last executing test programs: 24m8.242550689s ago: executing program 0 (id=2549): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_usb_connect$uac1(0x3, 0xee, &(0x7f00000025c0)=ANY=[@ANYBLOB="12011003000000406b1d0101400000ff03010902dc0003010110020904000000010100000a240102f0090201020a24050105ff1715e9280924030402030106050c24020606020503ce03ae0805240504070b24050402034470be0d14090401000001020000090401018fa7aaac59d7fc457220be536d01010200000d240202070074a1e314a6e90f035388f69e0b240201080304080f975f0b2402010804090266d64b0f2402020300ffff67e09da34b85a8090501091000400576072501801002000904020000010200000904020101010200000924020103010709ad072401050101100c24020105037c4017c68deb090582"], 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) pidfd_send_signal(0xffffffffffffffff, 0x12, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100000000000000000005"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 24m5.189194775s ago: executing program 0 (id=2555): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) pselect6(0x40, &(0x7f0000000000)={0xa, 0xa3cd, 0x6, 0xffffffffffffefff, 0x3ff, 0x5, 0x2, 0x400002}, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0x2, 0x922000000001, 0x106) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0)={0x2, 0x0, [{0xdddd1000, 0xb4, &(0x7f0000000180)=""/180}, {0x4, 0x7d, &(0x7f00000003c0)=""/125}]}) setsockopt$sock_attach_bpf(r4, 0x1, 0x25, &(0x7f00000002c0), 0x8) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xd73, 0x8, 0x4000003d, 0x54}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x14, 0x0, r2, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x75fa, 0xe475, 0x0, 0x0, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r8 = socket$tipc(0x1e, 0x5, 0x0) memfd_secret(0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 24m3.889856382s ago: executing program 0 (id=2561): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x41, &(0x7f0000000300)=ANY=[@ANYRES16=r0], 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000200)=""/66, 0x42}], 0x2}, 0x1) syz_open_dev$vbi(0x0, 0x1, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f0000000440)=ANY=[@ANYBLOB="180000001400010300000000000000001e000000c1"], 0x18}}, 0x0) getgroups(0x1, &(0x7f0000001080)=[0xffffffffffffffff]) setgroups(0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, r5) keyctl$setperm(0x5, 0x0, 0x30925) mount(&(0x7f0000000080)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='exfat\x00', 0x401, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) 23m57.837066913s ago: executing program 0 (id=2567): r0 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x80, 0x0) ioctl$PTP_PEROUT_REQUEST2(r0, 0x40383d0c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) setpgid(r1, 0x0) setpgid(0x0, r1) mount$cgroup(0xf4, &(0x7f0000000100)='./file0\x00', 0x0, 0x10000, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_CATATONIC(r2, 0x9362, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, 0x0) 23m57.182008651s ago: executing program 0 (id=2571): r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000240)=0x3) pselect6(0x40, &(0x7f0000000000)={0xa, 0xa3cd, 0x6, 0xffffffffffffefff, 0x3ff, 0x5, 0x2, 0x400002}, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) r2 = socket$kcm(0x2, 0x922000000001, 0x106) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000004c0)={0x2, 0x0, [{0xdddd1000, 0xb4, &(0x7f0000000180)=""/180}, {0x4, 0x7d, &(0x7f00000003c0)=""/125}]}) setsockopt$sock_attach_bpf(r2, 0x1, 0x25, &(0x7f00000002c0), 0x8) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000300)={0x0, 0xd73, 0x8, 0x4000003d, 0x54}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x14, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)=[{0x0}, {0x0}], 0x2}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x75fa, 0xe475, 0x0, 0x0, 0x0) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r6 = socket$tipc(0x1e, 0x5, 0x0) memfd_secret(0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) 23m53.770509262s ago: executing program 0 (id=2577): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000f34607205800010000107409047700003796c300"], 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0xafa1, 0x800, 0x0, 0x11f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000810526bd", @ANYRES32=0x0, @ANYBLOB="14d0a4"], 0x3c}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000080)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r3, 0x63b7, 0xdead, 0x5, &(0x7f00000003c0)={[0x5]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) signalfd4(r3, &(0x7f0000000440)={[0x2]}, 0x8, 0x80000) r4 = inotify_init1(0x0) r5 = getpid() r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000240)={0x20000006}) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r7, &(0x7f0000000280)={r6, r4, 0x5}) timer_create(0x6, &(0x7f0000000100)={0x0, 0xf, 0x4, @tid=r5}, &(0x7f0000000380)) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 23m51.865971556s ago: executing program 32 (id=2577): syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000f34607205800010000107409047700003796c300"], 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0xafa1, 0x800, 0x0, 0x11f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000001000810526bd", @ANYRES32=0x0, @ANYBLOB="14d0a4"], 0x3c}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000080)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_enter(r3, 0x63b7, 0xdead, 0x5, &(0x7f00000003c0)={[0x5]}, 0x8) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) signalfd4(r3, &(0x7f0000000440)={[0x2]}, 0x8, 0x80000) r4 = inotify_init1(0x0) r5 = getpid() r6 = epoll_create1(0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000240)={0x20000006}) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r7, &(0x7f0000000280)={r6, r4, 0x5}) timer_create(0x6, &(0x7f0000000100)={0x0, 0xf, 0x4, @tid=r5}, &(0x7f0000000380)) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 23m40.395362546s ago: executing program 3 (id=2609): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) fchmod(r0, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000100)="7e1dc11f60bcf97c48a6045036d99ad9e8712621c1ea8e9e692c1ae7d242254fb03c055338d7a93036159ad0648fdb8baa11138bb8493c6edd43eba7266995ad311e325ed29bd840a87b19a96c16d47c5f27d2468be4d8202d31d207ec403c58b8ad6b032cfc29d1f0999f7374b9ded27bb49fa07950bb713b3e20d32d06c9d4d9e48c16bdbea89a2a2c8d06408426e8c246bcfa1b17432edbcb75ea08d9e7098c63aaf9573298e3656ed7ddc76c98aac82209d964b8bd9c8f2319f06fb36dae6280e74659e84de96b3001bafaf7", 0xce) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/vlan/vlan0\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=@getqdisc={0x2c, 0x26, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x7, 0x58050350b5ac57da}, {0x3, 0x8}, {0x0, 0x4}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000888) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x14, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c080}, 0x800) 23m35.469852118s ago: executing program 3 (id=2621): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0x2000000000000329, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) timerfd_create(0x8, 0x80000) 23m35.068571184s ago: executing program 1 (id=2624): syz_usb_connect$hid(0x4, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1a34, 0x802, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400}}}}}]}}]}}, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x25, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01063d0000000000000028000000280000000200000000000000000000030000020000000200000000000000010000000000000104"], 0x0, 0x42}, 0x28) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000180)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00"/47], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 23m34.045357375s ago: executing program 3 (id=2626): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000004c0008800c00024000deffff55c3dd9e0c00014000000000000000000c00024000000000000000000c00024000000000000000090c00014000000000000000060c000140000000000000026314000480080002403cb140bb0800014000"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x40000004}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x100) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x30, 0x1, 0x0, 0x0, 0x10001, 'syz1\x00', 0x0}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x0, 0x60, 0x2, 0x5, 0x10, 0xfffffffffffffffa}, {0x9, 0x2, 0x2, 0x8f, 0x0, 0xfd}], ['\x00', '\x00', '\x00', '\x00']}) 23m32.544660815s ago: executing program 3 (id=2628): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f28, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c942399, 0x1, 0x3ff, 0x802, 0x1600, 0xb, 0x200001, 0x9, 0xe1c7, 0x4, 0x4, 0x4, 0x392, 0x80000089, 0xfffffffd, 0x20000000, 0x7fff, 0x3, 0x3, 0x3c, 0xf10, 0x4, 0x3, 0xdffffffd]}) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a24010900010201020524040105"], 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, 'geneve1\x00', {0x1}, 0x8}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000400)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000280)) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0xa8, 0x8, 0xa, 0x1202, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x3d, 0x7, 0x1, 0x0, "7df85c2726ffad61e77d58610539ec6e68fd6efe85156ec517963b75178b03ccfaf596b054300b3cd2cc9b90062acffdeef173c6b4ada0c0f8"}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x130}, 0x1, 0x0, 0x0, 0x40}, 0xc0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountstats\x00') bpf$ITER_CREATE(0x21, &(0x7f0000006200), 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x0, 'team0\x00', {0x1}, 0x7fff}) 23m31.880626731s ago: executing program 1 (id=2630): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) fchmod(r0, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000100)="7e1dc11f60bcf97c48a6045036d99ad9e8712621c1ea8e9e692c1ae7d242254fb03c055338d7a93036159ad0648fdb8baa11138bb8493c6edd43eba7266995ad311e325ed29bd840a87b19a96c16d47c5f27d2468be4d8202d31d207ec403c58b8ad6b032cfc29d1f0999f7374b9ded27bb49fa07950bb713b3e20d32d06c9d4d9e48c16bdbea89a2a2c8d06408426e8c246bcfa1b17432edbcb75ea08d9e7098c63aaf9573298e3656ed7ddc76c98aac82209d964b8bd9c8f2319f06fb36dae6280e74659e84de96b3001bafaf7", 0xce) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/vlan/vlan0\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=@getqdisc={0x2c, 0x26, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x7, 0x58050350b5ac57da}, {0x3, 0x8}, {0x0, 0x4}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000888) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2404c080}, 0x800) 23m31.092847129s ago: executing program 1 (id=2632): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x5, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) write$binfmt_elf64(r1, &(0x7f0000000b40)={{0x7f, 0x45, 0x4c, 0x46, 0xe, 0x7, 0x0, 0x3, 0x5, 0x2, 0x3d, 0x46d, 0x29, 0x40, 0x150, 0x87e, 0x5, 0x38, 0x1, 0x0, 0xa076, 0x1}, [{0x70000000, 0x7, 0x7, 0x910, 0x3, 0x3, 0x4, 0x3}]}, 0x78) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) 23m30.930436759s ago: executing program 1 (id=2633): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) ptrace$peek(0x2, r0, &(0x7f0000000400)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5}, &(0x7f0000000180), &(0x7f0000000280)=r4}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x1, &(0x7f00000004c0)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000100)) sendmmsg(r6, &(0x7f00000003c0), 0x0, 0x24000014) r8 = fsopen(&(0x7f0000000340)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r8, 0x6, 0x0, 0x0, 0x0) fsmount(r8, 0x0, 0x1) fsconfig$FSCONFIG_SET_BINARY(r8, 0x2, &(0x7f0000000200)='/dev/snd/midiC#D#\x00', &(0x7f0000000d80)="fb", 0x1) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x2404c880}, 0x8000) 23m29.620796399s ago: executing program 3 (id=2635): syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) prlimit64(0x0, 0x6, 0x0, &(0x7f00000000c0)) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setregid(0xffffffffffffffff, 0x0) close(r3) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1) getrlimit(0xd, 0x0) memfd_create(&(0x7f0000000180)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xecz\xabq\x95t*T9\xa9\b X \x04\"\x17\xbf\xcb\xccF\xda\xcf\xdd^\xa0\x15\xc0\xcb^h>\x1b\xb5d\xc7\x7f0\x9a&\xb0\x12#\x9c`\xa6\xed\x05\x95g\a\xccYb\xaf\xe9\xb6G?\x9f\xf5\xfe\xc1\xc0JJ\xc8\xd9d\x80\x13\x8fX\xb4\x19\xc4\\\xcb\x89-)\x90\x01\v\xac^\xdbBQ|\xaej;\x92\\\xf8u\x19Y\xee\x99EI\xf1t\xadn<\x9b\xc9\x87\xd0\xa7\x1a\x81\xb9\xc87sq\xd7\x15\xd6\x91O\x9c\x99!9>\xff\xa8\xfa\xe6=d\xcf\xca\xa9\xc61!\xc6P\x13\xd0\x88gZ\xbe\xdfl\xfa\xff\xb0m;d07tx\xbb\xabd\xe5\x16\xc4\xae\xf0', 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="a60a00000000000061118000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) setsockopt(0xffffffffffffffff, 0x9e, 0x1, &(0x7f00000014c0)="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", 0x800) 23m29.307072024s ago: executing program 1 (id=2637): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a8c000000030a0fdb00000000000000000a0000050900030073797a30000000000900010073797a31000000004c0008800c00024000deffff55c3dd9e0c00014000000000000000000c00024000000000000000000c00024000000000000000090c00014000000000000000060c000140000000000000026314000480080002403cb140bb08000140000000031400"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1, 0x40000004}, 0x1c) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x100) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x1) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb) r3 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x80, 'syz0\x00'}, 0x5, 0x30, 0x1, 0x0, 0x0, 0x10001, 'syz1\x00', 0x0}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000340)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x0, 0x60, 0x2, 0x5, 0x10, 0xfffffffffffffffa}, {0x9, 0x2, 0x2, 0x8f, 0x0, 0xfd}], ['\x00', '\x00', '\x00', '\x00']}) 23m28.298053024s ago: executing program 3 (id=2638): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f28, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c942399, 0x1, 0x3ff, 0x802, 0x1600, 0xb, 0x200001, 0x9, 0xe1c7, 0x4, 0x4, 0x4, 0x392, 0x80000089, 0xfffffffd, 0x20000000, 0x7fff, 0x3, 0x3, 0x3c, 0xf10, 0x4, 0x3, 0xdffffffd]}) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a24010900010201020524040105"], 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, 'geneve1\x00', {0x1}, 0x8}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000400)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000280)) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0xa8, 0x8, 0xa, 0x1202, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x3d, 0x7, 0x1, 0x0, "7df85c2726ffad61e77d58610539ec6e68fd6efe85156ec517963b75178b03ccfaf596b054300b3cd2cc9b90062acffdeef173c6b4ada0c0f8"}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x130}, 0x1, 0x0, 0x0, 0x40}, 0xc0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountstats\x00') bpf$ITER_CREATE(0x21, &(0x7f0000006200), 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x0, 'team0\x00', {0x1}, 0x7fff}) 23m27.418073904s ago: executing program 1 (id=2641): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) fchmod(r0, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000100)="7e1dc11f60bcf97c48a6045036d99ad9e8712621c1ea8e9e692c1ae7d242254fb03c055338d7a93036159ad0648fdb8baa11138bb8493c6edd43eba7266995ad311e325ed29bd840a87b19a96c16d47c5f27d2468be4d8202d31d207ec403c58b8ad6b032cfc29d1f0999f7374b9ded27bb49fa07950bb713b3e20d32d06c9d4d9e48c16bdbea89a2a2c8d06408426e8c246bcfa1b17432edbcb75ea08d9e7098c63aaf9573298e3656ed7ddc76c98aac82209d964b8bd9c8f2319f06fb36dae6280e74659e84de96b3001bafaf7", 0xce) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/vlan/vlan0\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=@getqdisc={0x2c, 0x26, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x7, 0x58050350b5ac57da}, {0x3, 0x8}, {0x0, 0x4}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000888) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2404c080}, 0x800) 23m13.038777901s ago: executing program 33 (id=2638): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f28, 0x5, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c942399, 0x1, 0x3ff, 0x802, 0x1600, 0xb, 0x200001, 0x9, 0xe1c7, 0x4, 0x4, 0x4, 0x392, 0x80000089, 0xfffffffd, 0x20000000, 0x7fff, 0x3, 0x3, 0x3c, 0xf10, 0x4, 0x3, 0xdffffffd]}) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32, @ANYBLOB="000000000000000010010c"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a24010900010201020524040105"], 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000040)={0x6, 'geneve1\x00', {0x1}, 0x8}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r1, 0x80489439, &(0x7f0000000400)) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCGSOFTCAR(r3, 0x5419, &(0x7f0000000280)) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0xa8, 0x8, 0xa, 0x1202, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x3d, 0x7, 0x1, 0x0, "7df85c2726ffad61e77d58610539ec6e68fd6efe85156ec517963b75178b03ccfaf596b054300b3cd2cc9b90062acffdeef173c6b4ada0c0f8"}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8035}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x130}, 0x1, 0x0, 0x0, 0x40}, 0xc0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='mountstats\x00') bpf$ITER_CREATE(0x21, &(0x7f0000006200), 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000000)={0x0, 'team0\x00', {0x1}, 0x7fff}) 23m11.776423592s ago: executing program 34 (id=2641): prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0xfffffd00, &(0x7f0000000000)='}\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) fchmod(r0, 0x10) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) write$dsp(0xffffffffffffffff, &(0x7f0000000100)="7e1dc11f60bcf97c48a6045036d99ad9e8712621c1ea8e9e692c1ae7d242254fb03c055338d7a93036159ad0648fdb8baa11138bb8493c6edd43eba7266995ad311e325ed29bd840a87b19a96c16d47c5f27d2468be4d8202d31d207ec403c58b8ad6b032cfc29d1f0999f7374b9ded27bb49fa07950bb713b3e20d32d06c9d4d9e48c16bdbea89a2a2c8d06408426e8c246bcfa1b17432edbcb75ea08d9e7098c63aaf9573298e3656ed7ddc76c98aac82209d964b8bd9c8f2319f06fb36dae6280e74659e84de96b3001bafaf7", 0xce) r2 = syz_open_procfs(r1, &(0x7f0000000080)='net/vlan/vlan0\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={r2, 0x58, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=@getqdisc={0x2c, 0x26, 0x1, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x7, 0x58050350b5ac57da}, {0x3, 0x8}, {0x0, 0x4}}, [{0x4}, {0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000888) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x8, 0x4, 0x0, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d80)=@newtaction={0x18, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2404c080}, 0x800) 1m24.111787545s ago: executing program 5 (id=5192): read$FUSE(0xffffffffffffffff, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10}}, 0x50) r1 = socket$inet6(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x4814) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) r3 = syz_io_uring_setup(0x496, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x7ffc, 0x40024e}, &(0x7f0000000340), &(0x7f0000000080)=0x0) r5 = eventfd(0x401) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r7 = syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8, 0x0, r3}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r8, r4, &(0x7f0000000140)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r1, 0x0, &(0x7f00000003c0)="936e4942c5ba89df80f0454969dc6239d9651771f399a0fde8b8e9f63f7c8011a88f42a3dbd710f0d604ca9de01174313d7cc8d3c6ffa94fc3e896c887f4104a344243e9f63fd9bf9e9fc592f5610420a2fbc3bd77e681327af22c56961c69bfe70d945f8256452933cac8aa66b6883e3ee49343206bbbd30efdba1327ee05bec86e9963b97c3c74fa3e23e00c36cf14b6ce346c2b47f89d208d9758443893e7e1c8fa760514a136d1c28ac5229d8653d76f037dc9159e5b22b2c71109d0c7513d4cd5f09e9c87a3063d866609629d6fbfa8ee3ec0a28aef17a3ccf808d3f66169539011bec0d1bb09db888c7e7b0556e5316bbe375a587c", 0xf8, 0x20000040}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000040)=r5, 0x1) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) shutdown(r1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r9 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0x80001001}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r7], 0x7c}, 0x1, 0x0, 0x0, 0x4880}, 0x4000000) socket$inet6(0xa, 0x3, 0x3c) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 1m22.093789841s ago: executing program 5 (id=5196): socket$unix(0x1, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) writev(0xffffffffffffffff, 0x0, 0x0) mount$afs(0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r1, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 1m20.856082256s ago: executing program 5 (id=5198): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1m20.209156398s ago: executing program 5 (id=5200): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) fsopen(0x0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000180)=0x702cce7dd41ef6e, 0x4) socket(0x1a, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r2 = shmget$private(0x0, 0x13000, 0x1, &(0x7f0000feb000/0x13000)=nil) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write$RDMA_USER_CM_CMD_LISTEN(r3, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x2}}, 0x10) r4 = shmat(r2, &(0x7f0000ff1000/0x3000)=nil, 0x400c) shmdt(r4) shmdt(r4) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) sendmmsg(r0, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r6 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000040)=0x9) r7 = socket$inet6(0xa, 0x1, 0x0) sendmsg$sock(r7, 0x0, 0x200488c1) socket$kcm(0xa, 0x2, 0x73) syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0), &(0x7f0000000280)) 1m19.064717739s ago: executing program 5 (id=5201): openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) fsopen(0x0, 0x0) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0x11, 