] vfs_write+0xa6d/0xc90 [ 650.279698][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 650.296763][ T30] ? __pfx_vfs_write+0x10/0x10 [ 650.306559][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 650.317326][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 650.329713][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 650.340367][ T30] ? fdget_pos+0x265/0x320 [ 650.344834][ T30] ksys_write+0x183/0x2b0 [ 650.361690][ T30] ? __pfx_ksys_write+0x10/0x10 [ 650.366682][ T30] ? do_syscall_64+0x100/0x230 [ 650.381624][ T30] ? do_syscall_64+0xb6/0x230 [ 650.386352][ T30] do_syscall_64+0xf3/0x230 [ 650.400407][ T30] ? clear_bhb_loop+0x35/0x90 [ 650.405137][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.422335][ T30] RIP: 0033:0x7f720d17cadf [ 650.426807][ T30] RSP: 002b:00007f720d45f220 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 650.450156][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f720d17cadf [ 650.458190][ T30] RDX: 0000000000000001 RSI: 00007f720d45f270 RDI: 0000000000000005 [ 650.482735][ T30] RBP: 00007f720d1f13ae R08: 0000000000000000 R09: 00007f720d45f077 [ 650.497904][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 650.509685][ T30] R13: 00007f720d45f270 R14: 00007f720de64620 R15: 0000000000000003 [ 650.526376][ T30] [ 650.529521][ T30] INFO: task syz-executor:12480 blocked for more than 147 seconds. [ 650.550016][ T30] Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 650.557692][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 650.577714][ T30] task:syz-executor state:D stack:26424 pid:12480 tgid:12480 ppid:1 flags:0x00004004 [ 650.592964][ T30] Call Trace: [ 650.596288][ T30] [ 650.599245][ T30] __schedule+0x1895/0x4b30 [ 650.610451][ T30] ? __pfx___schedule+0x10/0x10 [ 650.615356][ T30] ? __pfx_lock_release+0x10/0x10 [ 650.631867][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 650.639396][ T30] ? schedule+0x90/0x320 [ 650.650013][ T30] schedule+0x14b/0x320 [ 650.654218][ T30] schedule_preempt_disabled+0x13/0x30 [ 650.659703][ T30] __mutex_lock+0x6a7/0xd70 [ 650.675290][ T30] ? __mutex_lock+0x52a/0xd70 [ 650.690613][ T30] ? register_nexthop_notifier+0x84/0x290 [ 650.696395][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 650.710399][ T30] ? __asan_memset+0x23/0x50 [ 650.715057][ T30] register_nexthop_notifier+0x84/0x290 [ 650.733648][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 650.750098][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 650.756407][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 650.773639][ T30] ? __asan_memset+0x23/0x50 [ 650.778302][ T30] ops_init+0x31e/0x590 [ 650.789477][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 650.799699][ T30] setup_net+0x287/0x9e0 [ 650.810791][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 650.816400][ T30] ? __pfx_setup_net+0x10/0x10 [ 650.833150][ T30] copy_net_ns+0x33f/0x570 [ 650.837629][ T30] create_new_namespaces+0x425/0x7b0 [ 650.864397][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 650.877460][ T30] ksys_unshare+0x57d/0xa70 [ 650.886809][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 650.897841][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 650.909486][ T30] ? do_syscall_64+0x100/0x230 [ 650.920919][ T30] __x64_sys_unshare+0x38/0x40 [ 650.925750][ T30] do_syscall_64+0xf3/0x230 [ 650.941420][ T30] ? clear_bhb_loop+0x35/0x90 [ 650.958444][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.965986][ T30] RIP: 0033:0x7f62b257f7f7 [ 650.981433][ T30] RSP: 002b:00007f62b285ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 650.999123][ T30] RAX: ffffffffffffffda RBX: 00007f62b25f1a85 RCX: 00007f62b257f7f7 [ 651.008687][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 651.027104][ T30] RBP: 0000000000000000 R08: 00007f62b3267d60 R09: 0000000000000000 [ 651.038933][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 651.059225][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 651.079799][ T30] [ 651.084813][ T30] [ 651.084813][ T30] Showing all locks held in the system: [ 651.100047][ T30] 3 locks held by kworker/u8:1/12: [ 651.105198][ T30] 1 lock held by khungtaskd/30: [ 651.122442][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 651.139504][ T30] 4 locks held by kworker/u8:3/52: [ 651.145901][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 651.160091][T12474] Bluetooth: hci14: command tx timeout [ 651.178484][ T30] #1: ffffc90000bc7d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 