last executing test programs: 31.295200133s ago: executing program 1 (id=769): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000080)=0x3, 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_clone3(&(0x7f0000000700)={0x8a0000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) move_mount(r3, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(r3, &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) unshare(0x22020400) open_tree(r2, &(0x7f0000000300)='./file1\x00', 0x8101) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fdinfo/4\x00') r5 = open(&(0x7f0000000080)='./file1\x00', 0x12b842, 0x0) sendfile(r5, r4, 0x0, 0x80000000) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYBLOB='\x00\x008\x00'/20, @ANYRES32=r6, @ANYRES32=r3, @ANYBLOB="04000000020000000300"/28], 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @empty}], 0x10) sendto$inet6(r0, &(0x7f0000000000)='X', 0x1, 0x20000000, &(0x7f0000000080)={0xa, 0x4e23, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}, 0x6}, 0x1c) write$binfmt_register(r5, &(0x7f0000000340)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, '', 0x3a, '#', 0x3a, './file0', 0x3a, [0x46, 0x43, 0x43, 0x50, 0x46, 0x46, 0x50, 0x50]}, 0x30) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 30.31414864s ago: executing program 1 (id=773): socket$kcm(0x10, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000b40), 0x8100, 0x0) socket$kcm(0x2, 0x200000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x30004885) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @local}, 0x1c) listen(r1, 0x100101) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prctl$PR_CAPBSET_DROP(0x1c, 0xffffffffffffffff) sched_setscheduler(0x0, 0x1, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r3, 0x0, 0x0, 0x0, 0x0) fcntl$setown(r3, 0x8, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/power/image_size', 0x159102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ppoll(&(0x7f0000000200)=[{r5, 0x856d}], 0x1, 0x0, 0x0, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FS_IOC_GETFSMAP(r2, 0xc0c0583b, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) 29.738119314s ago: executing program 1 (id=775): r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) (async) syz_usb_disconnect(r0) (async) syz_open_procfs(0x0, &(0x7f0000000040)='maps\x00') 20.454691535s ago: executing program 3 (id=798): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x4}}}}]}]}, 0x70}}, 0x20040000) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000020000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}}, 0x0) 20.221591988s ago: executing program 3 (id=799): socket(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, 0x0, 0x0) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000006640)={0x68, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="ab"}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x0, 0x0, 0x0, 0x0, {0x2}, 0x400}}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x10, 0x1, 0x1, 0x0, {0xffffffffffffffff, 0x6, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x800, 0x1, 0x1}}]}, 0x68}}, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x28, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010200000000000000000800000008000300", @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x700}, 0x0) 19.924568476s ago: executing program 3 (id=800): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff060060000100000056000000", 0x1c}], 0x1) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) r2 = accept4$alg(r1, 0x0, 0x0, 0x0) cachestat(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x8000}, &(0x7f00000001c0), 0x0) sendmmsg$alg(r2, &(0x7f0000002400)=[{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000040)="787a921db1f5", 0x6}], 0x1, 0x0, 0x0, 0x8048000}], 0x1, 0x2000c004) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000000c0)="39000000130003470fbb65e1c3e4ffff0600600001000000", 0x18}, {&(0x7f0000000280)="044965cad0dc955c16556f38932c625ab96418c174d330b03458f7b0496472fe704d6665fca58512558f53029c59d84d2e384e12eb13f236dbd4e4589139d58c4cc52079d3114cbd4950ebc8b72d3279f57ffa603ed1d3bf035565df49b3f03f11633dcb329036ab61efe40f8464f3fcf9223448dad352e87631952ade5ecf050197c160af0414d84a8c43a11125094d313c4600430175044fcb8ab1c0d47a6e67475f447a7ac0196f1ebc727fa88289beee4257b98879f7aac244bd7e3cc3a0e359e22abb9b08c642", 0xc9}], 0x2) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000500)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @local}, {{0x4001, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000080)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r3, @ANYBLOB="05"], 0x0) 19.278593869s ago: executing program 2 (id=805): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f04000000480100100000000019002b000a00020014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) 19.075680475s ago: executing program 2 (id=806): r0 = dup(0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000000206010800000000fffff00000000000050001000600000005000500000000000900020073797a3200000000050004000000000014000780"], 0x5c}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, &(0x7f00000000c0)="b95e0800000f3264652e360f12e666ba4100b002ee8fea7810c60e00000066b81d018ed80f01d166b80f010f00d0b93e0300000f320f1c7648b8010000000f01d9", 0x41}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x1e, 0x1, 0x0) connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r6, 0x1, 0x0, 0xffffffa6, {{}, {0x0, 0x6}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040), 0x0) r7 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x28, r7, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x40}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x6}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000010}, 0x8000000) pwritev2(0xffffffffffffffff, &(0x7f0000002680)=[{&(0x7f00000003c0)='l', 0x1}], 0x1, 0x3534, 0x1000, 0x10) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 18.556134075s ago: executing program 2 (id=807): syz_clone3(&(0x7f0000000480)={0x42000200, 0x0, 0x0, 0x0, {0x19}, &(0x7f0000000340)=""/157, 0x9d, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00') r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000c80)=ANY=[@ANYBLOB="12010000000000406d0422c2000000000001090224000100000000090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000e40)=@base={0x17, 0x0, 0x4, 0xfb, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00'}, 0x10) syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="00000b0000000b00304d9481"], 0x0, 0x0, 0x0, 0x0}, 0x0) getdents(r0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'xfrm0\x00', 0x0}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a010400000000000000000200020248000480440001800c0001007061796c6f616400340002800800044000000000080005400000001408000340000000040800024000000000080007400000000408000840000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r4}, [@MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x0, 0x0, 0x0, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, 0x0, 0x0) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r7, 0x40045564, 0x3) r8 = dup(r7) write$uinput_user_dev(r8, &(0x7f0000000380)={'syz0\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r8, 0x5501) write$uinput_user_dev(r8, &(0x7f0000000800)={'syz0\x00', {}, 0x0, [], [], [0x0, 0x0, 0x0, 0x3]}, 0x45c) syz_open_dev$sg(0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000027c00000400000014000180060006008847000005001c"], 0x2c}}, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000200)={0x0, 0x4, 0xa8, 0x6, @buffer={0x0, 0xe5, &(0x7f0000000000)=""/229}, &(0x7f0000000100)="cee3e535c861031e0ec4a4120828b4b8a8686b2d6290f036dc07afe669c4c7224884a87b9d06152c358405706bda3a8b9e4a1e743496e238ec6b1b2a94202359650d16febb745272c1be5a6dd6de6d27a11b0fa8ed28981947c9284d9df85e857510870ce7e969d3776bf3846155e7f40a43038bcdb4d0f69fe02ba4d42176dd4391eae8a49617c7a536e4d7af8e9bae6c2b21a9e411405e47b47e562121d2ad4583314fec1f3b12", &(0x7f0000000500)=""/4096, 0x6, 0x20, 0x2, &(0x7f00000001c0)}) 18.267744973s ago: executing program 3 (id=808): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000005380)="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", 0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1, {0x7, 0x26, 0x0, 0x11100}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0x0, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0xee01}}, {0x0, 0x18}}}, 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x807}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x90}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r3, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_cmd={0x2e, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0xc8841, 0x0) write$FUSE_POLL(r4, &(0x7f0000000100)={0x18}, 0x18) writev(r4, &(0x7f0000000300)=[{&(0x7f0000004380)="db", 0x1}], 0x1) dup3(r4, r0, 0x0) 17.806422795s ago: executing program 3 (id=809): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0xdc2, 0x0) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/110, 0x6e}], 0x1) 17.480143656s ago: executing program 3 (id=810): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000340), 0x13f}}, 0x20) socket$inet6_udplite(0xa, 0x2, 0x88) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000006c0), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000680)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x2, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000b80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000b40), 0x106}}, 0x20) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x35, 0x701, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) recvmsg(r3, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) write$binfmt_aout(r2, &(0x7f0000000240)=ANY=[], 0x920) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r4, 0x25, &(0x7f0000000200)={0x2}) ioctl$PIO_FONTX(r4, 0x4b6c, &(0x7f0000000200)={0x18, 0x17, &(0x7f0000000bc0)="394a98ba98113c71228b89642ff07380c103e25fe9036b2c38ec29aafc4a0affeb6a5c85acb8f421387d0d6b517163b48396e8b4718fd0f25a23ac5b61f15e61aca050d191bc16484eb72b0813070b8b52db440bf7b9885cd23fc2c4301d8fae5eff47f0e63474086e62fd3f064ed7e1a42a89f50d172a218c7f7ba935e79a77d854fef20d783a63cb1a963e43657f6823532a1e1f91186f0c4139a0d7df7616fa87520b1f966960bf9242b0f8c7064471f327abb2d11e676bffe07d39147ade270e68557bbbca02c2e0ed6a2d42623554cb8ce4b2b4ea588fdca9e56fb233b5ad693adf2081df6863b1728b22c5dbd9d7b537382e42c3aaedf911b0bc3ce734ba0fc5391184707955d6ba32d0487e99e1b6edba6a97f7ee370857d5d42947fce3caf1a8009d59de27a14b9f32a89fd1eb770ecf006e1343a3085feb403d50ee8fef2ac75e09f93e7d0128e45eca984abad580963629c380758e608b4b5dce13ca103973bcaf92878c1033cff50e6dac873a8a1e68feb8ee02ac8b2c43a0fc68db717f1fd9a99eab046e46c901eeace732570fad567f13b0a6d271c2d9d03d55152b87b7cf30aa87cc6d18267ee456d3e4e7fadd073f5136a0342f81386b84d60db62fcf1538d865e40ba5a6bf717f1eb0fdbd25ffce6d08aef49529159e204824e06ffcb37c685e35b92330e963e79fa50412b72d07109044b7d654956646933d7127c0156e751ce327b9e63ee3d6a02e75c3725bee7c1d4542474a209ce7b4a45aeeb117b53c9054ff89ae70628a4c849715a08b1ba6184a75f72c5294806932cf9ba89c94a6a36fd9c46c42eb06eb44cd80a6269b9f42a5d4e967953697d294529019a8729ae60cfff28f7bbfde8f16ac70237627dbcb73b5ba301aff0d5917e4bf37d75d1ff16b0f17dd9da75480ffc425f0aea99bf9ceb0c9a8bb5f4f59888228a16a6cc86167d1da85cae45b8f305a367f71588c7cc68e3148430e92b4d32bd7e1117b47c0989e7335d0104c290197ab3ce63f5964e55fb4da8d59e85773afefca9d393238224432d88f9407439b4fff8f8ecbeb749f6e59fa0f5f7ae227f70f324d9767cf228768ce1c9caab787641cd99134d5e11cc3a5f2fbb8c1fdae96cb3f2d25f03ffe33ac748c82d23b80313ea066020dcb6cfee5f961a31737b6be7735226a830ac9bc011af22d6d571e6a07c9ea603f949c808a81a82a1fc1fa0a06922a9714f4186006b9af14d07988820dfab09f61d1ef63d5c6b9c3bbc15a085571c0d005026dbe54edd9b9d1f8d125b3c0a6eba0c2f9cbfb571aed96e36f298b84faa7e719faf794287253a90a2f09185ecb2eed3defc75d26e299f726a06acdf22e04e0188cfa5d2657b1bb1aee5d4a40dfca694a6c23cab7d5cd79289a81b684e685ea5dd32b29b5c939411baf835d4649b0e9d80b93070ca9cce91c"}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000900), 0x111}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r7 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) shmat(r7, &(0x7f0000ffc000/0x3000)=nil, 0x4000) shmctl$IPC_RMID(r7, 0x0) remap_file_pages(&(0x7f0000519000/0x1000)=nil, 0x1000, 0xd, 0x0, 0x4000) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000580)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000004c0), 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000a80)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000a40), 0x111}}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000630134000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280), 0x106}}, 0x20) 16.598360452s ago: executing program 1 (id=776): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x201, &(0x7f0000000080)={0x0}) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000680)="89000000120081ae08060cdc030ec0007f13cff70200000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dcff0f1e32ef09000900ec08120800030006010000bdad446b9bbc7a46e3888285dcdf12f21308f868fece01955fed0009d706000000000000", 0x78}], 0x1}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000003080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x6, 0x1, 0x0, 0x11}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfffffffc}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [0x0, 0x40000], [], 'veth0_to_hsr\x00', 'veth1_vlan\x00'}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x9220d18c8277c576, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x128, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(r6, 0x0, 0x8000, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) move_mount(r7, &(0x7f00000000c0)='./file0\x00', r6, &(0x7f0000000180)='./file0\x00', 0x100) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x18d1, 