0xa, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x2) syz_usbip_server_init(0x1) syz_usbip_server_init(0x1) syz_usbip_server_init(0x5) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) syz_usbip_server_init(0x3) r1 = syz_io_uring_setup(0x42e6, &(0x7f0000000200)={0x0, 0x2b13, 0x10100, 0x0, 0x25c, 0x0, r0}, &(0x7f0000000180)=0x0, &(0x7f00000002c0)=0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpu.stat\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x18, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000001c0)) write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(r1, 0x7330, 0x0, 0x0, 0x0, 0x0) 1m16.454931612s ago: executing program 5 (id=5204): fsopen(&(0x7f0000000100)='udf\x00', 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m11.186998192s ago: executing program 7 (id=5212): syz_open_dev$video4linux(0x0, 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x18, 0x0, 0xffffffffffffffff, &(0x7f0000000340)={0x220000, 0x20, 0x30}, 0x0, 0x18, 0x0, 0x12345}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x4, 0x0, 0x0) 1m6.236749882s ago: executing program 7 (id=5217): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f00000002c0)=0x7d) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, r2, 0xfff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, &(0x7f0000000100)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x6}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xa, 0x9, 0x8}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0x8}, {}, {0x7, 0x0, 0xc}, {0x18, 0x6, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1m3.120803798s ago: executing program 7 (id=5221): mknod$loop(&(0x7f0000000400)='./file0\x00', 0x10, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000001001000001"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rxrpc_local\x00', r2, 0x0, 0x5}, 0xfffffe2e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r4 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80882, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r6 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000010000000819ea3d287275e3300", [0x10000]}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 1m2.360740731s ago: executing program 4 (id=5223): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) openat$ttynull(0xffffffffffffff9c, 0x0, 0x141440, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) r1 = syz_usb_connect(0x6, 0xe0, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x6d, 0xaa, 0x28, 0x40, 0x12d1, 0xb4d5, 0x166c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x2, 0xb, 0x6, 0x50, 0x3, [{{0x9, 0x4, 0x31, 0x40, 0x0, 0xff, 0x3, 0x36, 0x7f}}, {{0x9, 0x4, 0x3, 0x1, 0x0, 0xf9, 0x76, 0x50, 0x5, [@cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x1, 0x3, 0x8}, {0x6, 0x24, 0x1a, 0x2, 0x8}, [@obex={0x5, 0x24, 0x15, 0x80}, @acm={0x4, 0x24, 0x2, 0xa}, @mdlm_detail={0x8d, 0x24, 0x13, 0x3, "2c8a5ff0fcc7e8a6a5cb9e9565622a76f100e9fec0c63171f2bd3c26cd756810d6903e73a31ac8c8d159a595713b5557eb4480662f4eafae0eb3b894094eeca90b59cd273c695ee549bc17b0bdcf18d2c70780859933e077e53b257e35d1d465282ab4d3e81987fa4e9d57d999028b6430348541cc0a92c0c338b27b6f3604471693db41da919ea20c"}]}]}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r3, r3) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@broadcast, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x9000000) 1m0.613120416s ago: executing program 35 (id=5204): fsopen(&(0x7f0000000100)='udf\x00', 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa, 0x4}, 0x20) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 53.722708904s ago: executing program 4 (id=5235): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x1020000, 0x0) getrlimit(0x4, 0x0) fsconfig$FSCONFIG_SET_PATH_EMPTY(0xffffffffffffffff, 0x4, 0x0, 0x0, 0xffffffffffffff9c) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_open_dev$sg(0x0, 0xf9ba, 0x14b082) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 52.556112483s ago: executing program 7 (id=5237): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00', 0x32a}) mkdir(0x0, 0x0) truncate(0x0, 0x8fff5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 50.210160861s ago: executing program 4 (id=5240): socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 49.554589557s ago: executing program 7 (id=5242): read$FUSE(0xffffffffffffffff, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, r0, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10}}, 0x50) r1 = socket$inet6(0xa, 0x1, 0x84) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, 0x0, 0x4814) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) r3 = syz_io_uring_setup(0x496, &(0x7f0000000f80)={0x0, 0x79af, 0x3180, 0x7ffc, 0x40024e}, &(0x7f0000000340), &(0x7f0000000080)=0x0) r5 = eventfd(0x401) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, 0x0, &(0x7f0000000240)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r7 = syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8, 0x0, r3}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)) syz_io_uring_submit(r8, r4, &(0x7f0000000140)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x40, 0x0, r1, 0x0, &(0x7f00000003c0)="936e4942c5ba89df80f0454969dc6239d9651771f399a0fde8b8e9f63f7c8011a88f42a3dbd710f0d604ca9de01174313d7cc8d3c6ffa94fc3e896c887f4104a344243e9f63fd9bf9e9fc592f5610420a2fbc3bd77e681327af22c56961c69bfe70d945f8256452933cac8aa66b6883e3ee49343206bbbd30efdba1327ee05bec86e9963b97c3c74fa3e23e00c36cf14b6ce346c2b47f89d208d9758443893e7e1c8fa760514a136d1c28ac5229d8653d76f037dc9159e5b22b2c71109d0c7513d4cd5f09e9c87a3063d866609629d6fbfa8ee3ec0a28aef17a3ccf808d3f66169539011bec0d1bb09db888c7e7b0556e5316bbe375a587c", 0xf8, 0x20000040}) io_uring_register$IORING_REGISTER_EVENTFD(r3, 0x4, &(0x7f0000000040)=r5, 0x1) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x0) shutdown(r1, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r9 = openat$rfkill(0xffffff9c, &(0x7f0000000040), 0x8080, 0x0) r10 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r9, &(0x7f0000000000)={0x80001001}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESOCT=r7], 0x7c}, 0x1, 0x0, 0x0, 0x4880}, 0x4000000) socket$inet6(0xa, 0x3, 0x3c) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 49.376501826s ago: executing program 4 (id=5244): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f000001e740)={&(0x7f000001e780)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x26000000) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 47.809091409s ago: executing program 7 (id=5246): mknod$loop(&(0x7f0000000400)='./file0\x00', 0x10, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000001001000001"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rxrpc_local\x00', r2, 0x0, 0x5}, 0xfffffe2e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r4 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80882, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r6 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000010000000819ea3d287275e3300", [0x10000]}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 45.131915831s ago: executing program 4 (id=5250): creat(0x0, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$key(0xf, 0x3, 0x2) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/custom1\x00', 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0xef4, &(0x7f0000000300)={0x0, 0x1c2a, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ppoll(&(0x7f0000000500)=[{}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) ioprio_get$uid(0x3, 0x0) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r6 = syz_open_dev$vim2m(&(0x7f0000000580), 0x4, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000100)=0x1) syz_open_dev$tty1(0xc, 0x4, 0x2) 43.380305331s ago: executing program 4 (id=5255): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x0, 0xb, 0x0, &(0x7f0000000200)="ff7f0e3f2617d1f439b5a1", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50) splice(r1, &(0x7f0000000300)=0x3, 0xffffffffffffffff, 0x0, 0x7, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r8, 0x0, '\x00', 0x0, r0, 0x0, 0x5}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r10, 0x400455c8, 0x2) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000040)=0x33) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0005010000", @ANYRES32=0x0, @ANYBLOB="0315000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2404d808}, 0x0) 33.769603083s ago: executing program 6 (id=5263): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 31.435149363s ago: executing program 36 (id=5246): mknod$loop(&(0x7f0000000400)='./file0\x00', 0x10, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000001001000001"], 0x10}, 0x8000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x6, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x5}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x844}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x4000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x101402, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40186f40, &(0x7f0000000440)=0x1f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000280)='rxrpc_local\x00', r2, 0x0, 0x5}, 0xfffffe2e) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c0000000d0a010300000000000000000a0000010900020073797a31000000000900010073797a3100000000eaec9415b65ea399c0729955cc078fd0850eea73d17a82ce41cd3900372c71afd9f8859fdb297b613d94fb1c2543f517a4fe03171d951128603b768fd2c7f5eb1e123e6f5d5eb547da22a0ffd8027be08064c1783bc942f04d923dba87919a1a780ed2377a36de9bf691f8c9f1482391a45c472f1e77fb29d55d44b307dabac26d9a166c1ad000435a59980a1fefcd91cacca6b89824eeea17655051051e411cb0ae2c372a3bb6d6d9faefad2767050a038f150a34938b1df8db4261d4ab022777065eef552d6a9bf18beb39274cf980de80d3c75a80afb1027ff03f349ba5b6d06705d927c39bf49c525998e0909cca5265aabf8495ce0b06a1"], 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) kexec_load(0x0, 0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x7ffdd000, 0x8000}], 0x320000) r4 = socket$inet6(0xa, 0x80002, 0x0) openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80882, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x189) r6 = syz_open_dev$loop(&(0x7f0000000480), 0xd76, 0x181400) ioctl$LOOP_CONFIGURE(r6, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x2, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00000010000000819ea3d287275e3300", [0x10000]}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) 30.048421606s ago: executing program 6 (id=5266): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) nanosleep(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) 28.258872428s ago: executing program 37 (id=5255): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f00000000c0)=0x40, 0x4) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000feffffff00000000000004008500000036000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r6, 0x0, 0xb, 0x0, &(0x7f0000000200)="ff7f0e3f2617d1f439b5a1", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x6}, 0x50) splice(r1, &(0x7f0000000300)=0x3, 0xffffffffffffffff, 0x0, 0x7, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640200000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r0, 0x1, 0x1}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xd, 0x4, 0x4, 0xa8, 0x0, r8, 0x0, '\x00', 0x0, r0, 0x0, 0x5}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) ioctl$TIOCSETD(r10, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r10, 0x400455c8, 0x2) ioctl$TIOCSTI(r10, 0x5412, &(0x7f0000000040)=0x33) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0005010000", @ANYRES32=0x0, @ANYBLOB="0315000000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x2404d808}, 0x0) 26.168341935s ago: executing program 6 (id=5269): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 25.971485462s ago: executing program 2 (id=5270): r0 = socket$igmp(0x2, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {0x0}], 0x2}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x2000000, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 25.453456102s ago: executing program 6 (id=5271): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "9d42a08597d3b2f44ac89b1b52cc6728d6697d4cebc8f2f062c6f91f224aaacc", "99bd3410936eefeb3ea898dafab974aa", {"96deedc95f5d10a12027128db2e9bdf6", "f838a300b01b0e19ecdf00b20600"}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000300)={@random="e90c630faca2", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x10, 0x0, @opaque="cbe66f1099d3a415"}}}}}, 0x0) 25.331041623s ago: executing program 2 (id=5272): openat$sequencer(0xffffffffffffff9c, 0x0, 0x8042, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x0) syz_emit_ethernet(0x482, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x0, @pix_mp={0x7, 0x5, 0x31363553, 0x0, 0x5, [{0x8c65, 0x22}, {0xcbd, 0x10010000}, {0x10, 0x6}, {0x3ffffffe, 0x4}, {0x9, 0xd1}, {0x2, 0x800}, {0x0, 0x9}, {0x1, 0x8}], 0x6, 0x8, 0x1}}) r0 = socket(0x15, 0x5, 0x0) connect$unix(r0, &(0x7f0000000080)=@abs={0xa}, 0x6e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="500000061000010c4000000000000000130000008ef27ac820c18776cd1df52bd1b940041c1a29dc3c9b4d9093a33af9f739fb4c47063daa6fb09e9ca47818f0e658675ab0c13d4bc092b0dd972a57589de42d61291a915a2d0d3881f93c663011a51da375496d500b8a", @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a80140007000000000000000000"], 0x50}}, 0x0) r2 = gettid() tkill(r2, 0x7) sched_setaffinity(r2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x204, 0x0, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f110800", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000c351bb8600000000009500f60000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) write$binfmt_misc(r5, &(0x7f0000000240), 0xfffffecc) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000040)=0x3) 24.608947328s ago: executing program 6 (id=5273): fsopen(0x0, 0x0) socket(0x1a, 0x4, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x21c) write$RDMA_USER_CM_CMD_LISTEN(r0, 0x0, 0x0) shmat(0x0, &(0x7f0000ff1000/0x3000)=nil, 0x400c) syz_usb_connect(0x5, 0x0, 0x0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r2, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) ioctl$SNDCTL_DSP_SYNC(r2, 0x5001, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000009c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) gettid() ioctl$SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)=0x9) r3 = socket$inet6(0xa, 0x1, 0x0) sendmsg$sock(r3, 0x0, 0x200488c1) socket$kcm(0xa, 0x2, 0x73) 24.12276569s ago: executing program 2 (id=5274): r0 = socket(0x15, 0x80005, 0x0) getsockopt(r0, 0x200000000114, 0x271a, 0xffffffffffffffff, &(0x7f0000000000)=0x7ffff000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) read$FUSE(0xffffffffffffffff, &(0x7f0000012580)={0x2020}, 0x2020) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r5 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) truncate(&(0x7f0000000040)='./bus\x00', 0x9472) lsetxattr$security_ima(&(0x7f00000002c0)='./bus\x00', &(0x7f0000000180), &(0x7f0000000240)=@ng={0x4, 0x12}, 0x2, 0x0) dup3(r5, r4, 0x0) finit_module(r5, 0x0, 0x0) sendmsg$NL80211_CMD_GET_REG(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x14, r2, 0x701, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x8814) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='ntfs3\x00', 0x200000, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r7, 0x0, 0x0) syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r7, 0x0, 0x0, 0x0, 0x80000}) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYRES8=r6, @ANYRES16=r9], 0x48}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) 21.91764273s ago: executing program 2 (id=5275): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) 21.690982238s ago: executing program 2 (id=5276): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, 0x0, 0x0) nanosleep(0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r3, 0x8b2a, &(0x7f0000000040)) 19.199204995s ago: executing program 2 (id=5277): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f000001e740)={&(0x7f000001e780)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x26000000) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r5 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000280)={0x0, "70587f5d4b7c4f60369ee6ec054fed73c330ccb22e40d20f0611b178c575d03cb32766ac92e0131a563460de3e2b5fc121fdb2e005796c28ba882fd9e990b8de", 0x25}, 0x48, 0xfffffffffffffffc) keyctl$get_security(0x11, r5, &(0x7f00000016c0), 0x0) add_key$fscrypt_provisioning(&(0x7f000001e680), &(0x7f000001e6c0)={'syz', 0x1}, 0x0, 0x0, r5) semctl$SETVAL(0x0, 0x5cc49b4598cbd874, 0x10, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 15.473020796s ago: executing program 6 (id=5278): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 3.671126418s ago: executing program 38 (id=5277): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x5, 0x8, 0x3, 0x1}, 0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f000001e740)={&(0x7f000001e780)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x8894}, 0x26000000) socket$nl_rdma(0x10, 0x3, 0x14) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r5 = add_key$fscrypt_v1(0x0, 0x0, &(0x7f0000000280)={0x0, "70587f5d4b7c4f60369ee6ec054fed73c330ccb22e40d20f0611b178c575d03cb32766ac92e0131a563460de3e2b5fc121fdb2e005796c28ba882fd9e990b8de", 0x25}, 0x48, 0xfffffffffffffffc) keyctl$get_security(0x11, r5, &(0x7f00000016c0), 0x0) add_key$fscrypt_provisioning(&(0x7f000001e680), &(0x7f000001e6c0)={'syz', 0x1}, 0x0, 0x0, r5) semctl$SETVAL(0x0, 0x5cc49b4598cbd874, 0x10, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 0s ago: executing program 39 (id=5278): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {0x0}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): [T13377] hid-generic 0003:0003:0000.0022: unknown main item tag 0x0 [ 1822.122708][T13377] hid-generic 0003:0003:0000.0022: unknown main item tag 0x0 [ 1822.122736][T13377] hid-generic 0003:0003:0000.0022: unknown main item tag 0x0 [ 1822.128400][T13377] hid-generic 0003:0003:0000.0022: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1822.254384][T22199] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1822.254488][T22199] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1822.254891][T22199] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1822.254973][T22199] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1822.255258][T22199] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1822.255335][T22199] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1822.255623][T22199] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1822.255733][T22199] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1822.256010][T22199] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1822.256094][T22199] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1822.386561][T22198] fido_id[22198]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1822.815002][T22204] input: syz1 as /devices/virtual/input/input35 [ 1824.319851][T14247] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1824.418920][T14247] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1824.480515][T14247] bond0 (unregistering): Released all slaves [ 1824.816693][T21872] hsr_slave_0: entered promiscuous mode [ 1824.821311][T21872] hsr_slave_1: entered promiscuous mode [ 1824.823706][T21872] debugfs: 'hsr0' already exists in 'hsr' [ 1824.823739][T21872] Cannot create hsr debugfs directory [ 1824.825776][T21851] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1824.920384][T21851] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1825.294794][T22222] fuse: Unknown parameter 'user_id00000000000000000000' [ 1825.308120][T14247] hsr_slave_0: left promiscuous mode [ 1825.328283][T14247] hsr_slave_1: left promiscuous mode [ 1825.329577][T14247] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1825.370252][T14247] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1825.411081][T22224] fuse: Unknown parameter 'šó'à+&Ô—o®ò6ò¾æ;m¹¥Dª¸xV¥‹Ü‰œ_2·Ehilj' [ 1826.154172][T22232] input: syz1 as /devices/virtual/input/input36 [ 1827.211099][T22236] random: crng reseeded on system resumption [ 1827.244515][T19616] hid_parser_main: 8 callbacks suppressed [ 1827.244536][T19616] hid-generic 0003:0003:0000.0023: unknown main item tag 0x0 [ 1827.244559][T19616] hid-generic 0003:0003:0000.0023: unknown main item tag 0x0 [ 1827.244579][T19616] hid-generic 0003:0003:0000.0023: unknown main item tag 0x0 [ 1827.244597][T19616] hid-generic 0003:0003:0000.0023: unknown main item tag 0x0 [ 1827.244616][T19616] hid-generic 0003:0003:0000.0023: unknown main item tag 0x0 [ 1827.244635][T19616] hid-generic 0003:0003:0000.0023: unknown main item tag 0x0 [ 1827.244654][T19616] hid-generic 0003:0003:0000.0023: unknown main item tag 0x0 [ 1827.244673][T19616] hid-generic 0003:0003:0000.0023: unknown main item tag 0x0 [ 1827.244692][T19616] hid-generic 0003:0003:0000.0023: unknown main item tag 0x0 [ 1827.244711][T19616] hid-generic 0003:0003:0000.0023: unknown main item tag 0x0 [ 1827.247275][T19616] hid-generic 0003:0003:0000.0023: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1827.556118][T22237] fido_id[22237]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1827.608673][T22242] net_ratelimit: 68 callbacks suppressed [ 1827.608698][T22242] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1827.608787][T22242] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1827.609169][T22242] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1827.609248][T22242] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1827.621775][T22242] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1827.621877][T22242] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1827.622202][T22242] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1827.622300][T22242] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1827.622621][T22242] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1827.622710][T22242] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1828.338818][T14247] team0 (unregistering): Port device team_slave_1 removed [ 1828.498768][T14247] team0 (unregistering): Port device team_slave_0 removed [ 1829.360041][T21851] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1830.256200][T21851] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1830.289497][T22259] input: syz1 as /devices/virtual/input/input37 [ 1831.582246][T22266] random: crng reseeded on system resumption [ 1831.620221][T13377] hid-generic 0003:0003:0000.0024: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1831.864669][T22270] fido_id[22270]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1833.063344][T19039] hid_parser_main: 26 callbacks suppressed [ 1833.063363][T19039] hid-generic 0000:0000:0000.0025: unknown main item tag 0x0 [ 1833.067292][T19039] hid-generic 0000:0000:0000.0025: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1833.486432][T21851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1833.518979][T19616] hid-generic 0003:0003:0000.0026: unknown main item tag 0x0 [ 1833.519018][T19616] hid-generic 0003:0003:0000.0026: unknown main item tag 0x0 [ 1833.519047][T19616] hid-generic 0003:0003:0000.0026: unknown main item tag 0x0 [ 1833.519075][T19616] hid-generic 0003:0003:0000.0026: unknown main item tag 0x0 [ 1833.519103][T19616] hid-generic 0003:0003:0000.0026: unknown main item tag 0x0 [ 1833.519131][T19616] hid-generic 0003:0003:0000.0026: unknown main item tag 0x0 [ 1833.519159][T19616] hid-generic 0003:0003:0000.0026: unknown main item tag 0x0 [ 1833.519187][T19616] hid-generic 0003:0003:0000.0026: unknown main item tag 0x0 [ 1833.519213][T19616] hid-generic 0003:0003:0000.0026: unknown main item tag 0x0 [ 1833.674041][T21851] 8021q: adding VLAN 0 to HW filter on device team0 [ 1833.683853][T13947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1833.684197][T13947] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1833.739760][T13947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1833.739917][T13947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1833.889673][T19616] hid-generic 0003:0003:0000.0026: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 1834.121478][T22304] fido_id[22304]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1834.205294][T22308] net_ratelimit: 146 callbacks suppressed [ 1834.205318][T22308] openvswitch: netlink: Message has 16 unknown bytes. [ 1834.205349][T22308] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1835.461714][T21851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1835.571700][T21872] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1835.626165][T21872] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1836.646685][T21872] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1836.684032][T19199] hid-generic 0003:0003:0000.0027: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1836.767966][T19488] hid-generic 0000:0000:0000.0028: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1836.788509][T21872] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1837.051629][T22343] fido_id[22343]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1837.142129][T22358] openvswitch: netlink: Message has 16 unknown bytes. [ 1837.142179][T22358] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1837.367462][T21872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1837.385608][T21851] veth0_vlan: entered promiscuous mode [ 1837.498535][T22365] netlink: 'syz.2.4738': attribute type 3 has an invalid length. [ 1837.498695][T22365] netlink: 'syz.2.4738': attribute type 3 has an invalid length. [ 1837.498769][T22365] netlink: 'syz.2.4738': attribute type 3 has an invalid length. [ 1837.498817][T22365] netlink: 'syz.2.4738': attribute type 3 has an invalid length. [ 1837.498868][T22365] netlink: 'syz.2.4738': attribute type 3 has an invalid length. [ 1837.498919][T22365] netlink: 'syz.2.4738': attribute type 3 has an invalid length. [ 1837.498967][T22365] netlink: 'syz.2.4738': attribute type 3 has an invalid length. [ 1837.499030][T22365] netlink: 'syz.2.4738': attribute type 3 has an invalid length. [ 1837.499078][T22365] netlink: 'syz.2.4738': attribute type 3 has an invalid length. [ 1837.499126][T22365] netlink: 'syz.2.4738': attribute type 3 has an invalid length. [ 1837.556162][T21851] veth1_vlan: entered promiscuous mode [ 1837.643039][T21872] 8021q: adding VLAN 0 to HW filter on device team0 [ 1837.672396][ T3573] bridge0: port 1(bridge_slave_0) entered blocking state [ 1837.673971][ T3573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1837.730449][T17063] bridge0: port 2(bridge_slave_1) entered blocking state [ 1837.732169][T17063] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1837.843140][T21851] veth0_macvtap: entered promiscuous mode [ 1837.899388][T21851] veth1_macvtap: entered promiscuous mode [ 1838.298995][T21851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1838.939964][T21851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1839.054384][T17066] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1839.059544][T17066] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1839.068007][T17066] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1839.075454][T21167] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1840.853540][T22385] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1841.262695][T22394] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1841.262792][T22394] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1841.308004][T22394] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1841.308114][T22394] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1841.310493][T22394] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1841.310591][T22394] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1841.310895][T22394] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1841.310973][T22394] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1841.311256][T22394] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1841.311360][T22394] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1841.512919][T21872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1841.966219][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1841.966244][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1842.065217][T17063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1842.065239][T17063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1842.125494][T19488] hid_parser_main: 28 callbacks suppressed [ 1842.125519][T19488] hid-generic 0000:0000:0000.0029: unknown main item tag 0x0 [ 1842.245308][T19488] hid-generic 0000:0000:0000.0029: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1842.695331][T22416] fido_id[22416]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1844.175690][T22425] hub 9-0:1.0: USB hub found [ 1844.179586][T22425] hub 9-0:1.0: 1 port detected [ 1845.195617][T21872] veth0_vlan: entered promiscuous mode [ 1845.300093][T21872] veth1_vlan: entered promiscuous mode [ 1845.882691][T21872] veth0_macvtap: entered promiscuous mode [ 1845.904444][T21872] veth1_macvtap: entered promiscuous mode [ 1845.964937][T21872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1846.123572][T21872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1846.174207][T17066] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.185946][T17066] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.186648][T17066] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.186697][T17066] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1846.749381][ T9] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 1846.756170][ T9] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1846.835668][T17063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1846.835693][T17063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1846.844468][T22450] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1846.926990][T22451] fido_id[22451]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1847.046437][T14247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1847.046461][T14247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1848.201407][T22459] validate_nla: 39 callbacks suppressed [ 1848.201429][T22459] netlink: 'syz.5.4765': attribute type 1 has an invalid length. [ 1848.548066][T16155] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1848.740715][T16155] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1848.740767][T16155] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1848.740813][T16155] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1848.740898][T16155] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1848.740940][T16155] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1848.796513][T19488] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 1848.855985][T16155] usb 7-1: config 0 descriptor?? [ 1848.907329][T22466] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1848.989229][T22466] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1849.052850][T19488] usb 8-1: Using ep0 maxpacket: 8 [ 1849.062435][T19488] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1849.062474][T19488] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1849.062502][T19488] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1849.062535][T19488] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1849.062586][T19488] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1849.062616][T19488] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.589401][T19488] usb 8-1: GET_CAPABILITIES returned 0 [ 1849.589457][T19488] usbtmc 8-1:16.0: can't read capabilities [ 1849.608632][T22474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1849.609268][T22474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1849.654912][T22464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1849.666061][T22464] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1849.879538][T16155] usbhid 7-1:0.0: can't add hid device: -71 [ 1849.879681][T16155] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1849.910340][T16155] usb 7-1: USB disconnect, device number 2 [ 1850.016038][ C1] usbtmc 8-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1850.066487][T22478] usbtmc 8-1:16.0: Unable to send data, error -71 [ 1850.121822][T19207] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1850.137582][T19207] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1850.145225][T19207] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1850.157319][T19207] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1850.167510][T19207] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1850.335130][T22479] lo speed is unknown, defaulting to 1000 [ 1850.428547][T16155] usb 8-1: USB disconnect, device number 2 [ 1850.682851][T22490] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1850.686808][T19616] hid-generic 0000:0000:0000.002B: unknown main item tag 0x0 [ 1850.715966][T19616] hid-generic 0000:0000:0000.002B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1850.954906][T22493] fido_id[22493]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1851.566031][T22509] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4778'. [ 1851.850182][T22479] chnl_net:caif_netlink_parms(): no params data found [ 1852.307995][T16545] Bluetooth: hci5: command tx timeout [ 1853.778233][T22479] bridge0: port 1(bridge_slave_0) entered blocking state [ 1853.778380][T22479] bridge0: port 1(bridge_slave_0) entered disabled state [ 1853.778682][T22479] bridge_slave_0: entered allmulticast mode [ 1853.786377][T22479] bridge_slave_0: entered promiscuous mode [ 1853.794426][T22479] bridge0: port 2(bridge_slave_1) entered blocking state [ 1853.794571][T22479] bridge0: port 2(bridge_slave_1) entered disabled state [ 1853.794811][T22479] bridge_slave_1: entered allmulticast mode [ 1853.800604][T22479] bridge_slave_1: entered promiscuous mode [ 1854.218866][T22530] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1854.223201][T22479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1854.237711][T22479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1854.392170][T19488] hid-generic 0000:0000:0000.002C: unknown main item tag 0x0 [ 1854.399888][T16545] Bluetooth: hci5: command tx timeout [ 1854.448020][T19488] hid-generic 0000:0000:0000.002C: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1854.544412][T22479] team0: Port device team_slave_0 added [ 1854.562592][T22479] team0: Port device team_slave_1 added [ 1854.807954][T22528] orangefs_mount: mount request failed with -4 [ 1855.272217][T22479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1855.272238][T22479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1855.272268][T22479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1855.458159][T22479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1855.458180][T22479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1855.458211][T22479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1856.329309][T22552] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4789'. [ 1856.776860][T22551] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4790'. [ 1856.799811][T16545] Bluetooth: hci5: command tx timeout [ 1857.271220][T22479] hsr_slave_0: entered promiscuous mode [ 1857.272836][T22479] hsr_slave_1: entered promiscuous mode [ 1857.275148][T22479] debugfs: 'hsr0' already exists in 'hsr' [ 1857.275175][T22479] Cannot create hsr debugfs directory [ 1857.373068][T19488] hid-generic 0000:0000:0000.002D: unknown main item tag 0x0 [ 1857.389420][T19488] hid-generic 0000:0000:0000.002D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1858.286661][T19039] hid-generic 0000:0000:0000.002E: unknown main item tag 0x0 [ 1858.307352][T19039] hid-generic 0000:0000:0000.002E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1858.361218][T22568] orangefs_mount: mount request failed with -4 [ 1858.430350][T22581] fido_id[22581]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1858.478973][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.479050][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.596790][T22585] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4802'. [ 1858.619149][T22479] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1858.619189][T22479] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1858.868399][T16545] Bluetooth: hci5: command tx timeout [ 1858.873964][T22595] netlink: 76 bytes leftover after parsing attributes in process `syz.4.4805'. [ 1859.125022][T22479] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1859.125062][T22479] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1859.515846][T22479] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1859.515887][T22479] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1859.760866][T19616] hid-generic 0000:0000:0000.002F: unknown main item tag 0x0 [ 1859.774531][T19616] hid-generic 0000:0000:0000.002F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1859.924391][T22479] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1859.924430][T22479] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1860.020221][T22612] fido_id[22612]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1860.219334][T22617] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4813'. [ 1860.496846][T22611] orangefs_mount: mount request failed with -4 [ 1860.641424][T22479] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1860.711342][T22479] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1860.771689][T22625] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4817'. [ 1860.775100][T22479] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1860.814531][T22614] orangefs_mount: mount request failed with -4 [ 1860.823755][T22479] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1861.301927][ C0] vkms_vblank_simulate: vblank timer overrun [ 1861.646482][T22642] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 1861.655563][ C0] vkms_vblank_simulate: vblank timer overrun [ 1862.099501][T22646] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4822'. [ 1862.104776][T22479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1862.144318][ C0] vkms_vblank_simulate: vblank timer overrun [ 1862.146500][T22479] 8021q: adding VLAN 0 to HW filter on device team0 [ 1862.209822][T17063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1862.210142][T17063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1862.227971][ T9] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1862.398209][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 1862.407749][ T9] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1862.407860][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1862.407899][ T9] usb 7-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 1862.407925][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1862.420809][ T9] usb 7-1: config 0 descriptor?? [ 1862.526846][T13947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1862.534596][T13947] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1862.608454][T22651] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4823'. [ 1862.837139][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1862.837572][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1862.838237][ C0] raw-gadget.0 gadget.6: ignoring, device is not running [ 1862.838422][ T9] usbhid 7-1:0.0: can't add hid device: -32 [ 1862.838573][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 1862.867480][ T9] usb 7-1: USB disconnect, device number 3 [ 1863.338005][T22479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1863.362776][T22654] orangefs_mount: mount request failed with -4 [ 1863.445331][T22479] veth0_vlan: entered promiscuous mode [ 1863.464405][T22479] veth1_vlan: entered promiscuous mode [ 1863.514244][T22479] veth0_macvtap: entered promiscuous mode [ 1863.558253][T22479] veth1_macvtap: entered promiscuous mode [ 1863.637386][T22479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1863.701000][T22479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1863.796724][T17066] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1863.803763][T17066] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1863.805512][T17066] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1863.809042][T17066] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1863.919456][T13377] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 1863.945870][T13377] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1865.810952][ C0] vkms_vblank_simulate: vblank timer overrun [ 1865.948698][T14247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1865.948740][T14247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1866.128676][T22689] netlink: 76 bytes leftover after parsing attributes in process `syz.7.4836'. [ 1866.436334][ T6067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1866.436357][ T6067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1867.268506][T22702] orangefs_mount: mount request failed with -4 [ 1868.385897][T22727] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4845'. [ 1869.913832][ C0] vkms_vblank_simulate: vblank timer overrun [ 1870.052121][T19207] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1870.071966][T19207] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1870.074392][T19207] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1870.099954][T19207] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1870.106497][T19207] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1870.441932][ C0] vkms_vblank_simulate: vblank timer overrun [ 1870.600060][ C0] vkms_vblank_simulate: vblank timer overrun [ 1870.798752][T22747] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4852'. [ 1870.865871][ C0] vkms_vblank_simulate: vblank timer overrun [ 1871.008144][T19616] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 1871.176849][T19616] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1871.176882][T19616] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1871.176975][T19616] usb 8-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 1871.176993][T19616] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1871.238317][T19616] usb 8-1: config 0 descriptor?? [ 1871.289068][T22736] lo speed is unknown, defaulting to 1000 [ 1871.671886][T19616] itetech 0003:06CB:73F5.0031: collection stack underflow [ 1871.671912][T19616] itetech 0003:06CB:73F5.0031: item 0 0 0 12 parsing failed [ 1871.672524][T19616] itetech 0003:06CB:73F5.0031: probe with driver itetech failed with error -22 [ 1871.817098][T22758] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4855'. [ 1871.873891][T19616] usb 8-1: USB disconnect, device number 3 [ 1872.378852][T16545] Bluetooth: hci2: command tx timeout [ 1872.520565][ C0] vkms_vblank_simulate: vblank timer overrun [ 1872.557437][ C0] vkms_vblank_simulate: vblank timer overrun [ 1872.723314][T22771] net veth1_virt_wifi ªªªªª»: renamed from virt_wifi0 [ 1874.126172][T22736] chnl_net:caif_netlink_parms(): no params data found [ 1874.308470][T22795] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4866'. [ 1874.391450][T16545] Bluetooth: hci2: command tx timeout [ 1874.421797][T22797] netlink: 76 bytes leftover after parsing attributes in process `syz.2.4867'. [ 1874.745622][T22802] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1876.260526][T22736] bridge0: port 1(bridge_slave_0) entered blocking state [ 1876.260826][T22736] bridge0: port 1(bridge_slave_0) entered disabled state [ 1876.261081][T22736] bridge_slave_0: entered allmulticast mode [ 1876.279762][T22736] bridge_slave_0: entered promiscuous mode [ 1876.307331][T22736] bridge0: port 2(bridge_slave_1) entered blocking state [ 1876.312458][T22736] bridge0: port 2(bridge_slave_1) entered disabled state [ 1876.312960][T22736] bridge_slave_1: entered allmulticast mode [ 1876.333265][T22736] bridge_slave_1: entered promiscuous mode [ 1876.478275][T16545] Bluetooth: hci2: command tx timeout [ 1876.851154][T22825] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4876'. [ 1877.012430][T22736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1877.064433][T22736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1877.491786][T22836] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1878.371680][T22839] ALSA: mixer_oss: invalid OSS volume '—ˆ†åÉY¢¤{õ›´žÜÿ¬¤Uøü°ŽDíÆD ' [ 1878.371718][T22839] ALSA: mixer_oss: invalid OSS volume 'ߧ«4cÑTÆÒÈ󯆩"¦m!lŠT.