last executing test programs: 26m25.60271884s ago: executing program 1 (id=21): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x40, 0xb, 0xb3, {0xb3, 0x7, "14344da0462b5bdbc270f732378bfe1e44e65e7c445e16b7ba330ee954fb9f9a6871b68ca8e2a2fb85f1bf935032d36757b6659cecc9fdc59ec793d6fbf06292c9391c9b9348f45e428f111bfea13f09dd93986ad9138a614de9c5d3abef78f11df4a8b8bc49f7bd66f6df438d1754209ce5974085b600ba9de697fbd9daa3fd22fb07fb40595edc1455d9fa5e952134e9a013c33a517cc043264083a114166362d9fa22917180de3eac313db3fca6a3b3"}}, &(0x7f0000000000)={0x0, 0x3, 0x74, @string={0x74, 0x3, "93c10b319e243ca1ad89025977c3c36e195279eff0b77ca39fc563b68668a6acddc01546b0abe27c06987a9bd2e6527d609474681fa70a0d12d1c57464cd6c80f7af423fa76aac613c02062abb2c5dc68f3b2ca9b11366b882ecf37d9b79ce5fef9274fa8e1e60b58e2725b3f2f75bc872c9"}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x0, 0x16, 0x58, "ded474b8f316b4b8f02162ad63e9b70c349a13bb2679534758affb9f80fb12551b82fa81de038dc2bb789b9eb32cbb65891f35bb216237b5cd9d710962cb1474c52567776a525dc58feaa523d4464e526e9d5216704d558e"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4e}, &(0x7f0000000300)={0xc0, 0x5, 0x2, "c968"}, &(0x7f0000000340)={0x40, 0x5, 0x2, "cedd"}}) 26m23.585874607s ago: executing program 1 (id=29): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x43) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e21, 0x0, @loopback, 0x7}, 0x1c) syz_usb_control_io$lan78xx(0xffffffffffffffff, &(0x7f0000000180)={0x14, 0x0, &(0x7f00000003c0)={0x0, 0x3, 0x24, @string={0x24, 0x3, "3fac50d5242362582efe2ac2f5878b4fff4a3f8ef63df284477ef80b6d1cc41b878a"}}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000240)={0x1, [0x3, 0x100, 0x8, 0x1, 0xb4, 0x8, 0x890, 0xd14b, 0x9, 0xfffa, 0xc, 0x7ff, 0x5, 0x0, 0x88, 0x7ff, 0x6, 0xfff, 0xd30, 0x0, 0x5, 0x9, 0xf9, 0xfff8, 0x200, 0xc3bf, 0x1, 0x4, 0xc0, 0x7ff, 0x1, 0x9, 0x9e8a, 0x9, 0x18, 0x40, 0xaf2, 0x6, 0x0, 0x5, 0xfffc, 0x5, 0x10, 0x4, 0x7, 0x7, 0x6, 0x6], 0x8}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f0000000040)=0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r3, 0x84009422, &(0x7f00000020c0)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0}, {0x0, @usage, 0x0}}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000010c0)={{}, r6, 0x2, @unused=[0xf, 0xffffffffffffffff, 0x8, 0xbe4], @devid=r8}) ioctl$BTRFS_IOC_SCRUB(r4, 0xc400941b, &(0x7f0000000400)={r7, 0x29f, 0x7, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000000000000006700000008000300", @ANYRES32=r9, @ANYBLOB="0800c300741300000800c400"], 0x30}}, 0x0) 26m22.008034829s ago: executing program 1 (id=42): r0 = socket$kcm(0x10, 0x400000002, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x10000, 0x0, &(0x7f0000006680)) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd700100000000030000005800018044000400200001000a00000000000000fe800000000000000000000000000010f8000000200002000a00000000000005ff64c100000000000000000000000001000000000d0001007564703a73"], 0x6c}}, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000a80)=ANY=[@ANYBLOB="a0e1874c", @ANYRES16=0x0, @ANYBLOB="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"], 0x244}, 0x1, 0x0, 0x0, 0x1}, 0x890) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) msgsnd(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="efaa470960eb01000000"], 0x8, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021bc0000000c0a01010000000000000000070000000900020073797a31000000000900010073797a3000000000900003808c000080080003400000000280000b807c000180090001006c617374000000006c00028008000140000000050800"], 0x140}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0xf000000) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000280)={0x100000011, @multicast2, 0x4e20, 0x0, 'wlc\x00', 0x0, 0x8, 0x2a}, 0x2c) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0bf600004e0007"], 0xfe33) 26m19.955706408s ago: executing program 1 (id=45): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = dup(r0) write$FUSE_INIT(r2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0)='dummy0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x2e, 0xffffffb6, 0x1a}, 0x9c) 26m19.089326859s ago: executing program 1 (id=48): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000180)={0x14, &(0x7f00000000c0)={0x40, 0xb, 0xb3, {0xb3, 0x7, "14344da0462b5bdbc270f732378bfe1e44e65e7c445e16b7ba330ee954fb9f9a6871b68ca8e2a2fb85f1bf935032d36757b6659cecc9fdc59ec793d6fbf06292c9391c9b9348f45e428f111bfea13f09dd93986ad9138a614de9c5d3abef78f11df4a8b8bc49f7bd66f6df438d1754209ce5974085b600ba9de697fbd9daa3fd22fb07fb40595edc1455d9fa5e952134e9a013c33a517cc043264083a114166362d9fa22917180de3eac313db3fca6a3b3"}}, &(0x7f0000000000)={0x0, 0x3, 0x74, @string={0x74, 0x3, "93c10b319e243ca1ad89025977c3c36e195279eff0b77ca39fc563b68668a6acddc01546b0abe27c06987a9bd2e6527d609474681fa70a0d12d1c57464cd6c80f7af423fa76aac613c02062abb2c5dc68f3b2ca9b11366b882ecf37d9b79ce5fef9274fa8e1e60b58e2725b3f2f75bc872c9"}}}, &(0x7f0000000380)={0x2c, &(0x7f0000000200)={0x0, 0x16, 0x58, "ded474b8f316b4b8f02162ad63e9b70c349a13bb2679534758affb9f80fb12551b82fa81de038dc2bb789b9eb32cbb65891f35bb216237b5cd9d710962cb1474c52567776a525dc58feaa523d4464e526e9d5216704d558e"}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4e}, &(0x7f0000000300)={0xc0, 0x5, 0x2, "c968"}, &(0x7f0000000340)={0x40, 0x5, 0x2, "cedd"}}) 26m15.733784185s ago: executing program 1 (id=57): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x169a82, 0x0) sendfile(r2, r2, 0x0, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, 0x0, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) fcntl$setsig(r3, 0xa, 0x21) munlockall() openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000240)={0x8000001, 0x0, 0x0, 0x0, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) 26m0.034989951s ago: executing program 32 (id=57): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/power/pm_print_times', 0x169a82, 0x0) sendfile(r2, r2, 0x0, 0x7) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, 0x0, 0x0) mlock(&(0x7f0000ffa000/0x3000)=nil, 0x3000) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x42782, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000180)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) write$dsp(r4, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) fcntl$setsig(r3, 0xa, 0x21) munlockall() openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, &(0x7f0000000240)={0x8000001, 0x0, 0x0, 0x0, 0x3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) 21m8.508276441s ago: executing program 5 (id=956): prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x42) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x4, 0x0, 0x9, 0x1, 0x100, &(0x7f0000000040)="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"}) 21m7.562598103s ago: executing program 5 (id=967): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x10815, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd}}, 0x50) link(&(0x7f0000000280)='./file0/../file0/file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00') 21m6.417462819s ago: executing program 5 (id=975): setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x82) fchdir(r1) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0xffffffff, 0xfffffffd}) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 21m6.167296684s ago: executing program 5 (id=980): r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={0x38, r2, 0x1, 0x170bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}}, 0x40094) 21m6.092182171s ago: executing program 5 (id=981): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x101040) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x0, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3, 0x0, 0x2}, 0x3}) 21m5.912602895s ago: executing program 5 (id=984): syz_io_uring_complete(0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0x3}, 0x6) r1 = open(0x0, 0x80140, 0x0) fcntl$setlease(r1, 0x400, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0x9}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r4, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) write(r0, &(0x7f0000000000), 0x0) 20m50.080871203s ago: executing program 33 (id=984): syz_io_uring_complete(0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0x3}, 0x6) r1 = open(0x0, 0x80140, 0x0) fcntl$setlease(r1, 0x400, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa12, 0x9}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x200000a, 0x13, r4, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r5 = gettid() process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) write(r0, &(0x7f0000000000), 0x0) 19m7.76118346s ago: executing program 3 (id=1366): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0xf1) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) epoll_create(0x4) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r3 = fcntl$dupfd(r2, 0x0, r2) write$sndseq(r3, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x92) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x1, 0xc9, 0xf4}}}, 0x7) 19m4.162892577s ago: executing program 3 (id=1372): syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0xc) getresuid(&(0x7f0000000040)=0x0, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002180)={0xa0, 0x0, 0x0, {{0x6, 0x1, 0x7264, 0x3, 0x600, 0x7fff, {0x3, 0x5, 0x9, 0xffffffff80000000, 0x1, 0x5, 0x1a6, 0x81, 0xf, 0xc000, 0x8, r0, 0x0, 0x10001, 0x10001}}, {0x0, 0x4}}}, 0xa0) bind$inet(0xffffffffffffffff, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001b700)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x1) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0xc441}, {0xffffffffffffffff, 0xd}], 0x2, 0x0, 0x0, 0x0) 19m2.72805223s ago: executing program 3 (id=1378): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe2$watch_queue(0x0, 0x80) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x80000000000000a, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r4 = dup(r3) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f00000008c0)={0x80, 0x6, 0xf00, 0x0, 0x0, 0x5, 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) sendfile(r5, r5, 0x0, 0x40008) 18m59.529585344s ago: executing program 3 (id=1383): r0 = syz_open_dev$vbi(0x0, 0x3, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000380)={0x0, @bt={0x2d0, 0x190, 0x1, 0x0, 0xdd9f83, 0x1, 0x9, 0x1, 0x2, 0x5, 0x722, 0x13, 0x7, 0x7f, 0x3f, 0xb763599953cb091d, {0x0, 0x6fd8e84b}, 0x3, 0xed}}) ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f0000000240)={0x400, 0xa, 0x4, 0x5829550d1be7b2d3, 0x8, {0x0, 0xea60}, {0x3, 0xc, 0x9, 0x1, 0xe9, 0x5, "4972bf02"}, 0x3b, 0x4, {}, 0x1}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) bind$can_j1939(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYRES32, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r6}, 0x20) recvmmsg(r6, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) 18m58.172557382s ago: executing program 3 (id=1386): openat$vcs(0xffffffffffffff9c, 0x0, 0x500, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1", 0x12) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x811) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) setxattr$security_evm(&(0x7f0000000240)='./bus\x00', 0x0, 0x0, 0x0, 0x1) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010100020000102505a1a440000000010109024a00010100000009040000160202ff00052406000005240000000d240f0100000000000000000006240700000009057ffffd74000f000905820200020000030905030240"], 0x0) 18m50.235453455s ago: executing program 3 (id=1397): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0xb02f, 0x7ff, 0xe2, 0x3, 0x88d7, 0x8d, 0x1007, 0x1, 0x1001, 0xffffffff, 0x200, 0x7, 0x10000009, 0x1, 0x5, 0x401, 0x10008, 0x3, 0x9, 0x8e, 0x10c, 0x204003, 0x7, 0xa, 0x5, 0x7, 0xb0c4, 0xe, 0xff, 0x400002, 0x4000001]}) 18m34.720872989s ago: executing program 34 (id=1397): sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r3, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) r5 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f0000000140)={'c6xdigio\x00', [0xb02f, 0x7ff, 0xe2, 0x3, 0x88d7, 0x8d, 0x1007, 0x1, 0x1001, 0xffffffff, 0x200, 0x7, 0x10000009, 0x1, 0x5, 0x401, 0x10008, 0x3, 0x9, 0x8e, 0x10c, 0x204003, 0x7, 0xa, 0x5, 0x7, 0xb0c4, 0xe, 0xff, 0x400002, 0x4000001]}) 16m59.903281723s ago: executing program 6 (id=1649): r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0}, 0x18) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x4040004) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) writev(r2, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 16m59.557124707s ago: executing program 6 (id=1650): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000540000009549ee72d3e2bdd04c0f7d6007df3fe05e3dabc5bb2165266149"], 0x14}}, 0x0) 16m59.342470433s ago: executing program 6 (id=1651): openat$vcs(0xffffffffffffff9c, 0x0, 0x500, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x18) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r1, 0x400, 0x1) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1", 0x12) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x23}, 0x3}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000002940), 0x40000000000017d, 0x811) openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) setxattr$security_evm(&(0x7f0000000240)='./bus\x00', 0x0, 0x0, 0x0, 0x1) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010100020000102505a1a440000000010109024a00010100000009040000160202ff00052406000005240000000d240f0100000000000000000006240700000009057ffffd74000f000905820200020000030905030240"], 0x0) socket$nl_generic(0x10, 0x3, 0x10) 16m48.71907557s ago: executing program 6 (id=1662): openat$uhid(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) 16m47.237005029s ago: executing program 6 (id=1667): bind$alg(0xffffffffffffffff, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589ccd75d0275367048f46e1d1833f0b225d71e6ae", 0x20) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000) recvmsg$can_raw(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b40)=""/114, 0x72}], 0x1}, 0x40010022) recvfrom$inet_nvme(r0, &(0x7f0000000000)=""/29, 0x1d, 0x2000, 0x0, 0x0) 16m47.183071528s ago: executing program 6 (id=1668): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@private, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@loopback, 0x4e20, 0x3, 0x4e20, 0x900, 0x2, 0x30, 0x80, 0x6, r5, r6}, {0xe, 0x8, 0x8, 0x1000, 0x1ff, 0x8ac, 0xa, 0x8}, {0x4, 0x8, 0xffffffffffffffff, 0x3}, 0x6, 0x6e6bb0, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4d5, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x4, 0x0, 0x81, 0x9, 0x101, 0x3}}, 0xe8) 16m32.141412356s ago: executing program 35 (id=1668): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, 0x0, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x0) sendmsg$nl_route_sched(r4, 0x0, 0x4008000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@private, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@loopback, 0x4e20, 0x3, 0x4e20, 0x900, 0x2, 0x30, 0x80, 0x6, r5, r6}, {0xe, 0x8, 0x8, 0x1000, 0x1ff, 0x8ac, 0xa, 0x8}, {0x4, 0x8, 0xffffffffffffffff, 0x3}, 0x6, 0x6e6bb0, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4d5, 0x6c}, 0x2, @in6=@mcast1, 0x3507, 0x4, 0x0, 0x81, 0x9, 0x101, 0x3}}, 0xe8) 4m27.069066179s ago: executing program 4 (id=2952): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4000001) 4m26.862499764s ago: executing program 4 (id=2953): syz_usb_connect(0x1, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0) 4m23.47072139s ago: executing program 4 (id=2957): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x4000001) r1 = dup(r0) read$FUSE(r1, &(0x7f00000075c0)={0x2020}, 0x2020) shutdown(r1, 0x1) 4m23.045208038s ago: executing program 4 (id=2959): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) 4m22.909045467s ago: executing program 4 (id=2960): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xdfffffff, 0x5648b660, 0x5, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x1, 0x88}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb669340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m21.929530456s ago: executing program 4 (id=2966): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r1, 0xc0845657, &(0x7f0000000500)={0x0, @bt={0x8, 0x9, 0x1, 0x1, 0xd59f83, 0x19fa, 0x3b, 0x19ef, 0x3, 0x4, 0x2800, 0x9, 0x1, 0xba2, 0x0, 0x2a, {0xa, 0x20000a}, 0xce, 0x9}}) r2 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000540)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8da1a297e00a2c5fed0759cb068d0bf46d323456536016466", 0x48, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000180)={0x9e0000, 0x2, 0x2, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x9a0920, 0xec4, '\x00', @p_u8=&(0x7f0000000100)=0x6a}}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r3 = accept4(r0, 0x0, 0x0, 0x800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r6, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000000c0)}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x54, r8, 0x1, 0x0, 0x3, {0x22}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0}, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x301000, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r3) 4m14.833466303s ago: executing program 8 (id=2987): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0xdfffffff, 0x5648b660, 0x5, 0xffff, 0x8, 0x0, 0x0, 0x0, 0x1, 0x88}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fb669340000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, 0x0, 0x24c01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 4m12.525650228s ago: executing program 8 (id=2991): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000080)=0x40, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000003640)}}], 0x1, 0x4000001) 4m11.893126828s ago: executing program 8 (id=2994): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1494c0, 0x189) socket$key(0xf, 0x3, 0x2) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000", @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 4m11.531200718s ago: executing program 8 (id=2996): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socket$nl_crypto(0x10, 0x3, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) syz_io_uring_setup(0x6af, &(0x7f00000001c0)={0x0, 0x400bcf6, 0x40, 0x1, 0x1fd}, 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x40000012}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x300, 0x1, &(0x7f0000000340)=[r1], &(0x7f0000000040)=[0x1], &(0x7f0000000200), &(0x7f0000000240), 0x0, 0x7f}) 4m11.122130917s ago: executing program 8 (id=2998): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) sendmmsg$alg(0xffffffffffffffff, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(0xffffffffffffffff, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000200)=""/23, 0x17}], 0x1}, 0x10000}], 0x1, 0x102, 0x0) 4m10.537062152s ago: executing program 8 (id=3000): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000014c0)={'batadv0\x00', &(0x7f0000001480)=@ethtool_cmd={0x1e, 0x200000, 0x41, 0xffff, 0xb8, 0x8, 0x3, 0xe0, 0x0, 0x7, 0x0, 0x3, 0x4, 0xc, 0x1, 0x1, [0x1, 0x3]}}) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 3m55.885244545s ago: executing program 2 (id=3026): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x19a) mkdir(&(0x7f0000000280)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x70c80, 0x181) r1 = open_tree(r0, &(0x7f0000000280)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x3000000000000) 3m55.618388407s ago: executing program 2 (id=3028): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000034700)=""/102400, 0x19000) set_mempolicy(0x6005, &(0x7f00000002c0)=0xfffffffffffffffa, 0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020}, 0x2020) 3m54.583131545s ago: executing program 36 (id=3000): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) ioctl$TIOCCBRK(0xffffffffffffffff, 0x5428) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000014c0)={'batadv0\x00', &(0x7f0000001480)=@ethtool_cmd={0x1e, 0x200000, 0x41, 0xffff, 0xb8, 0x8, 0x3, 0xe0, 0x0, 0x7, 0x0, 0x3, 0x4, 0xc, 0x1, 0x1, [0x1, 0x3]}}) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b040000000000000000020000002400048020000180070001006374000014000280080002400000000f08000140000000020900010073797a30000000000900020073797a320000000014000000110001"], 0x78}}, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) 3m51.255529523s ago: executing program 0 (id=3032): openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1494c0, 0x189) socket$key(0xf, 0x3, 0x2) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) syz_open_dev$tty1(0xc, 0x4, 0x2) socket$nl_audit(0x10, 0x3, 