0x5022, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0xc9, 0x2, 0x3, 0x1, 0x1, 0x94, {0x9, 0x21, 0x86, 0x6, 0x1, {0x22, 0xb47}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x81, 0x8, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x73, 0x80, 0x1}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x100, 0x1, 0x8, 0x3, 0x8, 0x8}, 0x27, &(0x7f0000000080)={0x5, 0xf, 0x27, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x8, 0xf1, 0x81}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x40, 0xae, 0x7, 0x81}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x3, 0x44}]}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x422}}, {0x2a, &(0x7f0000000100)=@string={0x2a, 0x3, "bec4889a25cdaab7f78f9e0b20ab5e431a4c6f1ed2db11f813c5f3fb4b1b825216c229e5dde8f618"}}]}) 16.451873421s ago: executing program 2 (id=814): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="120100001d122610d118af1e79070102030109021b0001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0017c8"], 0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000086bcffffffffffff0700000000000000b000000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000240)=0x0) timer_settime(r1, 0x1, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000300)) r2 = accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r4 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r4, &(0x7f0000000380)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e20004db0"], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r3, {0x0, 0xffe4}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x10, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0xc, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x4}]}]}}]}, 0x40}}, 0x40080) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r5, 0x29, 0x4b, &(0x7f0000000000)=0x5, 0x4) socket$netlink(0x10, 0x3, 0x0) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) socket$inet(0x2, 0x2000000080002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000280)=@broute={'broute\x00', 0x20, 0x2, 0x238, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200005c0], 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}, 0x2b0) mincore(&(0x7f0000fff000/0x1000)=nil, 0x1000, &(0x7f00000000c0)=""/200) r7 = syz_usb_connect$printer(0x3, 0x36, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x9, 0x90, 0x6, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x1, 0xf6, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x3, 0x5, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x8, 0x3, 0x2, 0x8}}]}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0x6, 0x5, 0x0, 0x40, 0x6}, 0x32, &(0x7f0000000400)={0x5, 0xf, 0x32, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0x10, 0x5, 0x9, 0x240}, @ptm_cap={0x3}, @generic={0x1c, 0x10, 0x2, "0cea0359985bdc7146fc2e44bff712910446cebf96f3773207"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xe, 0xe, 0xcf6}]}, 0x1, [{0x18, &(0x7f0000000440)=@string={0x18, 0x3, "1915fa56359694c802ea9e25401fe282a80d3f9d6387"}}]}) syz_usb_control_io(r7, &(0x7f0000000700)={0x2c, &(0x7f00000004c0)={0x0, 0x3, 0xe3, {0xe3, 0xf, "2f0e29d83cfb063c2780918c7bf31cc95f1cc7efce1ebf5744fbcab6c12215cc306594b35e07e5bf60bbc31be8dc00c4c35235749b5377c849ba7be8905eb4dbd8a17730879935e0ebada80d780972cd9c3d731220078d9e82f74e71890839db5879af064d700678d5591ed0f94ad80a1e348b5064f58733f9b0109a237af6c3cbf99f839eff3174dc85fde62fdf9accc053a3cd57b30248bd52ac98624e0c46d35f92a2f5ae9f2e96d248d53d9c8c003c20ffecfe1be707048431f23d67c4057ecfe6b73fb95b0c192039ac805def44c8cfaf525c780833b71282050f1012bd2d"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, &(0x7f0000000600)={0x0, 0xf, 0x37, {0x5, 0xf, 0x37, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "eb1797618fde0b4234ba61bc00986786"}, @ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "563d85486bec87721ec0ab09d74901eb"}, @ext_cap={0x7, 0x10, 0x2, 0x36, 0x5, 0x3, 0x8}]}}, &(0x7f0000000680)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x8, 0x9, "4af997bc", "fee347f9"}}, &(0x7f00000006c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xfc, 0x10, 0xc0, 0x4, 0x8, 0x7, 0x9}}}, &(0x7f0000000bc0)={0x84, &(0x7f0000000740)={0x20, 0xe, 0xa7, "499119b5be937e942ddd024904a30a9f99302087e185277a8abfb4be005c1a47ab003a53d3791db09d406f597a07fa59f4e2dd5d2782f88e81e7b86bc896dd5901bb3cf00ae1031100ec532cf39d4dab250a8e5919a94cea22ba3eb5974042e93666b69c3914c17e542389fe5f45b0f33d00240770787959ce919dae5480396716d09b8ec0ab99b456ab2ce2c1de52b02bbdf064c9ae02a4c5116d824f459d7224fd906d795caa"}, &(0x7f0000000800)={0x0, 0xa, 0x1, 0xdb}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0xc2}, &(0x7f0000000880)={0x20, 0x0, 0x4, {0x3}}, &(0x7f00000008c0)={0x20, 0x0, 0x8, {0xe0, 0x20, [0xf000]}}, &(0x7f0000000900)={0x40, 0x7, 0x2, 0xff}, &(0x7f0000000940)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000000980)={0x40, 0xb, 0x2, 'u['}, &(0x7f00000009c0)={0x40, 0xf, 0x2, 0x5}, &(0x7f0000000a00)={0x40, 0x13, 0x6, @link_local}, &(0x7f0000000a40)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000a80)={0x40, 0x19, 0x2, "64f8"}, &(0x7f0000000ac0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000b00)={0x40, 0x1c, 0x1}, &(0x7f0000000b40)={0x40, 0x1e, 0x1, 0x6}, &(0x7f0000000b80)={0x40, 0x21, 0x1, 0x5}}) 15.753168174s ago: executing program 1 (id=816): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0xa00, 0x80, 0x0, 0x1000000, 0x10, 0x1, {0x8000}, {0x2}, {}, {}, 0x0, 0x3f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0xffffffff, 0x0, 0x0, 0x0, 0x200}) 14.819336708s ago: executing program 1 (id=818): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x88100) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x80, 0x5, 0x9, 0x10, 0xa}, 0x14) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0x20, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xd, 0x45, 'opa_vnic\x00'}]}, 0x20}}, 0x0) (async) move_mount(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x220) 14.298721442s ago: executing program 0 (id=821): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x201, &(0x7f0000000080)={0x0}) socket$kcm(0x2, 0x200000000000001, 0x106) r1 = socket$kcm(0x10, 0x0, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000680)="89000000120081ae08060cdc030ec0007f13cff70200000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dcff0f1e32ef09000900ec08120800030006010000bdad446b9bbc7a46e3888285dcdf12f21308f868fece01955fed0009d706000000000000", 0x78}], 0x1}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_buf(r2, 0x1, 0x19, 0x0, &(0x7f0000003080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_SEED={0x8, 0x6, 0x1, 0x0, 0x11}, @NFTA_HASH_TYPE={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0xfffffffc}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x3d8, 0x1c0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'veth1_vlan\x00'}, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x9220d18c8277c576, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x128, 0x148, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) openat$vga_arbiter(0xffffff9c, &(0x7f00000001c0), 0x8600, 0x0) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x100000}, 0x20) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(r6, 0x0, 0x8000, &(0x7f0000000200)={0x0, 0x0, 0x80000}, 0x20) r7 = open_tree(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r8 = syz_io_uring_setup(0x1f87, &(0x7f0000000240)={0x0, 0x0, 0x1}, &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r8, 0x0, 0x0, 0xf, 0x0, 0x18) move_mount(r7, &(0x7f00000000c0)='./file0\x00', r6, &(0x7f0000000180)='./file0\x00', 0x100) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x10, 0x18d1, 0x5022, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x3, 0x0, 0x9, [{{0x9, 0x4, 0x0, 0xc9, 0x2, 0x3, 0x1, 0x1, 0x94, {0x9, 0x21, 0x86, 0x6, 0x1, {0x22, 0xb47}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x81, 0x8, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0x73, 0x80, 0x1}}]}}}]}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x100, 0x1, 0x8, 0x3, 0x8, 0x8}, 0x27, &(0x7f0000000080)={0x5, 0xf, 0x27, 0x4, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8, 0xf1, 0x81}, @wireless={0xb, 0x10, 0x1, 0x2, 0x20, 0x40, 0xae, 0x7, 0x7d}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x6, 0x3, 0x44}]}, 0x2, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x422}}, {0x2a, &(0x7f0000000100)=@string={0x2a, 0x3, "bec4889a25cdaab7f78f9e0b20ab5e431a4c6f1ed2db11f813c5f3fb4b1b825216c229e5dde8f618"}}]}) 13.471261439s ago: executing program 0 (id=824): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0xdc2, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = io_uring_setup(0x6716, &(0x7f0000000780)={0x0, 0xe08f, 0x2, 0x0, 0x1c7}) io_uring_register$IORING_UNREGISTER_IOWQ_AFF(r2, 0x12, 0x0, 0x0) ioctl(r1, 0xbffff000, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) readv(r0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/110, 0x6e}], 0x1) r3 = openat$vnet(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000040)=0x1c) 13.34516277s ago: executing program 0 (id=825): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000940)=@newqdisc={0x50, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x24, 0x2, [@TCA_TBF_RATE64={0xc, 0x4, 0x4e1e2563543d84f9}, @TCA_TBF_PBURST={0x8, 0x7, 0x1cdf}, @TCA_TBF_PRATE64={0xc, 0x5, 0xcb59372f370e8465}]}}]}, 0x50}}, 0x0) 12.752188849s ago: executing program 0 (id=826): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB="ec278ac0e901d7d12a1c4688b80e72824458c10770526462c19f2f4f15d40ed7f552fb65936b21d340fd96774fa221d537757e7e140e5897a634fedaf0632d", @ANYRES32=r2, @ANYRES64=r3, @ANYBLOB="1800508014000400ec4b8736"], 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) r6 = gettid() timer_create(0x0, 0x0, 0x0) getgroups(0x16, 0xfffffffffffffffe) msgsnd(0x0, &(0x7f0000000d00)=ANY=[@ANYRESHEX], 0x401, 0x0) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000002440)={{0x1}, 0x167, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6}) sendmmsg$inet6(r0, 0x0, 0x0, 0x30) r7 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120109222689b501020301090200"/29], 0x0) syz_usb_control_io$hid(r7, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r7, 0x0, 0x0) syz_usb_control_io$printer(r7, 0x0, 0x0) 12.132981001s ago: executing program 4 (id=827): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x8, 0xf, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x4000}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0xb}, {0x66}}, [], {{0x7, 0x1, 0x3, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 12.024198823s ago: executing program 4 (id=828): socket$kcm(0x10, 0x7, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000ac0)={'veth0_to_bond\x00', 0x0}) (async, rerun: 64) r2 = io_uring_setup(0x6cfb, &(0x7f00000001c0)={0x0, 0x0, 0x10}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="a4bec500000100000000", @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f}}, 0x50) (async) chroot(&(0x7f0000000040)='./file0/file0/file0/file0/file0\x00') read$FUSE(r3, &(0x7f0000008bc0)={0x2020}, 0x2020) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) (async) write$RDMA_USER_CM_CMD_BIND(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x0, @dev}}}, 0x90) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x10012, r6, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x207c) (async) r7 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r7, 0xc4c85513, &(0x7f0000000180)={{0x8, 0x0, 0xffffffff, 0x9, 'syz0\x00'}, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xabf7]}) (async) close_range(r2, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$packet_tx_ring(r8, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) (async, rerun: 64) sendto$packet(r8, 0x0, 0x0, 0xe3edd16a85a399c5, &(0x7f00000000c0)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) (rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) (async) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) (async) r9 = userfaultfd(0x80801) ioctl$UFFDIO_API(r9, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async, rerun: 32) ioctl$UFFDIO_WRITEPROTECT(r9, 0xc018aa06, &(0x7f0000000080)={{&(0x7f0000f20000/0x3000)=nil, 0x3000}, 0x1}) (rerun: 32) 11.806035563s ago: executing program 4 (id=829): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x15, 0x17, 0xee, 0x40, 0xaf0, 0x7a05, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0x5, 0x49}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000cc0)={0x44, &(0x7f0000000ac0)={0x0, 0x0, 0x11, "0790fcc6c83ed711efba22764d06f291ef"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$UHID_CREATE(r1, &(0x7f00000002c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000540)=""/32, 0x20}}, 0x120) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="1201000000000040341a02080000000000010902"], 0x0) r2 = syz_open_dev$hidraw(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r2, 0xc0404809, &(0x7f00000000c0)={0x0, "277c968feb45a14b9d13aa865c15a5eaecdeecd810993081b239d4a3d23f64f1313939c9069b32eba8ea187c82613f238bdc42f990210277a196479b8e8df477"}) r3 = socket(0x10, 0x3, 0x0) r4 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x24}, 0x24}}, 0x10) r7 = socket(0x10, 0x803, 0x0) sendto(r7, &(0x7f0000000740)="120000001200e7ef007b0000000000", 0xf, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_GET_TSC_KHZ(r8, 0xaea3) write$FUSE_INIT(r4, 0x0, 0x0) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f010203010902"], 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r9, 0x4018aee2, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r10, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_tx_ring(r10, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x0, 0x0, 0x1}, 0x1c) ppoll(&(0x7f0000000240)=[{r10}], 0x1, &(0x7f0000000080), 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x80000000}, 0x19a) write(r3, &(0x7f0000000200)="240000001a005f0400f9f407000904018020200000000000000000000800010000000000", 