îšÎ œ¾®ì' [ 1878.371740][T22839] ALSA: mixer_oss: invalid OSS volume 'lg§' [ 1878.371760][T22839] ALSA: mixer_oss: invalid OSS volume 'í)nÃäÃkëKi†·,r‚¾WY\ñZV‰Óå¼÷?J`G' [ 1878.371805][T22839] ALSA: mixer_oss: invalid OSS volume 'kûO0ÍÇòª$ÛÒgÀ¾{ƒpl{ˆúy;_A¸RW§€' [ 1878.371824][T22839] ALSA: mixer_oss: invalid OSS volume 'ò' [ 1878.371849][T22839] ALSA: mixer_oss: invalid OSS volume 'sv«ˆ Fu{Qby>áñh%w¾áõ]' [ 1878.371878][T22839] ALSA: mixer_oss: invalid OSS volume 'ŽEÙ“•= Øv?ïÌ@4Åä8î¶@»híüÉÆL' [ 1878.371897][T22839] ALSA: mixer_oss: invalid OSS volume 'î+­³?>3Iq¡»0:i¸Ýq½|û—UëDœÅ™¯û' [ 1878.371926][T22839] ALSA: mixer_oss: invalid OSS volume 'vÓ·*xrµýN0¡Ü—ƒácŒ†Až‚€åìdâhû' [ 1878.371941][T22839] ALSA: mixer_oss: invalid OSS volume '±äJMÊïé' [ 1878.547965][T16545] Bluetooth: hci2: command tx timeout [ 1878.826770][T22843] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4883'. [ 1879.177961][T19616] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1879.328032][T19616] usb 3-1: Using ep0 maxpacket: 8 [ 1879.330950][T19616] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1879.330971][T19616] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1879.331012][T19616] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1879.331029][T19616] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1879.331047][T19616] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1879.331078][T19616] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1879.331096][T19616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1879.416563][T19616] usbtmc 3-1:16.0: bulk endpoints not found [ 1880.133909][T22736] team0: Port device team_slave_0 added [ 1880.136900][T22736] team0: Port device team_slave_1 added [ 1880.563046][T22736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1880.563066][T22736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1880.563095][T22736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1880.566439][T22736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1880.566457][T22736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1880.566487][T22736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1880.955145][T22861] netlink: 'syz.5.4888': attribute type 1 has an invalid length. [ 1880.970736][T22860] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4889'. [ 1881.779219][T22862] bond2: (slave bridge2): making interface the new active one [ 1881.780048][T22862] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1881.815498][T22736] hsr_slave_0: entered promiscuous mode [ 1881.819064][T22736] hsr_slave_1: entered promiscuous mode [ 1881.820386][T22736] debugfs: 'hsr0' already exists in 'hsr' [ 1881.820416][T22736] Cannot create hsr debugfs directory [ 1882.751288][T19616] usb 3-1: USB disconnect, device number 88 [ 1883.084901][T22876] ALSA: mixer_oss: invalid OSS volume '—ˆ†åÉY¢¤{õ›´žÜÿ¬¤Uøü°ŽDíÆD ' [ 1883.084927][T22876] ALSA: mixer_oss: invalid OSS volume 'ߧ«4cÑTÆÒÈ󯆩"¦m!lŠT.îšÎ œ¾®ì' [ 1883.084948][T22876] ALSA: mixer_oss: invalid OSS volume 'lg§' [ 1883.084967][T22876] ALSA: mixer_oss: invalid OSS volume 'í)nÃäÃkëKi†·,r‚¾WY\ñZV‰Óå¼÷?J`G' [ 1883.085014][T22876] ALSA: mixer_oss: invalid OSS volume 'kûO0ÍÇòª$ÛÒgÀ¾{ƒpl{ˆúy;_A¸RW§€' [ 1883.085034][T22876] ALSA: mixer_oss: invalid OSS volume 'ò' [ 1883.085060][T22876] ALSA: mixer_oss: invalid OSS volume 'sv«ˆ Fu{Qby>áñh%w¾áõ]' [ 1883.085088][T22876] ALSA: mixer_oss: invalid OSS volume 'ŽEÙ“•= Øv?ïÌ@4Åä8î¶@»híüÉÆL' [ 1883.085107][T22876] ALSA: mixer_oss: invalid OSS volume 'î+­³?>3Iq¡»0:i¸Ýq½|û—UëDœÅ™¯û' [ 1883.085137][T22876] ALSA: mixer_oss: invalid OSS volume 'vÓ·*xrµýN0¡Ü—ƒácŒ†Až‚€åìdâhû' [ 1883.085153][T22876] ALSA: mixer_oss: invalid OSS volume '±äJMÊïé' [ 1884.948474][T22897] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4899'. [ 1888.447947][T19199] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 1888.818043][T19199] usb 8-1: device not accepting address 4, error -71 [ 1890.060492][T19039] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0 [ 1890.081751][T22903] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4901'. [ 1890.120376][T19039] hid-generic 0000:0000:0000.0032: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1890.249679][T22915] ALSA: mixer_oss: invalid OSS volume '—ˆ†åÉY¢¤{õ›´žÜÿ¬¤Uøü°ŽDíÆD ' [ 1890.249706][T22915] ALSA: mixer_oss: invalid OSS volume 'ߧ«4cÑTÆÒÈ󯆩"¦m!lŠT.îšÎ œ¾®ì' [ 1890.249727][T22915] ALSA: mixer_oss: invalid OSS volume 'lg§' [ 1890.249747][T22915] ALSA: mixer_oss: invalid OSS volume 'í)nÃäÃkëKi†·,r‚¾WY\ñZV‰Óå¼÷?J`G' [ 1890.249792][T22915] ALSA: mixer_oss: invalid OSS volume 'kûO0ÍÇòª$ÛÒgÀ¾{ƒpl{ˆúy;_A¸RW§€' [ 1890.249812][T22915] ALSA: mixer_oss: invalid OSS volume 'ò' [ 1890.249836][T22915] ALSA: mixer_oss: invalid OSS volume 'sv«ˆ Fu{Qby>áñh%w¾áõ]' [ 1890.249864][T22915] ALSA: mixer_oss: invalid OSS volume 'ŽEÙ“•= Øv?ïÌ@4Åä8î¶@»híüÉÆL' [ 1890.249882][T22915] ALSA: mixer_oss: invalid OSS volume 'î+­³?>3Iq¡»0:i¸Ýq½|û—UëDœÅ™¯û' [ 1890.249915][T22915] ALSA: mixer_oss: invalid OSS volume 'vÓ·*xrµýN0¡Ü—ƒácŒ†Až‚€åìdâhû' [ 1890.249930][T22915] ALSA: mixer_oss: invalid OSS volume '±äJMÊïé' [ 1890.602603][T22916] fido_id[22916]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1891.285314][T22736] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1891.285344][T22736] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.807996][T13377] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1893.907489][T22736] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1893.907518][T22736] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1893.978038][T13377] usb 6-1: Using ep0 maxpacket: 8 [ 1893.985545][T13377] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1893.985609][T13377] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1893.985633][T13377] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1893.985659][T13377] usb 6-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1893.985681][T13377] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1893.985725][T13377] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1893.985750][T13377] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1894.270350][T13377] usbtmc 6-1:16.0: bulk endpoints not found [ 1894.809921][T22736] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1894.809961][T22736] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1895.384949][T22948] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1896.180491][T13377] usb 6-1: USB disconnect, device number 9 [ 1896.294551][T22950] net_ratelimit: 68 callbacks suppressed [ 1896.294577][T22950] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1896.294669][T22950] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1896.295090][T22950] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1896.295175][T22950] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1896.296444][T22950] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1896.296532][T22950] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1896.296822][T22950] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1896.296899][T22950] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1896.297183][T22950] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 1896.297259][T22950] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 1898.995331][T22736] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1898.995373][T22736] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1899.037645][ T9] hid-generic 0000:0000:0000.0033: unknown main item tag 0x0 [ 1899.202122][ T9] hid-generic 0000:0000:0000.0033: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1899.780413][T22964] fido_id[22964]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1900.126915][T22973] netlink: 'syz.6.4921': attribute type 1 has an invalid length. [ 1900.572452][T13377] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1900.748114][T19199] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1900.768149][T13377] usb 6-1: Using ep0 maxpacket: 8 [ 1900.771193][T13377] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 1900.771260][T13377] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1900.771284][T13377] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1900.771310][T13377] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1900.771336][T13377] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1900.771381][T13377] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1900.771406][T13377] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.901153][T19199] usb 7-1: Using ep0 maxpacket: 8 [ 1900.904134][T19199] usb 7-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1900.904166][T19199] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1900.904201][T19199] usb 7-1: New USB device found, idVendor=17ef, idProduct=60fe, bcdDevice= 0.00 [ 1900.904226][T19199] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1900.915497][T19199] usb 7-1: config 0 descriptor?? [ 1901.202985][T13377] usb 6-1: GET_CAPABILITIES returned 0 [ 1901.203036][T13377] usbtmc 6-1:16.0: can't read capabilities [ 1901.375348][T19616] usb 6-1: USB disconnect, device number 10 [ 1901.537075][T19199] usbhid 7-1:0.0: can't add hid device: -71 [ 1901.537176][T19199] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 1901.556253][T19199] usb 7-1: USB disconnect, device number 4 [ 1902.437957][T13377] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1902.532297][T19199] hid-generic 0000:0000:0000.0034: unknown main item tag 0x0 [ 1902.558004][T19199] hid-generic 0000:0000:0000.0034: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1902.584926][T22736] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1902.613173][T13377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1902.613208][T13377] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1902.613250][T13377] usb 3-1: New USB device found, idVendor=06cb, idProduct=73f5, bcdDevice= 0.00 [ 1902.613276][T13377] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1902.650025][T13377] usb 3-1: config 0 descriptor?? [ 1902.753750][T22736] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1902.816310][T22736] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1902.907224][T22736] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1903.081026][T13377] usbhid 3-1:0.0: can't add hid device: -71 [ 1903.093007][T13377] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1903.105543][T13377] usb 3-1: USB disconnect, device number 89 [ 1903.380339][T22736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1903.467713][T22736] 8021q: adding VLAN 0 to HW filter on device team0 [ 1903.493539][T17063] bridge0: port 1(bridge_slave_0) entered blocking state [ 1903.506990][T17063] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1903.543190][T22772] bridge0: port 2(bridge_slave_1) entered blocking state [ 1903.553644][T22772] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1904.882062][ C1] vkms_vblank_simulate: vblank timer overrun [ 1905.444047][T23040] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4940'. [ 1906.590979][T22736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1906.855677][ C1] vkms_vblank_simulate: vblank timer overrun [ 1907.294808][ C1] vkms_vblank_simulate: vblank timer overrun [ 1907.503592][T22736] veth0_vlan: entered promiscuous mode [ 1907.524362][T22736] veth1_vlan: entered promiscuous mode [ 1907.663766][T23071] net veth1_virt_wifi ªªªªª»: renamed from virt_wifi0 [ 1908.434958][ C1] vkms_vblank_simulate: vblank timer overrun [ 1908.823238][T22736] veth0_macvtap: entered promiscuous mode [ 1908.855150][T22736] veth1_macvtap: entered promiscuous mode [ 1908.965366][T22736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1909.011853][T22736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1909.053876][T17066] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.061490][T17066] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.077098][T17066] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1909.077425][T17066] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1910.760218][ T6256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1910.760243][ T6256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1910.961465][T14247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1910.961489][T14247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1916.878142][T19207] Bluetooth: hci1: command 0x0406 tx timeout [ 1918.325709][T23109] ubi: mtd0 is already attached to ubi31 [ 1918.708257][T22400] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1920.385448][T23123] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1920.766776][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1920.767477][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1921.066904][T22400] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1921.066935][T22400] usb 6-1: config 1 has no interface number 0 [ 1921.066986][T22400] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1921.067016][T22400] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1921.067043][T22400] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1921.128096][T22400] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1921.128158][T22400] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.128180][T22400] usb 6-1: Product: syz [ 1921.128209][T22400] usb 6-1: Manufacturer: syz [ 1921.128225][T22400] usb 6-1: SerialNumber: syz [ 1921.159121][T23114] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1921.668810][T19616] hid-generic 0000:0000:0000.0035: unknown main item tag 0x0 [ 1921.701353][T19616] hid-generic 0000:0000:0000.0035: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1921.869361][T22400] usb 6-1: Error in usbnet_get_endpoints (-71) [ 1921.975233][T22400] usb 6-1: USB disconnect, device number 11 [ 1922.377972][ T9] usb 5-1: new high-speed USB device number 88 using dummy_hcd [ 1923.218014][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1923.230161][ T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1923.230199][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1923.230226][ T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1923.230252][ T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1923.230295][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1923.230318][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1923.489676][ T9] usb 5-1: GET_CAPABILITIES returned 0 [ 1923.489735][ T9] usbtmc 5-1:16.0: can't read capabilities [ 1923.796743][ C1] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 1923.830590][T23154] usbtmc 5-1:16.0: Unable to send data, error -71 [ 1924.002212][T13377] usb 5-1: USB disconnect, device number 88 [ 1924.050074][T16545] Bluetooth: hci4: unexpected cc 0x0809 length: 68 > 4 [ 1924.829689][ C0] vkms_vblank_simulate: vblank timer overrun [ 1924.945617][ C0] vkms_vblank_simulate: vblank timer overrun [ 1925.009818][T23174] fuse: Unknown parameter 'šó'à+&Ô—o®ò6ò¾æ;m¹¥Dª¸xV¥‹Ü‰œ_2·Ehilj' [ 1925.202149][T23179] netlink: 'syz.5.4980': attribute type 1 has an invalid length. [ 1925.377159][ C0] vkms_vblank_simulate: vblank timer overrun [ 1925.451548][ C0] vkms_vblank_simulate: vblank timer overrun [ 1925.767587][ C0] vkms_vblank_simulate: vblank timer overrun [ 1926.080464][ C0] vkms_vblank_simulate: vblank timer overrun [ 1926.337894][ C0] vkms_vblank_simulate: vblank timer overrun [ 1926.507055][ C0] vkms_vblank_simulate: vblank timer overrun [ 1926.967976][T19616] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1927.117888][T19616] usb 6-1: Using ep0 maxpacket: 32 [ 1927.120570][T19616] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1927.120594][T19616] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.174581][T19616] usb 6-1: config 0 descriptor?? [ 1927.186045][T19616] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1927.347990][T22400] usb 5-1: new high-speed USB device number 89 using dummy_hcd [ 1927.531103][T22400] usb 5-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1927.531146][T22400] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1927.573101][T22400] usb 5-1: config 0 descriptor?? [ 1927.792092][T22400] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1928.211522][T22400] cpia1 5-1:0.0: unexpected state after lo power cmd: 00 [ 1928.601510][T19616] usb 6-1: USB disconnect, device number 12 [ 1928.616681][T22400] cpia1 5-1:0.0: only firmware version 1 is supported (got: 0) [ 1928.823847][T16155] usb 5-1: USB disconnect, device number 89 [ 1929.647812][ C0] vkms_vblank_simulate: vblank timer overrun [ 1929.978269][ C0] vkms_vblank_simulate: vblank timer overrun [ 1930.291213][T23219] random: crng reseeded on system resumption [ 1930.316136][ T9] hid-generic 0003:0003:0000.0036: unknown main item tag 0x0 [ 1930.316163][ T9] hid-generic 0003:0003:0000.0036: unknown main item tag 0x0 [ 1930.316183][ T9] hid-generic 0003:0003:0000.0036: unknown main item tag 0x0 [ 1930.316201][ T9] hid-generic 0003:0003:0000.0036: unknown main item tag 0x0 [ 1930.316220][ T9] hid-generic 0003:0003:0000.0036: unknown main item tag 0x0 [ 1930.316239][ T9] hid-generic 0003:0003:0000.0036: unknown main item tag 0x0 [ 1930.316258][ T9] hid-generic 0003:0003:0000.0036: unknown main item tag 0x0 [ 1930.316277][ T9] hid-generic 0003:0003:0000.0036: unknown main item tag 0x0 [ 1930.316296][ T9] hid-generic 0003:0003:0000.0036: unknown main item tag 0x0 [ 1930.316315][ T9] hid-generic 0003:0003:0000.0036: unknown main item tag 0x0 [ 1930.406789][ T9] hid-generic 0003:0003:0000.0036: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1931.143974][T17066] Bluetooth: (null): Invalid header checksum [ 1931.150214][T14247] Bluetooth: (null): Invalid header checksum [ 1931.255616][T14247] Bluetooth: (null): Invalid header checksum [ 1931.375413][T14247] Bluetooth: (null): Invalid header checksum [ 1931.882792][ C0] vkms_vblank_simulate: vblank timer overrun [ 1932.244068][T19207] Bluetooth: hci4: command 0x0406 tx timeout [ 1932.248000][T19616] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1932.293376][T23235] fido_id[23235]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1932.448075][T19616] usb 3-1: Using ep0 maxpacket: 8 [ 1932.450037][T19616] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1932.450081][T19616] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1932.450098][T19616] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1932.450116][T19616] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1932.450145][T19616] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1932.450176][T19616] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1932.450192][T19616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1932.570113][T23240] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5002'. [ 1932.664326][T19616] usb 3-1: GET_CAPABILITIES returned 0 [ 1932.664361][T19616] usbtmc 3-1:16.0: can't read capabilities [ 1932.881856][T19616] usb 3-1: USB disconnect, device number 90 [ 1933.816120][ C0] vkms_vblank_simulate: vblank timer overrun [ 1934.372554][T23254] netlink: 'syz.4.5006': attribute type 1 has an invalid length. [ 1934.508367][ C0] vkms_vblank_simulate: vblank timer overrun [ 1934.808575][ C0] vkms_vblank_simulate: vblank timer overrun [ 1935.172273][ C0] vkms_vblank_simulate: vblank timer overrun [ 1935.535399][ C0] vkms_vblank_simulate: vblank timer overrun [ 1935.899141][ C0] vkms_vblank_simulate: vblank timer overrun [ 1936.145349][ C0] vkms_vblank_simulate: vblank timer overrun [ 1936.506060][T23272] random: crng reseeded on system resumption [ 1936.529750][T19039] hid_parser_main: 8 callbacks suppressed [ 1936.529768][T19039] hid-generic 0003:0003:0000.0037: unknown main item tag 0x0 [ 1936.529791][T19039] hid-generic 0003:0003:0000.0037: unknown main item tag 0x0 [ 1936.529810][T19039] hid-generic 0003:0003:0000.0037: unknown main item tag 0x0 [ 1936.529829][T19039] hid-generic 0003:0003:0000.0037: unknown main item tag 0x0 [ 1936.529848][T19039] hid-generic 0003:0003:0000.0037: unknown main item tag 0x0 [ 1936.529867][T19039] hid-generic 0003:0003:0000.0037: unknown main item tag 0x0 [ 1936.529885][T19039] hid-generic 0003:0003:0000.0037: unknown main item tag 0x0 [ 1936.529904][T19039] hid-generic 0003:0003:0000.0037: unknown main item tag 0x0 [ 1936.529923][T19039] hid-generic 0003:0003:0000.0037: unknown main item tag 0x0 [ 1936.529941][T19039] hid-generic 0003:0003:0000.0037: unknown main item tag 0x0 [ 1936.543616][T19039] hid-generic 0003:0003:0000.0037: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1936.802029][T23274] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5010'. [ 1936.992030][T23276] fido_id[23276]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1941.974694][ C1] vkms_vblank_simulate: vblank timer overrun [ 1942.431803][ C1] vkms_vblank_simulate: vblank timer overrun [ 1942.626065][ C1] vkms_vblank_simulate: vblank timer overrun [ 1942.658657][T23309] netlink: 'syz.6.5020': attribute type 1 has an invalid length. [ 1942.718350][T23312] random: crng reseeded on system resumption [ 1942.970193][T23320] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5022'. [ 1943.396152][ C1] vkms_vblank_simulate: vblank timer overrun [ 1943.547935][ T9] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1943.700582][ T9] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 1943.700615][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1943.971956][ C1] vkms_vblank_simulate: vblank timer overrun [ 1944.301865][ T9] usb 6-1: config 0 descriptor?? [ 1944.610164][ T9] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 1945.023043][ T9] cpia1 6-1:0.0: unexpected state after lo power cmd: 00 [ 1945.080508][T23343] random: crng reseeded on system resumption [ 1945.192183][T23204] hid_parser_main: 8 callbacks