0x9) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r2, &(0x7f0000000000), 0xd) 3m49.614464595s ago: executing program 0 (id=3033): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "2a8435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x5, 0xc2}}}}}}}, 0x0) dup2(0xffffffffffffffff, r1) syz_emit_ethernet(0x4a, &(0x7f0000000300)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ca9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 3m49.019836019s ago: executing program 0 (id=3034): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, 0x0) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 3m48.77299s ago: executing program 2 (id=3035): syz_emit_vhci(0x0, 0xc) getresuid(&(0x7f0000000040)=0x0, 0x0, 0x0) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000002180)={0xa0, 0x0, 0x0, {{0x6, 0x1, 0x7264, 0x3, 0x600, 0x7fff, {0x3, 0x5, 0x9, 0xffffffff80000000, 0x1, 0x5, 0x1a6, 0x81, 0xf, 0xc000, 0x8, r0, 0x0, 0x10001, 0x10001}}, {0x0, 0x4}}}, 0xa0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001b700)=""/102392, 0x18ff8) shutdown(r1, 0x1) ppoll(&(0x7f0000000080)=[{0xffffffffffffffff, 0xc441}, {0xffffffffffffffff, 0xd}], 0x2, 0x0, 0x0, 0x0) 3m48.450337823s ago: executing program 0 (id=3036): mkdir(0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cgroup.kill\x00', 0x275a, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x8b}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) semop(0x0, &(0x7f0000000240), 0x0) read$msr(r0, &(0x7f0000004340)=""/102376, 0x18fe8) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000100)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x20004055) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000002c40)=ANY=[], 0x40c}, 0x1, 0x0, 0x0, 0x90}, 0x8000) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "e47f19c56c6c3701", "294a17ca3e142731f1051973983e118b2c4ccb5fa1aa26f0607f3c4bb306b791", "3bad8449", "c6184c343d3fb791"}, 0x38) syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r2) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m44.452475296s ago: executing program 2 (id=3037): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000004a40)={0x4c, 0x0, &(0x7f0000000500)=[@reply_sg={0x40486312, {0x80001, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m43.091632865s ago: executing program 0 (id=3038): syz_emit_vhci(0x0, 0xed) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1f) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$xdp(0x2c, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x803, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) write$binfmt_script(r3, &(0x7f0000000cc0), 0xfd45) 3m42.179194993s ago: executing program 2 (id=3039): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000008000000000000005000100070000000900020073797a30000000001400078008001240000000000500150004000000050005000000000005000400000000000d000300686173683a6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000740)=ANY=[@ANYBLOB="44000000090605000000000000000000010000050900020073797a30000006000500010007000000080009400000000114000880100007800a001100b4"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000030605000000000000000000000000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20000010) 3m39.627052769s ago: executing program 0 (id=3040): getpid() setresgid(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x476, 0x800, 0x8, 0x50800, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1}, 0x50) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') write$P9_RVERSION(r2, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0x1000d0ffc2, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000012c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x80) 3m37.695517181s ago: executing program 2 (id=3042): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x26e1, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r4, 0x5, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0], &(0x7f0000000280), 0x0, 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r4, 0x4, 0x0, @val=@netkit={@void, @value, @void, @void, r5}}, 0x1c) r6 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r6, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 3m22.510788125s ago: executing program 37 (id=3040): getpid() setresgid(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x476, 0x800, 0x8, 0x50800, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x3, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1}, 0x50) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='attr/sockcreate\x00') write$P9_RVERSION(r2, 0x0, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) kexec_load(0x1000d0ffc2, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000012c0)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x404c080) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) syz_open_dev$vbi(&(0x7f0000000140), 0x2, 0x2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, 0x0, 0x80) 3m20.430188216s ago: executing program 38 (id=3042): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, 0x0}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x26e1, 0x0) close(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0xc0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@map=r4, 0x5, 0x0, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000180)=[0x0], &(0x7f0000000280), 0x0, 0x0}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={0xffffffffffffffff, r4, 0x4, 0x0, @val=@netkit={@void, @value, @void, @void, r5}}, 0x1c) r6 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) shmat(r6, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r6, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) 33.716422915s ago: executing program 7 (id=3101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) ioctl$KDGKBENT(0xffffffffffffffff, 0x4b46, &(0x7f0000000200)={0x1, 0x80, 0x2}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x3, &(0x7f0000000240)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000640)=[{0x6, 0x83, 0xfc, 0xfffffffe}]}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') stat(&(0x7f0000000280)='./file0\x00', 0x0) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38000000031401002dbd7000000000000900020073797a30000000000800410073697700140033006c6f"], 0xffaf}, 0x1, 0x0, 0x0, 0x40814}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x31, 0x7d, 0x55}}]}}]}}, 0x0) 30.365702652s ago: executing program 7 (id=3102): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x8, 0x10008) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006380)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20, 0x0, 0x400000}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x20c01, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f00000001c0)={0x1, 0x0, 0x1000, 0x1, &(0x7f0000000000)="82", 0xfffffffffffffd88, 0x0, 0x0}) 28.71021494s ago: executing program 7 (id=3103): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x2) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x4d, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f00000001c0)={@multicast1, @private=0xa010102, r2}, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002700)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl(r5, 0x8b20, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setresuid(0x0, 0xee01, 0x0) poll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x80cd}], 0x1, 0x7) 21.043346125s ago: executing program 7 (id=3104): socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @remote, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0801000000000000290000", @ANYRES64=r0], 0x108}}], 0x2, 0xc040) 20.416111911s ago: executing program 7 (id=3105): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000004c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') openat$cgroup_ro(r1, &(0x7f0000000240)='blkio.bfq.time\x00', 0x275a, 0x0) mq_notify(r1, &(0x7f0000000000)={0x0, 0x3a, 0x4, @thr={&(0x7f0000000080)="da4ad2c58ea43a22c48d3c94bcb02894c184bed7a2c3822de9583e173575758246613ecacbd20066808b3933777c9b4f601859d3c42a757739e16f5deebe5be1912f903e73566b3da79fb56f48035e2b7a8d488169fc59373f0a19d7c8feca3b555dcfd4ddb09487146faababbfef9568db5176798d080a1dc97a633b79e9b", &(0x7f0000000140)="7213ca5de1a260e60c8274d5d6f59f5749e69c4110d4bbf49ad12370be418cc326adc5f4e711b209c1f9efda0132c4dad1c214e6b50757651044f3351809a0945aceb331c6302be0421056574bf64e13b72a0bfc5bac0036be83e30a55dda49ef64ce0539e9d882679ac0c2a4e47782ae311b2182122fa81cd8025b3a67e928a9f73e9b3ad1ed3ef41e7f7fac7"}}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$alg(0x26, 0x5, 0x0) ioctl$SG_SET_FORCE_PACK_ID(0xffffffffffffffff, 0x227b, &(0x7f00000001c0)=0x2001) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f00000001c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae2", 0x18}], 0x1}, 0x0) 16.940345498s ago: executing program 7 (id=3106): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000090a010400000000000000000a0000090900010073797a3100"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff25000080", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 39 (id=3106): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a30000000090a010400000000000000000a0000090900010073797a3100"], 0x58}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff25000080", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) getpeername$qrtr(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000500)=0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) kernel console output (not intermixed with test programs): ridge0: port 1(bridge_slave_0) entered disabled state [ 1138.090349][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1138.116263][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1138.118248][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1138.168023][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1138.176497][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1140.413962][ T5119] Bluetooth: hci0: command tx timeout [ 1140.414039][ T5119] Bluetooth: hci1: command tx timeout [ 1140.655209][ T978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1140.839696][ T978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1140.956087][ T5909] usb 5-1: USB disconnect, device number 71 [ 1141.147802][ T978] bond0 (unregistering): Released all slaves [ 1141.950306][T14710] lo speed is unknown, defaulting to 1000 [ 1142.443623][T12153] Bluetooth: hci1: command tx timeout [ 1142.676097][T12153] Bluetooth: hci0: command tx timeout [ 1143.378685][ T978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1143.401284][ T978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1144.138332][T14773] overlayfs: missing 'lowerdir' [ 1144.369409][ T978] team0 (unregistering): Port device team_slave_1 removed [ 1144.462860][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2480'. [ 1144.518680][T12153] Bluetooth: hci1: command tx timeout [ 1144.678685][T12153] Bluetooth: hci0: command tx timeout [ 1144.714820][ T978] team0 (unregistering): Port device team_slave_0 removed [ 1146.698067][T12153] Bluetooth: hci1: command tx timeout [ 1148.229086][ T5872] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 1148.953955][ T5872] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1148.953983][ T5872] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1148.954003][ T5872] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 1148.954023][ T5872] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1148.954043][ T5872] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1148.955537][ T5872] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1148.955559][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1148.955574][ T5872] usb 3-1: SerialNumber: syz [ 1149.011214][T14798] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1149.011571][T14798] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1149.205944][T14721] lo speed is unknown, defaulting to 1000 [ 1150.869577][T14710] chnl_net:caif_netlink_parms(): no params data found [ 1151.215717][ T5887] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1152.280141][ T5909] usb 3-1: USB disconnect, device number 63 [ 1152.379443][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.379505][ T5887] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1152.379531][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.385110][ T5887] usb 5-1: config 0 descriptor?? [ 1152.391325][ T5887] pwc: Askey VC010 type 2 USB webcam detected. [ 1152.887075][ T5887] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1152.898706][ T5887] pwc: recv_control_msg error -32 req 02 val 2700 [ 1152.908975][ T5872] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1153.008316][T14850] fuse: Bad value for 'group_id' [ 1153.008337][T14850] fuse: Bad value for 'group_id' [ 1153.056966][ T5872] usb 1-1: Using ep0 maxpacket: 8 [ 1153.059502][ T5872] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1153.059529][ T5872] usb 1-1: config 179 has no interface number 0 [ 1153.059579][ T5872] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1153.059608][ T5872] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1153.059639][ T5872] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1153.059667][ T5872] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1153.059695][ T5872] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1153.059740][ T5872] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1153.059764][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1153.078874][T14843] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1153.105225][ T5887] pwc: recv_control_msg error -71 req 04 val 1000 [ 1153.126938][ T5887] pwc: recv_control_msg error -71 req 04 val 1300 [ 1153.156952][ T5887] pwc: recv_control_msg error -71 req 04 val 1400 [ 1153.186936][ T5887] pwc: recv_control_msg error -71 req 02 val 2000 [ 1153.195363][ T5887] pwc: recv_control_msg error -71 req 02 val 2100 [ 1153.195875][ T5887] pwc: recv_control_msg error -71 req 04 val 1500 [ 1153.196365][ T5887] pwc: recv_control_msg error -71 req 02 val 2500 [ 1153.216292][ T5887] pwc: recv_control_msg error -71 req 02 val 2400 [ 1153.223420][ T5887] pwc: recv_control_msg error -71 req 02 val 2600 [ 1153.223927][ T5887] pwc: recv_control_msg error -71 req 02 val 2900 [ 1153.224396][ T5887] pwc: recv_control_msg error -71 req 02 val 2800 [ 1153.225084][ T5887] pwc: recv_control_msg error -71 req 04 val 1100 [ 1153.253579][ T5887] pwc: recv_control_msg error -71 req 04 val 1200 [ 1153.266341][ T5887] pwc: Registered as video103. [ 1153.294075][ T5887] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input52 [ 1153.359931][ T5887] usb 5-1: USB disconnect, device number 72 [ 1153.933006][T14843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1153.935565][T14843] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1153.946661][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1153.946729][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1153.946955][T10762] usb 1-1: USB disconnect, device number 61 [ 1154.263129][T14710] bridge0: port 1(bridge_slave_0) entered blocking state [ 1154.263345][T14710] bridge0: port 1(bridge_slave_0) entered disabled state [ 1154.263602][T14710] bridge_slave_0: entered allmulticast mode [ 1154.287602][T14710] bridge_slave_0: entered promiscuous mode [ 1154.694718][T14721] chnl_net:caif_netlink_parms(): no params data found [ 1155.101036][T14710] bridge0: port 2(bridge_slave_1) entered blocking state [ 1155.101179][T14710] bridge0: port 2(bridge_slave_1) entered disabled state [ 1155.101469][T14710] bridge_slave_1: entered allmulticast mode [ 1155.133683][T14710] bridge_slave_1: entered promiscuous mode [ 1156.923153][T14881] fuse: Bad value for 'group_id' [ 1156.923175][T14881] fuse: Bad value for 'group_id' [ 1156.960024][ T978] bridge_slave_1: left allmulticast mode [ 1156.960068][ T978] bridge_slave_1: left promiscuous mode [ 1156.960344][ T978] bridge0: port 2(bridge_slave_1) entered disabled state [ 1157.350217][ T978] bridge_slave_0: left allmulticast mode [ 1157.350250][ T978] bridge_slave_0: left promiscuous mode [ 1157.350510][ T978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1159.867170][ T978] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1159.957007][ T978] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1159.998843][ T978] bond0 (unregistering): Released all slaves [ 1160.060878][T14710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1160.171985][T14710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1161.967152][T14917] fuse: Bad value for 'group_id' [ 1161.967174][T14917] fuse: Bad value for 'group_id' [ 1162.042714][T14710] team0: Port device team_slave_0 added [ 1165.056781][T14710] team0: Port device team_slave_1 added [ 1165.249924][T14936] No control pipe specified [ 1167.504193][ T978] hsr_slave_0: left promiscuous mode [ 1167.716135][ T978] hsr_slave_1: left promiscuous mode [ 1167.717251][ T978] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1168.213368][ T978] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1172.993793][ T978] team0 (unregistering): Port device team_slave_1 removed [ 1173.183711][ T978] team0 (unregistering): Port device team_slave_0 removed [ 1175.189645][T14721] bridge0: port 1(bridge_slave_0) entered blocking state [ 1175.189873][T14721] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.190073][T14721] bridge_slave_0: entered allmulticast mode [ 1175.223107][T14721] bridge_slave_0: entered promiscuous mode [ 1175.324061][T14721] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.324200][T14721] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.324406][T14721] bridge_slave_1: entered allmulticast mode [ 1175.330637][T14721] bridge_slave_1: entered promiscuous mode [ 1176.292889][T14710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1176.292906][T14710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1176.292930][T14710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1176.532237][ T5887] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 1176.818270][T14710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1176.818289][T14710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1176.818317][T14710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1177.392728][ T5887] usb 3-1: Using ep0 maxpacket: 8 [ 1177.398914][ T5887] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1177.398941][ T5887] usb 3-1: config 179 has no interface number 0 [ 1177.399010][ T5887] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1177.399038][ T5887] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1177.399066][ T5887] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1177.399093][ T5887] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1177.399120][ T5887] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1177.399163][ T5887] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1177.399187][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.524762][T15007] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1178.348495][T15030] siw: device registration error -23 [ 1178.517677][T14721] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1178.540848][T15029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1178.541476][T15029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1178.630442][T10762] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 1178.651216][ T5872] usb 3-1: USB disconnect, device number 64 [ 1178.651269][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1178.651338][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1178.689731][T14721] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1178.821668][T10762] usb 1-1: Using ep0 maxpacket: 32 [ 1178.824781][T10762] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1178.824819][T10762] usb 1-1: config 0 has no interface number 0 [ 1178.827737][T10762] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1178.827761][T10762] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1178.827779][T10762] usb 1-1: Product: syz [ 1178.827792][T10762] usb 1-1: Manufacturer: syz [ 1178.827805][T10762] usb 1-1: SerialNumber: syz [ 1178.884930][T10762] usb 1-1: config 0 descriptor?? [ 1178.889266][T10762] smsc95xx v2.0.0 [ 1178.889281][T10762] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1178.889539][T10762] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 1179.669493][T14721] team0: Port device team_slave_0 added [ 1179.697023][T14710] hsr_slave_0: entered promiscuous mode [ 1179.698673][T14710] hsr_slave_1: entered promiscuous mode [ 1180.356329][T14721] team0: Port device team_slave_1 added [ 1181.745350][ T5887] usb 1-1: USB