651.191050][ T30] #2: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 651.210285][ T30] #3: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: cleanup_net+0x6af/0xcc0 [ 651.219366][ T30] 2 locks held by getty/4992: [ 651.236523][ T30] #0: ffff88803251a0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 651.259495][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 651.284730][ T30] 3 locks held by kworker/u9:6/5238: [ 651.299978][ T30] #0: ffff888044c76948 ((wq_completion)hci3){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 651.320117][T12474] Bluetooth: hci15: command tx timeout [ 651.326543][ T30] #1: ffffc90003fb7d00 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 651.348889][ T30] #2: ffff88805dba4d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_cmd_sync_work+0x1ec/0x400 [ 651.362317][ T30] 3 locks held by kworker/1:3/5280: [ 651.367556][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 651.392376][ T30] #1: ffffc9000421fd00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 651.414617][ T30] #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 651.430063][ T30] 3 locks held by kworker/0:4/5281: [ 651.435299][ T30] 3 locks held by kworker/1:5/5283: [ 651.449821][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 651.470009][ T30] #1: ffffc9000424fd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 651.501059][ T30] #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 651.521526][ T30] 3 locks held by kworker/0:5/5284: [ 651.526769][ T30] 4 locks held by kworker/0:6/5285: [ 651.541815][ T30] 3 locks held by kworker/u8:8/5330: [ 651.547140][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 651.573235][ T30] #1: ffffc90008ed7d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 651.593101][ T30] #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 651.609645][ T30] 3 locks held by kworker/u8:13/7596: [ 651.620060][ T30] #0: ffff88814bcbc148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 651.667951][ T30] #1: ffffc9000455fd00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 651.693123][ T30] #2: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 651.710010][ T30] 7 locks held by kworker/0:2/11300: [ 651.715421][ T30] 1 lock held by syz-executor/11619: [ 651.740060][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 651.749119][ T30] 1 lock held by syz-executor/12027: [ 651.763378][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 651.782635][ T30] 1 lock held by syz.2.1195/12352: [ 651.787899][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 651.799946][ T30] 2 locks held by syz.4.1201/12380: [ 651.805194][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 651.831943][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 651.854759][ T30] 1 lock held by syz-executor/12415: [ 651.867609][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 651.883607][ T30] 7 locks held by syz-executor/12418: [ 651.889240][ T30] #0: ffff888032738420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 651.920168][ T30] #1: ffff88802fe33c88 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 651.941455][ T30] #2: ffff888027009d28 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 651.961261][ T30] #3: ffffffff8f5701c8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 651.986004][ T30] #4: ffff88807b67f0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 652.000919][ T30] #5: ffff88807b67b250 (&devlink->lock_key#43){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 652.020967][ T30] #6: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x71/0x5c0 [ 652.039876][ T30] 1 lock held by syz-executor/12455: [ 652.045401][ T30] #0: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 652.066323][ T30] 2 locks held by syz-executor/12475: [ 652.079835][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 652.089535][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 652.111666][ T30] 2 locks held by syz-executor/12480: [ 652.117093][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 652.138028][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 652.150842][ T30] 2 locks held by syz-executor/12486: [ 652.156259][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 652.179286][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 652.192625][ T30] 2 locks held by syz-executor/12489: [ 652.198039][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 652.216773][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 