suppressed [ 1945.192210][T23204] hid-generic 0003:0003:0000.0038: unknown main item tag 0x0 [ 1945.192244][T23204] hid-generic 0003:0003:0000.0038: unknown main item tag 0x0 [ 1945.192273][T23204] hid-generic 0003:0003:0000.0038: unknown main item tag 0x0 [ 1945.192302][T23204] hid-generic 0003:0003:0000.0038: unknown main item tag 0x0 [ 1945.192330][T23204] hid-generic 0003:0003:0000.0038: unknown main item tag 0x0 [ 1945.192357][T23204] hid-generic 0003:0003:0000.0038: unknown main item tag 0x0 [ 1945.192384][T23204] hid-generic 0003:0003:0000.0038: unknown main item tag 0x0 [ 1945.192411][T23204] hid-generic 0003:0003:0000.0038: unknown main item tag 0x0 [ 1945.192440][T23204] hid-generic 0003:0003:0000.0038: unknown main item tag 0x0 [ 1945.192469][T23204] hid-generic 0003:0003:0000.0038: unknown main item tag 0x0 [ 1945.208437][T23204] hid-generic 0003:0003:0000.0038: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1945.497083][ T9] gspca_cpia1: usb_control_msg 02, error -71 [ 1945.497104][ T9] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0) [ 1945.551033][ T9] usb 6-1: USB disconnect, device number 13 [ 1945.637106][T23351] fido_id[23351]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1945.748397][T16545] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 1945.754569][T16545] Bluetooth: hci5: Injecting HCI hardware error event [ 1945.759368][T19207] Bluetooth: hci5: hardware error 0x00 [ 1946.392525][T23354] orangefs_mount: mount request failed with -4 [ 1947.783300][T23380] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5042'. [ 1947.998013][T19207] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1948.014590][T23381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1949.123765][T23389] random: crng reseeded on system resumption [ 1949.451458][T16155] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1949.598001][T16155] usb 5-1: Using ep0 maxpacket: 8 [ 1949.600212][T16155] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1949.600258][T16155] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1949.600275][T16155] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1949.600293][T16155] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1949.600311][T16155] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1949.600341][T16155] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1949.600358][T16155] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1949.899232][T16155] usb 5-1: GET_CAPABILITIES returned 0 [ 1949.899616][T16155] usbtmc 5-1:16.0: can't read capabilities [ 1950.103160][T16155] usb 5-1: USB disconnect, device number 90 [ 1950.186975][T23407] orangefs_mount: mount request failed with -4 [ 1952.332546][T23447] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1952.930952][ C1] vkms_vblank_simulate: vblank timer overrun [ 1953.032936][T23452] random: crng reseeded on system resumption [ 1953.059215][T16155] hid_parser_main: 8 callbacks suppressed [ 1953.059238][T16155] hid-generic 0003:0003:0000.0039: unknown main item tag 0x0 [ 1953.059273][T16155] hid-generic 0003:0003:0000.0039: unknown main item tag 0x0 [ 1953.059301][T16155] hid-generic 0003:0003:0000.0039: unknown main item tag 0x0 [ 1953.059327][T16155] hid-generic 0003:0003:0000.0039: unknown main item tag 0x0 [ 1953.059354][T16155] hid-generic 0003:0003:0000.0039: unknown main item tag 0x0 [ 1953.059380][T16155] hid-generic 0003:0003:0000.0039: unknown main item tag 0x0 [ 1953.059407][T16155] hid-generic 0003:0003:0000.0039: unknown main item tag 0x0 [ 1953.059434][T16155] hid-generic 0003:0003:0000.0039: unknown main item tag 0x0 [ 1953.059460][T16155] hid-generic 0003:0003:0000.0039: unknown main item tag 0x0 [ 1953.059485][T16155] hid-generic 0003:0003:0000.0039: unknown main item tag 0x0 [ 1953.067026][T16155] hid-generic 0003:0003:0000.0039: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1953.548870][T23457] fido_id[23457]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1954.338986][ C1] vkms_vblank_simulate: vblank timer overrun [ 1954.392261][T23487] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12) [ 1954.392292][T23487] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1954.392398][T23487] vhci_hcd vhci_hcd.0: Device attached [ 1954.410575][T23487] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(14) [ 1954.410611][T23487] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1954.410672][T23487] vhci_hcd vhci_hcd.0: Device attached [ 1954.456243][T23487] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(16) [ 1954.456271][T23487] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1954.456312][T23487] vhci_hcd vhci_hcd.0: Device attached [ 1954.488916][T23487] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(18) [ 1954.488946][T23487] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1954.489007][T23487] vhci_hcd vhci_hcd.0: Device attached [ 1954.612482][T23478] orangefs_mount: mount request failed with -4 [ 1954.614633][T23487] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(20) [ 1954.614662][T23487] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1954.614771][T23487] vhci_hcd vhci_hcd.0: Device attached [ 1954.670647][T16155] usb 47-1: new low-speed USB device number 2 using vhci_hcd [ 1954.688858][T23487] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1954.700439][T23506] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(22) [ 1954.700471][T23506] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1954.732324][T23506] vhci_hcd vhci_hcd.0: Device attached [ 1954.736702][T23487] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1954.796421][T23487] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1954.854646][T23506] vhci_hcd vhci_hcd.0: port 0 already used [ 1954.975990][T23508] vhci_hcd: connection closed [ 1955.012399][T23489] vhci_hcd: connection reset by peer [ 1955.012921][T23497] vhci_hcd: connection closed [ 1955.013288][T23503] vhci_hcd: connection closed [ 1955.013576][T23499] vhci_hcd: connection closed [ 1955.013850][T23492] vhci_hcd: connection closed [ 1955.331815][ C1] vkms_vblank_simulate: vblank timer overrun [ 1955.358307][ T6256] vhci_hcd: stop threads [ 1955.358328][ T6256] vhci_hcd: release socket [ 1955.358396][ T6256] vhci_hcd: disconnect device [ 1955.358780][ T6256] vhci_hcd: stop threads [ 1955.358792][ T6256] vhci_hcd: release socket [ 1955.358857][ T6256] vhci_hcd: disconnect device [ 1955.400601][ T6256] vhci_hcd: stop threads [ 1955.400622][ T6256] vhci_hcd: release socket [ 1955.400700][ T6256] vhci_hcd: disconnect device [ 1955.413738][ T6256] vhci_hcd: stop threads [ 1955.413752][ T6256] vhci_hcd: release socket [ 1955.413806][ T6256] vhci_hcd: disconnect device [ 1955.419515][ T6256] vhci_hcd: stop threads [ 1955.419658][ T6256] vhci_hcd: release socket [ 1955.419696][ T6256] vhci_hcd: disconnect device [ 1955.437027][ T6256] vhci_hcd: stop threads [ 1955.437054][ T6256] vhci_hcd: release socket [ 1955.437147][ T6256] vhci_hcd: disconnect device [ 1955.745276][T23518] random: crng reseeded on system resumption [ 1956.208888][T23522] netlink: 'syz.6.5074': attribute type 1 has an invalid length. [ 1959.470284][ C1] vkms_vblank_simulate: vblank timer overrun [ 1959.476367][T23559] Device name not specified. [ 1959.476367][T23559] [ 1959.529679][T23566] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1959.818069][T16155] vhci_hcd: vhci_device speed not set [ 1960.199573][ C1] vkms_vblank_simulate: vblank timer overrun [ 1960.224796][T23580] random: crng reseeded on system resumption [ 1960.484271][T23590] netlink: 'syz.4.5086': attribute type 1 has an invalid length. [ 1960.548485][T19207] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1960.548849][T19207] Bluetooth: hci2: Injecting HCI hardware error event [ 1960.554902][T23591] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 1960.554931][T23591] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1960.555008][T16545] Bluetooth: hci2: hardware error 0x00 [ 1960.555023][T23591] vhci_hcd vhci_hcd.0: Device attached [ 1960.908415][ C1] vkms_vblank_simulate: vblank timer overrun [ 1961.159365][T22400] usb 37-1: new low-speed USB device number 10 using vhci_hcd [ 1961.334491][T23597] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 1961.334541][T23597] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1961.334652][T23597] vhci_hcd vhci_hcd.0: Device attached [ 1961.368398][T23591] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(17) [ 1961.368428][T23591] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1961.368525][T23591] vhci_hcd vhci_hcd.0: Device attached [ 1961.380579][T23597] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(16) [ 1961.380614][T23597] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1961.380732][T23597] vhci_hcd vhci_hcd.0: Device attached [ 1961.381314][T23602] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(20) [ 1961.381341][T23602] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1961.381411][T23602] vhci_hcd vhci_hcd.0: Device attached [ 1961.474439][T23597] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1961.475576][T23597] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1961.476623][T23597] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1961.494099][T23591] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(19) [ 1961.494294][T23591] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1961.494425][T23591] vhci_hcd vhci_hcd.0: Device attached [ 1961.507228][T23597] vhci_hcd vhci_hcd.0: port 0 already used [ 1961.700868][ C1] vkms_vblank_simulate: vblank timer overrun [ 1961.753085][T13377] usb usb48-port1: attempt power cycle [ 1961.767985][T23613] vhci_hcd: connection closed [ 1961.769794][T23606] vhci_hcd: connection closed [ 1961.770196][T23604] vhci_hcd: connection closed [ 1961.770490][T23594] vhci_hcd: connection reset by peer [ 1961.770781][T23612] vhci_hcd: connection closed [ 1961.774495][T23619] vhci_hcd: connection closed [ 1961.816568][T23618] ubi: mtd0 is already attached to ubi31 [ 1961.854246][T22866] vhci_hcd: stop threads [ 1961.854271][T22866] vhci_hcd: release socket [ 1961.854356][T22866] vhci_hcd: disconnect device [ 1961.855072][T22866] vhci_hcd: stop threads [ 1961.855083][T22866] vhci_hcd: release socket [ 1961.855151][T22866] vhci_hcd: disconnect device [ 1961.855522][T22866] vhci_hcd: stop threads [ 1961.855533][T22866] vhci_hcd: release socket [ 1961.903594][T22866] vhci_hcd: disconnect device [ 1961.904375][T22866] vhci_hcd: stop threads [ 1961.904393][T22866] vhci_hcd: release socket [ 1961.904463][T22866] vhci_hcd: disconnect device [ 1961.904717][T22866] vhci_hcd: stop threads [ 1961.904725][T22866] vhci_hcd: release socket [ 1961.904746][T22866] vhci_hcd: disconnect device [ 1961.923012][T22866] vhci_hcd: stop threads [ 1961.923032][T22866] vhci_hcd: release socket [ 1961.923112][T22866] vhci_hcd: disconnect device [ 1961.931526][T19207] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 1962.005687][T23600] bond1: (slave bridge1): making interface the new active one [ 1962.033352][T23600] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1962.271188][ C1] vkms_vblank_simulate: vblank timer overrun [ 1962.347625][T13377] usb usb48-port1: unable to enumerate USB device [ 1963.096231][T23642] Device name not specified. [ 1963.096231][T23642] [ 1963.105992][ C1] vkms_vblank_simulate: vblank timer overrun [ 1963.407351][T23655] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1963.772602][ C1] vkms_vblank_simulate: vblank timer overrun [ 1963.836699][T16545] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1964.327956][T19039] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1964.542172][ C1] vkms_vblank_simulate: vblank timer overrun [ 1964.638239][T19039] usb 8-1: Using ep0 maxpacket: 8 [ 1964.736950][ C1] vkms_vblank_simulate: vblank timer overrun [ 1965.315582][ C1] vkms_vblank_simulate: vblank timer overrun [ 1965.323153][T19039] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 1965.323221][T19039] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1965.323248][T19039] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1965.323276][T19039] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1965.323303][T19039] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1965.323351][T19039] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1965.323376][T19039] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1965.831146][T19039] usb 8-1: GET_CAPABILITIES returned 0 [ 1965.831184][T19039] usbtmc 8-1:16.0: can't read capabilities [ 1966.033927][ C1] vkms_vblank_simulate: vblank timer overrun [ 1966.151747][T16545] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1966.157379][T16545] Bluetooth: hci1: Injecting HCI hardware error event [ 1966.176916][T19207] Bluetooth: hci1: hardware error 0x00 [ 1966.334064][T22400] vhci_hcd: vhci_device speed not set [ 1966.460573][T13377] usb 8-1: USB disconnect, device number 6 [ 1967.674856][ T38] audit: type=1326 audit(1760654598.074:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23678 comm="syz.2.5106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee283eec9 code=0x7ffc0000 [ 1967.674919][ T38] audit: type=1326 audit(1760654598.074:706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23678 comm="syz.2.5106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee283eec9 code=0x7ffc0000 [ 1967.737892][ T38] audit: type=1326 audit(1760654598.134:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23678 comm="syz.2.5106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7feee283eec9 code=0x7ffc0000 [ 1967.737960][ T38] audit: type=1326 audit(1760654598.134:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23678 comm="syz.2.5106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee283eec9 code=0x7ffc0000 [ 1967.738014][ T38] audit: type=1326 audit(1760654598.134:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23678 comm="syz.2.5106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee283eec9 code=0x7ffc0000 [ 1967.738070][ T38] audit: type=1326 audit(1760654598.144:710): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23678 comm="syz.2.5106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7feee283eec9 code=0x7ffc0000 [ 1967.738644][ T38] audit: type=1326 audit(1760654598.144:711): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23678 comm="syz.2.5106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee283eec9 code=0x7ffc0000 [ 1967.738699][ T38] audit: type=1326 audit(1760654598.144:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23678 comm="syz.2.5106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7feee283eec9 code=0x7ffc0000 [ 1967.739887][ T38] audit: type=1326 audit(1760654598.144:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23678 comm="syz.2.5106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feee283eec9 code=0x7ffc0000 [ 1967.739943][ T38] audit: type=1326 audit(1760654598.144:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=23678 comm="syz.2.5106" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7feee283eec9 code=0x7ffc0000 [ 1968.294719][T23687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5108'. [ 1968.628576][T19207] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1968.680035][T23692] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(12) [ 1968.680057][T23692] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1968.680122][T23692] vhci_hcd vhci_hcd.0: Device attached [ 1968.684068][T23692] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(14) [ 1968.684089][T23692] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1968.684125][T23692] vhci_hcd vhci_hcd.0: Device attached [ 1968.686075][T23692] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(16) [ 1968.686095][T23692] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1968.686143][T23692] vhci_hcd vhci_hcd.0: Device attached [ 1968.695899][T23692] vhci_hcd vhci_hcd.0: pdev(7) rhport(3) sockfd(18) [ 1968.695932][T23692] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1968.695994][T23692] vhci_hcd vhci_hcd.0: Device attached [ 1968.725127][T23692] vhci_hcd vhci_hcd.0: pdev(7) rhport(4) sockfd(20) [ 1968.725164][T23692] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1968.725226][T23692] vhci_hcd vhci_hcd.0: Device attached [ 1968.737395][T23692] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(22) [ 1968.737429][T23692] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1968.737539][T23692] vhci_hcd vhci_hcd.0: Device attached [ 1968.739231][T23692] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1968.743045][T23692] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1968.752614][T23692] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1968.788974][T23692] vhci_hcd vhci_hcd.0: port 0 already used [ 1968.934708][T23693] vhci_hcd: connection closed [ 1968.935180][T23701] vhci_hcd: connection closed [ 1968.935375][T17060] vhci_hcd: stop threads [ 1968.935387][T17060] vhci_hcd: release socket [ 1968.935440][T17060] vhci_hcd: disconnect device [ 1968.935828][T23697] vhci_hcd: connection closed [ 1968.936023][T23695] vhci_hcd: connection closed [ 1968.936213][T23703] vhci_hcd: connection closed [ 1968.936391][T17060] vhci_hcd: stop threads [ 1968.936399][T17060] vhci_hcd: release socket [ 1968.936443][T17060] vhci_hcd: disconnect device [ 1968.936579][T23699] vhci_hcd: connection closed [ 1968.938566][T17060] vhci_hcd: stop threads [ 1968.938580][T17060] vhci_hcd: release socket [ 1968.938655][T17060] vhci_hcd: disconnect device [ 1969.016818][T19616] usb usb38-port1: attempt power cycle [ 1969.029273][T23709] random: crng reseeded on system resumption [ 1969.041421][T17060] vhci_hcd: stop threads [ 1969.041444][T17060] vhci_hcd: release socket [ 1969.041527][T17060] vhci_hcd: disconnect device [ 1969.042045][T17060] vhci_hcd: stop threads [ 1969.042059][T17060] vhci_hcd: release socket [ 1969.042133][T17060] vhci_hcd: disconnect device [ 1969.067230][T17060] vhci_hcd: stop threads [ 1969.067254][T17060] vhci_hcd: release socket [ 1969.067348][T17060] vhci_hcd: disconnect device [ 1969.068732][T19199] usb 48-1: enqueue for inactive port 0 [ 1969.244095][T16626] hid_parser_main: 8 callbacks suppressed [ 1969.244116][T16626] hid-generic 0003:0003:0000.003A: unknown main item tag 0x0 [ 1969.244140][T16626] hid-generic 0003:0003:0000.003A: unknown main item tag 0x0 [ 1969.244159][T16626] hid-generic 0003:0003:0000.003A: unknown main item tag 0x0 [ 1969.244178][T16626] hid-generic 0003:0003:0000.003A: unknown main item tag 0x0 [ 1969.244203][T16626] hid-generic 0003:0003:0000.003A: unknown main item tag 0x0 [ 1969.244232][T16626] hid-generic 0003:0003:0000.003A: unknown main item tag 0x0 [ 1969.247931][T16626] hid-generic 0003:0003:0000.003A: unknown main item tag 0x0 [ 1969.247967][T16626] hid-generic 0003:0003:0000.003A: unknown main item tag 0x0 [ 1969.248057][T16626] hid-generic 0003:0003:0000.003A: unknown main item tag 0x0 [ 1969.248086][T16626] hid-generic 0003:0003:0000.003A: unknown main item tag 0x0 [ 1969.282009][T16626] hid-generic 0003:0003:0000.003A: hidraw0: USB HID v0.00 Device [syz0] on syz1 [ 1969.348089][T20086] vhci_hcd: vhci_device speed not set [ 1969.636772][T23714] Device name not specified. [ 1969.636772][T23714] [ 1969.645712][T19616] usb usb38-port1: unable to enumerate USB device [ 1970.418729][T23717] ubi: mtd0 is already attached to ubi31 [ 1970.734738][T19199] usb usb48-port1: attempt power cycle [ 1971.152594][T23736] vimc link validate: Sensor A:src:16x16 (0x33424752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1971.393724][ C1] vkms_vblank_simulate: vblank timer overrun [ 1971.419740][T19199] usb usb48-port1: unable to enumerate USB device [ 1971.489386][T23740] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1971.790592][ C1] vkms_vblank_simulate: vblank timer overrun [ 1973.153047][T23748] random: crng reseeded on system resumption [ 1974.125692][T23756] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 1974.125715][T23756] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1974.125788][T23756] vhci_hcd vhci_hcd.0: Device attached [ 1974.131815][T23756] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 1974.131849][T23756] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1974.131910][T23756] vhci_hcd vhci_hcd.0: Device attached [ 1974.157381][T23756] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(16) [ 1974.157415][T23756] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1974.157481][T23756] vhci_hcd vhci_hcd.0: Device attached [ 1974.198607][T23756] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(18) [ 1974.198725][T23756] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1974.198799][T23756] vhci_hcd vhci_hcd.0: Device attached [ 1974.202507][T23756] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 1974.202536][T23756] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1974.202612][T23756] vhci_hcd vhci_hcd.0: Device attached [ 1974.242339][T23756] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(22) [ 1974.242373][T23756] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1974.242489][T23756] vhci_hcd vhci_hcd.0: Device attached [ 1974.243855][T23756] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1974.245259][T23756] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1974.305056][T23756] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1974.367938][T20086] usb 41-1: new low-speed USB device number 12 using vhci_hcd [ 1974.406303][T23756] vhci_hcd vhci_hcd.0: port 0 already used [ 1974.474175][T23768] vhci_hcd: connection closed [ 1974.474655][T23765] vhci_hcd: connection closed [ 1974.474955][T23762] vhci_hcd: connection closed [ 1974.475536][ T3567] vhci_hcd: stop threads [ 1974.475555][ T3567] vhci_hcd: release socket [ 1974.475633][ T3567] vhci_hcd: disconnect device [ 1974.476070][T23770] vhci_hcd: connection closed [ 1974.476384][ T3567] vhci_hcd: stop threads [ 1974.476395][ T3567] vhci_hcd: release