disconnect, device number 62 [ 1184.395716][T14721] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1184.395735][T14721] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.395765][T14721] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1184.529485][T14721] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1184.529503][T14721] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1184.529530][T14721] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1184.909016][T15078] siw: device registration error -23 [ 1185.150852][ T5859] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1185.310667][ T5859] usb 1-1: Using ep0 maxpacket: 32 [ 1185.312893][ T5859] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1185.312929][ T5859] usb 1-1: config 0 has no interface number 0 [ 1185.324118][ T5859] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1185.324153][ T5859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.324178][ T5859] usb 1-1: Product: syz [ 1185.324196][ T5859] usb 1-1: Manufacturer: syz [ 1185.324214][ T5859] usb 1-1: SerialNumber: syz [ 1185.342540][T14721] hsr_slave_0: entered promiscuous mode [ 1185.356656][T14721] hsr_slave_1: entered promiscuous mode [ 1185.375036][T14721] debugfs: 'hsr0' already exists in 'hsr' [ 1185.375072][T14721] Cannot create hsr debugfs directory [ 1185.378362][ T5859] usb 1-1: config 0 descriptor?? [ 1185.427886][ T5859] smsc95xx v2.0.0 [ 1185.427909][ T5859] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1185.428095][ T5859] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 1187.891375][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1188.277131][T10438] usb 1-1: USB disconnect, device number 63 [ 1189.963516][T15103] block device autoloading is deprecated and will be removed. [ 1189.963665][ T5813] block device autoloading is deprecated and will be removed. [ 1190.808811][T14710] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1190.917182][T14710] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1191.037720][T14710] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1191.644460][T14710] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1191.846836][ T5859] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1192.010862][ T5859] usb 3-1: Using ep0 maxpacket: 32 [ 1192.012864][ T5859] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1192.012890][ T5859] usb 3-1: config 0 has no interface number 0 [ 1192.015543][ T5859] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1192.015571][ T5859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1192.015592][ T5859] usb 3-1: Product: syz [ 1192.015607][ T5859] usb 3-1: Manufacturer: syz [ 1192.015623][ T5859] usb 3-1: SerialNumber: syz [ 1192.086189][ T5859] usb 3-1: config 0 descriptor?? [ 1192.098758][ T5859] smsc95xx v2.0.0 [ 1192.098777][ T5859] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1192.112826][ T5859] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 1192.237845][T14721] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1192.265130][T14721] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1192.325010][T14721] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1192.348115][T14721] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1192.911169][T14710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.096216][T14721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1193.175871][T14721] 8021q: adding VLAN 0 to HW filter on device team0 [ 1193.206214][ T6081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.206357][ T6081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1193.232562][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.234239][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1197.322814][ T5859] usb 3-1: USB disconnect, device number 65 [ 1200.398144][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1200.401923][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1200.403353][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1200.405545][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1200.406409][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1200.660954][ C1] vkms_vblank_simulate: vblank timer overrun [ 1200.760102][ C1] vkms_vblank_simulate: vblank timer overrun [ 1201.147505][ C1] vkms_vblank_simulate: vblank timer overrun [ 1202.151786][ C1] vkms_vblank_simulate: vblank timer overrun [ 1203.249391][ C1] vkms_vblank_simulate: vblank timer overrun [ 1203.249995][ T5804] Bluetooth: hci0: command tx timeout [ 1203.424691][T12153] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1203.451151][T12153] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1203.452810][T12153] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1203.454530][T12153] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1203.455401][T12153] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1203.866190][ C1] vkms_vblank_simulate: vblank timer overrun [ 1204.051772][ C1] vkms_vblank_simulate: vblank timer overrun [ 1204.728370][T15176] fuse: Unknown parameter 'grou00000000000000000000' [ 1204.817309][T15151] lo speed is unknown, defaulting to 1000 [ 1205.107915][ C1] vkms_vblank_simulate: vblank timer overrun [ 1205.225087][ C1] vkms_vblank_simulate: vblank timer overrun [ 1205.501073][ C1] vkms_vblank_simulate: vblank timer overrun [ 1205.514635][ T5804] Bluetooth: hci0: command tx timeout [ 1205.630796][ T5804] Bluetooth: hci5: command tx timeout [ 1206.593265][T15163] lo speed is unknown, defaulting to 1000 [ 1207.546356][ T5804] Bluetooth: hci0: command tx timeout [ 1207.714303][ T5804] Bluetooth: hci5: command tx timeout [ 1209.668148][ T5804] Bluetooth: hci0: command tx timeout [ 1210.098542][ T5804] Bluetooth: hci5: command tx timeout [ 1210.709922][T15212] fuse: Unknown parameter 'grou00000000000000000000' [ 1210.822328][T15216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2581'. [ 1212.672529][ T5804] Bluetooth: hci5: command tx timeout [ 1214.206397][T15163] chnl_net:caif_netlink_parms(): no params data found [ 1216.981844][ T12] bridge_slave_1: left allmulticast mode [ 1216.981877][ T12] bridge_slave_1: left promiscuous mode [ 1216.982169][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1217.496097][ T12] bridge_slave_0: left allmulticast mode [ 1217.496128][ T12] bridge_slave_0: left promiscuous mode [ 1217.496411][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1217.764406][ T5859] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 1217.933939][ T5859] usb 5-1: Using ep0 maxpacket: 8 [ 1217.936451][ T5859] usb 5-1: config index 0 descriptor too short (expected 8475, got 27) [ 1217.936480][ T5859] usb 5-1: config 0 has an invalid interface number: 200 but max is 0 [ 1217.936502][ T5859] usb 5-1: config 0 has no interface number 0 [ 1217.936551][ T5859] usb 5-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 1217.936575][ T5859] usb 5-1: config 0 interface 200 has no altsetting 0 [ 1217.939787][ T5859] usb 5-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.1a [ 1217.939818][ T5859] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1217.939841][ T5859] usb 5-1: Product: syz [ 1217.939858][ T5859] usb 5-1: Manufacturer: syz [ 1217.939874][ T5859] usb 5-1: SerialNumber: syz [ 1217.949129][ T5859] usb 5-1: config 0 descriptor?? [ 1218.088518][ T983] usb 3-1: new low-speed USB device number 66 using dummy_hcd [ 1218.232933][ T5859] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.200/input/input53 [ 1218.238194][ T983] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1218.238230][ T983] usb 3-1: config 179 has no interface number 0 [ 1218.238305][ T983] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1218.238338][ T983] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1218.238368][ T983] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1218.238399][ T983] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 1218.238432][ T983] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1218.238481][ T983] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1218.238509][ T983] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.253718][ T5859] usb 5-1: USB disconnect, device number 73 [ 1218.256218][T15261] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1218.261600][ T983] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1218.363242][ T983] xpad 3-1:179.65: probe with driver xpad failed with error -90 [ 1218.580877][T12405] usb 3-1: USB disconnect, device number 66 [ 1220.265317][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1220.364523][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1220.428870][ T12] bond0 (unregistering): Released all slaves [ 1221.621295][T15163] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.621436][T15163] bridge0: port 1(bridge_slave_0) entered disabled state [ 1221.621699][T15163] bridge_slave_0: entered allmulticast mode [ 1221.624903][T15163] bridge_slave_0: entered promiscuous mode [ 1221.629686][T15151] chnl_net:caif_netlink_parms(): no params data found [ 1221.665499][T15163] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.665645][T15163] bridge0: port 2(bridge_slave_1) entered disabled state [ 1221.665866][T15163] bridge_slave_1: entered allmulticast mode [ 1221.730885][T15163] bridge_slave_1: entered promiscuous mode [ 1222.523310][T15283] syz.4.2600 (15283): drop_caches: 2 [ 1222.742902][ T12] hsr_slave_0: left promiscuous mode [ 1222.795562][ T12] hsr_slave_1: left promiscuous mode [ 1222.812552][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1222.875194][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1223.252805][ C0] vkms_vblank_simulate: vblank timer overrun [ 1223.693763][ C0] vkms_vblank_simulate: vblank timer overrun [ 1223.772494][ C0] vkms_vblank_simulate: vblank timer overrun [ 1224.362792][ C0] vkms_vblank_simulate: vblank timer overrun [ 1224.625979][ C0] vkms_vblank_simulate: vblank timer overrun [ 1224.744125][ C0] vkms_vblank_simulate: vblank timer overrun [ 1224.821631][ C0] vkms_vblank_simulate: vblank timer overrun [ 1225.023149][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1225.058276][ C0] vkms_vblank_simulate: vblank timer overrun [ 1225.216155][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1225.251980][ C0] vkms_vblank_simulate: vblank timer overrun [ 1225.381431][ C0] vkms_vblank_simulate: vblank timer overrun [ 1225.455122][ C0] vkms_vblank_simulate: vblank timer overrun [ 1225.528814][ C0] vkms_vblank_simulate: vblank timer overrun [ 1225.592727][ C0] vkms_vblank_simulate: vblank timer overrun [ 1225.667934][ C0] vkms_vblank_simulate: vblank timer overrun [ 1225.857095][ C0] vkms_vblank_simulate: vblank timer overrun [ 1225.931097][ C0] vkms_vblank_simulate: vblank timer overrun [ 1226.231156][ C0] vkms_vblank_simulate: vblank timer overrun [ 1226.370041][ C0] vkms_vblank_simulate: vblank timer overrun [ 1226.631874][ C0] vkms_vblank_simulate: vblank timer overrun [ 1227.193762][ C0] vkms_vblank_simulate: vblank timer overrun [ 1228.797193][T15163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1229.067241][T15163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1230.861466][T12405] usb 3-1: new full-speed USB device number 67 using dummy_hcd [ 1231.029189][T12405] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1231.029225][T12405] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1231.029254][T12405] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 1231.029281][T12405] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1231.029308][T12405] usb 3-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1231.030836][T12405] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1231.030867][T12405] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1231.030899][T12405] usb 3-1: SerialNumber: syz [ 1231.125213][T15330] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1231.125309][T15330] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1231.348746][T15163] team0: Port device team_slave_0 added [ 1231.546421][T15163] team0: Port device team_slave_1 added [ 1231.547375][T15151] bridge0: port 1(bridge_slave_0) entered blocking state [ 1231.547728][T15151] bridge0: port 1(bridge_slave_0) entered disabled state [ 1231.547941][T15151] bridge_slave_0: entered allmulticast mode [ 1231.552536][T15151] bridge_slave_0: entered promiscuous mode [ 1231.583524][T12405] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 1231.663795][T15151] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.664039][T15151] bridge0: port 2(bridge_slave_1) entered disabled state [ 1231.664278][T15151] bridge_slave_1: entered allmulticast mode [ 1231.667802][T15151] bridge_slave_1: entered promiscuous mode [ 1231.741245][T12405] usb 5-1: Using ep0 maxpacket: 32 [ 1231.743123][T12405] usb 5-1: config 0 has an invalid interface number: 172 but max is 0 [ 1231.743143][T12405] usb 5-1: config 0 has no interface number 0 [ 1231.743180][T12405] usb 5-1: config 0 interface 172 altsetting 0 endpoint 0x8F has an invalid bInterval 102, changing to 10 [ 1231.743200][T12405] usb 5-1: config 0 interface 172 altsetting 0 endpoint 0x8F has invalid maxpacket 24624, setting to 1024 [ 1231.745342][T12405] usb 5-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 1231.745362][T12405] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1231.745378][T12405] usb 5-1: Product: syz [ 1231.745389][T12405] usb 5-1: Manufacturer: syz [ 1231.745401][T12405] usb 5-1: SerialNumber: syz [ 1231.842372][T12405] usb 5-1: config 0 descriptor?? [ 1231.856801][T12405] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 1231.937908][T15163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1231.937928][T15163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1231.937957][T15163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1232.016330][T15163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1232.016365][T15163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1232.016394][T15163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1232.037358][T15151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1232.074046][T15151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1232.335184][T15151] team0: Port device team_slave_0 added [ 1232.476707][T15151] team0: Port device team_slave_1 added [ 1232.576793][ T5909] usb 3-1: USB disconnect, device number 67 [ 1232.602531][T15163] hsr_slave_0: entered promiscuous mode [ 1232.635998][T15163] hsr_slave_1: entered promiscuous mode [ 1232.707736][T12405] input: gspca_pac7302 as /devices/platform/dummy_hcd.4/usb5/5-1/input/input54 [ 1232.945545][T10762] usb 5-1: USB disconnect, device number 74 [ 1233.421130][ T5909] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 1233.581026][ T5909] usb 3-1: Using ep0 maxpacket: 16 [ 1233.591351][ T5909] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 1233.591422][ T5909] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1233.591476][ T5909] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1233.591503][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1233.625124][ T5909] usb 3-1: config 0 descriptor?? [ 1233.663502][ T5909] pxrc 3-1:0.0: Could not find endpoint [ 1233.675217][ T5909] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1233.848022][T10762] usb 3-1: USB disconnect, device number 68 [ 1233.981072][ T5887] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 1234.037267][T15151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1234.037287][T15151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1234.037316][T15151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1234.155921][ T5887] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1234.156002][ T5887] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 1234.156149][ T5887] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1234.156228][ T5887] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1234.193164][ T5887] usb 5-1: config 0 descriptor?? [ 1235.046820][ T5887] Bluetooth: Can't get version to change to load ram patch err [ 1235.047149][ T5887] Bluetooth: Loading sysconfig file failed [ 1235.048614][ T5887] ath3k 5-1:0.0: probe with driver ath3k failed with error -71 [ 1235.474793][ T5887] usb 5-1: USB disconnect, device number 75 [ 1235.564514][T15151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1235.564535][T15151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1235.564565][T15151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1237.095297][T15395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1238.407226][T15151] hsr_slave_0: entered promiscuous mode [ 1238.408387][T15151] hsr_slave_1: entered promiscuous mode [ 1238.409244][T15151] debugfs: 'hsr0' already exists in 'hsr' [ 1238.409265][T15151] Cannot create hsr debugfs directory [ 1241.129889][ T12] bridge_slave_1: left allmulticast mode [ 1241.129911][ T12] bridge_slave_1: left promiscuous mode [ 1241.130088][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1241.236368][ T12] bridge_slave_0: left allmulticast mode [ 1241.236410][ T12] bridge_slave_0: left promiscuous mode [ 1241.252282][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.823759][T15441] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2641'. [ 1247.087670][T15448] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1248.959993][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1250.147676][ T5887] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1250.327672][ T5887] usb 3-1: Using ep0 maxpacket: 32 [ 1250.330115][ T5887] usb 3-1: config 0 has an invalid interface number: 196 but max is 0 [ 1250.330143][ T5887] usb 3-1: config 0 has no interface number 0 [ 1250.330206][ T5887] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1250.330234][ T5887] usb 3-1: config 0 interface 196 has no altsetting 0 [ 1250.333879][ T5887] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 1250.333912][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1250.333934][ T5887] usb 3-1: Product: syz [ 1250.333950][ T5887] usb 3-1: Manufacturer: syz [ 1250.333965][ T5887] usb 3-1: SerialNumber: syz [ 1250.395966][ T5887] usb 3-1: config 0 descriptor?? [ 1250.396841][T15470] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1250.700464][T15478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2652'. [ 1251.270856][ T5887] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: -71 [ 1256.427458][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1256.489710][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1256.509408][ T12] bond0 (unregistering): Released all slaves [ 1258.313742][ T5887] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached [ 1258.372347][ T5887] usb 3-1: USB disconnect, device number 69 [ 1258.374478][T15497] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1258.374510][T15497] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1258.665540][T15497] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1258.666704][T15497] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1258.755139][ T5887] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected [ 1259.383729][ T12] hsr_slave_0: left promiscuous mode [ 1259.446586][T12153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1259.458923][ T12] hsr_slave_1: left promiscuous mode [ 1259.460157][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1259.495039][T12153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1259.720131][T12153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1259.739712][T12153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1259.740553][T12153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1259.757267][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1260.435952][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1260.438726][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1260.440060][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1260.441371][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1260.442232][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1261.542001][T15513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1262.600079][T12153] Bluetooth: hci1: command tx timeout [ 1263.611451][ T38] audit: type=1326 audit(1760654164.668:450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15525 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5768a3eec9 code=0x7ffc0000 [ 1263.611526][ T38] audit: type=1326 audit(1760654164.668:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15525 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5768a3eec9 code=0x7ffc0000 [ 1263.611576][ T38] audit: type=1326 