652.230877][ T30] 2 locks held by syz-executor/12494: [ 652.236283][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 652.250006][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 652.271739][ T30] 2 locks held by syz-executor/12499: [ 652.278411][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 652.294306][T12474] Bluetooth: hci3: command 0x0406 tx timeout [ 652.311256][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 652.329982][ T30] 2 locks held by syz-executor/12504: [ 652.335408][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 652.355296][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 652.371080][ T30] 2 locks held by syz-executor/12511: [ 652.378755][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 652.394269][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 652.412909][ T30] 2 locks held by syz-executor/12513: [ 652.418317][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 652.436435][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 652.457939][ T30] 2 locks held by syz-executor/12517: [ 652.465176][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 652.487868][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 652.503185][ T30] 2 locks held by syz-executor/12525: [ 652.508597][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 652.530511][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 652.550039][ T30] 2 locks held by syz-executor/12535: [ 652.555464][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 652.575915][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 652.593014][ T30] 2 locks held by syz-executor/12543: [ 652.598426][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 652.620974][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 652.640201][ T30] 2 locks held by syz-executor/12546: [ 652.645612][ T30] #0: ffffffff8fcc55d0 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 652.666436][ T30] #1: ffffffff8fcd20c8 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 652.687637][ T30] [ 652.699654][ T30] ============================================= [ 652.699654][ T30] [ 652.744378][ T30] NMI backtrace for cpu 1 [ 652.748764][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 652.759299][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 652.769377][ T30] Call Trace: [ 652.772679][ T30] [ 652.775631][ T30] dump_stack_lvl+0x241/0x360 [ 652.780339][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 652.785561][ T30] ? __pfx__printk+0x10/0x10 [ 652.790192][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 652.795164][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 652.800647][ T30] ? _printk+0xd5/0x120 [ 652.804830][ T30] ? __pfx__printk+0x10/0x10 [ 652.809446][ T30] ? __wake_up_klogd+0xcc/0x110 [ 652.814407][ T30] ? __pfx__printk+0x10/0x10 [ 652.819023][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 652.824072][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 652.830079][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 652.836178][ T30] watchdog+0xff4/0x1040 [ 652.840470][ T30] ? watchdog+0x1ea/0x1040 [ 652.844930][ T30] ? __pfx_watchdog+0x10/0x10 [ 652.849637][ T30] kthread+0x2f0/0x390 [ 652.853730][ T30] ? __pfx_watchdog+0x10/0x10 [ 652.858435][ T30] ? __pfx_kthread+0x10/0x10 [ 652.863045][ T30] ret_from_fork+0x4b/0x80 [ 652.867485][ T30] ? __pfx_kthread+0x10/0x10 [ 652.872095][ T30] ret_from_fork_asm+0x1a/0x30 [ 652.876898][ T30] [ 652.881382][ T30] Sending NMI from CPU 1 to CPUs 0: [ 652.886654][ C0] NMI backtrace for cpu 0 [ 652.886668][ C0] CPU: 0 UID: 0 PID: 11300 Comm: kworker/0:2 Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 652.886688][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 652.886700][ C0] Workqueue: events nsim_dev_trap_report_work [ 652.886723][ C0] RIP: 0010:filter_irq_stacks+0x4f/0xa0 [ 652.886745][ C0] Code: 00 99 cf 8b 48 89 fb eb 0c 49 ff c7 48 83 c3 08 4d 39 fc 74 4f 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 80 3c 08 00 <74> 08 48 89 df e8 87 e5 7d 00 4b 8b 04 fe 48 39 e8 72 0c 48 c7 c1 [ 652.886760][ C0] RSP: 0018:ffffc90000006d78 EFLAGS: 00000246 [ 652.886774][ C0] RAX: 1ffff92000000dce RBX: ffffc90000006e70 RCX: dffffc0000000000 [ 652.886788][ C0] RDX: 0000000000000000 RSI: 000000000000001a RDI: ffffc90000006e10 [ 652.886799][ C0] RBP: ffffffff8be00230 R08: 000000000000001b R09: ffffc90000006d70 [ 652.886812][ C0] R10: ffffc90000006cd0 R11: ffffffff8180a0e0 R12: 000000000000001a [ 652.886824][ C0] R13: ffffffff8bcf9900 R14: ffffc90000006e10 R15: 000000000000000c [ 652.886837][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 652.886851][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 652.886863][ C0] CR2: 0000000020044500 CR3: 000000000e734000 CR4: 00000000003526f0 [ 652.886878][ C0] DR0: 0000000000000000 DR1: 000000000000002b DR2: 0000000000000000 [ 652.886889][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 652.886900][ C0] Call Trace: [ 652.886906][ C0] [ 652.886913][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 652.886933][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 652.886954][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 652.886972][ C0] ? nmi_handle+0x2a/0x5a0 [ 652.886995][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 652.887015][ C0] ? nmi_handle+0x14f/0x5a0 [ 652.887031][ C0] ? nmi_handle+0x2a/0x5a0 [ 652.887048][ C0] ? filter_irq_stacks+0x4f/0xa0 [ 652.887065][ C0] ? default_do_nmi+0x63/0x160 [ 652.887084][ C0] ? exc_nmi+0x123/0x1f0 [ 652.887101][ C0] ? end_repeat_nmi+0xf/0x53 [ 652.887118][ C0] ? __lock_text_end+0x6/0x6 [ 652.887133][ C0] ? xen_error_entry+0x60/0x60 [ 652.887152][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 652.887172][ C0] ? filter_irq_stacks+0x4f/0xa0 [ 652.887190][ C0] ? filter_irq_stacks+0x4f/0xa0 [ 652.887209][ C0] ? filter_irq_stacks+0x4f/0xa0 [ 652.887226][ C0] [ 652.887233][ C0] [ 652.887240][ C0] stack_depot_save_flags+0x29/0x830 [ 652.887263][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 652.887285][ C0] kasan_save_track+0x51/0x80 [ 652.887301][ C0] ? kasan_save_track+0x3f/0x80 [ 652.887316][ C0] ? kasan_save_free_info+0x40/0x50 [ 652.887334][ C0] ? __kasan_slab_free+0x59/0x70 [ 652.887350][ C0] ? kfree+0x1a0/0x440 [ 652.887367][ C0] ? skb_release_data+0x6a0/0x8a0 [ 652.887384][ C0] ? consume_skb+0x9f/0xf0 [ 652.887398][ C0] ? nft_synproxy_eval_v4+0x3d2/0x610 [ 652.887417][ C0] ? nft_synproxy_do_eval+0x362/0xa60 [ 652.887436][ C0] ? nft_do_chain+0x4ad/0x1da0 [ 652.887456][ C0] ? nft_do_chain_inet+0x418/0x6b0 [ 652.887475][ C0] ? nf_hook_slow+0xc3/0x220 [ 652.887500][ C0] ? NF_HOOK+0x29e/0x450 [ 652.887516][ C0] ? NF_HOOK+0x3a4/0x450 [ 652.887531][ C0] ? __netif_receive_skb+0x2bf/0x650 [ 652.887548][ C0] ? process_backlog+0x662/0x15b0 [ 652.887565][ C0] ? __napi_poll+0xcb/0x490 [ 652.887581][ C0] ? net_rx_action+0x89b/0x1240 [ 652.887599][ C0] ? handle_softirqs+0x2c5/0x980 [ 652.887617][ C0] ? do_softirq+0x11b/0x1e0 [ 652.887634][ C0] ? __local_bh_enable_ip+0x1bb/0x200 [ 652.887652][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 652.887669][ C0] ? process_scheduled_works+0xa63/0x1850 [ 652.887687][ C0] ? worker_thread+0x870/0xd30 [ 652.887705][ C0] ? kthread+0x2f0/0x390 [ 652.887720][ C0] ? ret_from_fork+0x4b/0x80 [ 652.887740][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 652.887775][ C0] kasan_save_free_info+0x40/0x50 [ 652.887794][ C0] __kasan_slab_free+0x59/0x70 [ 652.887809][ C0] ? skb_release_data+0x6a0/0x8a0 [ 652.887825][ C0] kfree+0x1a0/0x440 [ 652.887842][ C0] ? skb_release_data+0x6a0/0x8a0 [ 652.887859][ C0] skb_release_data+0x6a0/0x8a0 [ 652.887878][ C0] consume_skb+0x9f/0xf0 [ 652.887893][ C0] nft_synproxy_eval_v4+0x3d2/0x610 [ 652.887918][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 652.887941][ C0] ? nf_ip_checksum+0x13a/0x500 [ 652.887965][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 652.887990][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 652.888015][ C0] ? __pfx_validate_chain+0x10/0x10 [ 652.888039][ C0] nft_do_chain+0x4ad/0x1da0 [ 652.888068][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 652.888088][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 652.888121][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 652.888141][ C0] nft_do_chain_inet+0x418/0x6b0 [ 652.888165][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 652.888185][ C0] ? ipt_do_table+0x312/0x1860 [ 652.888215][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 652.888237][ C0] nf_hook_slow+0xc3/0x220 [ 652.888257][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 652.888275][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 652.888294][ C0] NF_HOOK+0x29e/0x450 [ 652.888314][ C0] ? NF_HOOK+0x9a/0x450 [ 652.888330][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 652.888347][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 652.888368][ C0] ? ip_rcv_finish+0x406/0x560 [ 