socket [ 1974.476468][ T3567] vhci_hcd: disconnect device [ 1974.477919][T23758] vhci_hcd: connection reset by peer [ 1974.479186][T23760] vhci_hcd: connection closed [ 1974.483379][ T3567] vhci_hcd: stop threads [ 1974.483396][ T3567] vhci_hcd: release socket [ 1974.483488][ T3567] vhci_hcd: disconnect device [ 1974.512720][ T3567] vhci_hcd: stop threads [ 1974.512744][ T3567] vhci_hcd: release socket [ 1974.512827][ T3567] vhci_hcd: disconnect device [ 1974.513316][ T3567] vhci_hcd: stop threads [ 1974.513329][ T3567] vhci_hcd: release socket [ 1974.513399][ T3567] vhci_hcd: disconnect device [ 1974.517158][ T3567] vhci_hcd: stop threads [ 1974.517175][ T3567] vhci_hcd: release socket [ 1974.517249][ T3567] vhci_hcd: disconnect device [ 1975.629793][ C1] vkms_vblank_simulate: vblank timer overrun [ 1975.867687][ C1] vkms_vblank_simulate: vblank timer overrun [ 1976.035583][ C1] vkms_vblank_simulate: vblank timer overrun [ 1977.556673][T23822] vimc link validate: Sensor A:src:16x16 (0x33424752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1979.495748][T23839] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1979.657512][T20086] vhci_hcd: vhci_device speed not set [ 1981.371466][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 1981.371540][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 1981.488012][T19199] usb usb42-port1: attempt power cycle [ 1981.898602][T23856] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1983.314180][T19199] usb usb42-port1: unable to enumerate USB device [ 1983.758417][T23866] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(12) [ 1983.758439][T23866] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1983.760160][T23866] vhci_hcd vhci_hcd.0: Device attached [ 1983.762584][T23866] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(14) [ 1983.762605][T23866] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1983.762653][T23866] vhci_hcd vhci_hcd.0: Device attached [ 1983.765633][T23866] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(16) [ 1983.765659][T23866] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1983.765716][T23866] vhci_hcd vhci_hcd.0: Device attached [ 1983.976396][T23873] vhci_hcd: connection closed [ 1983.977032][ T6256] vhci_hcd: stop threads [ 1983.977147][ T6256] vhci_hcd: release socket [ 1983.977235][ T6256] vhci_hcd: disconnect device [ 1983.993912][T23869] vhci_hcd: connection closed [ 1983.994360][T23871] vhci_hcd: connection closed [ 1983.995002][ T6256] vhci_hcd: stop threads [ 1983.995023][ T6256] vhci_hcd: release socket [ 1983.995122][ T6256] vhci_hcd: disconnect device [ 1983.995562][ T6256] vhci_hcd: stop threads [ 1983.995575][ T6256] vhci_hcd: release socket [ 1983.995800][ T6256] vhci_hcd: disconnect device [ 1984.033854][T19199] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 1984.033938][T19199] usb 45-1: enqueue for inactive port 0 [ 1984.097951][T19199] vhci_hcd: vhci_device speed not set [ 1984.286081][T23204] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1984.582899][T23204] usb 5-1: Using ep0 maxpacket: 8 [ 1984.585322][T23204] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 1984.585386][T23204] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1984.585412][T23204] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1984.585439][T23204] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1984.585463][T23204] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1984.585510][T23204] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1984.585536][T23204] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1984.813732][T23204] usb 5-1: GET_CAPABILITIES returned 0 [ 1984.813788][T23204] usbtmc 5-1:16.0: can't read capabilities [ 1985.909589][T23204] usb 5-1: USB disconnect, device number 91 [ 1988.137588][T23924] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1989.009422][T23925] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 1989.009454][T23925] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1989.009677][T23925] vhci_hcd vhci_hcd.0: Device attached [ 1989.277928][T23930] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(16) [ 1989.277959][T23930] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1989.278048][T23930] vhci_hcd vhci_hcd.0: Device attached [ 1989.278315][T23925] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 1989.278338][T23925] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1989.278394][T23925] vhci_hcd vhci_hcd.0: Device attached [ 1989.351595][T23933] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(20) [ 1989.351624][T23933] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1989.351719][T23933] vhci_hcd vhci_hcd.0: Device attached [ 1989.467886][T23204] usb 37-1: new low-speed USB device number 11 using vhci_hcd [ 1989.490428][T23925] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 1989.490458][T23925] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1989.490565][T23925] vhci_hcd vhci_hcd.0: Device attached [ 1989.490990][T23933] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1989.492315][T23925] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1989.561594][T23930] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(22) [ 1989.561625][T23930] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1989.561732][T23930] vhci_hcd vhci_hcd.0: Device attached [ 1989.563194][T23925] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1989.762084][T23925] vhci_hcd vhci_hcd.0: port 0 already used [ 1989.773407][T23940] vhci_hcd: connection closed [ 1989.773865][T23932] vhci_hcd: connection closed [ 1989.774147][T23938] vhci_hcd: connection closed [ 1989.777481][T17063] vhci_hcd: stop threads [ 1989.777508][T17063] vhci_hcd: release socket [ 1989.777552][T17063] vhci_hcd: disconnect device [ 1989.777990][T17063] vhci_hcd: stop threads [ 1989.778004][T17063] vhci_hcd: release socket [ 1989.778078][T17063] vhci_hcd: disconnect device [ 1989.778472][T17063] vhci_hcd: stop threads [ 1989.778483][T17063] vhci_hcd: release socket [ 1989.778520][T17063] vhci_hcd: disconnect device [ 1989.778841][T23931] vhci_hcd: connection closed [ 1989.779491][T17063] vhci_hcd: stop threads [ 1989.779503][T17063] vhci_hcd: release socket [ 1989.779541][T17063] vhci_hcd: disconnect device [ 1989.779604][T23936] vhci_hcd: connection closed [ 1989.781829][T17063] vhci_hcd: stop threads [ 1989.781843][T17063] vhci_hcd: release socket [ 1989.794133][T17063] vhci_hcd: disconnect device [ 1989.794255][T23927] vhci_hcd: connection reset by peer [ 1989.794996][T13947] vhci_hcd: stop threads [ 1989.795016][T13947] vhci_hcd: release socket [ 1989.795055][T13947] vhci_hcd: disconnect device [ 1991.248934][T23966] vimc link validate: Sensor A:src:16x16 (0x33424752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 1991.421246][T23972] netlink: 76 bytes leftover after parsing attributes in process `syz.5.5173'. [ 1993.605949][T23985] orangefs_mount: mount request failed with -4 [ 1994.593812][T24004] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 1994.593991][T24004] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1994.640572][T24004] vhci_hcd vhci_hcd.0: Device attached [ 1994.641583][T23204] vhci_hcd: vhci_device speed not set [ 1994.692916][T24008] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(14) [ 1994.692938][T24008] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1994.692978][T24008] vhci_hcd vhci_hcd.0: Device attached [ 1994.732009][T24004] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(16) [ 1994.732039][T24004] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 1994.732107][T24004] vhci_hcd vhci_hcd.0: Device attached [ 1994.761778][T24004] vhci_hcd vhci_hcd.0: pdev(4) rhport(3) sockfd(18) [ 1994.761799][T24004] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1994.761896][T24004] vhci_hcd vhci_hcd.0: Device attached [ 1995.320115][T20086] usb 41-1: new low-speed USB device number 13 using vhci_hcd [ 1995.329819][T24022] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1995.331707][T24022] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1995.333695][T24022] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1995.334442][T24004] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(20) [ 1995.334470][T24004] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1995.334596][T24004] vhci_hcd vhci_hcd.0: Device attached [ 1995.521941][T24008] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(23) [ 1995.521980][T24008] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 1995.522090][T24008] vhci_hcd vhci_hcd.0: Device attached [ 1995.618650][T24022] vhci_hcd vhci_hcd.0: port 0 already used [ 1995.620336][T24021] vhci_hcd: connection closed [ 1995.620669][T24018] vhci_hcd: connection closed [ 1995.621322][T24012] vhci_hcd: connection closed [ 1995.621582][T24016] vhci_hcd: connection closed [ 1995.621772][T24009] vhci_hcd: connection closed [ 1995.660977][ T3573] vhci_hcd: stop threads [ 1995.661000][ T3573] vhci_hcd: release socket [ 1995.661038][ T3573] vhci_hcd: disconnect device [ 1995.661394][ T3573] vhci_hcd: stop threads [ 1995.661404][ T3573] vhci_hcd: release socket [ 1995.661480][ T3573] vhci_hcd: disconnect device [ 1995.918580][ T3573] vhci_hcd: stop threads [ 1995.918600][ T3573] vhci_hcd: release socket [ 1995.918714][ T3573] vhci_hcd: disconnect device [ 1995.919220][ T3573] vhci_hcd: stop threads [ 1995.919232][ T3573] vhci_hcd: release socket [ 1995.919317][ T3573] vhci_hcd: disconnect device [ 1995.919575][T24005] vhci_hcd: connection reset by peer [ 1995.992081][ T3573] vhci_hcd: stop threads [ 1995.992103][ T3573] vhci_hcd: release socket [ 1995.992173][ T3573] vhci_hcd: disconnect device [ 1995.992342][ T3573] vhci_hcd: stop threads [ 1995.992349][ T3573] vhci_hcd: release socket [ 1995.992371][ T3573] vhci_hcd: disconnect device [ 1996.956373][T24038] netlink: 76 bytes leftover after parsing attributes in process `syz.7.5188'. [ 1998.343332][T24055] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2000.727998][T20086] vhci_hcd: vhci_device speed not set [ 2001.604733][T24070] ubi: mtd0 is already attached to ubi31 [ 2003.355176][T24083] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(12) [ 2003.355207][T24083] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2003.355412][T24083] vhci_hcd vhci_hcd.0: Device attached [ 2003.396770][T24083] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(14) [ 2003.396801][T24083] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2003.397206][T24083] vhci_hcd vhci_hcd.0: Device attached [ 2003.447164][T24083] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(16) [ 2003.447197][T24083] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2003.447257][T24083] vhci_hcd vhci_hcd.0: Device attached [ 2003.511826][T24083] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(18) [ 2003.511859][T24083] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2003.512450][T24083] vhci_hcd vhci_hcd.0: Device attached [ 2003.515364][T24083] vhci_hcd vhci_hcd.0: pdev(5) rhport(4) sockfd(20) [ 2003.515393][T24083] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2003.515855][T24083] vhci_hcd vhci_hcd.0: Device attached [ 2003.617877][T16626] usb 43-1: new low-speed USB device number 14 using vhci_hcd [ 2003.625844][T24083] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(22) [ 2003.625877][T24083] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2003.625985][T24083] vhci_hcd vhci_hcd.0: Device attached [ 2003.705929][T24096] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2003.725027][T24083] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2003.757538][T24083] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2003.807462][T24083] vhci_hcd vhci_hcd.0: port 0 already used [ 2004.255160][T24094] vhci_hcd: connection closed [ 2004.256010][T24092] vhci_hcd: connection closed [ 2004.256986][T24090] vhci_hcd: connection closed [ 2004.271917][T24088] vhci_hcd: connection closed [ 2004.274295][T24086] vhci_hcd: connection closed [ 2004.275514][T24084] vhci_hcd: connection reset by peer [ 2004.339243][T21167] vhci_hcd: stop threads [ 2004.339266][T21167] vhci_hcd: release socket [ 2004.339337][T21167] vhci_hcd: disconnect device [ 2004.339688][T21167] vhci_hcd: stop threads [ 2004.339698][T21167] vhci_hcd: release socket [ 2004.339762][T21167] vhci_hcd: disconnect device [ 2004.340545][T21167] vhci_hcd: stop threads [ 2004.340556][T21167] vhci_hcd: release socket [ 2004.340617][T21167] vhci_hcd: disconnect device [ 2004.341030][T21167] vhci_hcd: stop threads [ 2004.341041][T21167] vhci_hcd: release socket [ 2004.341109][T21167] vhci_hcd: disconnect device [ 2004.341602][T21167] vhci_hcd: stop threads [ 2004.341613][T21167] vhci_hcd: release socket [ 2004.341681][T21167] vhci_hcd: disconnect device [ 2004.342058][T21167] vhci_hcd: stop threads [ 2004.342069][T21167] vhci_hcd: release socket [ 2004.342136][T21167] vhci_hcd: disconnect device [ 2005.556218][T24106] net_ratelimit: 68 callbacks suppressed [ 2005.556236][T24106] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2005.556295][T24106] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2005.556559][T24106] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2005.556612][T24106] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2005.556795][T24106] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2005.556845][T24106] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2005.557024][T24106] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2005.557073][T24106] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2005.557248][T24106] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 2005.557297][T24106] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 2008.063186][T24124] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5207'. [ 2009.448865][T16626] vhci_hcd: vhci_device speed not set [ 2011.295268][T19039] usb usb44-port1: attempt power cycle [ 2011.853318][T24146] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(12) [ 2011.853350][T24146] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2011.853513][T24146] vhci_hcd vhci_hcd.0: Device attached [ 2011.874963][T24146] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(14) [ 2011.875000][T24146] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2011.875060][T24146] vhci_hcd vhci_hcd.0: Device attached [ 2012.027907][T24146] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(16) [ 2012.027936][T24146] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 2012.028026][T24146] vhci_hcd vhci_hcd.0: Device attached [ 2012.029697][T24151] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(19) [ 2012.029724][T24151] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2012.029774][T24151] vhci_hcd vhci_hcd.0: Device attached [ 2012.032738][T24146] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(18) [ 2012.032765][T24146] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 2012.032870][T24146] vhci_hcd vhci_hcd.0: Device attached [ 2012.198623][T19039] usb usb44-port1: unable to enumerate USB device [ 2012.199370][T24146] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(22) [ 2012.199397][T24146] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 2012.202349][T24146] vhci_hcd vhci_hcd.0: Device attached [ 2012.236452][T24146] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2012.237621][T24146] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2012.255752][T24146] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 2012.268403][T24146] vhci_hcd vhci_hcd.0: port 0 already used [ 2012.287911][T20086] usb 37-1: new low-speed USB device number 12 using vhci_hcd [ 2012.296197][T24158] vhci_hcd: connection closed [ 2012.296826][T24156] vhci_hcd: connection closed [ 2012.297452][T24154] vhci_hcd: connection closed [ 2012.315344][T24152] vhci_hcd: connection closed [ 2012.315991][T24149] vhci_hcd: connection closed [ 2012.408188][T24147] vhci_hcd: connection reset by peer [ 2012.411930][T17060] vhci_hcd: stop threads [ 2012.411949][T17060] vhci_hcd: release socket [ 2012.411986][T17060] vhci_hcd: disconnect device [ 2012.412339][T17060] vhci_hcd: stop threads [ 2012.412349][T17060] vhci_hcd: release socket [ 2012.412425][T17060] vhci_hcd: disconnect device [ 2012.412836][T17060] vhci_hcd: stop threads [ 2012.412846][T17060] vhci_hcd: release socket [ 2012.413047][T17060] vhci_hcd: disconnect device [ 2012.413365][T17060] vhci_hcd: stop threads [ 2012.413376][T17060] vhci_hcd: release socket [ 2012.413567][T17060] vhci_hcd: disconnect device [ 2012.413886][T17060] vhci_hcd: stop threads [ 2012.413896][T17060] vhci_hcd: release socket [ 2012.414086][T17060] vhci_hcd: disconnect device [ 2012.414363][T17060] vhci_hcd: stop threads [ 2012.414374][T17060] vhci_hcd: release socket [ 2012.416057][T17060] vhci_hcd: disconnect device [ 2014.075153][T24165] net veth1_virt_wifi ªªªªª»: renamed from virt_wifi0 [ 2015.377092][T24167] netlink: 'syz.2.5216': attribute type 1 has an invalid length. [ 2016.358134][T24167] bond1: (slave bridge1): making interface the new active one [ 2016.359422][T24167] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 2017.447052][T20086] vhci_hcd: vhci_device speed not set [ 2019.536930][T24192] ubi: mtd0 is already attached to ubi31 [ 2023.996764][T16545] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2024.168209][T16545] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2024.171981][T16545] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2024.173343][T16545] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2024.174328][T16545] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2024.512638][T24216] lo speed is unknown, defaulting to 1000 [ 2026.319647][T19207] Bluetooth: hci3: command tx timeout [ 2028.430236][T19207] Bluetooth: hci3: command tx timeout [ 2030.468166][T19207] Bluetooth: hci3: command tx timeout [ 2032.379414][T24256] fuse: Bad value for 'group_id' [ 2032.379437][T24256] fuse: Bad value for 'group_id' [ 2032.576991][T24254] input: syz1 as /devices/virtual/input/input38 [ 2032.584355][T19207] Bluetooth: hci3: command tx timeout [ 2032.886819][T24216] chnl_net:caif_netlink_parms(): no params data found [ 2034.359207][T24266] netlink: 'syz.4.5244': attribute type 1 has an invalid length. [ 2035.223775][T24268] bond2: (slave bridge2): making interface the new active one [ 2035.224573][T24268] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 2035.891385][T24283] ubi: mtd0 is already attached to ubi31 [ 2037.466890][T24304] vimc link validate: Sensor A:src:16x16 (0x33424752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2038.474702][T24308] fuse: Bad value for 'group_id' [ 2038.474724][T24308] fuse: Bad value for 'group_id' [ 2039.725622][T20086] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 2039.888143][T20086] usb 3-1: Using ep0 maxpacket: 8 [ 2039.890925][T20086] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 2039.890962][T20086] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 2039.890990][T20086] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2039.891015][T20086] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2039.891062][T20086] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2039.891087][T20086] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.245072][T20086] usb 3-1: GET_CAPABILITIES returned 0 [ 2040.245130][T20086] usbtmc 3-1:16.0: can't read capabilities [ 2040.772659][ C0] usbtmc 3-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 2040.823909][T24323] usbtmc 3-1:16.0: Unable to send data, error -71 [ 2040.947675][T13377] usb 3-1: USB disconnect, device number 91 [ 2041.468049][ T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 2041.655668][ T9] usb 7-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 2041.655701][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2041.695006][ T9] usb 7-1: config 0 descriptor?? [ 2041.718230][ T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 2042.156354][ T9] gp8psk: usb in 128 operation failed. [ 2042.156834][ T9] gp8psk: usb in 137 operation failed. [ 2042.156851][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2042.158667][ T9] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 2042.158738][ T9] usb 7-1: media controller created [ 2042.299472][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2042.404349][ T9] gp8psk_fe: Frontend attached [ 2042.405318][ T9] usb 7-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 2042.407361][ T9] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 2042.528090][T24216] bridge0: port 1(bridge_slave_0) entered blocking state [ 2042.528187][T24216] bridge0: port 1(bridge_slave_0) entered disabled state [ 2042.528420][T24216] bridge_slave_0: entered allmulticast mode [ 2042.578032][T24216] bridge_slave_0: entered promiscuous mode [ 2042.626911][T24216] bridge0: port 2(bridge_slave_1) entered blocking state [ 2042.627070][T24216] bridge0: port 2(bridge_slave_1) entered disabled state [ 2042.627359][T24216] bridge_slave_1: entered allmulticast mode [ 2042.690514][T24330] netlink: 'syz.6.5260': attribute type 1 has an invalid length. [ 2042.705875][T24216] bridge_slave_1: entered promiscuous mode [ 2042.810131][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2042.810209][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2043.179383][ T9] gp8psk: usb in 138 operation failed. [ 2043.179423][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 2043.179437][ T9] gp8psk: found Genpix USB device pID = 203 (hex) [ 2043.315640][ T9] usb 7-1: USB disconnect, device number 5 [ 2045.029681][ T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 2047.933660][T24216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2048.482620][T24216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2048.641888][T24340] netlink: 'syz.6.5263': attribute type 1 has an invalid length. [ 2049.680090][T24332] net_ratelimit: 68 callbacks suppressed [ 2049.680107][T24332] Set syz1 is full, maxelem 65536 reached [ 2051.379776][T24347] vimc link validate: Sensor A:src:16x16 (0x33424752, 0, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 2051.448583][T24340] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 2052.350967][T24353] netlink: 'syz.2.5267': attribute type 1 has an invalid length. [ 2052.443681][T24216] team0: Port device team_slave_0 added [ 2052.448735][T24216] team0: Port device team_slave_1 added [ 2053.042089][T24361] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2053.055510][T24361] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2053.057219][T24361] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2053.059625][T24361] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2053.060570][T24361] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2054.642180][T24353] bond2: (slave bridge2): making interface the new active one [ 2054.830511][T24353] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 2055.197866][T19207] Bluetooth: hci0: command tx timeout [ 2055.895023][T24353] syz.2.5267 (24353) used greatest stack depth: 15656 bytes left [ 2056.609978][T24361] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2056.652676][T24361] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2056.654249][T24361] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2056.657298][T24361] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2056.683966][T24361] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2057.427831][T19207] Bluetooth: hci0: command tx timeout [ 2058.335282][T24387] Invalid ELF header magic: != ELF [ 2058.493742][T24387] ntfs3(nullb0): Primary boot signature is not NTFS. [ 2058.525773][T24387] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 2058.932305][T19207] Bluetooth: hci6: command tx timeout [ 2059.510328][T19207] Bluetooth: hci0: command tx timeout [ 2060.173801][T24390] netlink: 'syz.2.5275': attribute type 1 has an invalid length. [ 2060.189011][T24216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2060.189026][T24216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2060.189046][T24216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2060.285961][T24390] 8021q: adding VLAN 0 to HW filter on device bond3 [ 2060.341456][T24216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2060.341476][T24216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2060.341506][T24216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2060.428582][T24392] bond3: (slave veth0_to_bond): making interface the new active one [ 2060.437572][T24392] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 2060.948063][T19207] Bluetooth: hci6: command tx timeout [ 2061.588183][T19207] Bluetooth: hci0: command tx timeout [ 2063.029245][T19207] Bluetooth: hci6: command tx timeout [ 2063.467555][T24397] netlink: 'syz.2.5277': attribute type 1 has an invalid length. [ 2065.108311][T19207] Bluetooth: hci6: command tx timeout [ 2079.557118][T24361] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2079.580250][T24361] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2079.581879][T24361] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2079.583067][T24361] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2079.584743][T24361] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2081.677864][T24361] Bluetooth: hci1: command tx timeout [ 2083.283298][T19207] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 2083.287283][T19207] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 2083.341854][T19207] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 2083.358907][T19207] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 2083.365143][T19207] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 2083.454859][T16545] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 2083.468022][T16545] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 2083.479135][T16545] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 2083.482097][T16545] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 2083.482958][T16545] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 2083.752536][T19207] Bluetooth: hci1: command tx timeout [ 2085.431084][T19207] Bluetooth: hci7: command tx timeout [ 2085.588518][T19207] Bluetooth: hci8: command tx timeout [ 2085.828055][T19207] Bluetooth: hci1: command tx timeout [ 2087.508034][T19207] Bluetooth: hci7: command tx timeout [ 2087.667928][T19207] Bluetooth: hci8: command tx timeout [ 2087.908082][T19207] Bluetooth: hci1: command tx timeout [ 2089.588089][T19207] Bluetooth: hci7: command tx timeout [ 2089.749534][T19207] Bluetooth: hci8: command tx timeout [ 2091.667867][T19207] Bluetooth: hci7: command tx timeout [ 2091.837235][T19207] Bluetooth: hci8: command tx timeout [ 2099.647757][T24372] lo speed is unknown, defaulting to 1000 [ 2099.734714][T24216] hsr_slave_0: entered promiscuous mode [ 2099.736253][T24216] hsr_slave_1: entered promiscuous mode [ 2099.737365][T24216] debugfs: 'hsr0' already exists in 'hsr' [ 2099.737393][T24216] Cannot create hsr debugfs directory [ 2102.748572][T24355] lo speed is unknown, defaulting to 1000 [ 2104.246616][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.246708][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2108.826536][T21167] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2110.128013][T24409] lo speed is unknown, defaulting to 1000 [ 2110.158802][T24418] lo speed is unknown, defaulting to 1000 [ 2110.232612][T24415] lo speed is unknown, defaulting to 1000 [ 2111.503635][T24372] chnl_net:caif_netlink_parms(): no params data found [ 2111.997890][T16545] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2112.003126][T16545] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2112.004706][T16545] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2112.006478][T16545] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2112.050935][T16545] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2114.148101][T19207] Bluetooth: hci2: command tx timeout [ 2114.292561][T24409] chnl_net:caif_netlink_parms(): no params data found [ 2115.175337][T16545] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2115.207471][T16545] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2115.220570][T16545] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2115.222134][T16545] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2115.223067][T16545] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2116.227964][T16545] Bluetooth: hci2: command tx timeout [ 2117.348631][T16545] Bluetooth: hci3: command tx timeout [ 2118.307831][T16545] Bluetooth: hci2: command tx timeout [ 2119.428374][T16545] Bluetooth: hci3: command tx timeout [ 2120.270487][T24415] chnl_net:caif_netlink_parms(): no params data found [ 2120.304625][T24437] lo speed is unknown, defaulting to 1000 [ 2120.447942][T16545] Bluetooth: hci2: command tx timeout [ 2120.723516][T24418] chnl_net:caif_netlink_parms(): no params data found [ 2121.508776][T19207] Bluetooth: hci3: command tx timeout [ 2123.588431][T16545] Bluetooth: hci3: command tx timeout [ 2126.935909][T24448] lo speed is unknown, defaulting to 1000 [ 2127.045899][T24409] bridge0: port 1(bridge_slave_0) entered blocking state [ 2127.046038][T24409] bridge0: port 1(bridge_slave_0) entered disabled state [ 2127.046268][T24409] bridge_slave_0: entered allmulticast mode [ 2127.073549][T24409] bridge_slave_0: entered promiscuous mode [ 2128.394560][T24409] bridge0: port 2(bridge_slave_1) entered blocking state [ 2128.395055][T24409] bridge0: port 2(bridge_slave_1) entered disabled state [ 2128.395301][T24409] bridge_slave_1: entered allmulticast mode [ 2128.422021][T24409] bridge_slave_1: entered promiscuous mode [ 2131.906862][T24415] bridge0: port 1(bridge_slave_0) entered blocking state [ 2131.907004][T24415] bridge0: port 1(bridge_slave_0) entered disabled state [ 2131.907247][T24415] bridge_slave_0: entered allmulticast mode [ 2131.946484][T24415] bridge_slave_0: entered promiscuous mode [ 2132.505354][T24418] bridge0: port 1(bridge_slave_0) entered blocking state [ 2132.505536][T24418] bridge0: port 1(bridge_slave_0) entered disabled state [ 2132.505795][T24418] bridge_slave_0: entered allmulticast mode [ 2132.529677][T24418] bridge_slave_0: entered promiscuous mode [ 2132.532234][T24415] bridge0: port 2(bridge_slave_1) entered blocking state [ 2132.532389][T24415] bridge0: port 2(bridge_slave_1) entered disabled state [ 2132.532610][T24415] bridge_slave_1: entered allmulticast mode [ 2132.536857][T24415] bridge_slave_1: entered promiscuous mode [ 2132.603513][T24409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2132.623245][T24418] bridge0: port 2(bridge_slave_1) entered blocking state [ 2132.623403][T24418] bridge0: port 2(bridge_slave_1) entered disabled state [ 2132.623651][T24418] bridge_slave_1: entered allmulticast mode [ 2132.626603][T24418] bridge_slave_1: entered promiscuous mode [ 2132.816924][T24409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2136.833924][T24415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2137.983083][T24418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2138.015205][T24415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2138.041620][T24409] team0: Port device team_slave_0 added [ 2138.062377][T24418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2138.343585][T24409] team0: Port device team_slave_1 added [ 2139.709617][T19207] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2139.732540][T19207] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2139.734465][T19207] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2139.735683][T19207] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2139.736485][T19207] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2141.837167][T19207] Bluetooth: hci0: command tx timeout [ 2142.239654][T24415] team0: Port device team_slave_0 added [ 2142.269892][T24418] team0: Port device team_slave_0 added [ 2142.274116][T24415] team0: Port device team_slave_1 added [ 2142.344304][T24418] team0: Port device team_slave_1 added [ 2143.787608][T16545] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2143.801331][T16545] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2143.822143][T16545] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2143.823460][T16545] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2143.824326][T16545] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2143.909253][T19207] Bluetooth: hci0: command tx timeout [ 2143.960656][T16545] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2144.000458][T16545] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2144.002125][T16545] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2144.003369][T16545] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2144.004235][T16545] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2145.908056][T16545] Bluetooth: hci4: command tx timeout [ 2145.987903][T16545] Bluetooth: hci0: command tx timeout [ 2146.148035][T16545] Bluetooth: hci6: command tx timeout [ 2147.998187][T16545] Bluetooth: hci4: command tx timeout [ 2148.068127][T16545] Bluetooth: hci0: command tx timeout [ 2148.228085][T16545] Bluetooth: hci6: command tx timeout [ 2150.068071][T16545] Bluetooth: hci4: command tx timeout [ 2150.308142][T16545] Bluetooth: hci6: command tx timeout [ 2152.148052][T16545] Bluetooth: hci4: command tx timeout [ 2152.387909][T16545] Bluetooth: hci6: command tx timeout [ 2152.790179][T24463] lo speed is unknown, defaulting to 1000 [ 2152.853546][T24437] chnl_net:caif_netlink_parms(): no params data found [ 2153.545343][T24472] lo speed is unknown, defaulting to 1000 [ 2153.649523][T24475] lo speed is unknown, defaulting to 1000 [ 2153.698341][T24448] chnl_net:caif_netlink_parms(): no params data found [ 2155.550774][T24437] bridge0: port 1(bridge_slave_0) entered blocking state [ 2155.550920][T24437] bridge0: port 1(bridge_slave_0) entered disabled state [ 2155.551192][T24437] bridge_slave_0: entered allmulticast mode [ 2155.554372][T24437] bridge_slave_0: entered promiscuous mode [ 2155.641055][T24437] bridge0: port 2(bridge_slave_1) entered blocking state [ 2155.641815][T24437] bridge0: port 2(bridge_slave_1) entered disabled state [ 2155.642083][T24437] bridge_slave_1: entered allmulticast mode [ 2155.645218][T24437] bridge_slave_1: entered promiscuous mode [ 2157.932515][T24437] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2158.679777][T24437] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2158.737236][T24448] bridge0: port 1(bridge_slave_0) entered blocking state [ 2158.737381][T24448] bridge0: port 1(bridge_slave_0) entered disabled state [ 2158.752436][T24448] bridge_slave_0: entered allmulticast mode [ 2158.757142][T24448] bridge_slave_0: entered promiscuous mode [ 2159.048395][T24448] bridge0: port 2(bridge_slave_1) entered blocking state [ 2159.049356][T24448] bridge0: port 2(bridge_slave_1) entered disabled state [ 2159.049632][T24448] bridge_slave_1: entered allmulticast mode [ 2159.052775][T24448] bridge_slave_1: entered promiscuous mode [ 2162.327385][T24437] team0: Port device team_slave_0 added [ 2163.218895][T24437] team0: Port device team_slave_1 added [ 2163.278581][T24448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2164.540838][T24448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2165.687458][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2165.687534][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2166.564419][T24437] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2166.564438][T24437] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2166.564468][T24437] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2167.232555][T24437] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2167.232574][T24437] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2167.232603][T24437] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2167.312728][T24448] team0: Port device team_slave_0 added [ 2167.313977][T24463] chnl_net:caif_netlink_parms(): no params data found [ 2167.416885][T24448] team0: Port device team_slave_1 added [ 2173.154359][T19207] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2173.207012][T19207] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2173.218070][T19207] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2173.219584][T19207] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2173.220490][T19207] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2175.255684][T19207] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2175.288322][T19207] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2175.305574][T19207] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2175.315556][T19207] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2175.317478][T19207] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2175.353435][T16545] Bluetooth: hci1: command tx timeout [ 2177.428254][T16545] Bluetooth: hci5: command tx timeout [ 2177.429042][T16545] Bluetooth: hci1: command tx timeout [ 2179.546191][T16545] Bluetooth: hci1: command tx timeout [ 2179.546230][T16545] Bluetooth: hci5: command tx timeout [ 2179.563747][T24472] chnl_net:caif_netlink_parms(): no params data found [ 2181.143485][T24475] chnl_net:caif_netlink_parms(): no params data found [ 2181.588505][T16545] Bluetooth: hci1: command tx timeout [ 2181.588556][T19207] Bluetooth: hci5: command tx timeout [ 2183.677992][T19207] Bluetooth: hci5: command tx timeout [ 2184.112135][T24463] bridge0: port 1(bridge_slave_0) entered blocking state [ 2184.112282][T24463] bridge0: port 1(bridge_slave_0) entered disabled state [ 2184.112632][T24463] bridge_slave_0: entered allmulticast mode [ 2184.116220][T24463] bridge_slave_0: entered promiscuous mode [ 2185.496398][T24497] lo speed is unknown, defaulting to 1000 [ 2185.506542][T24463] bridge0: port 2(bridge_slave_1) entered blocking state [ 2185.506696][T24463] bridge0: port 2(bridge_slave_1) entered disabled state [ 2185.507014][T24463] bridge_slave_1: entered allmulticast mode [ 2185.521788][T24463] bridge_slave_1: entered promiscuous mode [ 2185.587874][T24502] lo speed is unknown, defaulting to 1000 [ 2188.373407][T24463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2188.408680][T24472] bridge0: port 1(bridge_slave_0) entered blocking state [ 2188.408909][T24472] bridge0: port 1(bridge_slave_0) entered disabled state [ 2188.409177][T24472] bridge_slave_0: entered allmulticast mode [ 2188.412268][T24472] bridge_slave_0: entered promiscuous mode [ 2188.464639][T24463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2189.226371][T24472] bridge0: port 2(bridge_slave_1) entered blocking state [ 2189.226541][T24472] bridge0: port 2(bridge_slave_1) entered disabled state [ 2189.226821][T24472] bridge_slave_1: entered allmulticast mode [ 2189.260186][T24472] bridge_slave_1: entered promiscuous mode [ 2192.694238][T24475] bridge0: port 1(bridge_slave_0) entered blocking state [ 2192.694412][T24475] bridge0: port 1(bridge_slave_0) entered disabled state [ 2192.694742][T24475] bridge_slave_0: entered allmulticast mode [ 2192.722855][T24475] bridge_slave_0: entered promiscuous mode [ 2193.483330][T24463] team0: Port device team_slave_0 added [ 2193.500618][T24475] bridge0: port 2(bridge_slave_1) entered blocking state [ 2193.500765][T24475] bridge0: port 2(bridge_slave_1) entered disabled state [ 2193.501054][T24475] bridge_slave_1: entered allmulticast mode [ 2193.504324][T24475] bridge_slave_1: entered promiscuous mode [ 2193.543401][T24472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2193.565843][T24463] team0: Port device team_slave_1 added [ 2194.590340][T24472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2199.065648][T24475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2199.780457][T16545] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2199.801630][T16545] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2199.803299][T16545] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2199.804945][T16545] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2199.813056][T16545] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2200.124974][T24463] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2200.124995][T24463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2200.125024][T24463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2200.139217][T24475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2200.143169][T24472] team0: Port device team_slave_0 added [ 2201.378987][T24472] team0: Port device team_slave_1 added [ 2201.908479][T16545] Bluetooth: hci2: command tx timeout [ 2203.219413][T24475] team0: Port device team_slave_0 added [ 2203.780882][T19207] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2203.797071][T19207] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2203.804733][T19207] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2203.807051][T19207] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2203.810212][T19207] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2203.997535][T16545] Bluetooth: hci2: command tx timeout [ 2204.654946][T19207] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 2204.678733][T19207] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 2204.681344][T19207] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 2204.682714][T19207] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 2204.692134][T19207] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 2205.908572][T19207] Bluetooth: hci0: command tx timeout [ 2206.068309][T19207] Bluetooth: hci2: command tx timeout [ 2206.788166][T19207] Bluetooth: hci3: command tx timeout [ 2207.988024][T19207] Bluetooth: hci0: command tx timeout [ 2208.147973][T19207] Bluetooth: hci2: command tx timeout [ 2208.718804][T19207] Bluetooth: hci8: command 0x0406 tx timeout [ 2208.876996][T19207] Bluetooth: hci3: command tx timeout [ 2210.068277][T16545] Bluetooth: hci0: command tx timeout [ 2210.948211][T16545] Bluetooth: hci3: command tx timeout [ 2212.147947][T16545] Bluetooth: hci0: command tx timeout [ 2213.028192][T19207] Bluetooth: hci3: command tx timeout [ 2213.317228][T24517] lo speed is unknown, defaulting to 1000 [ 2213.837293][T24497] chnl_net:caif_netlink_parms(): no params data found [ 2213.837922][T24523] lo speed is unknown, defaulting to 1000 [ 2213.960438][T24525] lo speed is unknown, defaulting to 1000 [ 2214.734863][T24502] chnl_net:caif_netlink_parms(): no params data found [ 2218.322540][T24497] bridge0: port 1(bridge_slave_0) entered blocking state [ 2218.322783][T24497] bridge0: port 1(bridge_slave_0) entered disabled state [ 2218.323065][T24497] bridge_slave_0: entered allmulticast mode [ 2218.326965][T24497] bridge_slave_0: entered promiscuous mode [ 2218.399152][T24497] bridge0: port 2(bridge_slave_1) entered blocking state [ 2218.399358][T24497] bridge0: port 2(bridge_slave_1) entered disabled state [ 2218.399662][T24497] bridge_slave_1: entered allmulticast mode [ 2218.402769][T24497] bridge_slave_1: entered promiscuous mode [ 2222.583012][T24497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2222.587172][T24502] bridge0: port 1(bridge_slave_0) entered blocking state [ 2222.587316][T24502] bridge0: port 1(bridge_slave_0) entered disabled state [ 2222.588391][T24502] bridge_slave_0: entered allmulticast mode [ 2222.592105][T24502] bridge_slave_0: entered promiscuous mode [ 2222.657120][T24497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2222.658478][T24502] bridge0: port 2(bridge_slave_1) entered blocking state [ 2222.658672][T24502] bridge0: port 2(bridge_slave_1) entered disabled state [ 2222.658955][T24502] bridge_slave_1: entered allmulticast mode [ 2222.662048][T24502] bridge_slave_1: entered promiscuous mode [ 2225.149385][T24497] team0: Port device team_slave_0 added [ 2225.164012][T24502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2225.210711][T24517] chnl_net:caif_netlink_parms(): no params data found [ 2225.265293][T24497] team0: Port device team_slave_1 added [ 