audit(1760654164.668:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15525 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f5768a3eec9 code=0x7ffc0000 [ 1263.611625][ T38] audit: type=1326 audit(1760654164.668:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15525 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5768a3eec9 code=0x7ffc0000 [ 1263.611673][ T38] audit: type=1326 audit(1760654164.668:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15525 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5768a3eec9 code=0x7ffc0000 [ 1263.611721][ T38] audit: type=1326 audit(1760654164.668:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15525 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f5768a3eec9 code=0x7ffc0000 [ 1263.611770][ T38] audit: type=1326 audit(1760654164.668:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15525 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5768a3eec9 code=0x7ffc0000 [ 1263.611819][ T38] audit: type=1326 audit(1760654164.668:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15525 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5768a3eec9 code=0x7ffc0000 [ 1263.612956][ T38] audit: type=1326 audit(1760654164.668:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15525 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5768a3eec9 code=0x7ffc0000 [ 1263.613013][ T38] audit: type=1326 audit(1760654164.678:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=15525 comm="syz.0.2663" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5768a3eec9 code=0x7ffc0000 [ 1264.200490][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1264.290493][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1264.303170][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1264.311864][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1264.313075][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1264.313860][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1264.695652][T12153] Bluetooth: hci1: command tx timeout [ 1264.788807][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1265.057855][ T5859] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 1265.240510][ T5859] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 1265.240542][ T5859] usb 3-1: config 179 has no interface number 0 [ 1265.240598][ T5859] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1265.240628][ T5859] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1265.240653][ T5859] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1265.240682][ T5859] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 1265.240710][ T5859] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1265.240756][ T5859] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1265.240780][ T5859] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1265.342943][T15535] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1265.357228][ T5859] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1265.364262][ T5859] xpad 3-1:179.65: probe with driver xpad failed with error -90 [ 1265.583071][ T31] usb 3-1: USB disconnect, device number 70 [ 1266.738209][T12153] Bluetooth: hci1: command tx timeout [ 1267.203860][T12153] Bluetooth: hci0: command tx timeout [ 1269.007756][T12153] Bluetooth: hci1: command tx timeout [ 1269.214173][T12153] Bluetooth: hci0: command tx timeout [ 1271.383689][T12153] Bluetooth: hci0: command tx timeout [ 1272.055092][ T5872] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 1272.215358][ T5872] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 1272.215390][ T5872] usb 1-1: config 179 has no interface number 0 [ 1272.215447][ T5872] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1272.215476][ T5872] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1272.215502][ T5872] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1272.215528][ T5872] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 1272.215556][ T5872] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1272.215614][ T5872] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1272.215639][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1272.270038][T15578] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1272.277212][ T5872] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 1272.284053][ T5872] xpad 1-1:179.65: probe with driver xpad failed with error -90 [ 1272.477495][ T31] usb 1-1: USB disconnect, device number 64 [ 1272.759272][T15500] lo speed is unknown, defaulting to 1000 [ 1272.826009][T15531] lo speed is unknown, defaulting to 1000 [ 1273.622494][T12153] Bluetooth: hci0: command tx timeout [ 1274.103344][ T983] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1274.272919][ T983] usb 3-1: device descriptor read/64, error -71 [ 1275.162754][ T983] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1275.293065][ T983] usb 3-1: device descriptor read/64, error -71 [ 1275.403187][ T983] usb usb3-port1: attempt power cycle [ 1275.743035][ T983] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1275.764687][ T983] usb 3-1: device descriptor read/8, error -71 [ 1275.927145][T15531] chnl_net:caif_netlink_parms(): no params data found [ 1276.002584][ T983] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1276.023479][ T983] usb 3-1: device descriptor read/8, error -71 [ 1276.164555][ T983] usb usb3-port1: unable to enumerate USB device [ 1276.269241][T15500] chnl_net:caif_netlink_parms(): no params data found [ 1277.955841][T15531] bridge0: port 1(bridge_slave_0) entered blocking state [ 1277.955986][T15531] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.956242][T15531] bridge_slave_0: entered allmulticast mode [ 1277.959309][T15531] bridge_slave_0: entered promiscuous mode [ 1278.031966][T15650] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2692'. [ 1278.180178][ T12] bridge_slave_1: left allmulticast mode [ 1278.180203][ T12] bridge_slave_1: left promiscuous mode [ 1278.180388][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.245135][ T12] bridge_slave_0: left allmulticast mode [ 1278.245166][ T12] bridge_slave_0: left promiscuous mode [ 1278.245365][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.381142][ T12] bridge_slave_1: left allmulticast mode [ 1278.381175][ T12] bridge_slave_1: left promiscuous mode [ 1278.381470][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.519548][ T12] bridge_slave_0: left allmulticast mode [ 1278.519579][ T12] bridge_slave_0: left promiscuous mode [ 1278.519849][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1278.933327][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1279.234045][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1280.289122][ T12] bond0 (unregistering): Released all slaves [ 1281.576352][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1281.595997][T15668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1281.805802][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1281.922274][ T12] bond0 (unregistering): Released all slaves [ 1282.002502][T15531] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.002654][T15531] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.002909][T15531] bridge_slave_1: entered allmulticast mode [ 1282.028659][T15531] bridge_slave_1: entered promiscuous mode [ 1283.277537][T15531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1283.489010][T15531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1283.489301][T15500] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.489550][T15500] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.489763][T15500] bridge_slave_0: entered allmulticast mode [ 1283.585994][T15500] bridge_slave_0: entered promiscuous mode [ 1283.892012][ T12] hsr_slave_0: left promiscuous mode [ 1283.952427][ T12] hsr_slave_1: left promiscuous mode [ 1283.953382][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1284.199474][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.830822][ T12] hsr_slave_0: left promiscuous mode [ 1286.064153][ T12] hsr_slave_1: left promiscuous mode [ 1286.206821][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1287.786312][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1290.402581][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1290.523266][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1291.911020][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1292.030049][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1293.011998][T15500] bridge0: port 2(bridge_slave_1) entered blocking state [ 1293.012136][T15500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1293.012324][T15500] bridge_slave_1: entered allmulticast mode [ 1293.014383][T15500] bridge_slave_1: entered promiscuous mode [ 1293.295376][T15531] team0: Port device team_slave_0 added [ 1293.319253][ T5872] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1293.513469][T15531] team0: Port device team_slave_1 added [ 1293.517174][T15500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.529198][ T5872] usb 1-1: Using ep0 maxpacket: 32 [ 1293.531298][ T5872] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1293.531327][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.778582][ T5909] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 1294.196778][ T5909] usb 5-1: Using ep0 maxpacket: 8 [ 1294.514942][ T5872] usb 1-1: config 0 descriptor?? [ 1294.651511][ T5909] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1294.651543][ T5909] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1294.651565][ T5909] usb 5-1: Product: syz [ 1294.651581][ T5909] usb 5-1: Manufacturer: syz [ 1294.651597][ T5909] usb 5-1: SerialNumber: syz [ 1294.669365][ T5909] usb 5-1: config 0 descriptor?? [ 1294.682042][ T5909] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1294.795666][T15500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1294.831401][ T5872] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1294.846288][ T5872] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1294.857482][ T5872] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1294.857534][ T5872] usb 1-1: media controller created [ 1294.894715][ T5872] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1294.956268][T15761] binder_alloc: 15760: binder_alloc_buf, no vma [ 1295.077142][ T5872] az6027: usb out operation failed. (-71) [ 1295.090420][ T5872] az6027: usb out operation failed. (-71) [ 1295.090443][ T5872] stb0899_attach: Driver disabled by Kconfig [ 1295.090454][ T5872] az6027: no front-end attached [ 1295.090454][ T5872] [ 1295.090919][ T5872] az6027: usb out operation failed. (-71) [ 1295.090936][ T5872] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1295.095134][ T5872] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input55 [ 1295.098354][ T5872] dvb-usb: schedule remote query interval to 400 msecs. [ 1295.098377][ T5872] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1295.179531][ T5872] usb 1-1: USB disconnect, device number 65 [ 1301.416085][ T5909] input: gspca_zc3xx as /devices/platform/dummy_hcd.4/usb5/5-1/input/input56 [ 1301.613875][ T5909] usb 5-1: USB disconnect, device number 76 [ 1301.636322][ T5872] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1304.927289][T15531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1304.927310][T15531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1304.927340][T15531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1305.166643][T15531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1305.166663][T15531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1305.166691][T15531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.719063][T15500] team0: Port device team_slave_0 added [ 1306.736499][T15794] binder_alloc: 15792: binder_alloc_buf, no vma [ 1306.785950][T15500] team0: Port device team_slave_1 added [ 1308.536453][T10438] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1308.633550][T15500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1308.633570][T15500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1308.633597][T15500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1308.696356][T10438] usb 1-1: Using ep0 maxpacket: 8 [ 1308.704676][T10438] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 1308.704707][T10438] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 1308.704730][T10438] usb 1-1: Product: syz [ 1308.704746][T10438] usb 1-1: Manufacturer: syz [ 1308.704763][T10438] usb 1-1: SerialNumber: syz [ 1308.896514][T12405] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1308.997046][T10438] usb 1-1: config 0 descriptor?? [ 1309.008217][T10438] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 1309.207581][T12405] usb 3-1: Using ep0 maxpacket: 8 [ 1309.232972][T12405] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1309.233005][T12405] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.233028][T12405] usb 3-1: Product: syz [ 1309.233045][T12405] usb 3-1: Manufacturer: syz [ 1309.233124][T12405] usb 3-1: SerialNumber: syz [ 1309.332688][T12405] usb 3-1: config 0 descriptor?? [ 1309.642279][T12405] usb 3-1: selecting invalid altsetting 3 [ 1309.642307][T12405] comedi comedi5: could not set alternate setting 3 in high speed [ 1309.642324][T12405] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1309.730982][T12405] usbdux 3-1:0.0: probe with driver usbdux failed with error -22 [ 1309.769409][T12405] usb 3-1: USB disconnect, device number 75 [ 1309.786478][T10438] input: gspca_zc3xx as /devices/platform/dummy_hcd.0/usb1/1-1/input/input57 [ 1309.875324][T15500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1309.875344][T15500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1309.875375][T15500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1309.934760][T15531] hsr_slave_0: entered promiscuous mode [ 1309.995461][T10438] usb 1-1: USB disconnect, device number 66 [ 1310.005391][T15531] hsr_slave_1: entered promiscuous mode [ 1310.293261][T15818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2738'. [ 1310.367293][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1312.073010][T15820] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1312.112886][T15826] binder_alloc: 15824: binder_alloc_buf, no vma [ 1312.386935][T15500] hsr_slave_0: entered promiscuous mode [ 1312.388391][T15500] hsr_slave_1: entered promiscuous mode [ 1312.389431][T15500] debugfs: 'hsr0' already exists in 'hsr' [ 1312.389458][T15500] Cannot create hsr debugfs directory [ 1314.209448][ T31] libceph: connect (1)[c::]:6789 error -101 [ 1314.210206][ T31] libceph: mon0 (1)[c::]:6789 connect error [ 1314.250926][T15857] ceph: No mds server is up or the cluster is laggy [ 1314.638256][T15869] Bluetooth: MGMT ver 1.23 [ 1315.513563][ C1] vkms_vblank_simulate: vblank timer overrun [ 1315.724646][ C1] vkms_vblank_simulate: vblank timer overrun [ 1317.131906][T15531] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1317.189156][T15531] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1317.227774][T15531] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1317.252541][T15531] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1317.553133][T15531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1317.699183][T15531] 8021q: adding VLAN 0 to HW filter on device team0 [ 1317.722032][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 1317.722255][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1317.740679][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1317.756571][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1318.080953][ C1] vkms_vblank_simulate: vblank timer overrun [ 1318.690082][ C1] vkms_vblank_simulate: vblank timer overrun [ 1318.831478][ C1] vkms_vblank_simulate: vblank timer overrun [ 1319.070008][ C1] vkms_vblank_simulate: vblank timer overrun [ 1319.209755][ C1] vkms_vblank_simulate: vblank timer overrun [ 1319.472277][ C1] vkms_vblank_simulate: vblank timer overrun [ 1321.777781][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1321.798199][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1321.800695][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1321.805762][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1321.806807][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1322.074138][ T115] bridge_slave_1: left allmulticast mode [ 1322.074171][ T115] bridge_slave_1: left promiscuous mode [ 1322.074461][ T115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1322.194951][ T115] bridge_slave_0: left allmulticast mode [ 1322.194982][ T115] bridge_slave_0: left promiscuous mode [ 1322.195244][ T115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1322.646581][ C0] vkms_vblank_simulate: vblank timer overrun [ 1323.530040][ C0] vkms_vblank_simulate: vblank timer overrun [ 1323.835721][ T115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1323.843848][ T5804] Bluetooth: hci1: command tx timeout [ 1323.934415][ T115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1323.999009][ T115] bond0 (unregistering): Released all slaves [ 1324.122490][ C0] vkms_vblank_simulate: vblank timer overrun [ 1324.233494][T15909] lo speed is unknown, defaulting to 1000 [ 1324.311336][ C0] vkms_vblank_simulate: vblank timer overrun [ 1324.523877][ T115] hsr_slave_0: left promiscuous mode [ 1324.569782][ T115] hsr_slave_1: left promiscuous mode [ 1324.570843][ T115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1324.604380][ T115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1324.714625][ C0] vkms_vblank_simulate: vblank timer overrun [ 1325.273875][ C0] vkms_vblank_simulate: vblank timer overrun [ 1325.331685][ C0] vkms_vblank_simulate: vblank timer overrun [ 1327.210535][ C0] vkms_vblank_simulate: vblank timer overrun [ 1327.698092][ T5804] Bluetooth: hci1: command tx timeout [ 1327.898941][T12153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1327.918338][T12153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1327.939050][T12153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1327.951503][T12153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1327.965859][T12153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1328.007813][ T115] team0 (unregistering): Port device team_slave_1 removed [ 1328.135874][ T115] team0 (unregistering): Port device team_slave_0 removed [ 1329.102899][T15955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2771'. [ 1329.762444][ T5804] Bluetooth: hci1: command tx timeout [ 1330.002386][ T5804] Bluetooth: hci0: command tx timeout [ 1330.299978][T15947] lo speed is unknown, defaulting to 1000 [ 1331.132725][T15909] chnl_net:caif_netlink_parms(): no params data found [ 1331.847909][ T5804] Bluetooth: hci1: command tx timeout [ 1332.401831][ T5804] Bluetooth: hci0: command tx timeout [ 1334.481756][ T5804] Bluetooth: hci0: command tx timeout [ 1336.737217][ T5804] Bluetooth: hci0: command tx timeout [ 1336.874242][T15909] bridge0: port 1(bridge_slave_0) entered blocking state [ 1336.874477][T15909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1336.874695][T15909] bridge_slave_0: entered allmulticast mode [ 1336.877532][T15909] bridge_slave_0: entered promiscuous mode [ 1336.879920][T16020] netlink: 'syz.4.2784': attribute type 12 has an invalid length. [ 1337.002739][T15909] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.002870][T15909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.003090][T15909] bridge_slave_1: entered allmulticast mode [ 1337.006666][T15909] bridge_slave_1: entered promiscuous mode [ 1337.391387][ T5888] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1337.405045][T16042] netlink: 'syz.4.2788': attribute type 10 has an invalid length. [ 1338.248558][ T5888] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1338.248590][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.306190][ T5888] usb 3-1: config 0 descriptor?? [ 1338.566547][ T5888] kaweth 3-1:0.0: Firmware present in device. [ 1338.756346][ T5888] kaweth 3-1:0.0: Statistics collection: 0 [ 1338.756370][ T5888] kaweth 3-1:0.0: Multicast filter limit: 0 [ 1338.756385][ T5888] kaweth 3-1:0.0: MTU: 0 [ 1338.756399][ T5888] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1339.051480][T15909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.750518][T15909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1340.219384][ T5888] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 1340.246300][ T5888] usb 3-1: USB disconnect, device number 76 [ 1345.350414][T16068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1345.442466][T15909] team0: Port device team_slave_0 added [ 1345.457025][T15909] team0: Port device team_slave_1 