0x24) 11.301284378s ago: executing program 2 (id=830): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="120100006325a640402000498b4d000000010902240001000000000904000002214c6a0009050702000000da000905890e"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c40)={0x84, &(0x7f0000000780)=ANY=[@ANYBLOB="40102e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect(0x4, 0x24, &(0x7f0000000b80)={{0x12, 0x1, 0x0, 0x69, 0xdd, 0x34, 0x40, 0xccd, 0x93, 0x235a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x6c, 0xe0, 0x8d}}]}}]}}, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000100)={0xe000000e}) epoll_pwait(r2, &(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYRES32=r3], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0xae, 0xa, 0xa, 0x0, 0x0, 0x79, 0x10, 0x30}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x1, 0xa}, @l2cap_cid_le_signaling={{0x6}, @l2cap_conn_param_update_rsp={{0x13, 0x7f, 0x2}, {0x7}}}}, 0xf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20}, {0x6}]}, 0x10) r8 = fcntl$dupfd(r6, 0x0, r7) sendmsg$ETHTOOL_MSG_EEE_GET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x0) ioperm(0x0, 0x2534, 0x8) 9.760937823s ago: executing program 4 (id=831): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="84010000100013070000000000000000ac1414bb000000000000000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe8000000000000000000000000000bb0000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480001006372637431306469662d67656e657269630000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400636d61632861657329"], 0x184}}, 0x0) 9.532255944s ago: executing program 0 (id=832): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @empty}, {{0x10, 0x4e26, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x1, 0x0, 0x0, {[@sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}]}}}}}}}, 0x0) 9.53152889s ago: executing program 4 (id=833): unshare(0x2a020480) syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=0x0, &(0x7f00000001c0)=0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x3ec0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, 0x0}) r6 = syz_open_dev$usbfs(&(0x7f0000000000), 0x90f, 0x40102) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f00000001c0)={0x60, 0x30, 0x4, 0x3, 0x5f, 0x5, 0x0}) io_uring_enter(r1, 0x7f5f, 0x0, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) r9 = syz_io_uring_setup(0x437a, &(0x7f0000000300)={0x0, 0xdbe, 0x4, 0x2}, &(0x7f0000000240)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r10, r11, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) socket$nl_route(0x10, 0x3, 0x0) io_uring_enter(r9, 0x6713, 0x945b, 0x6, 0x0, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) r13 = syz_open_procfs(0x0, &(0x7f0000001240)='net/wireless\x00') preadv(r13, &(0x7f00000026c0)=[{&(0x7f0000000240)=""/4088, 0xff8}], 0x1, 0x15f, 0x0) getsockopt$inet6_tcp_buf(r12, 0x6, 0x1a, 0x0, &(0x7f0000000080)) r14 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r14, 0x10d, 0x800000000d, 0x0, 0x0) r15 = socket$inet6(0xa, 0x1, 0x84) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f0000001380)="305c0607e182087051667557c7d7982d8f57fb20a3adc9e3baa292ce8f0a861e6417acfc8648ad1b86400393d502b0cd490635d54cdf5bd0461690982b236949ab5e000000808ce41d86b9b949004fd8fe45b91e8fe7ec7c49750a1b0ade2dcc7ca2fa92f5824c7a8a57f3b3c796b671a5e6f7f6adbc11ff1033f56802afbcc1c8dda5d94a537fd0e1c6b3908eb0efcbe23a340109fe647990721af58a20b817498ee2277f88943d64ce0c1f6402b305025f9015644caddc1e9dcc13301771e131c0c732ea4a", 0xc6, 0xfffffffffffffffe) shutdown(r15, 0x0) 9.255963833s ago: executing program 0 (id=834): unshare(0x68040200) epoll_create(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000c, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x2840) r3 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000040)={0x1, 0xff, 0x1f}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) read$midi(r3, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000001100"], 0x50}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDCTL_SEQ_PANIC(r4, 0x5100) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80000, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000001100)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r5, 0x7a0, &(0x7f0000000040)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r5, 0x7a8, &(0x7f0000000000)={{@host}, @any, 0x0, 0x0, 0xffffffffffffffff}) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r2, 0xc1004111, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7916009875f37515e486dd6317ce62030800000000000000000000875a65969ff57b00000000000000000000000000ac1414aa04"], 0xfdef) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000080)=0xc) 8.989226882s ago: executing program 2 (id=835): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0)=0x7, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=ANY=[@ANYBLOB='0\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="000000009000000008001680040001800800040000000000"], 0x30}}, 0x0) r3 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="1201000064172f2057155081ed29010203010902120001000000000904"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0e00000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000005833a574e0479c5db614773f595d758d00000000000000"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='kfree\x00'}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') setsockopt$inet6_tcp_int(r1, 0x6, 0x11, &(0x7f0000000380), 0x4) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, &(0x7f0000000940)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="000020000000005e69311a6696979bffffffffffffffffb6d49fc63d26277045be0a71d256c869fce04fb7064e738c65fd98003c77e288de35"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r4 = getpgrp(0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'veth1_macvtap\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000010000110000100000475000000000000", @ANYRES32=r6, @ANYBLOB="1c"], 0x20}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x60c003a0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r6, 0x22a0b}}, 0x20}}, 0x0) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000600)=r4) 0s ago: executing program 4 (id=836): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00026223776d7b0c00"], 0x0, 0x0, 0x0}, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_mreq(r1, 0x10d, 0x2, &(0x7f0000000040)={@local, @broadcast}, 0x8) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001300)={0x2c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000005c0)="5af7", 0x2}], 0x1}, 0x4000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@0J'], 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000ac0)={'veth0_to_bond\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendto$packet(r5, 0x0, 0x0, 0xe3edd16a85a39945, &(0x7f0000000240)={0x11, 0x19, r4, 0x1, 0x0, 0x6, @random="0003a362c7e1"}, 0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x1b}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x44}}, 0x0) unshare(0x2a020400) socket$can_raw(0x1d, 0x3, 0x1) socket(0x2000000000000021, 0x2, 0x10000000000002) syz_open_dev$sndctrl(&(0x7f0000000200), 0x7b, 0x4080) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r6, 0x40045532, &(0x7f0000000140)) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0) syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x80) io_uring_setup(0x31d3, &(0x7f0000000300)={0x0, 0x4a68, 0x8, 0x1, 0x20000000, 0x0, r7}) r8 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r8, &(0x7f0000000080), 0xc) kernel console output (not intermixed with test programs): th: 249 > 1 [ 273.997669][ T25] usb 5-1: 0:2 : does not exist [ 274.020057][ T5244] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.020938][ T8859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.035530][ T5244] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.046408][ T25] usb 5-1: USB disconnect, device number 50 [ 274.047235][ T5244] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.065462][ T5244] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 274.072853][ T5244] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 274.106299][ T8859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.142349][ T8859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.168419][ T8859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.185166][ T8859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.226972][ T8859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.245417][ T8807] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 274.318327][ T8859] hsr_slave_0: entered promiscuous mode [ 274.331708][ T8859] hsr_slave_1: entered promiscuous mode [ 274.345924][ T8859] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.353519][ T8859] Cannot create hsr debugfs directory [ 274.378777][ T944] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.385919][ T944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.482131][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.489306][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.597185][ T11] bridge_slave_1: left allmulticast mode [ 274.602983][ T11] bridge_slave_1: left promiscuous mode [ 274.627572][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.644030][ T11] bridge_slave_0: left allmulticast mode [ 274.650192][ T11] bridge_slave_0: left promiscuous mode [ 274.659294][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.845203][ T54] Bluetooth: hci4: command tx timeout [ 275.159244][ T937] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 275.179054][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 275.189693][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 275.200298][ T11] bond0 (unregistering): Released all slaves [ 275.213086][ T11] bond1 (unregistering): Released all slaves [ 275.325088][ T937] usb 5-1: Using ep0 maxpacket: 8 [ 275.352065][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 275.370851][ T937] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 275.383843][ T937] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 275.393848][ T937] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.417420][ T937] usb 5-1: Product: syz [ 275.421642][ T937] usb 5-1: Manufacturer: syz [ 275.426339][ T937] usb 5-1: SerialNumber: syz [ 275.439208][ T937] usb 5-1: config 0 descriptor?? [ 275.619209][ T11] hsr_slave_0: left promiscuous mode [ 275.631412][ T11] hsr_slave_1: left promiscuous mode [ 275.638833][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.655433][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.669428][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.688991][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.719391][ T11] veth1_macvtap: left promiscuous mode [ 275.728763][ T11] veth0_macvtap: left promiscuous mode [ 275.735724][ T11] veth1_vlan: left promiscuous mode [ 275.741031][ T11] veth0_vlan: left promiscuous mode [ 275.882891][ T8951] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 275.889614][ T8951] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 275.906471][ T8951] vhci_hcd vhci_hcd.0: Device attached [ 275.944632][ T8968] vhci_hcd: connection closed [ 275.945320][ T5288] usb 5-1: USB disconnect, device number 51 [ 275.955606][ T944] vhci_hcd: stop threads [ 275.963757][ T944] vhci_hcd: release socket [ 275.985977][ T944] vhci_hcd: disconnect device [ 276.046024][ T54] Bluetooth: hci1: command tx timeout [ 276.136184][ T54] Bluetooth: hci3: command tx timeout [ 276.286698][ T11] team0 (unregistering): Port device team_slave_1 removed [ 276.325401][ T11] team0 (unregistering): Port device team_slave_0 removed [ 276.761865][ T8924] chnl_net:caif_netlink_parms(): no params data found [ 276.884597][ T8807] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.997766][ T8735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.020030][ T8807] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.085896][ T8924] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.104982][ T8924] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.112327][ T8924] bridge_slave_0: entered allmulticast mode [ 277.129515][ T8924] bridge_slave_0: entered promiscuous mode [ 277.147683][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.154839][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.215868][ T2913] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.223041][ T2913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.257557][ T8924] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.269949][ T8924] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.280102][ T8924] bridge_slave_1: entered allmulticast mode [ 277.292374][ T8924] bridge_slave_1: entered promiscuous mode [ 277.389572][ T8924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 277.418074][ T8924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 277.502363][ T8807] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 277.525405][ T8807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.560864][ T8924] team0: Port device team_slave_0 added [ 277.577688][ T8735] veth0_vlan: entered promiscuous mode [ 277.609816][ T8924] team0: Port device team_slave_1 added [ 277.642286][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.650608][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.677544][ T8924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.763370][ T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.789310][ T8924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.810045][ T8924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.849362][ T8924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.873044][ T8859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 277.899510][ T8735] veth1_vlan: entered promiscuous mode [ 277.942208][ T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.984459][ T8859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 278.006100][ T8859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 278.078510][ T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.111970][ T8807] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.135945][ T54] Bluetooth: hci1: command tx timeout [ 278.148800][ T8859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 278.169648][ T8924] hsr_slave_0: entered promiscuous mode [ 278.177566][ T8924] hsr_slave_1: entered promiscuous mode [ 278.183956][ T8924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.192499][ T8924] Cannot create hsr debugfs directory [ 278.214923][ T54] Bluetooth: hci3: command tx timeout [ 278.237669][ T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.329322][ T8735] veth0_macvtap: entered promiscuous mode [ 278.367521][ T8735] veth1_macvtap: entered promiscuous mode [ 278.446749][ T8807] veth0_vlan: entered promiscuous mode [ 278.478562][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.490665][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.501320][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.512410][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.523849][ T8735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.586739][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.600031][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.610891][ T8735] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.621966][ T8735] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.633502][ T8735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.689464][ T8735] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.699236][ T8735] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.708457][ T8735] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.718786][ T8735] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.744011][ T8807] veth1_vlan: entered promiscuous mode [ 278.770976][ T11] bridge_slave_1: left allmulticast mode [ 278.779331][ T11] bridge_slave_1: left promiscuous mode [ 278.796160][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.812207][ T11] bridge_slave_0: left allmulticast mode [ 278.818250][ T11] bridge_slave_0: left promiscuous mode [ 278.823968][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.096840][ T11] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 279.192886][ T9003] xt_ipvs: protocol family 7 not supported [ 279.305299][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.325423][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.339416][ T11] bond0 (unregistering): Released all slaves [ 279.621267][ T8807] veth0_macvtap: entered promiscuous mode [ 279.648532][ T8807] veth1_macvtap: entered promiscuous mode [ 279.690648][ T8859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.913915][ T8859] 8021q: adding VLAN 0 to HW filter on device team0 [ 280.017919][ T11] hsr_slave_0: left promiscuous mode [ 280.023967][ T11] hsr_slave_1: left promiscuous mode [ 280.053505][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 280.075999][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.105671][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 280.113111][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.162790][ T11] veth1_macvtap: left promiscuous mode [ 280.169870][ T11] veth0_macvtap: left promiscuous mode [ 280.185004][ T11] veth1_vlan: left promiscuous mode [ 280.190423][ T11] veth0_vlan: left promiscuous mode [ 280.289952][ T54] Bluetooth: hci3: command tx timeout [ 280.511149][ T9003] netlink: 24 bytes leftover after parsing attributes in process `syz.4.703'. [ 280.778515][ T11] team0 (unregistering): Port device team_slave_1 removed [ 280.839569][ T11] team0 (unregistering): Port device team_slave_0 removed [ 281.362834][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.386002][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.402385][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.421818][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.433961][ T8807] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.447186][ T944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.474982][ T944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.530225][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.555830][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.568214][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.579170][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.603652][ T8807] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.618552][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.625836][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.650139][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.657320][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 281.704347][ T944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.705858][ T8807] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.722330][ T8807] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.724845][ T944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.731333][ T8807] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.752176][ T8807] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.054050][ T8924] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 282.106378][ T8924] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 282.164988][ T8924] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 282.197076][ T9033] xt_recent: Unsupported userspace flags (00000076) [ 282.205725][ T8924] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 282.223018][ T8859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.255765][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.263703][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.317418][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.330220][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.365001][ T54] Bluetooth: hci3: command tx timeout [ 282.380805][ T8859] veth0_vlan: entered promiscuous mode [ 282.430860][ T8859] veth1_vlan: entered promiscuous mode [ 282.445321][ T5295] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 282.520511][ T8859] veth0_macvtap: entered promiscuous mode [ 282.550560][ T8924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.576862][ T8859] veth1_macvtap: entered promiscuous mode [ 282.613218][ T5295] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 282.623266][ T8924] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.631239][ T5295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.648449][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.655712][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.666458][ T5295] usb 5-1: config 0 descriptor?? [ 282.679461][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.686599][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.703001][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.713814][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.725789][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.736610][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.747193][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.757695][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.770814][ T8859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.810406][ T8924] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 282.820938][ T8924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 282.850356][ T8924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.883720][ T9035] xt_NFQUEUE: number of total queues is 0 [ 282.929789][ T8924] veth0_vlan: entered promiscuous mode [ 282.940881][ T8924] veth1_vlan: entered promiscuous mode [ 282.949023][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.960375][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.970548][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.982211][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.992420][ T8859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.004495][ T8859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.016671][ T8859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.042411][ T8859] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.051546][ T8859] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.074983][ T8859] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.083733][ T8859] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.170186][ T2956] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.227826][ T8924] veth0_macvtap: entered promiscuous mode [ 283.304185][ T2956] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.336208][ T8924] veth1_macvtap: entered promiscuous mode [ 283.440564][ T2956] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.498947][ T3017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.533471][ T3017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.581745][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.598779][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.610948][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.626770][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.643194][ T5244] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.649219][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.653564][ T5244] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.668501][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.670296][ T5244] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.688221][ T5244] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.695200][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 283.695221][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.696969][ T8924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.708309][ T5244] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 283.731708][ T5295] ath6kl: Failed to submit usb control message: -110 [ 283.739476][ T5244] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.764916][ T8] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 283.785321][ T5295] ath6kl: unable to send the bmi data to the device: -110 [ 283.792518][ T5295] ath6kl: Unable to send get target info: -110 [ 283.809014][ T5295] ath6kl: Failed to init ath6kl core: -110 [ 283.823610][ T5295] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 283.835973][ T5295] usb 5-1: USB disconnect, device number 52 [ 283.849028][ T2956] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.896845][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.896876][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.900599][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.900627][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.900640][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.900654][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.900665][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.900674][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.900681][ T8924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 283.900689][ T8924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 283.901579][ T8924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.904544][ T8924] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.904576][ T8924] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.904602][ T8924] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.904635][ T8924] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.924943][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 283.938851][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 283.938885][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 283.938918][ T8] usb 4-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00 [ 283.938943][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.940903][ T8] usb 4-1: config 0 descriptor?? [ 284.315011][ T2913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.322882][ T2913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.407640][ T2956] bridge_slave_1: left allmulticast mode [ 284.413565][ T2956] bridge_slave_1: left promiscuous mode [ 284.413954][ T9053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.712'. [ 284.419683][ T2956] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.454994][ T5326] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 284.468720][ T8] waterforce 0003:1044:7A4D.001D: unknown main item tag 0x0 [ 284.476516][ T8] waterforce 0003:1044:7A4D.001D: unknown main item tag 0x0 [ 284.484931][ T2956] bridge_slave_0: left allmulticast mode [ 284.490889][ T8] waterforce 0003:1044:7A4D.001D: unknown main item tag 0x0 [ 284.501470][ T2956] bridge_slave_0: left promiscuous mode [ 284.513635][ T8] waterforce 0003:1044:7A4D.001D: unknown main item tag 0x0 [ 284.523567][ T2956] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.554221][ T8] waterforce 0003:1044:7A4D.001D: hidraw0: USB HID v0.00 Device [HID 1044:7a4d] on usb-dummy_hcd.3-1/input0 [ 284.606651][ T5326] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 284.632582][ T5326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.641628][ T8] waterforce 0003:1044:7A4D.001D: fw version request failed with -38 [ 284.657203][ T5326] usb 2-1: config 0 descriptor?? [ 284.685008][ T8] usb 4-1: USB disconnect, device number 33 [ 284.957031][ T9061] xt_connbytes: Forcing CT accounting to be enabled [ 284.965066][ T9061] xt_NFQUEUE: number of total queues is 0 [ 285.397134][ T2956] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 285.432066][ T2956] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 285.446888][ T2956] bond0 (unregistering): Released all slaves [ 285.727071][ T5326] ath6kl: Failed to submit usb control message: -110 [ 285.737769][ T5326] ath6kl: unable to send the bmi data to the device: -110 [ 285.749855][ T5326] ath6kl: Unable to send get