2225.274405][T24502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2227.117442][ T1322] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.117524][ T1322] ieee802154 phy1 wpan1: encryption failed: -22 [ 2231.067433][T24497] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2231.067452][T24497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2231.067481][T24497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2231.076465][T24502] team0: Port device team_slave_0 added [ 2231.157707][T24497] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2231.157725][T24497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2231.157753][T24497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2231.161193][T24502] team0: Port device team_slave_1 added [ 2231.162184][T24523] chnl_net:caif_netlink_parms(): no params data found [ 2233.499775][T19207] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2233.538198][T19207] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2233.540903][T19207] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2233.542265][T19207] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2233.543178][T19207] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2235.414086][T19207] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 2235.460220][T19207] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 2235.461958][T19207] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 2235.463721][T19207] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 2235.464639][T19207] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 2235.668651][T19207] Bluetooth: hci4: command tx timeout [ 2236.410305][T24502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2236.410323][T24502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2236.410352][T24502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2236.411318][T24525] chnl_net:caif_netlink_parms(): no params data found [ 2237.748052][T16545] Bluetooth: hci4: command tx timeout [ 2237.988841][T19207] Bluetooth: hci6: command tx timeout [ 2239.827737][T16545] Bluetooth: hci4: command tx timeout [ 2240.078271][T16545] Bluetooth: hci6: command tx timeout [ 2241.908538][T16545] Bluetooth: hci4: command tx timeout [ 2242.148324][T16545] Bluetooth: hci6: command tx timeout [ 2243.386668][T24517] bridge0: port 1(bridge_slave_0) entered blocking state [ 2243.386905][T24517] bridge0: port 1(bridge_slave_0) entered disabled state [ 2243.387535][T24517] bridge_slave_0: entered allmulticast mode [ 2243.481170][T24517] bridge_slave_0: entered promiscuous mode [ 2243.565198][T24517] bridge0: port 2(bridge_slave_1) entered blocking state [ 2243.565356][T24517] bridge0: port 2(bridge_slave_1) entered disabled state [ 2243.565672][T24517] bridge_slave_1: entered allmulticast mode [ 2243.591919][T24517] bridge_slave_1: entered promiscuous mode [ 2244.227925][T16545] Bluetooth: hci6: command tx timeout [ 2247.876450][T24517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2247.920261][T24523] bridge0: port 1(bridge_slave_0) entered blocking state [ 2247.920481][T24523] bridge0: port 1(bridge_slave_0) entered disabled state [ 2247.920829][T24523] bridge_slave_0: entered allmulticast mode [ 2247.923993][T24523] bridge_slave_0: entered promiscuous mode [ 2247.954643][T24558] lo speed is unknown, defaulting to 1000 [ 2247.975926][T24517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2248.868208][ T39] INFO: task syz-executor:24216 blocked for more than 143 seconds. [ 2248.868236][ T39] Not tainted syzkaller #0 [ 2248.868249][ T39] Blocked by coredump. [ 2248.868257][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 2248.868269][ T39] task:syz-executor state:D stack:19144 pid:24216 tgid:24216 ppid:1 task_flags:0x40054c flags:0x00080003 [ 2248.868333][ T39] Call Trace: [ 2248.868342][ T39] [ 2248.868359][ T39] __schedule+0x16f3/0x4c20 [ 2248.868426][ T39] ? __pfx___schedule+0x10/0x10 [ 2248.868491][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 2248.868531][ T39] rt_mutex_schedule+0x77/0xf0 [ 2248.868562][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 2248.868591][ T39] ? task_blocks_on_rt_mutex+0xf12/0x1380 [ 2248.868640][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 2248.868672][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 2248.868705][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 2248.868732][ T39] ? __lock_acquire+0xab9/0xd20 [ 2248.868768][ T39] ? rcu_barrier+0x4c/0x570 [ 2248.868815][ T39] ? rcu_barrier+0x4c/0x570 [ 2248.868844][ T39] mutex_lock_nested+0x16a/0x1d0 [ 2248.868870][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 2248.868900][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 2248.868931][ T39] rcu_barrier+0x4c/0x570 [ 2248.868967][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 2248.868996][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 2248.869024][ T39] netdev_run_todo+0x327/0xea0 [ 2248.869053][ T39] ? __pfx_netif_state_change+0x10/0x10 [ 2248.869085][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 2248.869109][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 2248.869155][ T39] ? netdev_state_change+0x1ca/0x220 [ 2248.869198][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 2248.869226][ T39] tun_chr_close+0x13f/0x1c0 [ 2248.869256][ T39] __fput+0x45b/0xa80 [ 2248.869300][ T39] task_work_run+0x1d4/0x260 [ 2248.869334][ T39] ? __pfx_task_work_run+0x10/0x10 [ 2248.869365][ T39] ? do_exit+0x6b0/0x2300 [ 2248.869393][ T39] ? do_exit+0x6b0/0x2300 [ 2248.869447][ T39] do_exit+0x6b5/0x2300 [ 2248.869475][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2248.869525][ T39] ? __pfx_do_exit+0x10/0x10 [ 2248.869549][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 2248.869579][ T39] ? rt_spin_lock+0x1c1/0x3e0 [ 2248.869625][ T39] do_group_exit+0x21c/0x2d0 [ 2248.869654][ T39] ? rt_spin_unlock+0x161/0x200 [ 2248.869698][ T39] get_signal+0x125d/0x1310 [ 2248.869777][ T39] arch_do_signal_or_restart+0xa0/0x790 [ 2248.869808][ T39] ? fput_close_sync+0x119/0x200 [ 2248.869839][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2248.869891][ T39] ? exit_to_user_mode_loop+0x40/0x130 [ 2248.869920][ T39] exit_to_user_mode_loop+0x72/0x130 [ 2248.869946][ T39] do_syscall_64+0x2bd/0xfa0 [ 2248.869984][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2248.870007][ T39] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2248.870032][ T39] ? clear_bhb_loop+0x60/0xb0 [ 2248.870060][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2248.870083][ T39] RIP: 0033:0x7fdb9c030d5c [ 2248.870103][ T39] RSP: 002b:00007ffe5be58d80 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 2248.870128][ T39] RAX: 0000000000000048 RBX: 00007fdb9cdb4620 RCX: 00007fdb9c030d5c [ 2248.870157][ T39] RDX: 0000000000000048 RSI: 00007fdb9cdb4670 RDI: 0000000000000003 [ 2248.870173][ T39] RBP: 0000000000000000 R08: 00007ffe5be58dd4 R09: 000000000000000c [ 2248.870207][ T39] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 2248.870222][ T39] R13: 0000000000000000 R14: 00007fdb9cdb4670 R15: 0000000000000000 [ 2248.870259][ T39] [ 2248.870335][ T39] [ 2248.870335][ T39] Showing all locks held in the system: [ 2248.870347][ T39] 3 locks held by kworker/0:0/9: [ 2248.870361][ T39] #0: ffff88813fe19138 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2248.870430][ T39] #1: ffffc900000e7ba0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2248.870504][ T39] #2: ffffffff8ea78478 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 2248.870560][ T39] 2 locks held by rcuc/1/28: [ 2248.870573][ T39] 1 lock held by khungtaskd/39: [ 2248.870599][ T39] #0: ffffffff8d7aa4c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 2248.870674][ T39] 2 locks held by getty/5560: [ 2248.870686][ T39] #0: ffff88823bf748a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 2248.870743][ T39] #1: ffffc90003e762e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 2248.870812][ T39] 6 locks held by kworker/u8:5/21167: [ 2248.870833][ T39] #0: ffff88801a294938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 2248.870896][ T39] #1: ffffc90005017ba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 2248.870959][ T39] #2: ffffffff8ea6b560 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 2248.871018][ T39] #3: ffff88803066e0d8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 2248.871073][ T39] #4: ffff88805dda8300 (&devlink->lock_key#42){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 2248.871131][ T39] #5: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2248.871197][ T39] 1 lock held by syz-executor/24216: [ 2248.871209][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2248.871270][ T39] 1 lock held by syz.4.5255/24309: [ 2248.871283][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2248.871343][ T39] 1 lock held by syz-executor/24355: [ 2248.871356][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2248.871417][ T39] 1 lock held by syz-executor/24372: [ 2248.871429][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2248.871496][ T39] 1 lock held by syz.2.5277/24398: [ 2248.871509][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2248.871569][ T39] 1 lock held by syz.6.5278/24406: [ 2248.871582][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2248.871642][ T39] 1 lock held by syz-executor/24409: [ 2248.871655][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2248.871715][ T39] 1 lock held by syz-executor/24415: [ 2248.871728][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2248.871788][ T39] 2 locks held by syz-executor/24418: [ 2248.871801][ T39] #0: ffffffff8e2035e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 2248.871870][ T39] #1: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2248.871931][ T39] 1 lock held by syz-executor/24437: [ 2248.871943][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2248.872002][ T39] 1 lock held by syz-executor/24448: [ 2248.872014][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2248.872073][ T39] 1 lock held by syz-executor/24463: [ 2248.872087][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2248.872163][ T39] 1 lock held by syz-executor/24472: [ 2248.872177][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2248.872238][ T39] 1 lock held by syz-executor/24475: [ 2248.872251][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2248.872320][ T39] 1 lock held by syz-executor/24497: [ 2248.872333][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2248.872395][ T39] 1 lock held by syz-executor/24502: [ 2248.872408][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 2248.872481][ T39] 2 locks held by syz-executor/24517: [ 2248.872494][ T39] #0: ffffffff8e2035e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 2248.872562][ T39] #1: ffffffff8ea78478 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 2248.872623][ T39] 1 lock held by syz-executor/24523: [ 2248.872636][ T39] #0: ffffffff8ea78478 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 2248.872697][ T39] 2 locks held by syz-executor/24525: [ 2248.872710][ T39] #0: ffffffff8e2035e0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 2248.872778][ T39] #1: ffffffff8ea78478 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 2248.872840][ T39] 5 locks held by syz-executor/24552: [ 2248.872853][ T39] #0: ffffffff8ea6b560 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 2248.872913][ T39] #1: ffffffff8e7e19e0 (devices_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x19a/0x270 [ 2248.872966][ T39] #2: ffffffff8e7e1c20 (rdma_nets_rwsem){++++}-{4:4}, at: rdma_dev_init_net+0x1d2/0x270 [ 2248.873018][ T39] #3: ffff888066fdd118 (&device->compat_devs_mutex){+.+.}-{4:4}, at: add_one_compat_dev+0xee/0x5c0 [ 2248.873071][ T39] #4: ffffffff8ea78478 (rtnl_mutex){+.+.}-{4:4}, at: ib_get_eth_speed+0x151/0x7b0 [ 2248.873140][ T39] 2 locks held by syz-executor/24558: [ 2248.873153][ T39] #0: ffffffff8ea6b560 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 2248.873213][ T39] #1: ffffffff8ea78478 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 2248.873273][ T39] [ 2248.873279][ T39] ============================================= [ 2248.873279][ T39] [ 2248.873290][ T39] NMI backtrace for cpu 0 [ 2248.873316][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2248.873363][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2248.873389][ T39] Call Trace: [ 2248.873407][ T39] [ 2248.873423][ T39] dump_stack_lvl+0x189/0x250 [ 2248.873464][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2248.873493][ T39] ? __pfx__printk+0x10/0x10 [ 2248.873535][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 2248.873566][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 2248.873599][ T39] ? __pfx__printk+0x10/0x10 [ 2248.873631][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 2248.873666][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 2248.873700][ T39] watchdog+0xf60/0xfa0 [ 2248.873732][ T39] ? watchdog+0x1e2/0xfa0 [ 2248.873763][ T39] kthread+0x711/0x8a0 [ 2248.873795][ T39] ? __pfx_watchdog+0x10/0x10 [ 2248.873818][ T39] ? __pfx_kthread+0x10/0x10 [ 2248.873843][ T39] ? rt_spin_unlock+0x150/0x200 [ 2248.873878][ T39] ? rt_spin_unlock+0x161/0x200 [ 2248.873904][ T39] ? __pfx_kthread+0x10/0x10 [ 2248.873933][ T39] ret_from_fork+0x4bc/0x870 [ 2248.873985][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 2248.874028][ T39] ? __switch_to_asm+0x39/0x70 [ 2248.874054][ T39] ? __switch_to_asm+0x33/0x70 [ 2248.874081][ T39] ? __pfx_kthread+0x10/0x10 [ 2248.874107][ T39] ret_from_fork_asm+0x1a/0x30 [ 2248.874155][ T39] [ 2248.874164][ T39] Sending NMI from CPU 0 to CPUs 1: [ 2248.874190][ C1] NMI backtrace for cpu 1 [ 2248.874207][ C1] CPU: 1 UID: 0 PID: 28 Comm: rcuc/1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2248.874228][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2248.874240][ C1] RIP: 0010:check_preemption_disabled+0x59/0x120 [ 2248.874263][ C1] Code: 8b 0d ab d4 fe 06 48 3b 4c 24 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d e9 d1 a3 03 00 cc 48 c7 04 24 00 00 00 00 9c <8f> 04 24 f7 04 24 00 02 00 00 74 c8 65 4c 8b 3c 25 08 a0 c5 91 41 [ 2248.874279][ C1] RSP: 0018:ffffc90000a2e550 EFLAGS: 00000046 [ 2248.874296][ C1] RAX: 0000000000000001 RBX: 0000000000000202 RCX: 0000000080000000 [ 2248.874309][ C1] RDX: ffffc90000a2e701 RSI: ffffffff8ce785ad RDI: ffffffff8b3f5460 [ 2248.874324][ C1] RBP: dffffc0000000000 R08: ffffc90000a2eb50 R09: 0000000000000000 [ 2248.874337][ C1] R10: ffffc90000a2e718 R11: fffff52000145ce5 R12: ffffc90000a2eb60 [ 2248.874352][ C1] R13: ffffffff8173bcf5 R14: ffffffff8d7aa4c0 R15: ffff88801c2e0000 [ 2248.874368][ C1] FS: 0000000000000000(0000) GS:ffff888126cc6000(0000) knlGS:0000000000000000 [ 2248.874384][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2248.874397][ C1] CR2: 00007ffdb597aeb8 CR3: 0000000079390000 CR4: 00000000003526f0 [ 2248.874414][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2248.874425][ C1] DR3: 00000000e08e000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2248.874440][ C1] Call Trace: [ 2248.874447][ C1] [ 2248.874458][ C1] lock_release+0xbc/0x3e0 [ 2248.874477][ C1] ? deref_stack_reg+0x19f/0x230 [ 2248.874498][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2248.874516][ C1] unwind_next_frame+0x19a9/0x2390 [ 2248.874538][ C1] ? unwind_next_frame+0xa5/0x2390 [ 2248.874557][ C1] ? __alloc_skb+0x142/0x2d0 [ 2248.874586][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2248.874614][ C1] arch_stack_walk+0x11c/0x150 [ 2248.874636][ C1] ? synproxy_send_client_synack+0x16c/0xe20 [ 2248.874669][ C1] stack_trace_save+0x9c/0xe0 [ 2248.874700][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 2248.874726][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2248.874758][ C1] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 2248.874788][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2248.874818][ C1] kasan_save_track+0x3e/0x80 [ 2248.874834][ C1] ? kasan_save_track+0x3e/0x80 [ 2248.874850][ C1] ? __kasan_slab_alloc+0x6c/0x80 [ 2248.874866][ C1] ? kmem_cache_alloc_node_noprof+0x23b/0x6e0 [ 2248.874897][ C1] ? kmalloc_reserve+0xbd/0x290 [ 2248.874923][ C1] ? __alloc_skb+0x142/0x2d0 [ 2248.874974][ C1] ? __slab_alloc+0xc6/0x1f0 [ 2248.874998][ C1] __kasan_slab_alloc+0x6c/0x80 [ 2248.875017][ C1] kmem_cache_alloc_node_noprof+0x23b/0x6e0 [ 2248.875050][ C1] ? kmalloc_reserve+0xbd/0x290 [ 2248.875076][ C1] ? __alloc_skb+0x112/0x2d0 [ 2248.875101][ C1] ? rcu_is_watching+0x15/0xb0 [ 2248.875126][ C1] kmalloc_reserve+0xbd/0x290 [ 2248.875156][ C1] __alloc_skb+0x142/0x2d0 [ 2248.875185][ C1] synproxy_send_client_synack+0x16c/0xe20 [ 2248.875221][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 2248.875251][ C1] ? nft_jhash_init+0x140/0x660 [ 2248.875267][ C1] ? synproxy_pernet+0x45/0x270 [ 2248.875292][ C1] nft_synproxy_eval_v4+0x36e/0x560 [ 2248.875317][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 2248.875340][ C1] ? nf_ip_checksum+0x13c/0x510 [ 2248.875363][ C1] nft_synproxy_do_eval+0x345/0x570 [ 2248.875388][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 2248.875408][ C1] ? nft_trace_init+0x283/0x4a0 [ 2248.875449][ C1] nft_do_chain+0x40c/0x1920 [ 2248.875467][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 2248.875503][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 2248.875525][ C1] ? __nft_trace_packet+0xaa/0x110 [ 2248.875553][ C1] ? queue_work_on+0x1ed/0x270 [ 2248.875569][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 2248.875590][ C1] nft_do_chain_inet+0x25d/0x340 [ 2248.875609][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2248.875628][ C1] ? __lock_acquire+0xab9/0xd20 [ 2248.875650][ C1] ? NF_HOOK+0x9a/0x3a0 [ 2248.875674][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 2248.875699][ C1] nf_hook_slow+0xc5/0x220 [ 2248.875728][ C1] NF_HOOK+0x206/0x3a0 [ 2248.875751][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2248.875775][ C1] ? NF_HOOK+0x9a/0x3a0 [ 2248.875797][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 2248.875818][ C1] ? ip_rcv_finish_core+0xda3/0x1c00 [ 2248.875844][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 2248.875869][ C1] ? skb_dst+0x4f/0xd0 [ 2248.875892][ C1] ? ip_local_deliver+0x12a/0x1b0 [ 2248.875917][ C1] NF_HOOK+0x30c/0x3a0 [ 2248.875940][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2248.875963][ C1] ? NF_HOOK+0x9a/0x3a0 [ 2248.875985][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 2248.876009][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 2248.876038][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 2248.876059][ C1] __netif_receive_skb+0x143/0x380 [ 2248.876085][ C1] ? process_backlog+0x27b/0x900 [ 2248.876107][ C1] process_backlog+0x31e/0x900 [ 2248.876136][ C1] __napi_poll+0xb6/0x540 [ 2248.876160][ C1] net_rx_action+0x5f7/0xda0 [ 2248.876191][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 2248.876216][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 2248.876247][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 2248.876268][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 2248.876319][ C1] handle_softirqs+0x22f/0x710 [ 2248.876353][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 2248.876388][ C1] __local_bh_enable_ip+0x1a0/0x2e0 [ 2248.876419][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 2248.876466][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 2248.876486][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 2248.876506][ C1] rcu_cpu_kthread+0xc3d/0x1b50 [ 2248.876547][ C1] ? rcu_cpu_kthread+0x23e/0x1b50 [ 2248.876575][ C1] ? __pfx_rcu_cpu_kthread+0x10/0x10 [ 2248.876598][ C1] ? __lock_acquire+0xab9/0xd20 [ 2248.876617][ C1] ? __pfx___schedule+0x10/0x10 [ 2248.876653][ C1] ? schedule+0x91/0x360 [ 2248.876689][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 2248.876706][ C1] smpboot_thread_fn+0x542/0xa60 [ 2248.876724][ C1] ? smpboot_thread_fn+0x4d/0xa60 [ 2248.876746][ C1] kthread+0x711/0x8a0 [ 2248.876769][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 2248.876786][ C1] ? __pfx_kthread+0x10/0x10 [ 2248.876805][ C1] ? rt_spin_unlock+0x150/0x200 [ 2248.876831][ C1] ? rt_spin_unlock+0x161/0x200 [ 2248.876853][ C1] ? __pfx_kthread+0x10/0x10 [ 2248.876875][ C1] ret_from_fork+0x4bc/0x870 [ 2248.876904][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 2248.876936][ C1] ? __switch_to_asm+0x39/0x70 [ 2248.876960][ C1] ? __switch_to_asm+0x33/0x70 [ 2248.876984][ C1] ? __pfx_kthread+0x10/0x10 [ 2248.877006][ C1] ret_from_fork_asm+0x1a/0x30 [ 2248.877041][ C1] [ 2248.877200][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 2248.877217][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 2248.877241][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2248.877255][ T39] Call Trace: [ 2248.877265][ T39] [ 2248.877274][ T39] dump_stack_lvl+0x99/0x250 [ 2248.877302][ T39] ? __asan_memcpy+0x40/0x70 [ 2248.877335][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2248.877363][ T39] ? __pfx__printk+0x10/0x10 [ 2248.877404][ T39] vpanic+0x237/0x6d0 [ 2248.877426][ T39] ? __pfx_vpanic+0x10/0x10 [ 2248.877466][ T39] panic+0xb9/0xc0 [ 2248.877487][ T39] ? __pfx_panic+0x10/0x10 [ 2248.877512][ T39] ? irq_work_queue+0xc3/0x140 [ 2248.877541][ T39] ? nmi_trigger_cpumask_backtrace+0x234/0x300 [ 2248.877572][ T39] watchdog+0xf9f/0xfa0 [ 2248.877606][ T39] ? watchdog+0x1e2/0xfa0 [ 2248.877635][ T39] kthread+0x711/0x8a0 [ 2248.877663][ T39] ? __pfx_watchdog+0x10/0x10 [ 2248.877685][ T39] ? __pfx_kthread+0x10/0x10 [ 2248.877708][ T39] ? rt_spin_unlock+0x150/0x200 [ 2248.877740][ T39] ? rt_spin_unlock+0x161/0x200 [ 2248.877765][ T39] ? __pfx_kthread+0x10/0x10 [ 2248.877792][ T39] ret_from_fork+0x4bc/0x870 [ 2248.877829][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 2248.877870][ T39] ? __switch_to_asm+0x39/0x70 [ 2248.877899][ T39] ? __switch_to_asm+0x33/0x70 [ 2248.877928][ T39] ? __pfx_kthread+0x10/0x10 [ 2248.877956][ T39] ret_from_fork_asm+0x1a/0x30 [ 2248.878004][ T39] [ 2248.878469][ T39] Kernel Offset: disabled