added [ 1345.457822][T15947] chnl_net:caif_netlink_parms(): no params data found [ 1346.017004][T16087] netlink: 'syz.4.2799': attribute type 10 has an invalid length. [ 1346.510151][T15909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1346.510168][T15909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1346.510191][T15909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1347.200188][T15909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1347.200208][T15909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1347.200235][T15909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1353.019732][T15947] bridge0: port 1(bridge_slave_0) entered blocking state [ 1353.019850][T15947] bridge0: port 1(bridge_slave_0) entered disabled state [ 1353.020029][T15947] bridge_slave_0: entered allmulticast mode [ 1353.021876][T15947] bridge_slave_0: entered promiscuous mode [ 1353.122087][T15909] hsr_slave_0: entered promiscuous mode [ 1353.165210][T15909] hsr_slave_1: entered promiscuous mode [ 1353.166307][T15909] debugfs: 'hsr0' already exists in 'hsr' [ 1353.166333][T15909] Cannot create hsr debugfs directory [ 1353.190905][T15947] bridge0: port 2(bridge_slave_1) entered blocking state [ 1353.191128][T15947] bridge0: port 2(bridge_slave_1) entered disabled state [ 1353.191364][T15947] bridge_slave_1: entered allmulticast mode [ 1353.194270][T15947] bridge_slave_1: entered promiscuous mode [ 1354.339662][ T115] bridge_slave_1: left allmulticast mode [ 1354.339709][ T115] bridge_slave_1: left promiscuous mode [ 1354.339968][ T115] bridge0: port 2(bridge_slave_1) entered disabled state [ 1354.489667][ T115] bridge_slave_0: left allmulticast mode [ 1354.489699][ T115] bridge_slave_0: left promiscuous mode [ 1354.489964][ T115] bridge0: port 1(bridge_slave_0) entered disabled state [ 1355.302911][T16156] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1358.017481][T10802] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 1358.250805][T10802] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1358.250840][T10802] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1358.250860][T10802] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 1358.250880][T10802] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1358.250900][T10802] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1358.252959][T10802] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1358.252980][T10802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1358.252995][T10802] usb 1-1: SerialNumber: syz [ 1358.302603][T16177] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1358.303444][T16177] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1358.659903][T16186] fuse: Unknown parameter 'fd0x0000000000000003' [ 1359.061253][ T5888] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1360.044565][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1360.044612][ T5888] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1360.044630][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1360.049810][ T5888] usb 3-1: config 0 descriptor?? [ 1360.071909][ T5888] pwc: Askey VC010 type 2 USB webcam detected. [ 1360.128942][ T115] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1360.271886][ T115] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1360.445356][ T115] bond0 (unregistering): Released all slaves [ 1360.499581][ T5888] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1360.500638][ T5888] pwc: recv_control_msg error -32 req 02 val 2700 [ 1360.501436][ T5888] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1360.502361][ T5888] pwc: recv_control_msg error -32 req 04 val 1000 [ 1360.503122][ T5888] pwc: recv_control_msg error -32 req 04 val 1300 [ 1360.504253][ T5888] pwc: recv_control_msg error -32 req 04 val 1400 [ 1360.505334][ T5888] pwc: recv_control_msg error -32 req 02 val 2000 [ 1360.508184][ T5888] pwc: recv_control_msg error -32 req 02 val 2100 [ 1360.509331][ T5888] pwc: recv_control_msg error -32 req 04 val 1500 [ 1360.510793][ T5888] pwc: recv_control_msg error -32 req 02 val 2500 [ 1360.512129][ T5888] pwc: recv_control_msg error -32 req 02 val 2400 [ 1360.513786][ T5888] pwc: recv_control_msg error -32 req 02 val 2600 [ 1360.716602][ T5888] pwc: recv_control_msg error -71 req 02 val 2800 [ 1360.717429][ T5888] pwc: recv_control_msg error -71 req 04 val 1100 [ 1360.717895][ T5888] pwc: recv_control_msg error -71 req 04 val 1200 [ 1360.725223][ T5888] pwc: Registered as video103. [ 1360.836625][ T5888] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input58 [ 1361.089892][ T5888] usb 3-1: USB disconnect, device number 77 [ 1361.333148][T15947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1361.370192][T15947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1361.496437][ T115] hsr_slave_0: left promiscuous mode [ 1361.734039][ T115] hsr_slave_1: left promiscuous mode [ 1361.734794][ T115] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1361.757274][ T115] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1362.332784][ T5888] usb 1-1: USB disconnect, device number 67 [ 1363.265863][T16211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2826'. [ 1364.915669][ T5909] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1365.068295][ T5909] usb 3-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1365.068327][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1365.073183][ T5909] usb 3-1: config 0 descriptor?? [ 1365.413214][ T5909] kaweth 3-1:0.0: Firmware present in device. [ 1366.065580][ T5909] kaweth 3-1:0.0: Statistics collection: 0 [ 1366.065605][ T5909] kaweth 3-1:0.0: Multicast filter limit: 0 [ 1366.065621][ T5909] kaweth 3-1:0.0: MTU: 0 [ 1366.065634][ T5909] kaweth 3-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1366.442757][ T115] team0 (unregistering): Port device team_slave_1 removed [ 1367.065239][ T5887] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1367.161036][ T115] team0 (unregistering): Port device team_slave_0 removed [ 1367.225295][ T5887] usb 1-1: Using ep0 maxpacket: 16 [ 1367.229765][ T5887] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 1367.229793][ T5887] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1367.229815][ T5887] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 1367.229898][ T5887] usb 1-1: config 0 has no interface number 1 [ 1367.229976][ T5887] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1367.230006][ T5887] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1367.230085][ T5887] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1367.230128][ T5887] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1367.230157][ T5887] usb 1-1: config 0 interface 125 has no altsetting 0 [ 1367.333893][ T5887] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1367.333971][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1367.333987][ T5887] usb 1-1: Product: syz [ 1367.333998][ T5887] usb 1-1: Manufacturer: syz [ 1367.334009][ T5887] usb 1-1: SerialNumber: syz [ 1367.409455][ T5887] usb 1-1: config 0 descriptor?? [ 1367.427810][T14028] usb 5-1: new full-speed USB device number 77 using dummy_hcd [ 1367.606952][T14028] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1367.607006][T14028] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1367.607038][T14028] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 1367.607065][T14028] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1367.607094][T14028] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1367.609280][T14028] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1367.609311][T14028] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1367.609333][T14028] usb 5-1: SerialNumber: syz [ 1367.624564][T16237] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1367.624917][T16237] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 1367.676419][T10802] usb 1-1: USB disconnect, device number 68 [ 1372.143465][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1373.831553][ T31] usb 5-1: USB disconnect, device number 77 [ 1375.086771][ C1] vkms_vblank_simulate: vblank timer overrun [ 1375.086955][ T5804] Bluetooth: hci0: link tx timeout [ 1375.090077][ T5804] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1375.740451][ C1] vkms_vblank_simulate: vblank timer overrun [ 1375.824285][ T5909] kaweth 3-1:0.0: probe with driver kaweth failed with error -5 [ 1375.868836][ T5909] usb 3-1: USB disconnect, device number 78 [ 1376.052847][T15947] team0: Port device team_slave_0 added [ 1376.072818][T15947] team0: Port device team_slave_1 added [ 1376.207675][T16273] fuse: Bad value for 'fd' [ 1376.269060][ C1] vkms_vblank_simulate: vblank timer overrun [ 1376.592141][ C1] vkms_vblank_simulate: vblank timer overrun [ 1377.060335][ C1] vkms_vblank_simulate: vblank timer overrun [ 1377.218012][ C1] vkms_vblank_simulate: vblank timer overrun [ 1377.751320][ C1] vkms_vblank_simulate: vblank timer overrun [ 1377.758201][T12153] Bluetooth: hci0: command 0x0406 tx timeout [ 1377.981912][ C1] vkms_vblank_simulate: vblank timer overrun [ 1378.147909][T15947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1378.147929][T15947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1378.147958][T15947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1378.179533][T15947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1378.179555][T15947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1378.179590][T15947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1378.273403][T10762] usb 1-1: new full-speed USB device number 69 using dummy_hcd [ 1378.524256][T10762] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1378.524292][T10762] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1378.524320][T10762] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 1378.524349][T10762] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1378.524378][T10762] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1378.526776][T10762] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1378.526798][T10762] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1378.526813][T10762] usb 1-1: SerialNumber: syz [ 1378.531851][T16284] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1378.534406][T16284] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1378.740663][T15947] hsr_slave_0: entered promiscuous mode [ 1378.741691][T15947] hsr_slave_1: entered promiscuous mode [ 1382.137661][T12153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1382.150785][T12153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1382.152974][T12153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1382.154850][T12153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1382.155740][T12153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1383.614378][T16319] lo speed is unknown, defaulting to 1000 [ 1383.957720][ T13] bridge_slave_1: left allmulticast mode [ 1383.957750][ T13] bridge_slave_1: left promiscuous mode [ 1383.957987][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.102743][ T31] usb 1-1: USB disconnect, device number 69 [ 1384.211075][ T13] bridge_slave_0: left allmulticast mode [ 1384.211098][ T13] bridge_slave_0: left promiscuous mode [ 1384.211305][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.232056][T12153] Bluetooth: hci1: command tx timeout [ 1386.321835][T12153] Bluetooth: hci1: command tx timeout [ 1386.444525][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1386.562407][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1386.649350][ T13] bond0 (unregistering): Released all slaves [ 1387.181847][ T13] hsr_slave_0: left promiscuous mode [ 1387.221746][ T13] hsr_slave_1: left promiscuous mode [ 1387.222496][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1387.293363][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1388.043958][ T5804] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1388.071661][ T5804] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1388.074288][ T5804] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1388.075594][ T5804] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1388.076899][ T5804] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1388.392885][ T5804] Bluetooth: hci1: command tx timeout [ 1388.774199][ T5872] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 1388.912348][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1388.933163][ T5872] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x7F, changing to 0xF [ 1388.933258][ T5872] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 1388.933279][ T5872] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 29949, setting to 64 [ 1388.933299][ T5872] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 1388.933320][ T5872] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 1388.935186][ T5872] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1388.935222][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1388.935236][ T5872] usb 1-1: SerialNumber: syz [ 1389.022563][T16387] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1389.044518][T16387] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 1389.461813][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1390.192294][ T5804] Bluetooth: hci5: command tx timeout [ 1390.474041][ T5804] Bluetooth: hci1: command tx timeout [ 1391.207238][T16390] tap0: tun_chr_ioctl cmd 35202 [ 1391.889590][T16377] lo speed is unknown, defaulting to 1000 [ 1392.109362][ T31] usb 1-1: USB disconnect, device number 70 [ 1392.230744][ T5804] Bluetooth: hci5: command tx timeout [ 1392.268844][T16319] chnl_net:caif_netlink_parms(): no params data found [ 1392.929566][T16431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2878'. [ 1392.934035][T16431] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1392.934111][T16431] IPv6: NLM_F_CREATE should be set when creating new route [ 1393.929617][T16433] netlink: 'syz.2.2877': attribute type 10 has an invalid length. [ 1394.377671][ T5804] Bluetooth: hci5: command tx timeout [ 1396.389955][ T5804] Bluetooth: hci5: command tx timeout [ 1396.723093][T16319] bridge0: port 1(bridge_slave_0) entered blocking state [ 1396.723266][T16319] bridge0: port 1(bridge_slave_0) entered disabled state [ 1396.723501][T16319] bridge_slave_0: entered allmulticast mode [ 1396.726612][T16319] bridge_slave_0: entered promiscuous mode [ 1396.821048][T16319] bridge0: port 2(bridge_slave_1) entered blocking state [ 1396.822180][T16319] bridge0: port 2(bridge_slave_1) entered disabled state [ 1396.822420][T16319] bridge_slave_1: entered allmulticast mode [ 1396.826207][T16319] bridge_slave_1: entered promiscuous mode [ 1396.836047][T16465] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 1396.863833][T16466] ptm ptm4: ldisc open failed (-12), clearing slot 4 [ 1396.901241][T16461] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1396.919277][T16465] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1396.947817][T16466] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 1396.975042][T16464] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 1396.990178][T16461] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 1396.995206][T16465] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 1397.011723][T16466] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 1397.028369][T16464] ptm ptm3: ldisc open failed (-12), clearing slot 3 [ 1397.334203][T16319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1397.565909][T16319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1398.203224][T16475] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2888'. [ 1398.206357][T16475] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1398.206427][T16475] IPv6: NLM_F_CREATE should be set when creating new route [ 1399.285307][ T13] bridge_slave_1: left allmulticast mode [ 1399.285345][ T13] bridge_slave_1: left promiscuous mode [ 1399.285638][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1399.381762][ T13] bridge_slave_0: left allmulticast mode [ 1399.381793][ T13] bridge_slave_0: left promiscuous mode [ 1399.384692][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1399.836505][ T31] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1400.260809][T16490] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1400.866464][ T31] usb 1-1: Using ep0 maxpacket: 32 [ 1400.871342][ T31] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 1400.871372][ T31] usb 1-1: config 0 has no interface number 0 [ 1400.871426][ T31] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1400.871457][ T31] usb 1-1: config 0 interface 85 has no altsetting 0 [ 1400.874641][ T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1400.874674][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1400.874699][ T31] usb 1-1: Product: syz [ 1400.874717][ T31] usb 1-1: Manufacturer: syz [ 1400.874741][ T31] usb 1-1: SerialNumber: syz [ 1400.891937][ T31] usb 1-1: config 0 descriptor?? [ 1401.172121][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1401.250416][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1401.326033][ T13] bond0 (unregistering): Released all slaves [ 1401.401502][T16377] chnl_net:caif_netlink_parms(): no params data found [ 1401.456302][T16319] team0: Port device team_slave_0 added [ 1401.511027][T16319] team0: Port device team_slave_1 added [ 1401.524187][ T31] appletouch 1-1:0.85: Geyser mode initialized. [ 1401.562298][ T31] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input59 [ 1401.739896][ T31] usb 1-1: USB disconnect, device number 71 [ 1401.740001][ C0] appletouch 1-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 1401.921928][ T31] appletouch 1-1:0.85: input: appletouch disconnected [ 1402.452853][ T13] hsr_slave_0: left promiscuous mode [ 1402.750808][T16511] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2898'. [ 1402.751422][T16511] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1403.358598][ T13] hsr_slave_1: left promiscuous mode [ 1403.359726][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1403.509420][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1405.683266][ T31] usb 1-1: new low-speed USB device number 72 using dummy_hcd [ 1406.329528][ T31] usb 1-1: device descriptor read/64, error -71 [ 1406.495627][T16535] ceph: No mds server is up or the cluster is laggy [ 1406.628042][ T31] usb 1-1: new low-speed USB device number 73 using dummy_hcd [ 1406.758062][ T31] usb 1-1: device descriptor read/64, error -71 [ 1406.868241][ T31] usb usb1-port1: attempt power cycle [ 1407.297879][ T31] usb 1-1: new low-speed USB device number 74 using dummy_hcd [ 1407.318935][ T31] usb 1-1: device descriptor read/8, error -71 [ 1407.947689][ T31] usb 1-1: new low-speed USB device number 75 using dummy_hcd [ 1407.968534][ T31] usb 1-1: device descriptor read/8, error -71 [ 1408.078160][ T31] usb usb1-port1: unable to enumerate USB device [ 1408.678588][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1408.737614][ T38] kauditd_printk_skb: 9 callbacks suppressed [ 1408.737634][ T38] audit: type=1326 audit(1760654309.856:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16560 comm="syz.0.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5768a3eec9 code=0x7ffc0000 [ 1408.738785][ T38] audit: type=1326 audit(1760654309.866:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16560 comm="syz.0.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5768a3eec9 code=0x7ffc0000 [ 1408.739375][ T38] audit: type=1326 audit(1760654309.866:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16560 comm="syz.0.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f5768a3eec9 code=0x7ffc0000 [ 1408.739974][ T38] audit: type=1326 audit(1760654309.866:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16560 comm="syz.0.