652.888385][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 652.888401][ C0] NF_HOOK+0x3a4/0x450 [ 652.888418][ C0] ? __lock_acquire+0x1384/0x2050 [ 652.888441][ C0] ? NF_HOOK+0x9a/0x450 [ 652.888458][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 652.888474][ C0] ? ip_rcv_core+0x801/0xd10 [ 652.888500][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 652.888522][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 652.888541][ C0] __netif_receive_skb+0x2bf/0x650 [ 652.888562][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 652.888584][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 652.888603][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 652.888626][ C0] ? __pfx_lock_release+0x10/0x10 [ 652.888648][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 652.888676][ C0] process_backlog+0x662/0x15b0 [ 652.888699][ C0] ? process_backlog+0x33b/0x15b0 [ 652.888723][ C0] ? __pfx_process_backlog+0x10/0x10 [ 652.888742][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 652.888766][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 652.888790][ C0] __napi_poll+0xcb/0x490 [ 652.888812][ C0] net_rx_action+0x89b/0x1240 [ 652.888842][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 652.888863][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 652.888900][ C0] handle_softirqs+0x2c5/0x980 [ 652.888924][ C0] ? do_softirq+0x11b/0x1e0 [ 652.888945][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 652.888967][ C0] do_softirq+0x11b/0x1e0 [ 652.888985][ C0] [ 652.888991][ C0] [ 652.888997][ C0] ? __pfx_do_softirq+0x10/0x10 [ 652.889015][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 652.889037][ C0] ? rcu_is_watching+0x15/0xb0 [ 652.889056][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 652.889074][ C0] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 652.889092][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 652.889111][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 652.889130][ C0] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 652.889149][ C0] nsim_dev_trap_report_work+0x75d/0xaa0 [ 652.889174][ C0] ? process_scheduled_works+0x976/0x1850 [ 652.889193][ C0] process_scheduled_works+0xa63/0x1850 [ 652.889225][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 652.889248][ C0] ? assign_work+0x364/0x3d0 [ 652.889269][ C0] worker_thread+0x870/0xd30 [ 652.889291][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 652.889313][ C0] ? __kthread_parkme+0x169/0x1d0 [ 652.889334][ C0] ? __pfx_worker_thread+0x10/0x10 [ 652.889353][ C0] kthread+0x2f0/0x390 [ 652.889368][ C0] ? __pfx_worker_thread+0x10/0x10 [ 652.889386][ C0] ? __pfx_kthread+0x10/0x10 [ 652.889401][ C0] ret_from_fork+0x4b/0x80 [ 652.889421][ C0] ? __pfx_kthread+0x10/0x10 [ 652.889436][ C0] ret_from_fork_asm+0x1a/0x30 [ 652.889462][ C0] [ 653.754456][ T5238] Bluetooth: hci14: command tx timeout [ 653.760354][ T5238] Bluetooth: hci15: command tx timeout [ 653.785950][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 653.792848][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc2-syzkaller-00291-g09f6b0c8904b #0 [ 653.803379][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 653.813475][ T30] Call Trace: [ 653.816774][ T30] [ 653.819721][ T30] dump_stack_lvl+0x241/0x360 [ 653.824440][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 653.829662][ T30] ? __pfx__printk+0x10/0x10 [ 653.834287][ T30] ? vscnprintf+0x5d/0x90 [ 653.838652][ T30] panic+0x349/0x880 [ 653.842600][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 653.848776][ T30] ? __pfx_panic+0x10/0x10 [ 653.853217][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 653.858782][ T30] ? __irq_work_queue_local+0x137/0x410 [ 653.864369][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 653.869789][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 653.875973][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 653.882162][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 653.888432][ T30] watchdog+0x1033/0x1040 [ 653.892797][ T30] ? watchdog+0x1ea/0x1040 [ 653.897243][ T30] ? __pfx_watchdog+0x10/0x10 [ 653.901940][ T30] kthread+0x2f0/0x390 [ 653.906040][ T30] ? __pfx_watchdog+0x10/0x10 [ 653.910742][ T30] ? __pfx_kthread+0x10/0x10 [ 653.915354][ T30] ret_from_fork+0x4b/0x80 [ 653.919795][ T30] ? __pfx_kthread+0x10/0x10 [ 653.924422][ T30] ret_from_fork_asm+0x1a/0x30 [ 653.929225][ T30] [ 653.932563][ T30] Kernel Offset: disabled [ 653.936907][ T30] Rebooting in 86400 seconds..