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5768a3eec9 code=0x7ffc0000 [ 1408.740527][ T38] audit: type=1326 audit(1760654309.866:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16560 comm="syz.0.2918" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5768a3eec9 code=0x7ffc0000 [ 1409.208049][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1410.529287][T16319] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1410.529305][T16319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.529331][T16319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1410.623479][T16319] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1410.623499][T16319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1410.623529][T16319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1411.192559][T16594] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2924'. [ 1412.221325][T16594] 1ªî{X¹¦: renamed from 30ªî{X¹¦ (while UP) [ 1412.276921][T16594] A link change request failed with some changes committed already. Interface 31ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1412.448033][T16377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1412.448119][T16377] bridge0: port 1(bridge_slave_0) entered disabled state [ 1412.448266][T16377] bridge_slave_0: entered allmulticast mode [ 1412.450373][T16377] bridge_slave_0: entered promiscuous mode [ 1412.454114][T16377] bridge0: port 2(bridge_slave_1) entered blocking state [ 1412.454267][T16377] bridge0: port 2(bridge_slave_1) entered disabled state [ 1412.454509][T16377] bridge_slave_1: entered allmulticast mode [ 1412.456433][T16377] bridge_slave_1: entered promiscuous mode [ 1412.527005][T10762] usb 5-1: new low-speed USB device number 78 using dummy_hcd [ 1412.620622][T16319] hsr_slave_0: entered promiscuous mode [ 1412.625749][T16319] hsr_slave_1: entered promiscuous mode [ 1412.658775][T10762] usb 5-1: device descriptor read/64, error -71 [ 1412.815329][T16377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1412.851573][T16377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1412.906905][T10762] usb 5-1: new low-speed USB device number 79 using dummy_hcd [ 1413.074474][T10762] usb 5-1: device descriptor read/64, error -71 [ 1413.195054][T10762] usb usb5-port1: attempt power cycle [ 1413.861147][T10762] usb 5-1: new low-speed USB device number 80 using dummy_hcd [ 1413.879577][T10762] usb 5-1: device descriptor read/8, error -71 [ 1414.482069][T10762] usb 5-1: new low-speed USB device number 81 using dummy_hcd [ 1414.497432][T10762] usb 5-1: device descriptor read/8, error -71 [ 1414.865034][T16610] netlink: 'syz.2.2928': attribute type 1 has an invalid length. [ 1414.865058][T16610] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2928'. [ 1414.893456][T10762] usb usb5-port1: unable to enumerate USB device [ 1415.605920][T16377] team0: Port device team_slave_0 added [ 1415.663354][T16377] team0: Port device team_slave_1 added [ 1419.146438][T16377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1419.146458][T16377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1419.146488][T16377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1419.221306][T16377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1419.221327][T16377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1419.221358][T16377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1419.324376][ T38] audit: type=1326 audit(1760654320.448:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16629 comm="syz.2.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae344eec9 code=0x7ffc0000 [ 1419.325274][ T38] audit: type=1326 audit(1760654320.448:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16629 comm="syz.2.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae344eec9 code=0x7ffc0000 [ 1419.369240][ T38] audit: type=1326 audit(1760654320.498:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16629 comm="syz.2.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f9ae344eec9 code=0x7ffc0000 [ 1419.369581][ T38] audit: type=1326 audit(1760654320.498:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16629 comm="syz.2.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae344eec9 code=0x7ffc0000 [ 1419.369895][ T38] audit: type=1326 audit(1760654320.498:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=16629 comm="syz.2.2932" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ae344eec9 code=0x7ffc0000 [ 1419.505613][ T44] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 1419.516098][T16639] fuse: Unknown parameter 'user_i00000000000000000000' [ 1419.671458][ T44] usb 5-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1419.671491][ T44] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.700222][ T44] usb 5-1: config 0 descriptor?? [ 1419.947060][ T44] kaweth 5-1:0.0: Firmware present in device. [ 1419.980841][T16377] hsr_slave_0: entered promiscuous mode [ 1419.984713][T16377] hsr_slave_1: entered promiscuous mode [ 1420.000913][T16377] debugfs: 'hsr0' already exists in 'hsr' [ 1420.001262][T16377] Cannot create hsr debugfs directory [ 1420.015414][T10802] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1420.144759][ T44] kaweth 5-1:0.0: Statistics collection: 0 [ 1420.144777][ T44] kaweth 5-1:0.0: Multicast filter limit: 0 [ 1420.144788][ T44] kaweth 5-1:0.0: MTU: 0 [ 1420.144799][ T44] kaweth 5-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1420.212689][T10802] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1420.212719][T10802] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 3 [ 1420.212760][T10802] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 1420.212787][T10802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1420.267754][T10802] usb 1-1: config 0 descriptor?? [ 1421.137155][ T44] kaweth 5-1:0.0: Error setting SOFS wait [ 1421.137343][ T44] kaweth 5-1:0.0: probe with driver kaweth failed with error -5 [ 1421.165269][ T44] usb 5-1: USB disconnect, device number 82 [ 1422.475665][ T5888] usb 5-1: new low-speed USB device number 83 using dummy_hcd [ 1422.818436][ T44] usb 1-1: USB disconnect, device number 76 [ 1422.904968][ T5888] usb 5-1: device descriptor read/64, error -71 [ 1423.168821][ T5888] usb 5-1: new low-speed USB device number 84 using dummy_hcd [ 1423.304876][ T5888] usb 5-1: device descriptor read/64, error -71 [ 1423.391713][ C0] vkms_vblank_simulate: vblank timer overrun [ 1423.660609][ T5888] usb usb5-port1: attempt power cycle [ 1424.004930][ T5888] usb 5-1: new low-speed USB device number 85 using dummy_hcd [ 1424.026026][ T5888] usb 5-1: device descriptor read/8, error -71 [ 1424.160178][ C0] vkms_vblank_simulate: vblank timer overrun [ 1424.326006][ T5888] usb 5-1: new low-speed USB device number 86 using dummy_hcd [ 1424.345652][ T5888] usb 5-1: device descriptor read/8, error -71 [ 1424.347402][T16319] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1424.397825][T16319] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1424.450831][T16319] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1424.455051][ T5888] usb usb5-port1: unable to enumerate USB device [ 1424.580340][T16319] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1424.794056][T16377] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1424.889312][T16377] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1424.976830][T16377] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1425.095898][T16377] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1425.366564][ C0] vkms_vblank_simulate: vblank timer overrun [ 1426.175367][ C0] vkms_vblank_simulate: vblank timer overrun [ 1426.585057][T16319] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1426.668659][T16319] 8021q: adding VLAN 0 to HW filter on device team0 [ 1426.674528][ C0] vkms_vblank_simulate: vblank timer overrun [ 1426.713769][ T1897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1426.735180][ T1897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1426.779020][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1426.779185][ T6081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1426.843265][T16377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1427.010144][T16377] 8021q: adding VLAN 0 to HW filter on device team0 [ 1427.063111][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 1427.064988][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1427.121761][ T6081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1427.121945][ T6081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1427.363616][ C0] vkms_vblank_simulate: vblank timer overrun [ 1427.759539][ C0] vkms_vblank_simulate: vblank timer overrun [ 1428.177548][ C0] vkms_vblank_simulate: vblank timer overrun [ 1430.209601][T16319] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1430.666870][T16377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1431.503861][ T31] usb 5-1: new low-speed USB device number 87 using dummy_hcd [ 1432.000652][ T31] usb 5-1: device descriptor read/64, error -71 [ 1432.493146][ T31] usb 5-1: new low-speed USB device number 88 using dummy_hcd [ 1432.554279][T16319] veth0_vlan: entered promiscuous mode [ 1432.599456][T16319] veth1_vlan: entered promiscuous mode [ 1432.623231][ T31] usb 5-1: device descriptor read/64, error -71 [ 1432.697387][T16319] veth0_macvtap: entered promiscuous mode [ 1432.713370][ T5909] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1432.714963][T16319] veth1_macvtap: entered promiscuous mode [ 1432.743743][ T31] usb usb5-port1: attempt power cycle [ 1432.834902][T16319] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1432.877472][ T5909] usb 1-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 1432.877502][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.892774][T16319] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1432.909703][ T5909] usb 1-1: config 0 descriptor?? [ 1432.923708][T16377] veth0_vlan: entered promiscuous mode [ 1432.951365][ T1897] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.962146][ T1897] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.976949][ T1897] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.980801][ T1897] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1432.992356][T16377] veth1_vlan: entered promiscuous mode [ 1433.093269][ T31] usb 5-1: new low-speed USB device number 89 using dummy_hcd [ 1433.129866][ T31] usb 5-1: device descriptor read/8, error -71 [ 1433.177978][ T5909] kaweth 1-1:0.0: Firmware present in device. [ 1433.190754][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1433.356887][ T5909] kaweth 1-1:0.0: Statistics collection: 0 [ 1433.356912][ T5909] kaweth 1-1:0.0: Multicast filter limit: 0 [ 1433.356928][ T5909] kaweth 1-1:0.0: MTU: 0 [ 1433.356942][ T5909] kaweth 1-1:0.0: Read MAC address 00:00:00:00:00:00 [ 1433.385925][ T31] usb 5-1: new low-speed USB device number 90 using dummy_hcd [ 1433.416083][ T31] usb 5-1: device descriptor read/8, error -71 [ 1433.421479][T16377] veth0_macvtap: entered promiscuous mode [ 1433.451703][T16377] veth1_macvtap: entered promiscuous mode [ 1433.523944][ T31] usb usb5-port1: unable to enumerate USB device [ 1434.372961][T10417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1434.372984][T10417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1434.453253][ T5909] kaweth 1-1:0.0: Error setting receive filter [ 1434.453500][ T5909] kaweth 1-1:0.0: probe with driver kaweth failed with error -5 [ 1434.481880][ T5909] usb 1-1: USB disconnect, device number 77 [ 1434.491352][T16377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1434.510980][T16377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1434.613249][ T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.632530][ T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.675566][ T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.686668][ T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.699699][ T68] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1434.699719][ T68] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1435.386618][T10417] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1435.386641][T10417] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1435.485784][T16814] overlayfs: overlapping lowerdir path [ 1435.854458][ T6081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1435.854480][ T6081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1435.972523][ T5872] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1436.178039][T10802] usb 1-1: new low-speed USB device number 78 using dummy_hcd [ 1436.264882][ T5872] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1436.264915][ T5872] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 1436.264937][ T5872] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.264958][ T5872] usb 3-1: config 220 has no interface number 2 [ 1436.265045][ T5872] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1436.265075][ T5872] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1436.265095][ T5872] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1436.265116][ T5872] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1436.268759][ T5872] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1436.268788][ T5872] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1436.268810][ T5872] usb 3-1: Product: syz [ 1436.268825][ T5872] usb 3-1: Manufacturer: syz [ 1436.268841][ T5872] usb 3-1: SerialNumber: syz [ 1436.388528][T10802] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1436.388557][T10802] usb 1-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 1436.388597][T10802] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1436.388621][T10802] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.679731][T10802] usb 1-1: USB disconnect, device number 78 [ 1436.696058][ T5872] uvcvideo 3-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 1436.696095][ T5872] uvcvideo 3-1:220.0: No valid video chain found. [ 1436.696162][ T5872] usb 3-1: selecting invalid altsetting 0 [ 1436.765378][ T5872] usb 3-1: selecting invalid altsetting 0 [ 1436.765419][ T5872] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 1436.769840][ T5872] usb 3-1: USB disconnect, device number 79 [ 1438.253497][ T5859] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 1438.317377][T16862] netlink: 'syz.0.2968': attribute type 1 has an invalid length. [ 1438.317440][T16862] netlink: 224 bytes leftover after parsing attributes in process `syz.0.2968'. [ 1439.205519][ T5859] usb 9-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 1439.205546][ T5859] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1439.205564][ T5859] usb 9-1: Product: syz [ 1439.205579][ T5859] usb 9-1: Manufacturer: syz [ 1439.205592][ T5859] usb 9-1: SerialNumber: syz [ 1439.438608][T16872] overlayfs: overlapping lowerdir path [ 1440.731776][ T5909] usb 1-1: new low-speed USB device number 79 using dummy_hcd [ 1440.966317][ T5909] usb 1-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 1440.966353][ T5909] usb 1-1: config 179 has 0 interfaces, different from the descriptor's value: 1 [ 1440.966389][ T5909] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1440.966412][ T5909] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1441.132764][T12153] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1441.161582][T12153] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1441.163085][T12153] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1441.165253][T12153] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1441.166268][T12153] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1441.189769][ T31] usb 1-1: USB disconnect, device number 79 [ 1441.636147][T16901] lo speed is unknown, defaulting to 1000 [ 1442.385446][ T5859] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000040. ret = -EPROTO [ 1442.386062][ T5859] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -EPROTO [ 1442.386655][ T5859] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO [ 1442.386712][ T5859] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 1442.444783][ T5859] lan78xx 9-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 1442.514135][ T5859] lan78xx 9-1:1.0: probe with driver lan78xx failed with error -71 [ 1442.567837][ T5859] usb 9-1: USB disconnect, device number 2 [ 1442.651095][ T6080] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1442.651135][ T6080] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1443.561650][T16928] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1444.022567][ T5804] Bluetooth: hci0: command tx timeout [ 1444.394217][ T6080] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1444.394256][ T6080] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.539246][ T6080] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1445.539285][ T6080] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1445.819207][T16956] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1445.819233][T16956] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1446.037774][T16956] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1446.037803][T16956] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1446.061098][ T5804] Bluetooth: hci0: command tx timeout [ 1446.090661][ T6080] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1446.090697][ T6080] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1446.160313][T16901] chnl_net:caif_netlink_parms(): no params data found [ 1446.258461][T16956] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1446.258487][T16956] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1447.070640][ C0] vkms_vblank_simulate: vblank timer overrun [ 1447.197116][T16989] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2997'. [ 1447.818840][ C0] vkms_vblank_simulate: vblank timer overrun [ 1447.972338][T16901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1447.972547][T16901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.972806][T16901] bridge_slave_0: entered allmulticast mode [ 1447.975783][T16901] bridge_slave_0: entered promiscuous mode [ 1447.997928][ C0] vkms_vblank_simulate: vblank timer overrun [ 1448.070417][T16901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1448.070551][T16901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1448.070768][T16901] bridge_slave_1: entered allmulticast mode [ 1448.073481][T16901] bridge_slave_1: entered promiscuous mode [ 1448.599630][T16901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1448.677537][T16901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1450.775424][ C0] vkms_vblank_simulate: vblank timer overrun [ 1451.023452][ C0] vkms_vblank_simulate: vblank timer overrun [ 1451.146295][T17033] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3011'. [ 1451.559757][ C0] vkms_vblank_simulate: vblank timer overrun [ 1452.942609][ C0] vkms_vblank_simulate: vblank timer overrun [ 1453.210154][ C0] vkms_vblank_simulate: vblank timer overrun [ 1453.323543][ C0] vkms_vblank_simulate: vblank timer overrun [ 1453.415041][ C0] vkms_vblank_simulate: vblank timer overrun [ 1453.528634][ C0] vkms_vblank_simulate: vblank timer overrun [ 1453.622907][ C0] vkms_vblank_simulate: vblank timer overrun [ 1453.686523][ C0] vkms_vblank_simulate: vblank timer overrun [ 1453.758995][ C0] vkms_vblank_simulate: vblank timer overrun [ 1453.853562][ C0] vkms_vblank_simulate: vblank timer overrun [ 1453.904534][ C0] vkms_vblank_simulate: vblank timer overrun [ 1453.960587][ C0] vkms_vblank_simulate: vblank timer overrun [ 1454.015005][ C0] vkms_vblank_simulate: vblank timer overrun [ 1454.082515][ C0] vkms_vblank_simulate: vblank timer overrun [ 1454.143054][ C0] vkms_vblank_simulate: vblank timer overrun [ 1454.193514][ C0] vkms_vblank_simulate: vblank timer overrun [ 1454.422264][ C0] vkms_vblank_simulate: vblank timer overrun [ 1454.482954][ C0] vkms_vblank_simulate: vblank timer overrun [ 1454.853402][T17060] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3015'. [ 1456.567322][T17073] siw: device registration error -23 [ 1457.704204][ T6080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1457.763359][ T6080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1457.802607][ T6080] bond0 (unregistering): Released all slaves [ 1459.353424][T16901] team0: Port device team_slave_0 added [ 1459.371773][T16901] team0: Port device team_slave_1 added [ 1460.912106][ C1] vkms_vblank_simulate: vblank timer overrun [ 1461.477461][T16901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1461.477481][T16901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1461.477616][T16901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1461.486920][T16901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1461.486941][T16901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1461.486989][T16901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1462.549812][ C1] vkms_vblank_simulate: vblank timer overrun [ 1462.968188][ C1] vkms_vblank_simulate: vblank timer overrun [ 1463.583590][T17128] siw: device registration error -23 [ 1463.615886][ C1] vkms_vblank_simulate: vblank timer overrun [ 1464.578557][T12405] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1464.738625][T12405] usb 1-1: Using ep0 maxpacket: 32 [ 1464.741335][T12405] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 1464.741361][T12405] usb 1-1: config 0 has no interface number 0 [ 1464.774759][T12405] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1464.774792][T12405] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1464.774813][T12405] usb 1-1: Product: syz [ 1464.774841][T12405] usb 1-1: Manufacturer: syz [ 1464.774857][T12405] usb 1-1: SerialNumber: syz [ 1464.967471][T12405] usb 1-1: config 0 descriptor?? [ 1465.803169][T12405] smsc95xx v2.0.0 [ 1465.803189][T12405] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1465.803465][T12405] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -22 [ 1465.847998][T16901] hsr_slave_0: entered promiscuous mode [ 1465.891955][T16901] hsr_slave_1: entered promiscuous mode [ 1465.895760][T16901] debugfs: 'hsr0' already exists in 'hsr' [ 1465.895788][T16901] Cannot create hsr debugfs directory [ 1466.433712][T12405] usb 1-1: USB disconnect, device number 80 [ 1468.185375][ C1] vkms_vblank_simulate: vblank timer overrun [ 1468.245139][ T6080] hsr_slave_0: left promiscuous mode [ 1468.297398][ T6080] hsr_slave_1: left promiscuous mode [ 1468.298421][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1468.386574][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1468.450956][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1468.451001][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1468.625224][ C1] vkms_vblank_simulate: vblank timer overrun [ 1468.869564][T17149] No control pipe specified [ 1468.906883][ T6080] veth1_macvtap: left promiscuous mode [ 1468.906972][ T6080] veth0_macvtap: left promiscuous mode [ 1468.907177][ T6080] veth1_vlan: left promiscuous mode [ 1468.907325][ T6080] veth0_vlan: left promiscuous mode [ 1468.908806][T12153] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1468.956064][T12153] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1469.010119][T12153] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1469.013978][T12153] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1469.015868][T12153] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1469.048849][ T5804] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1469.056910][ T5804] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1469.060067][ T5804] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1469.062466][ T5804] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1469.064795][ T5804] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1469.931566][ C1] vkms_vblank_simulate: vblank timer overrun [ 1469.961571][ C1] vkms_vblank_simulate: vblank timer overrun [ 1469.992934][ C1] vkms_vblank_simulate: vblank timer overrun [ 1470.045329][ C1] vkms_vblank_simulate: vblank timer overrun [ 1470.086111][ C1] vkms_vblank_simulate: vblank timer overrun [ 1470.127231][ C1] vkms_vblank_simulate: vblank timer overrun [ 1470.158521][ C1] vkms_vblank_simulate: vblank timer overrun [ 1470.209184][ C1] vkms_vblank_simulate: vblank timer overrun [ 1470.293711][ C1] vkms_vblank_simulate: vblank timer overrun [ 1470.326907][ C1] vkms_vblank_simulate: vblank timer overrun [ 1470.393584][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.096166][ T5804] Bluetooth: hci1: command tx timeout [ 1471.185270][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.215801][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.246880][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.278669][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.310365][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.358823][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.411138][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.442524][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.525058][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.591550][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.637007][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.666661][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.698312][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.728688][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.758319][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.835749][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.862812][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.919711][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.949339][ C1] vkms_vblank_simulate: vblank timer overrun [ 1471.981267][ C1] vkms_vblank_simulate: vblank timer overrun [ 1472.013545][ C1] vkms_vblank_simulate: vblank timer overrun [ 1472.042178][ C1] vkms_vblank_simulate: vblank timer overrun [ 1472.083057][ C1] vkms_vblank_simulate: vblank timer overrun [ 1472.108736][ C1] vkms_vblank_simulate: vblank timer overrun [ 1472.447238][ C1] vkms_vblank_simulate: vblank timer overrun [ 1472.487449][ C1] vkms_vblank_simulate: vblank timer overrun [ 1472.519298][ C1] vkms_vblank_simulate: vblank timer overrun [ 1472.549662][ C1] vkms_vblank_simulate: vblank timer overrun [ 1472.579739][ C1] vkms_vblank_simulate: vblank timer overrun [ 1472.609818][ C1] vkms_vblank_simulate: vblank timer overrun [ 1472.673000][ C1] vkms_vblank_simulate: vblank timer overrun [ 1472.722681][ C1] vkms_vblank_simulate: vblank timer overrun [ 1472.773561][ C1] vkms_vblank_simulate: vblank timer overrun [ 1473.248769][ T5804] Bluetooth: hci1: command tx timeout [ 1474.356097][T17162] binder: BINDER_SET_CONTEXT_MGR already set [ 1474.356132][T17162] binder: 17161:17162 ioctl 4018620d 200000004a80 returned -16 [ 1474.356490][T17162] binder: 17161:17162 ioctl c0306201 0 returned -14 [ 1475.267019][ T5804] Bluetooth: hci1: command tx timeout [ 1477.355586][ T5804] Bluetooth: hci1: command tx timeout [ 1478.957675][T17173] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3039'. [ 1479.162081][T17176] netlink: 'syz.0.3040': attribute type 10 has an invalid length. [ 1479.315693][T17177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3040'. [ 1482.520706][ C0] vkms_vblank_simulate: vblank timer overrun [ 1484.467997][ C0] vkms_vblank_simulate: vblank timer overrun [ 1484.486126][T17196] No control pipe specified [ 1484.930206][ C0] vkms_vblank_simulate: vblank timer overrun [ 1486.948961][ C0] vkms_vblank_simulate: vblank timer overrun [ 1494.619126][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1507.969256][T12153] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1508.041618][T12153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1508.064677][T12153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1508.180509][T12153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1508.210048][T12153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1510.529958][T12153] Bluetooth: hci4: command tx timeout [ 1510.921481][T17231] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1510.990774][T17231] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1510.992575][T17231] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1510.994358][T17231] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1510.995671][T17231] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1511.410584][T17231] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1511.428233][T17231] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1511.430087][T17231] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1511.456039][T17231] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1511.456854][T17231] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1512.637359][T17231] Bluetooth: hci4: command tx timeout [ 1513.091231][T17231] Bluetooth: hci7: command tx timeout [ 1513.561870][T17231] Bluetooth: hci6: command tx timeout [ 1514.688421][T17231] Bluetooth: hci4: command tx timeout [ 1515.171652][T17231] Bluetooth: hci7: command tx timeout [ 1515.578355][T17231] Bluetooth: hci6: command tx timeout [ 1516.105385][ T6080] team0 (unregistering): Port device team_slave_1 removed [ 1516.801051][T17231] Bluetooth: hci4: command tx timeout [ 1517.259522][T17231] Bluetooth: hci7: command tx timeout [ 1517.648042][ T5804] Bluetooth: hci6: command tx timeout [ 1519.367547][ T5804] Bluetooth: hci7: command tx timeout [ 1520.087481][ T5804] Bluetooth: hci6: command tx timeout [ 1520.416593][ T6080] team0 (unregistering): Port device team_slave_0 removed [ 1531.526832][ T5804] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1531.583499][ T5804] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1531.652078][ T5804] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1531.689490][ T5804] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1531.693223][ T5804] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1534.123795][T17231] Bluetooth: hci8: command tx timeout [ 1540.790890][T17231] Bluetooth: hci8: command tx timeout [ 1542.843368][ T5804] Bluetooth: hci8: command tx timeout [ 1544.923220][ T5804] Bluetooth: hci8: command tx timeout [ 1556.054663][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1563.439193][T17231] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1563.503930][T17231] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1563.941072][T17231] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1563.942787][T12153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1563.943599][T12153] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1566.039387][T17231] Bluetooth: hci2: command tx timeout [ 1567.288550][ T5804] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1567.317289][ T5804] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1567.318953][ T5804] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1567.330398][ T5804] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1567.334337][ T5804] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1568.119036][ T5804] Bluetooth: hci2: command tx timeout [ 1568.221349][T17231] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1568.259228][T17231] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1568.263651][T17231] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1568.279180][T17231] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1568.282729][T17231] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1569.531641][ T5804] Bluetooth: hci9: command tx timeout [ 1570.198793][ T5804] Bluetooth: hci2: command tx timeout [ 1570.568656][ T5804] Bluetooth: hci0: command tx timeout [ 1571.580682][ T5804] Bluetooth: hci9: command tx timeout [ 1572.280662][ T5804] Bluetooth: hci2: command tx timeout [ 1572.948143][ T5804] Bluetooth: hci0: command tx timeout [ 1573.644289][ T5804] Bluetooth: hci9: command tx timeout [ 1575.057858][ T5804] Bluetooth: hci0: command tx timeout [ 1575.718521][T17231] Bluetooth: hci9: command tx timeout [ 1578.117449][ T5804] Bluetooth: hci0: command tx timeout [ 1580.107977][T17261] lo speed is unknown, defaulting to 1000 [ 1580.216887][T17301] lo speed is unknown, defaulting to 1000 [ 1580.872210][T17287] lo speed is unknown, defaulting to 1000 [ 1582.273350][T17294] lo speed is unknown, defaulting to 1000 [ 1587.805622][T17177] syz_tun (unregistering): left allmulticast mode [ 1592.133858][T17231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1592.155719][T17231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1592.164256][T17231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1592.267633][T17231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1592.290628][T17231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1594.604503][T17231] Bluetooth: hci1: command tx timeout [ 1597.134169][T17231] Bluetooth: hci1: command tx timeout [ 1599.153577][T17231] Bluetooth: hci1: command tx timeout [ 1601.413181][T17231] Bluetooth: hci1: command tx timeout [ 1602.773324][T17360] siw: device registration error -23 [ 1604.063678][T17336] lo speed is unknown, defaulting to 1000 [ 1611.352600][T17287] chnl_net:caif_netlink_parms(): no params data found [ 1612.488245][T17301] chnl_net:caif_netlink_parms(): no params data found [ 1616.239224][T17294] chnl_net:caif_netlink_parms(): no params data found [ 1617.487064][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1620.509673][T17287] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 1621.074592][T17301] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 1621.541860][T17405] siw: device registration error -23 [ 1626.438250][T17336] chnl_net:caif_netlink_parms(): no params data found [ 1627.326138][ T5804] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1627.382460][ T5804] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1627.385683][ T5804] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1627.387626][ T5804] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1627.388494][ T5804] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1628.680688][T17231] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1628.799833][T12153] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1628.802483][T12153] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1628.804187][T12153] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1628.805574][T12153] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1628.869389][T12153] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1628.899037][T12153] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1628.903449][T12153] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1628.909061][T12153] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1628.909885][T12153] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1629.645044][T17417] lo speed is unknown, defaulting to 1000 [ 1629.708899][T12153] Bluetooth: hci3: command tx timeout [ 1631.788102][ T5804] Bluetooth: hci3: command tx timeout [ 1632.587911][ T5804] Bluetooth: hci6: command tx timeout [ 1632.588524][ T5804] Bluetooth: hci4: command tx timeout [ 1633.867704][T17231] Bluetooth: hci3: command tx timeout [ 1634.677586][T17231] Bluetooth: hci4: command tx timeout [ 1634.677624][T17231] Bluetooth: hci6: command tx timeout [ 1636.077718][ T5804] Bluetooth: hci3: command tx timeout [ 1636.767132][T17231] Bluetooth: hci6: command tx timeout [ 1636.767170][T17231] Bluetooth: hci4: command tx timeout [ 1638.738756][T17452] siw: device registration error -23 [ 1640.080308][ T5804] Bluetooth: hci4: command tx timeout [ 1640.080345][ T5804] Bluetooth: hci6: command tx timeout [ 1649.746190][T17336] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg2": -EINTR [ 1650.027775][T17425] lo speed is unknown, defaulting to 1000 [ 1651.907253][ T5804] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1651.913165][T17424] lo speed is unknown, defaulting to 1000 [ 1651.925519][ T5804] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1651.946832][ T5804] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1651.948143][ T5804] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1651.949010][ T5804] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1654.269500][ T5804] Bluetooth: hci0: command tx timeout [ 1659.842369][T17231] Bluetooth: hci0: command tx timeout [ 1659.842568][T17231] Bluetooth: hci8: command 0x0406 tx timeout [ 1659.922326][T17468] lo speed is unknown, defaulting to 1000 [ 1661.993031][ T5804] Bluetooth: hci0: command tx timeout [ 1664.063715][ T5804] Bluetooth: hci0: command tx timeout [ 1664.543782][T17504] siw: device registration error -23 [ 1677.519117][T17417] chnl_net:caif_netlink_parms(): no params data found [ 1678.909283][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 1687.399191][T17468] chnl_net:caif_netlink_parms(): no params data found [ 1687.917521][T17231] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1687.992115][T17231] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1687.998962][T17231] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1688.077791][T17231] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1688.120269][T17231] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1690.316013][T12153] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1690.349941][T12153] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1690.456146][T12153] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1691.825359][T12153] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1691.877497][T17562] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1691.948080][T12153] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1691.951809][T17562] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1691.952688][T17562] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1691.954138][T17562] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1692.076466][T12153] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1695.867292][ T5804] Bluetooth: hci2: command tx timeout [ 1695.867960][ T5804] Bluetooth: hci1: command tx timeout [ 1695.962165][T17231] Bluetooth: hci7: command tx timeout [ 1698.016979][T17231] Bluetooth: hci1: command tx timeout [ 1698.017016][T17231] Bluetooth: hci2: command tx timeout [ 1698.017040][T17231] Bluetooth: hci7: command tx timeout [ 1700.106739][ T5804] Bluetooth: hci7: command tx timeout [ 1700.106776][ T5804] Bluetooth: hci2: command tx timeout [ 1700.106798][ T5804] Bluetooth: hci1: command tx timeout [ 1702.176343][T17562] Bluetooth: hci7: command tx timeout [ 1702.176396][T17562] Bluetooth: hci1: command tx timeout [ 1702.176436][T17562] Bluetooth: hci2: command tx timeout [ 1706.541107][T17562] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1706.554533][T17562] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1706.556456][T17562] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1706.557882][T17562] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1706.558867][T17562] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1707.148789][ T5804] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1707.187712][ T5804] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1707.189256][ T5804] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1707.190480][ T5804] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1707.191561][ T5804] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1708.605455][T17562] Bluetooth: hci3: command tx timeout [ 1709.295083][T17562] Bluetooth: hci4: command tx timeout [ 1710.764702][T17562] Bluetooth: hci3: command tx timeout [ 1711.374686][T17562] Bluetooth: hci4: command tx timeout [ 1712.814836][T17562] Bluetooth: hci3: command tx timeout [ 1713.454462][ T5804] Bluetooth: hci4: command tx timeout [ 1714.894108][T17562] Bluetooth: hci3: command tx timeout [ 1715.394201][ T39] INFO: task kworker/u8:18:6080 blocked for more than 143 seconds. [ 1715.394227][ T39] Not tainted syzkaller #0 [ 1715.394240][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1715.394252][ T39] task:kworker/u8:18 state:D stack:19112 pid:6080 tgid:6080 ppid:2 task_flags:0x4208060 flags:0x00080000 [ 1715.394313][ T39] Workqueue: netns cleanup_net [ 1715.394358][ T39] Call Trace: [ 1715.394370][ T39] [ 1715.394387][ T39] __schedule+0x16f3/0x4c20 [ 1715.394450][ T39] ? __lock_acquire+0xab9/0xd20 [ 1715.394474][ T39] ? __pfx___schedule+0x10/0x10 [ 1715.394528][ T39] ? schedule+0x91/0x360 [ 1715.394565][ T39] schedule+0x165/0x360 [ 1715.394600][ T39] schedule_timeout+0x9a/0x270 [ 1715.394633][ T39] ? __pfx_schedule_timeout+0x10/0x10 [ 1715.394680][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1715.394716][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1715.394749][ T39] ? wait_for_completion+0x267/0x5d0 [ 1715.394786][ T39] wait_for_completion+0x2bf/0x5d0 [ 1715.394837][ T39] ? __pfx_wait_for_completion+0x10/0x10 [ 1715.394881][ T39] ? __init_swait_queue_head+0xa9/0x150 [ 1715.394922][ T39] rcu_barrier+0x463/0x570 [ 1715.394967][ T39] netdev_run_todo+0x327/0xea0 [ 1715.395015][ T39] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1715.395043][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 1715.395064][ T39] ? unregister_netdevice_queue+0x1b3/0x380 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1715.395093][ T39] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1715.395116][ T39] ? batadv_meshif_vlan_put+0x131/0x1e0 [ 1715.395146][ T39] ? batadv_meshif_destroy_netlink+0x125/0x160 [ 1715.395179][ T39] default_device_exit_batch+0x81e/0x890 [ 1715.395218][ T39] ? __pfx___might_resched+0x10/0x10 [ 1715.395252][ T39] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1715.395284][ T39] ? cfg802154_pernet_exit+0x19/0xe0 [ 1715.395315][ T39] ? mutex_lock_nested+0x16a/0x1d0 [ 1715.395352][ T39] ? __pfx_default_device_exit_batch+0x10/0x10 [ 1715.395383][ T39] ops_undo_list+0x525/0x990 [ 1715.395423][ T39] ? __pfx_ops_undo_list+0x10/0x10 [ 1715.395452][ T39] ? rt_spin_unlock+0x150/0x200 [ 1715.395486][ T39] ? rt_spin_unlock+0x161/0x200 [ 1715.395518][ T39] cleanup_net+0x4de/0x820 [ 1715.395554][ [ 1715.395554][ T39] ? __pfx_cleanup_net+0x10/0x10 [ 1715.395589][ T39] ? _raw_spin_unlock_irq+0x23/0x50 [ 1715.395622][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 1715.395656][ T39] ? process_scheduled_works+0x9ef/0x17b0 [ 1715.395693][ T39] process_scheduled_works+0xae1/0x17b0 [ 1715.395762][ T39] ? __pfx_process_scheduled_works+0x10/0x10 [ 1715.395818][ T39] worker_thread+0x8a0/0xda0 [ 1715.395871][ T39] kthread+0x711/0x8a0 [ 1715.395912][ T39] ? __pfx_worker_thread+0x10/0x10 [ 1715.395931][ T39] ? __pfx_kthread+0x10/0x10 [ 1715.395954][ T39] ? rt_spin_unlock+0x150/0x200 [ 1715.395990][ T39] ? rt_spin_unlock+0x161/0x200 [ 1715.396013][ T39] ? __pfx_kthread+0x10/0x10 [ 1715.396039][ T39] ret_from_fork+0x4bc/0x870 [ 1715.396074][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1715.396114][ T39] ? __switch_to_asm+0x39/0x70 [ 1715.396141][ T39] ? __switch_to_asm+0x33/0x70 [ 1715.396167][ T39] ? __pfx_kthread+0x10/0x10 [ 1715.396194][ T39] ret_from_fork_asm+0x1a/0x30 [ 1715.396241][ T39] [ 1715.396269][ T39] INFO: task syz-executor:16319 blocked for more than 143 seconds. [ 1715.396283][ T39] Not tainted syzkaller #0 [ 1715.396294][ T39] Blocked by coredump. [ 1715.396301][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1715.396311][ T39] task:syz-executor state:D stack:20248 pid:16319 tgid:16319 ppid:1 task_flags:0x40054c flags:0x00080003 [ 1715.396365][ T39] Call Trace: [ 1715.396372][ T39] [ 1715.396385][ T39] __schedule+0x16f3/0x4c20 [ 1715.396430][ T39] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1715.396473][ T39] ? __pfx___schedule+0x10/0x10 [ 1715.396529][ T39] rt_mutex_schedule+0x77/0xf0 [ 1715.396556][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1715.396608][ T39] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 1715.396638][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 1715.396665][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1715.396691][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1715.396714][ T39] ? __lock_acquire+0xab9/0xd20 [ 1715.396746][ T39] ? rcu_barrier+0x4c/0x570 [ 1715.396785][ T39] ? rcu_barrier+0x4c/0x570 [ 1715.396809][ T39] mutex_lock_nested+0x16a/0x1d0 [ 1715.396832][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1715.396859][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 1715.396884][ T39] rcu_barrier+0x4c/0x570 [ 1715.396915][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 1715.396939][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 1715.396964][ T39] netdev_run_todo+0x327/0xea0 [ 1715.397010][ T39] ? __pfx_netif_state_change+0x10/0x10 [ 1715.397038][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 1715.397059][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1715.397102][ T39] ? netdev_state_change+0x1ca/0x220 [ 1715.397134][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 1715.397160][ T39] tun_chr_close+0x13f/0x1c0 [ 1715.397187][ T39] __fput+0x45b/0xa80 [ 1715.397228][ T39] task_work_run+0x1d4/0x260 [ 1715.397259][ T39] ? __pfx_task_work_run+0x10/0x10 [ 1715.397285][ T39] ? do_exit+0x6b0/0x2300 [ 1715.397311][ T39] ? do_exit+0x6b0/0x2300 [ 1715.397341][ T39] do_exit+0x6b5/0x2300 [ 1715.397365][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1715.397410][ T39] ? __pfx_do_exit+0x10/0x10 [ 1715.397433][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1715.397458][ T39] ? rt_spin_lock+0x1c1/0x3e0 [ 1715.397500][ T39] do_group_exit+0x21c/0x2d0 [ 1715.397526][ T39] ? rt_spin_unlock+0x161/0x200 [ 1715.397556][ T39] get_signal+0x125d/0x1310 [ 1715.397611][ T39] arch_do_signal_or_restart+0xa0/0x790 [ 1715.397645][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1715.397694][ T39] ? exit_to_user_mode_loop+0x40/0x130 [ 1715.397720][ T39] exit_to_user_mode_loop+0x72/0x130 [ 1715.397744][ T39] do_syscall_64+0x2bd/0xfa0 [ 1715.397792][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1715.397825][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.397848][ T39] ? clear_bhb_loop+0x60/0xb0 [ 1715.397876][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.397899][ T39] RIP: 0033:0x7f229792d8dc [ 1715.397918][ T39] RSP: 002b:00007ffe9096a9b0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1715.397940][ T39] RAX: fffffffffffffe00 RBX: 00000000ffffffff RCX: 00007f229792d8dc [ 1715.397956][ T39] RDX: 0000000000000030 RSI: 00007ffe9096aa70 RDI: 00000000000000f9 [ 1715.397971][ T39] RBP: 00007ffe9096aa1c R08: 0000000000000000 R09: 00007ffe9096a727 [ 1715.397993][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000009 [ 1715.398007][ T39] R13: 000055558563f590 R14: 0000000000161fef R15: 00007ffe9096aa70 [ 1715.398044][ T39] [ 1715.398067][ T39] INFO: task syz.2.3042:17187 blocked for more than 143 seconds. [ 1715.398082][ T39] Not tainted syzkaller #0 [ 1715.398093][ T39] Blocked by coredump. [ 1715.398101][ T39] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1715.398112][ T39] task:syz.2.3042 state:D stack:22536 pid:17187 tgid:17183 ppid:5809 task_flags:0x40054c flags:0x00080001 [ 1715.398173][ T39] Call Trace: [ 1715.398180][ T39] [ 1715.398195][ T39] __schedule+0x16f3/0x4c20 [ 1715.398267][ T39] ? __pfx___schedule+0x10/0x10 [ 1715.398323][ T39] rt_mutex_schedule+0x77/0xf0 [ 1715.398348][ T39] rt_mutex_slowlock_block+0x5ba/0x6d0 [ 1715.398389][ T39] ? rt_mutex_slowlock_block+0x351/0x6d0 [ 1715.398420][ T39] rt_mutex_slowlock+0x2b1/0x6e0 [ 1715.398448][ T39] ? rt_mutex_slowlock+0x1c9/0x6e0 [ 1715.398475][ T39] ? __pfx_rt_mutex_slowlock+0x10/0x10 [ 1715.398498][ T39] ? __lock_acquire+0xab9/0xd20 [ 1715.398548][ T39] ? rcu_barrier+0x4c/0x570 [ 1715.398595][ T39] ? rcu_barrier+0x4c/0x570 [ 1715.398623][ T39] mutex_lock_nested+0x16a/0x1d0 [ 1715.398648][ T39] ? __pfx_rt_mutex_slowunlock+0x10/0x10 [ 1715.398690][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 1715.398733][ T39] rcu_barrier+0x4c/0x570 [ 1715.398768][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 1715.398795][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 1715.398823][ T39] netdev_run_todo+0x327/0xea0 [ 1715.398851][ T39] ? __pfx_netif_state_change+0x10/0x10 [ 1715.398880][ T39] ? __pfx_netdev_run_todo+0x10/0x10 [ 1715.398902][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1715.398958][ T39] ? netdev_state_change+0x1ca/0x220 [ 1715.398995][ T39] ? __pfx_tun_chr_close+0x10/0x10 [ 1715.399021][ T39] tun_chr_close+0x13f/0x1c0 [ 1715.399047][ T39] __fput+0x45b/0xa80 [ 1715.399086][ T39] task_work_run+0x1d4/0x260 [ 1715.399115][ T39] ? __pfx_task_work_run+0x10/0x10 [ 1715.399142][ T39] ? do_exit+0x6b0/0x2300 [ 1715.399166][ T39] ? do_exit+0x6b0/0x2300 [ 1715.399196][ T39] do_exit+0x6b5/0x2300 [ 1715.399220][ T39] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1715.399266][ T39] ? __pfx_do_exit+0x10/0x10 [ 1715.399288][ T39] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1715.399312][ T39] ? rt_spin_lock+0x1c1/0x3e0 [ 1715.399353][ T39] do_group_exit+0x21c/0x2d0 [ 1715.399379][ T39] ? rt_spin_unlock+0x161/0x200 [ 1715.399422][ T39] get_signal+0x125d/0x1310 [ 1715.399470][ T39] arch_do_signal_or_restart+0xa0/0x790 [ 1715.399500][ T39] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1715.399526][ T39] ? __pfx_sock_ioctl+0x10/0x10 [ 1715.399564][ T39] ? exit_to_user_mode_loop+0x40/0x130 [ 1715.399588][ T39] exit_to_user_mode_loop+0x72/0x130 [ 1715.399610][ T39] do_syscall_64+0x2bd/0xfa0 [ 1715.399639][ T39] ? lockdep_hardirqs_on+0x9c/0x150 [ 1715.399668][ T39] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.399687][ T39] ? clear_bhb_loop+0x60/0xb0 [ 1715.399712][ T39] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.399731][ T39] RIP: 0033:0x7f9ae344eec9 [ 1715.399746][ T39] RSP: 002b:00007f9ae166c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1715.399766][ T39] RAX: ffffffffffffff9c RBX: 00007f9ae36a6180 RCX: 00007f9ae344eec9 [ 1715.399780][ T39] RDX: 0000200000000000 RSI: 0000000000008b19 RDI: 0000000000000003 [ 1715.399794][ T39] RBP: 00007f9ae34d1f91 R08: 0000000000000000 R09: 0000000000000000 [ 1715.399806][ T39] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1715.399818][ T39] R13: 00007f9ae36a6218 R14: 00007f9ae36a6180 R15: 00007ffcd70a4658 [ 1715.399851][ T39] [ 1715.399885][ T39] [ 1715.399885][ T39] Showing all locks held in the system: [ 1715.399899][ T39] 3 locks held by kworker/u8:1/13: [ 1715.399910][ T39] #0: ffff88814d555138 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1715.399969][ T39] #1: ffffc90000127ba0 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1715.400031][ T39] #2: ffffffff8ea77978 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 1715.400083][ T39] 3 locks held by rcuc/1/28: [ 1715.400095][ T39] 1 lock held by khungtaskd/39: [ 1715.400106][ T39] #0: ffffffff8d7aa4c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1715.400174][ T39] 3 locks held by kworker/u8:14/4236: [ 1715.400186][ T39] #0: ffff88813fe29938 ((wq_completion)events_unbound#2){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1715.400247][ T39] #1: ffffc9000e947ba0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1715.400303][ T39] #2: ffffffff8ea77978 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1715.400349][ T39] 1 lock held by dhcpcd/5465: [ 1715.400360][ T39] #0: ffffffff8ea77978 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x323/0x1b50 [ 1715.400416][ T39] 2 locks held by getty/5560: [ 1715.400426][ T39] #0: ffff88823bf6e8a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1715.400474][ T39] #1: ffffc90003e8b2e0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x444/0x1400 [ 1715.400532][ T39] 3 locks held by kworker/1:5/5888: [ 1715.400544][ T39] 4 locks held by kworker/u8:18/6080: [ 1715.400555][ T39] #0: ffff88801a294938 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 1715.400609][ T39] #1: ffffc90005d4fba0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 1715.400665][ T39] #2: ffffffff8ea6aa60 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x820 [ 1715.400716][ T39] #3: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1715.400772][ T39] 1 lock held by syz-executor/16319: [ 1715.400783][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1715.400836][ T39] 1 lock held by syz-executor/16901: [ 1715.400848][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1715.400900][ T39] 1 lock held by syz.0.3040/17177: [ 1715.400911][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1715.400962][ T39] 1 lock held by syz.2.3042/17187: [ 1715.400973][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1715.401032][ T39] 2 locks held by syz-executor/17261: [ 1715.401043][ T39] #0: ffffffff8ea6aa60 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x337/0x4e0 [ 1715.401113][ T39] #1: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1715.401168][ T39] 1 lock held by syz-executor/17287: [ 1715.401180][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1715.401235][ T39] 1 lock held by syz-executor/17294: [ 1715.401247][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1715.401303][ T39] 1 lock held by syz-executor/17301: [ 1715.401314][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1715.401370][ T39] 1 lock held by syz-executor/17336: [ 1715.401382][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1715.401439][ T39] 1 lock held by syz-executor/17417: [ 1715.401451][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1715.401507][ T39] 1 lock held by syz-executor/17424: [ 1715.401518][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1715.401573][ T39] 3 locks held by syz-executor/17425: [ 1715.401586][ T39] 2 locks held by syz-executor/17468: [ 1715.401598][ T39] #0: ffffffff8ef78008 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 1715.401659][ T39] #1: ffffffff8ea77978 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 1715.401713][ T39] 1 lock held by syz.7.3106/17539: [ 1715.401724][ T39] #0: ffffffff8d7afe70 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 1715.401779][ T39] 1 lock held by syz-executor/17549: [ 1715.401791][ T39] #0: ffffffff8ea77978 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1715.401840][ T39] 1 lock held by syz-executor/17555: [ 1715.401852][ T39] #0: ffffffff8ea77978 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 1715.401905][ T39] 1 lock held by syz-executor/17556: [ 1715.401917][ T39] #0: ffffffff8ea77978 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8e9/0x1c80 [ 1715.401972][ T39] 1 lock held by syz-executor/17575: [ 1715.401993][ T39] #0: ffffffff8ea77978 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1715.402042][ T39] 1 lock held by syz-executor/17580: [ 1715.402054][ T39] #0: ffffffff8ea77978 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 1715.402103][ T39] [ 1715.402109][ T39] ============================================= [ 1715.402109][ T39] [ 1715.402119][ T39] NMI backtrace for cpu 1 [ 1715.402137][ T39] CPU: 1 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1715.402157][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1715.402169][ T39] Call Trace: [ 1715.402177][ T39] [ 1715.402185][ T39] dump_stack_lvl+0x189/0x250 [ 1715.402213][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1715.402236][ T39] ? __pfx__printk+0x10/0x10 [ 1715.402273][ T39] nmi_cpu_backtrace+0x39e/0x3d0 [ 1715.402301][ T39] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1715.402328][ T39] ? __pfx__printk+0x10/0x10 [ 1715.402355][ T39] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1715.402386][ T39] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1715.402414][ T39] watchdog+0xf60/0xfa0 [ 1715.402442][ T39] ? watchdog+0x1e2/0xfa0 [ 1715.402470][ T39] kthread+0x711/0x8a0 [ 1715.402496][ T39] ? __pfx_watchdog+0x10/0x10 [ 1715.402517][ T39] ? __pfx_kthread+0x10/0x10 [ 1715.402538][ T39] ? rt_spin_unlock+0x150/0x200 [ 1715.402565][ T39] ? rt_spin_unlock+0x161/0x200 [ 1715.402588][ T39] ? __pfx_kthread+0x10/0x10 [ 1715.402612][ T39] ret_from_fork+0x4bc/0x870 [ 1715.402653][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1715.402688][ T39] ? __switch_to_asm+0x39/0x70 [ 1715.402712][ T39] ? __switch_to_asm+0x33/0x70 [ 1715.402736][ T39] ? __pfx_kthread+0x10/0x10 [ 1715.402759][ T39] ret_from_fork_asm+0x1a/0x30 [ 1715.402802][ T39] [ 1715.402809][ T39] Sending NMI from CPU 1 to CPUs 0: [ 1715.402832][ C0] NMI backtrace for cpu 0 [ 1715.402846][ C0] CPU: 0 UID: 0 PID: 17425 Comm: syz-executor Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1715.402865][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1715.402875][ C0] RIP: 0010:__this_cpu_preempt_check+0x0/0x20 [ 1715.402895][ C0] Code: 36 2a 6c f6 eb a7 e8 9f e4 ff ff 66 66 66 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 89 fe 48 c7 c7 60 4e 3f 8b e9 bd fe ff ff cc cc cc [ 1715.402910][ C0] RSP: 0018:ffffc90003be71b8 EFLAGS: 00000096 [ 1715.402924][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 8b0f2383a70d2500 [ 1715.402936][ C0] RDX: 0000000000000000 RSI: ffff8880240fe5d8 RDI: ffffffff8d03d5bc [ 1715.402948][ C0] RBP: ffffffff8ac87b41 R08: 0000000000000000 R09: ffffffff8ac87b41 [ 1715.402960][ C0] R10: dffffc0000000000 R11: fffffbfff1deecef R12: 0000000000000002 [ 1715.402971][ C0] R13: ffffffff8d7aa4c0 R14: 0000000000000000 R15: 0000000000000246 [ 1715.402983][ C0] FS: 0000000000000000(0000) GS:ffff888126bc9000(0000) knlGS:0000000000000000 [ 1715.402998][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1715.403009][ C0] CR2: 00007fd8b2204e80 CR3: 0000000034b1e000 CR4: 00000000003526f0 [ 1715.403025][ C0] Call Trace: [ 1715.403031][ C0] [ 1715.403037][ C0] lock_acquire+0x130/0x360 [ 1715.403059][ C0] rt_spin_lock+0x1dd/0x3e0 [ 1715.403079][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 1715.403100][ C0] ? __pfx_rt_spin_lock+0x10/0x10 [ 1715.403125][ C0] __put_partials+0x55/0x170 [ 1715.403147][ C0] ? put_cpu_partial+0x15f/0x210 [ 1715.403170][ C0] __slab_free+0x29e/0x370 [ 1715.403193][ C0] ? __phys_addr+0xd3/0x180 [ 1715.403212][ C0] ? ___cache_free+0x27/0x330 [ 1715.403230][ C0] qlist_free_all+0x97/0x140 [ 1715.403262][ C0] kasan_quarantine_reduce+0x148/0x160 [ 1715.403290][ C0] __kasan_slab_alloc+0x22/0x80 [ 1715.403307][ C0] __kmalloc_cache_noprof+0x181/0x6c0 [ 1715.403325][ C0] ? kobject_uevent_env+0x27f/0x8c0 [ 1715.403345][ C0] ? __pfx_dev_uevent_name+0x10/0x10 [ 1715.403361][ C0] kobject_uevent_env+0x27f/0x8c0 [ 1715.403384][ C0] device_del+0x73e/0x8e0 [ 1715.403409][ C0] ? __pfx_device_del+0x10/0x10 [ 1715.403429][ C0] ? netdev_unregister_kobject+0x344/0x450 [ 1715.403451][ C0] unregister_netdevice_many_notify+0x1a57/0x1fe0 [ 1715.403477][ C0] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1715.403500][ C0] ? queue_delayed_work_on+0x11a/0x280 [ 1715.403535][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1715.403563][ C0] ? queue_delayed_work_on+0x1f7/0x280 [ 1715.403582][ C0] unregister_netdevice_queue+0x33c/0x380 [ 1715.403600][ C0] ? __pfx_queue_delayed_work_on+0x10/0x10 [ 1715.403619][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1715.403638][ C0] ? rt_spin_unlock+0x161/0x200 [ 1715.403663][ C0] __tun_detach+0xe4d/0x1600 [ 1715.403692][ C0] ? __tun_detach+0x93b/0x1600 [ 1715.403715][ C0] ? __pfx_tun_chr_close+0x10/0x10 [ 1715.403736][ C0] tun_chr_close+0x10d/0x1c0 [ 1715.403757][ C0] __fput+0x45b/0xa80 [ 1715.403785][ C0] task_work_run+0x1d4/0x260 [ 1715.403826][ C0] ? __pfx_task_work_run+0x10/0x10 [ 1715.403849][ C0] ? do_exit+0x6b0/0x2300 [ 1715.403889][ C0] ? do_exit+0x6b0/0x2300 [ 1715.403919][ C0] do_exit+0x6b5/0x2300 [ 1715.403944][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1715.403981][ C0] ? __pfx_do_exit+0x10/0x10 [ 1715.404003][ C0] ? rt_mutex_slowunlock+0x493/0x8a0 [ 1715.404027][ C0] ? rt_spin_lock+0x1c1/0x3e0 [ 1715.404057][ C0] do_group_exit+0x21c/0x2d0 [ 1715.404081][ C0] ? rt_spin_unlock+0x161/0x200 [ 1715.404106][ C0] get_signal+0x125d/0x1310 [ 1715.404146][ C0] arch_do_signal_or_restart+0xa0/0x790 [ 1715.404175][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1715.404211][ C0] ? exit_to_user_mode_loop+0x40/0x130 [ 1715.404240][ C0] exit_to_user_mode_loop+0x72/0x130 [ 1715.404259][ C0] do_syscall_64+0x2bd/0xfa0 [ 1715.404288][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1715.404317][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.404335][ C0] ? clear_bhb_loop+0x60/0xb0 [ 1715.404357][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.404376][ C0] RIP: 0033:0x7f9426e10d5c [ 1715.404391][ C0] Code: Unable to access opcode bytes at 0x7f9426e10d32. [ 1715.404401][ C0] RSP: 002b:00007fff2ce21660 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1715.404421][ C0] RAX: 000000000000003c RBX: 00007f9427b94620 RCX: 00007f9426e10d5c [ 1715.404435][ C0] RDX: 000000000000003c RSI: 00007f9427b94670 RDI: 0000000000000003 [ 1715.404448][ C0] RBP: 0000000000000000 R08: 00007fff2ce216b4 R09: 000000000000000c [ 1715.404460][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 1715.404472][ C0] R13: 0000000000000000 R14: 00007f9427b94670 R15: 0000000000000000 [ 1715.404494][ C0] [ 1715.534118][T17562] Bluetooth: hci4: command tx timeout [ 1715.684149][ T39] Kernel panic - not syncing: hung_task: blocked tasks [ 1715.684172][ T39] CPU: 0 UID: 0 PID: 39 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 1715.684197][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1715.684212][ T39] Call Trace: [ 1715.684222][ T39] [ 1715.684234][ T39] dump_stack_lvl+0x99/0x250 [ 1715.684276][ T39] ? __asan_memcpy+0x40/0x70 [ 1715.684310][ T39] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1715.684338][ T39] ? __pfx__printk+0x10/0x10 [ 1715.684381][ T39] vpanic+0x237/0x6d0 [ 1715.684403][ T39] ? __pfx_vpanic+0x10/0x10 [ 1715.684425][ T39] ? preempt_schedule_common+0x83/0xd0 [ 1715.684469][ T39] panic+0xb9/0xc0 [ 1715.684489][ T39] ? __pfx_panic+0x10/0x10 [ 1715.684513][ T39] ? preempt_schedule_thunk+0x16/0x30 [ 1715.684557][ T39] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1715.684590][ T39] watchdog+0xf9f/0xfa0 [ 1715.684622][ T39] ? watchdog+0x1e2/0xfa0 [ 1715.684655][ T39] kthread+0x711/0x8a0 [ 1715.684687][ T39] ? __pfx_watchdog+0x10/0x10 [ 1715.684712][ T39] ? __pfx_kthread+0x10/0x10 [ 1715.684734][ T39] ? rt_spin_unlock+0x150/0x200 [ 1715.684768][ T39] ? rt_spin_unlock+0x161/0x200 [ 1715.684795][ T39] ? __pfx_kthread+0x10/0x10 [ 1715.684823][ T39] ret_from_fork+0x4bc/0x870 [ 1715.684861][ T39] ? __pfx_ret_from_fork+0x10/0x10 [ 1715.684904][ T39] ? __switch_to_asm+0x39/0x70 [ 1715.684934][ T39] ? __switch_to_asm+0x33/0x70 [ 1715.684961][ T39] ? __pfx_kthread+0x10/0x10 [ 1715.684989][ T39] ret_from_fork_asm+0x1a/0x30 [ 1715.685052][ T39] [ 1715.685437][ T39] Kernel Offset: disabled