target info: -110 [ 285.752395][ T944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.765972][ T25] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 285.766252][ T5326] ath6kl: Failed to init ath6kl core: -110 [ 285.805058][ T54] Bluetooth: hci0: command tx timeout [ 285.819190][ T5326] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 285.856155][ T944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.965189][ T25] usb 4-1: device descriptor read/64, error -71 [ 286.143530][ T9085] netlink: 44 bytes leftover after parsing attributes in process `syz.2.695'. [ 286.215882][ T25] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 286.279396][ T9055] chnl_net:caif_netlink_parms(): no params data found [ 286.356497][ T25] usb 4-1: device descriptor read/64, error -71 [ 286.380617][ T2956] hsr_slave_0: left promiscuous mode [ 286.417629][ T2956] hsr_slave_1: left promiscuous mode [ 286.438094][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.481908][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.498625][ T25] usb usb4-port1: attempt power cycle [ 286.514527][ T2956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.532117][ T2956] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.561203][ T2956] veth1_macvtap: left promiscuous mode [ 286.566965][ T2956] veth0_macvtap: left promiscuous mode [ 286.572607][ T2956] veth1_vlan: left promiscuous mode [ 286.579326][ T2956] veth0_vlan: left promiscuous mode [ 286.846950][ T25] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 286.886520][ T25] usb 4-1: device descriptor read/8, error -71 [ 287.164898][ T25] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 287.216243][ T25] usb 4-1: device descriptor read/8, error -71 [ 287.242727][ T2956] team0 (unregistering): Port device team_slave_1 removed [ 287.314372][ T2956] team0 (unregistering): Port device team_slave_0 removed [ 287.355374][ T25] usb usb4-port1: unable to enumerate USB device [ 287.895495][ T54] Bluetooth: hci0: command tx timeout [ 288.165449][ T9055] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.172574][ T9055] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.181140][ T9055] bridge_slave_0: entered allmulticast mode [ 288.188901][ T9055] bridge_slave_0: entered promiscuous mode [ 288.196776][ T9055] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.203871][ T9055] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.211810][ T9055] bridge_slave_1: entered allmulticast mode [ 288.218755][ T9055] bridge_slave_1: entered promiscuous mode [ 288.488324][ T9055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.571496][ T9055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.793131][ T9055] team0: Port device team_slave_0 added [ 288.878857][ T9055] team0: Port device team_slave_1 added [ 288.995195][ T5326] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 289.107598][ T9055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.145256][ T5326] usb 4-1: device descriptor read/64, error -71 [ 289.154914][ T9055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.215214][ T9055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.302719][ T9055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.330892][ T9055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.394892][ T5326] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 289.445614][ T9055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.513986][ T5288] usb 2-1: USB disconnect, device number 49 [ 289.545547][ T5326] usb 4-1: device descriptor read/64, error -71 [ 289.602205][ T9055] hsr_slave_0: entered promiscuous mode [ 289.622761][ T9055] hsr_slave_1: entered promiscuous mode [ 289.665716][ T5326] usb usb4-port1: attempt power cycle [ 289.704933][ T46] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 289.709699][ T937] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 289.872038][ T46] usb 3-1: Using ep0 maxpacket: 32 [ 289.876477][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.894914][ T5288] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 289.906617][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 289.910922][ T937] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.935581][ T937] usb 5-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 289.947159][ T937] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 289.949265][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 289.965456][ T54] Bluetooth: hci0: command tx timeout [ 289.966538][ T937] usb 5-1: config 0 descriptor?? [ 289.998406][ T46] usb 3-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 290.012946][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.035005][ T5326] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 290.038609][ T46] usb 3-1: config 0 descriptor?? [ 290.066967][ T5326] usb 4-1: device descriptor read/8, error -71 [ 290.075013][ T5288] usb 2-1: Using ep0 maxpacket: 32 [ 290.093286][ T5288] usb 2-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 290.113527][ T5288] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.130974][ T5288] usb 2-1: Product: syz [ 290.135914][ T5288] usb 2-1: Manufacturer: syz [ 290.140555][ T5288] usb 2-1: SerialNumber: syz [ 290.147853][ T5288] usb 2-1: config 0 descriptor?? [ 290.234971][ T937] usbhid 5-1:0.0: can't add hid device: -71 [ 290.241099][ T937] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 290.292356][ T9055] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 290.302445][ T937] usb 5-1: USB disconnect, device number 53 [ 290.321081][ T9055] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 290.346478][ T5326] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 290.377325][ T9055] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 290.385848][ T5326] usb 4-1: device descriptor read/8, error -71 [ 290.395259][ T9055] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 290.475660][ T9130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.501970][ T9130] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.505938][ T5326] usb usb4-port1: unable to enumerate USB device [ 290.518566][ T46] waltop 0003:172F:0501.001E: unknown main item tag 0x0 [ 290.537428][ T46] waltop 0003:172F:0501.001E: item fetching failed at offset 5/8 [ 290.543411][ T9055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.547719][ T46] waltop 0003:172F:0501.001E: probe with driver waltop failed with error -22 [ 290.592285][ T9055] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.617324][ T944] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.624513][ T944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.633698][ T5288] rtl8150 2-1:0.0: couldn't reset the device [ 290.645210][ T5288] rtl8150 2-1:0.0: probe with driver rtl8150 failed with error -5 [ 290.667312][ T5288] usb 2-1: USB disconnect, device number 50 [ 290.673472][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.680611][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.793383][ T5290] usb 3-1: USB disconnect, device number 67 [ 290.888913][ T9055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.993483][ T9055] veth0_vlan: entered promiscuous mode [ 291.020088][ T9055] veth1_vlan: entered promiscuous mode [ 291.044344][ T9163] qrtr: Invalid version 0 [ 291.076887][ T9055] veth0_macvtap: entered promiscuous mode [ 291.089153][ T9055] veth1_macvtap: entered promiscuous mode [ 291.166906][ T9167] netlink: 84 bytes leftover after parsing attributes in process `syz.4.725'. [ 291.171528][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.190813][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.201464][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.236260][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.282183][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.330777][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.355477][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.366134][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.377370][ T9055] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.414930][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.425556][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.442966][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.454538][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.470094][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.483005][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.511579][ T9055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.527813][ T9055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.541328][ T9055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.552611][ T9055] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.563024][ T9055] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.572578][ T9055] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.582081][ T9055] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.634907][ T5326] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 291.738094][ T944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.762920][ T944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.819057][ T3017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.819338][ T5326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 291.854635][ T3017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.860220][ T5326] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 291.902172][ T5326] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 291.934483][ T5326] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 291.950903][ T5326] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 291.960365][ T5326] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.974957][ T8] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 291.983100][ T5326] usb 3-1: config 0 descriptor?? [ 292.045394][ T54] Bluetooth: hci0: command tx timeout [ 292.074901][ T4616] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 292.144056][ T8] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 292.165046][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.193374][ T8] usb 5-1: Product: syz [ 292.207439][ T8] usb 5-1: Manufacturer: syz [ 292.217455][ T8] usb 5-1: SerialNumber: syz [ 292.234957][ T5326] hdpvr 3-1:0.0: firmware version 0x0 dated [ 292.250123][ T4616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 292.260819][ T8] usb 5-1: config 0 descriptor?? [ 292.266457][ T5326] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 292.282063][ T4616] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 292.295349][ T4616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 292.306971][ T4616] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 292.316930][ T4616] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 292.327185][ T4616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 292.330391][ T9213] qrtr: Invalid version 0 [ 292.337589][ T4616] usb 4-1: config 0 descriptor?? [ 292.345408][ T5288] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 292.493506][ T8] hso 5-1:0.0: Can't find BULK IN endpoint [ 292.499832][ T8] usb-storage 5-1:0.0: USB Mass Storage device detected [ 292.506978][ T5288] usb 1-1: Using ep0 maxpacket: 16 [ 292.515337][ T5288] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 292.553013][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 292.564203][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 292.574028][ T5288] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 292.591872][ T5288] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 292.643150][ T5288] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 292.643626][ T9180] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.664274][ T5288] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 292.664688][ T9180] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.672376][ T5288] usb 1-1: Manufacturer: syz [ 292.682391][ T5290] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 292.710585][ T5288] usb 1-1: config 0 descriptor?? [ 292.722443][ T4616] hdpvr 4-1:0.0: unexpected answer of status request, len -71 [ 292.735726][ T4616] hdpvr 4-1:0.0: device init failed [ 292.740816][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 292.741640][ T4616] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 292.750461][ T9188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.764632][ T5326] hdpvr 3-1:0.0: max device number reached, device register failed [ 292.779103][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 292.792492][ T9188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.797158][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 292.809525][ T5326] usb 3-1: USB disconnect, device number 68 [ 292.820047][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 292.821467][ T4616] usb 4-1: USB disconnect, device number 42 [ 292.858324][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 292.869015][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 292.889866][ T5290] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 292.899944][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 292.914463][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 292.922315][ T5290] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 292.923653][ T9188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.943698][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 292.951538][ T5290] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 292.952390][ T9188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.964989][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 292.981953][ T5290] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 292.993355][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.001148][ T5290] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.018975][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.028996][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.038642][ T5290] usb 2-1: config 0 descriptor?? [ 293.049337][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.057384][ T5288] rc_core: IR keymap rc-hauppauge not found [ 293.062999][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.063411][ T5288] Registered IR keymap rc-empty [ 293.070897][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.076731][ T5288] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.083364][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.103721][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.104966][ T5288] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.111184][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.127244][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.134682][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.135841][ T5288] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 293.142121][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.160851][ T5288] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input19 [ 293.161286][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.184224][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.184473][ T5288] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.193739][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.206659][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.214095][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.221621][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.233460][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.243552][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.245649][ T5288] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.274988][ T5288] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.275021][ T5290] hdpvr 2-1:0.0: firmware version 0x0 dated [ 293.288389][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.298431][ T5288] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.302030][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.314109][ T5290] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 293.337564][ T5288] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.342124][ T2631] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 293.365915][ T5288] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.380914][ T2631] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz0] on syz0 [ 293.403728][ T5288] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.435016][ T5288] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.464402][ T5288] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.514892][ T5288] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 293.564071][ T5288] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 293.604454][ T5288] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 293.631846][ T5288] usb 1-1: USB disconnect, device number 42 [ 293.675561][ T2631] usb 5-1: USB disconnect, device number 54 [ 293.727104][ T9215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 293.780868][ T9215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 293.849142][ T5290] hdpvr 2-1:0.0: max device number reached, device register failed [ 293.885064][ T8] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 293.890612][ T5290] usb 2-1: USB disconnect, device number 51 [ 293.960558][ T9232] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 293.967234][ T9232] PKCS7: Only support pkcs7_signedData type [ 294.060577][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 294.081712][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 294.104898][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 294.114966][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 294.132149][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 294.145066][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.154963][ T2631] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 294.155356][ T8] usb 3-1: config 0 descriptor?? [ 294.282344][ T9236] netlink: 28 bytes leftover after parsing attributes in process `syz.3.740'. [ 294.292193][ T9236] netlink: 'syz.3.740': attribute type 7 has an invalid length. [ 294.300356][ T9236] netlink: 'syz.3.740': attribute type 8 has an invalid length. [ 294.313921][ T9236] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'. [ 294.327799][ T9236] erspan0: entered promiscuous mode [ 294.334111][ T9236] batadv_slave_1: entered promiscuous mode [ 294.347662][ T9236] gretap0: entered promiscuous mode [ 294.353808][ T2631] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 294.363763][ T2631] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.374672][ T2631] usb 5-1: Product: syz [ 294.381585][ T2631] usb 5-1: Manufacturer: syz [ 294.386553][ T2631] usb 5-1: SerialNumber: syz [ 294.393116][ T2631] usb 5-1: config 0 descriptor?? [ 294.408554][ T8] hdpvr 3-1:0.0: firmware version 0x0 dated [ 294.420458][ T8] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 294.435240][ T5290] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 294.601634][ T5290] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 294.618175][ T5290] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.627700][ T5290] usb 1-1: Product: syz [ 294.632000][ T5290] usb 1-1: Manufacturer: syz [ 294.636900][ T5290] usb 1-1: SerialNumber: syz [ 294.647164][ T5290] usb 1-1: config 0 descriptor?? [ 294.666364][ T2631] hso 5-1:0.0: Can't find BULK IN endpoint [ 294.686143][ T2631] usb-storage 5-1:0.0: USB Mass Storage device detected [ 294.817928][ T9229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.840764][ T9229] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.010291][ T5290] hso 1-1:0.0: Can't find BULK IN endpoint [ 295.036773][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.044388][ T9231] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.045558][ T8] hdpvr 3-1:0.0: max device number reached, device register failed [ 295.073192][ T5290] usb-storage 1-1:0.0: USB Mass Storage device detected [ 295.121122][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.124071][ T8] usb 3-1: USB disconnect, device number 69 [ 295.135932][ T9231] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.158656][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.186599][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.196696][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.198476][ T9234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.215257][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.258171][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.273838][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.290523][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.299705][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.304544][ T9250] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.325608][ T9234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.334559][ T9250] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.367319][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.385623][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.403434][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.419486][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.436276][ T9234] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 295.445287][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.452827][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.460525][ T9234] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 295.479218][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.490942][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.498530][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.506139][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.513555][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.522994][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.530565][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.538092][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.545568][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.554449][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.574708][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.585786][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.593239][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.604970][ T8] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 295.608639][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.621239][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.640469][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.650165][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.674255][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.684348][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.692887][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.700807][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.709952][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.718384][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.726913][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.734505][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.749622][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.759584][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.774897][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.782464][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.797683][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.798176][ T8] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 295.806180][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.829809][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.845515][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.853378][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.863590][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.868515][ T8] usb 2-1: config 0 descriptor?? [ 295.881267][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.899198][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.915895][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 295.985395][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 295.995059][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 296.002505][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 296.015259][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 296.030504][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 296.039983][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 296.053589][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 296.064521][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 296.079647][ T25] hid-generic 0000:0000:0000.0020: unknown main item tag 0x0 [ 296.087610][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 296.096301][ T46] hid-generic 0000:0000:0000.0021: unknown main item tag 0x0 [ 296.104472][ T25] hid-generic 0000:0000:0000.0020: hidraw0: HID v0.00 Device [syz0] on syz0 [ 296.112796][ T9252] xt_NFQUEUE: number of total queues is 0 [ 296.127012][ T46] hid-generic 0000:0000:0000.0021: hidraw1: HID v0.00 Device [syz0] on syz0 [ 296.325418][ T5288] usb 5-1: USB disconnect, device number 55 [ 296.567397][ T46] usb 1-1: USB disconnect, device number 43 [ 297.005616][ T8] ath6kl: Failed to submit usb control message: -110 [ 297.021763][ T8] ath6kl: unable to send the bmi data to the device: -110 [ 297.044942][ T4616] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 297.054918][ T8] ath6kl: Unable to send get target info: -110 [ 297.088781][ T8] ath6kl: Failed to init ath6kl core: -110 [ 297.098636][ T8] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 297.154933][ T5290] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 297.259947][ T4616] usb 3-1: Using ep0 maxpacket: 32 [ 297.271908][ T4616] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 297.287964][ T4616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.296044][ T5290] usb 1-1: device descriptor read/64, error -71 [ 297.306203][ T4616] usb 3-1: config 0 descriptor?? [ 297.314835][ T4616] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 297.393699][ T5326] usb 2-1: USB disconnect, device number 52 [ 297.595305][ T5290] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 297.745945][ T5290] usb 1-1: device descriptor read/64, error -71 [ 297.825511][ T4616] gspca_nw80x: reg_r err -71 [ 297.830208][ T4616] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 297.865567][ T5290] usb usb1-port1: attempt power cycle [ 297.905531][ T4616] usb 3-1: USB disconnect, device number 70 [ 298.033137][ T9278] xt_recent: Unsupported userspace flags (00000076) [ 298.294855][ T5290] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 298.329081][ T5290] usb 1-1: device descriptor read/8, error -71 [ 298.384898][ T4616] usb 3-1: new full-speed USB device number 71 using dummy_hcd [ 298.539418][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.567931][ T4616] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 298.584948][ T4616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.585021][ T5290] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 298.618894][ T4616] usb 3-1: config 0 descriptor?? [ 298.641044][ T4616] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 298.674084][ T5290] usb 1-1: device descriptor read/8, error -71 [ 298.729229][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.815070][ T5326] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 298.825081][ T5290] usb usb1-port1: unable to enumerate USB device [ 298.942657][ T4616] gspca_nw80x: reg_w err -71 [ 298.947657][ T4616] nw80x 3-1:0.0: probe with driver nw80x failed with error -71 [ 298.984322][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.006398][ T4616] usb 3-1: USB disconnect, device number 71 [ 299.030554][ T5326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.051982][ T5326] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.080459][ T5326] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 299.120240][ T5326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.165232][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.185783][ T5326] usb 2-1: config 0 descriptor?? [ 299.358184][ T12] bridge_slave_1: left allmulticast mode [ 299.376733][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 299.388683][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 299.396740][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 299.406160][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 299.413765][ T5238] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 299.422436][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 299.483398][ T12] bridge_slave_1: left promiscuous mode [ 299.489182][ T5290] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 299.515133][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.560210][ T9289] qrtr: Invalid version 0 [ 299.598958][ T5326] usbhid 2-1:0.0: can't add hid device: -71 [ 299.605643][ T5326] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 299.635407][ T5326] usb 2-1: USB disconnect, device number 53 [ 299.646113][ T5290] usb 4-1: Using ep0 maxpacket: 32 [ 299.652222][ T5238] Bluetooth: hci1: command 0x0406 tx timeout [ 299.697477][ T5290] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 299.699313][ T12] bridge_slave_0: left allmulticast mode [ 299.712703][ T12] bridge_slave_0: left promiscuous mode [ 299.718718][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.750857][ T5290] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.773954][ T5290] usb 4-1: Product: syz [ 299.805267][ T5290] usb 4-1: Manufacturer: syz [ 299.864383][ T5290] usb 4-1: SerialNumber: syz [ 299.880667][ T5290] usb 4-1: config 0 descriptor?? [ 300.065032][ T12] erspan0 (unregistering): left promiscuous mode [ 300.164945][ T12] gretap0 (unregistering): left promiscuous mode [ 300.214407][ T9305] xt_recent: Unsupported userspace flags (00000076) [ 300.563036][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.581670][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.593430][ T12] bond0 (unregistering): Released all slaves [ 300.626946][ T9316] veth1_macvtap: entered allmulticast mode [ 300.658940][ T5290] (unnamed net_device) (uninitialized): Assigned a random MAC address: e2:62:ed:d8:90:9b [ 300.729721][ T5290] rtl8150 4-1:0.0: eth5: rtl8150 is detected [ 300.757262][ T5290] usb 4-1: USB disconnect, device number 43 [ 300.943805][ T12] batadv_slave_1: left promiscuous mode [ 300.961018][ T12] hsr_slave_0: left promiscuous mode [ 300.977151][ T12] hsr_slave_1: left promiscuous mode [ 300.983175][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 300.991675][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.003214][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.019637][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.042720][ T12] veth1_macvtap: left promiscuous mode [ 301.045142][ T46] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 301.048310][ T12] veth0_macvtap: left promiscuous mode [ 301.061922][ T12] veth1_vlan: left promiscuous mode [ 301.075162][ T12] veth0_vlan: left promiscuous mode [ 301.241016][ T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1792, setting to 1024 [ 301.264419][ T46] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf [ 301.279988][ T46] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.290457][ T46] usb 2-1: Product: syz [ 301.294648][ T46] usb 2-1: Manufacturer: syz [ 301.305370][ T46] usb 2-1: SerialNumber: syz [ 301.330535][ T46] usb 2-1: config 0 descriptor?? [ 301.346383][ T9319] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 301.357603][ T46] usb 2-1: Found UVC 0.00 device syz (18ec:3288) [ 301.363975][ T46] usb 2-1: No valid video chain found. [ 301.490877][ T54] Bluetooth: hci2: command tx timeout [ 301.580676][ T9319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 301.614221][ T9319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 301.629966][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 301.632682][ T937] usb 2-1: USB disconnect, device number 54 [ 301.646305][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 301.667484][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 301.678622][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 301.692803][ T5238] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 301.705398][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 301.730460][ T4616] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 301.905497][ T4616] usb 4-1: Using ep0 maxpacket: 32 [ 301.914201][ T4616] usb 4-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 301.931416][ T4616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.940740][ T4616] usb 4-1: Product: syz [ 301.952063][ T4616] usb 4-1: Manufacturer: syz [ 301.957776][ T4616] usb 4-1: SerialNumber: syz [ 301.978781][ T4616] usb 4-1: config 0 descriptor?? [ 301.988601][ T12] team0 (unregistering): Port device team_slave_1 removed [ 302.031460][ T12] team0 (unregistering): Port device team_slave_0 removed [ 302.389677][ T9342] qrtr: Invalid version 0 [ 302.649617][ T4616] (unnamed net_device) (uninitialized): Assigned a random MAC address: f6:fa:f9:c5:71:44 [ 302.756073][ T4616] rtl8150 4-1:0.0: eth5: rtl8150 is detected [ 302.782833][ T4616] usb 4-1: USB disconnect, device number 44 [ 302.974920][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.770'. [ 303.045116][ T9287] chnl_net:caif_netlink_parms(): no params data found [ 303.377341][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.564951][ T54] Bluetooth: hci2: command tx timeout [ 303.627759][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.661966][ T9287] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.669438][ T9287] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.691083][ T9287] bridge_slave_0: entered allmulticast mode [ 303.700394][ T9287] bridge_slave_0: entered promiscuous mode [ 303.819010][ T54] Bluetooth: hci0: command tx timeout [ 303.859008][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.881981][ T9287] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.891980][ T9287] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.908958][ T9287] bridge_slave_1: entered allmulticast mode [ 303.929190][ T9287] bridge_slave_1: entered promiscuous mode [ 303.961835][ T9338] chnl_net:caif_netlink_parms(): no params data found [ 304.023541][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.336626][ T9287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 304.372321][ T9287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.527375][ T9398] qrtr: Invalid version 0 [ 304.576762][ T9287] team0: Port device team_slave_0 added [ 304.637611][ T9401] netlink: 'syz.3.778': attribute type 2 has an invalid length. [ 304.665052][ T9401] netlink: 9 bytes leftover after parsing attributes in process `syz.3.778'. [ 304.718698][ T9409] netlink: 40 bytes leftover after parsing attributes in process `syz.2.779'. [ 304.739843][ T9287] team0: Port device team_slave_1 added [ 304.840584][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 304.850465][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 304.860357][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 304.889176][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 304.897347][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 304.898618][ T9287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 304.914954][ T9287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.924888][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 304.941289][ T9287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.971730][ T9338] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.980503][ T9338] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.980689][ T9338] bridge_slave_0: entered allmulticast mode [ 304.981710][ T9338] bridge_slave_0: entered promiscuous mode [ 304.983774][ T9338] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.983838][ T9338] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.983964][ T9338] bridge_slave_1: entered allmulticast mode [ 304.985159][ T9338] bridge_slave_1: entered promiscuous mode [ 304.990597][ T12] bridge_slave_1: left allmulticast mode [ 305.036945][ T12] bridge_slave_1: left promiscuous mode [ 305.042652][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.073653][ T12] bridge_slave_0: left allmulticast mode [ 305.082065][ T12] bridge_slave_0: left promiscuous mode [ 305.088197][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.444912][ T5290] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 305.507938][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 305.520629][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 305.533070][ T12] bond0 (unregistering): Released all slaves [ 305.552123][ T9287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.559312][ T9287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.587788][ T9287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.614994][ T5290] usb 3-1: Using ep0 maxpacket: 32 [ 305.629363][ T5290] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 305.644504][ T5290] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.653846][ T5290] usb 3-1: Product: syz [ 305.657986][ T9338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.667337][ T5238] Bluetooth: hci2: command tx timeout [ 305.668947][ T5290] usb 3-1: Manufacturer: syz [ 305.681661][ T5290] usb 3-1: SerialNumber: syz [ 305.707872][ T5290] usb 3-1: config 0 descriptor?? [ 305.743868][ T9338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.775022][ T9287] hsr_slave_0: entered promiscuous mode [ 305.792710][ T9287] hsr_slave_1: entered promiscuous mode [ 305.799155][ T9287] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.809152][ T9287] Cannot create hsr debugfs directory [ 305.844453][ T9338] team0: Port device team_slave_0 added [ 305.887533][ T9338] team0: Port device team_slave_1 added [ 305.895026][ T5238] Bluetooth: hci0: command tx timeout [ 305.959202][ T9338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.966875][ T9338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.995603][ T9338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.015919][ T9338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.025473][ T9338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.051372][ C0] vkms_vblank_simulate: vblank timer overrun [ 306.057758][ T9338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.139496][ T12] hsr_slave_0: left promiscuous mode [ 306.152668][ T12] hsr_slave_1: left promiscuous mode [ 306.162776][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.171516][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.190179][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.211804][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.254089][ T12] veth1_macvtap: left promiscuous mode [ 306.263536][ T12] veth0_macvtap: left promiscuous mode [ 306.274208][ T12] veth1_vlan: left promiscuous mode [ 306.280471][ T12] veth0_vlan: left promiscuous mode [ 306.373997][ T5290] rtl8150 3-1:0.0: couldn't reset the device [ 306.381375][ T5290] rtl8150 3-1:0.0: probe with driver rtl8150 failed with error -5 [ 306.395222][ T5290] usb 3-1: USB disconnect, device number 72 [ 306.948554][ T12] team0 (unregistering): Port device team_slave_1 removed [ 306.991974][ T12] team0 (unregistering): Port device team_slave_0 removed [ 307.008775][ T5238] Bluetooth: hci1: command tx timeout [ 307.414619][ T9338] hsr_slave_0: entered promiscuous mode [ 307.432946][ T9338] hsr_slave_1: entered promiscuous mode [ 307.736066][ T5238] Bluetooth: hci2: command tx timeout [ 307.886515][ T9449] qrtr: Invalid version 0 [ 307.975600][ T5238] Bluetooth: hci0: command tx timeout [ 307.983651][ T9414] chnl_net:caif_netlink_parms(): no params data found [ 308.189011][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.352330][ T46] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 308.403376][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.506168][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 308.524440][ T46] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 308.545874][ T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 308.557670][ T46] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 308.574650][ T46] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 308.623140][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.633911][ T9471] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 308.637989][ T46] usb 4-1: config 0 descriptor?? [ 308.650691][ T9471] PKCS7: Only support pkcs7_signedData type [ 308.699564][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.733342][ T9414] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.741727][ T9414] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.753749][ T9414] bridge_slave_0: entered allmulticast mode [ 308.764077][ T9414] bridge_slave_0: entered promiscuous mode [ 308.818537][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.861768][ T9414] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.877125][ T9414] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.884479][ T9414] bridge_slave_1: entered allmulticast mode [ 308.896601][ T9414] bridge_slave_1: entered promiscuous mode [ 308.905193][ T46] hdpvr 4-1:0.0: firmware version 0x0 dated [ 308.927624][ T46] hdpvr 4-1:0.0: untested firmware, the driver might not work. [ 309.064578][ T9414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.091755][ T5238] Bluetooth: hci1: command tx timeout [ 309.135351][ T9414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.304860][ T12] bridge_slave_1: left allmulticast mode [ 309.320408][ T12] bridge_slave_1: left promiscuous mode [ 309.350948][ T9456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.351782][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.367358][ T9456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.388514][ T12] bridge_slave_0: left allmulticast mode [ 309.394188][ T12] bridge_slave_0: left promiscuous mode [ 309.432802][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.461717][ T46] hdpvr 4-1:0.0: max device number reached, device register failed [ 309.488188][ T46] usb 4-1: USB disconnect, device number 45 [ 310.045591][ T5238] Bluetooth: hci0: command tx timeout [ 310.061632][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.119095][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.164667][ T12] bond0 (unregistering): Released all slaves [ 310.214528][ T9414] team0: Port device team_slave_0 added [ 310.316651][ T9414] team0: Port device team_slave_1 added [ 310.373978][ T9414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.387065][ T9414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.415330][ T9414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.451739][ T9497] xt_CT: You must specify a L4 protocol and not use inversions on it [ 310.474416][ T9414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.482800][ T9414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.509697][ T9414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.557492][ T12] hsr_slave_0: left promiscuous mode [ 310.563397][ T12] hsr_slave_1: left promiscuous mode [ 310.569470][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.578811][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.587808][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.595292][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.613646][ T12] veth1_macvtap: left promiscuous mode [ 310.619854][ T12] veth0_macvtap: left promiscuous mode [ 310.625473][ T12] veth1_vlan: left promiscuous mode [ 310.630709][ T12] veth0_vlan: left promiscuous mode [ 310.715071][ T25] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 310.888705][ T25] usb 4-1: Using ep0 maxpacket: 8 [ 310.901244][ T25] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 310.918075][ T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 310.930488][ T25] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 310.942304][ T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 310.954541][ T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 310.967073][ T25] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 310.974498][ T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 310.986005][ T25] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 310.997715][ T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 311.009574][ T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 311.022215][ T25] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 311.029797][ T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 311.042049][ T25] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.053839][ T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 311.068927][ T25] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 311.083101][ T25] usb 4-1: string descriptor 0 read error: -22 [ 311.089545][ T25] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 311.098873][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.124071][ T25] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 311.165066][ T5238] Bluetooth: hci1: command tx timeout [ 311.165477][ T12] team0 (unregistering): Port device team_slave_1 removed [ 311.207223][ T12] team0 (unregistering): Port device team_slave_0 removed [ 311.656052][ T9287] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 311.669005][ T9287] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 311.686841][ T9287] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 311.736622][ T9287] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 311.792293][ T9414] hsr_slave_0: entered promiscuous mode [ 311.798972][ T9414] hsr_slave_1: entered promiscuous mode [ 311.811446][ T9414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.820016][ T9414] Cannot create hsr debugfs directory [ 311.994214][ T9338] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 312.011903][ T9338] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 312.046490][ T9338] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 312.080936][ T9338] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 312.184980][ T9501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.793'. [ 312.349581][ T9503] qrtr: Invalid version 0 [ 312.465812][ T9506] netlink: 44 bytes leftover after parsing attributes in process `syz.2.795'. [ 312.499008][ T9287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.578125][ T9287] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.652736][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.659943][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.673966][ T9509] netlink: 'syz.2.796': attribute type 9 has an invalid length. [ 312.676723][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.688775][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.697784][ T9509] netlink: 391 bytes leftover after parsing attributes in process `syz.2.796'. [ 312.829384][ T9414] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 312.876077][ T9338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.894701][ T9414] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 312.923460][ T9414] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 312.975265][ T9414] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 313.044628][ T9338] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.089401][ T2913] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.096582][ T2913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.124588][ T9287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.143784][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.151044][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.235554][ T25] usb 4-1: USB disconnect, device number 46 [ 313.245361][ T5238] Bluetooth: hci1: command tx timeout [ 313.322821][ T9526] netlink: 28 bytes leftover after parsing attributes in process `syz.3.798'. [ 313.333528][ T9526] netlink: 'syz.3.798': attribute type 7 has an invalid length. [ 313.341623][ T9526] netlink: 'syz.3.798': attribute type 8 has an invalid length. [ 313.351239][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz.3.798'. [ 313.397486][ T9287] veth0_vlan: entered promiscuous mode [ 313.462572][ T9287] veth1_vlan: entered promiscuous mode [ 313.509238][ T9414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.590784][ T9414] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.624247][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.631422][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.657803][ T9287] veth0_macvtap: entered promiscuous mode [ 313.674685][ T9287] veth1_macvtap: entered promiscuous mode [ 313.683148][ T9338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.749132][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.756285][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.798263][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.819274][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.832590][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 313.849231][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.881258][ T9287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.944225][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 313.970301][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 313.982430][ T9287] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.002461][ T9287] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.018646][ T9550] qrtr: Invalid version 0 [ 314.024268][ T9287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.078589][ T9287] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.095583][ T937] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 314.107753][ T9287] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.126885][ T9287] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.145110][ T9287] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.260171][ T937] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 314.263612][ T9338] veth0_vlan: entered promiscuous mode [ 314.306820][ T937] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.336263][ T9338] veth1_vlan: entered promiscuous mode [ 314.365719][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.373970][ T937] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 314.396537][ T937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 314.404713][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.409710][ T9414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.425776][ T937] usb 4-1: SerialNumber: syz [ 314.522267][ T9338] veth0_macvtap: entered promiscuous mode [ 314.554486][ T9566] gretap0: entered promiscuous mode [ 314.570608][ T9566] netlink: 'syz.2.805': attribute type 2 has an invalid length. [ 314.583003][ T9566] netlink: 9 bytes leftover after parsing attributes in process `syz.2.805'. [ 314.607698][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 314.616983][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 314.635351][ T9338] veth1_macvtap: entered promiscuous mode [ 314.695659][ T9544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.699831][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.741513][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.758272][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.778892][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.790015][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.817815][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.836998][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.844522][ T9544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.885624][ T937] usb 4-1: 0:2 : does not exist [ 314.912291][ T9414] veth0_vlan: entered promiscuous mode [ 314.938899][ T937] usb 4-1: USB disconnect, device number 47 [ 314.947090][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.966407][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.977060][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.011116][ T5689] udevd[5689]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 315.027500][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.037444][ T9338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.056303][ T9338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.076382][ T9338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.113716][ T9338] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.142785][ T9338] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.152066][ T9338] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.167399][ T9338] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.204157][ T9414] veth1_vlan: entered promiscuous mode [ 315.208422][ T8] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 315.319210][ T9414] veth0_macvtap: entered promiscuous mode [ 315.338896][ T9414] veth1_macvtap: entered promiscuous mode [ 315.365714][ T8] usb 5-1: device descriptor read/64, error -71 [ 315.413103][ T944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.431597][ T944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.465929][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.476346][ T5288] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 315.504825][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.521510][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.544109][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.559919][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.584869][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.594737][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 315.614221][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.632836][ T8] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 315.644429][ T9414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.667033][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.686379][ T5288] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.709297][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.722116][ T5288] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 315.745653][ T5288] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.746207][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.764897][ T8] usb 5-1: device descriptor read/64, error -71 [ 315.769710][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.772089][ T5288] usb 3-1: config 0 descriptor?? [ 315.790297][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.809765][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.827654][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.843982][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.872592][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.877976][ T8] usb usb5-port1: attempt power cycle [ 315.902606][ T9414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.959641][ T9414] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.971828][ T9414] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.982140][ T9414] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.993410][ T9414] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.051232][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.073452][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.231979][ T5288] lg-g15 0003:046D:C222.0022: unknown main item tag 0x0 [ 316.243665][ T5288] lg-g15 0003:046D:C222.0022: unknown main item tag 0x0 [ 316.250995][ T8] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 316.264992][ T5288] lg-g15 0003:046D:C222.0022: unknown main item tag 0x0 [ 316.279954][ T5288] lg-g15 0003:046D:C222.0022: unknown main item tag 0x0 [ 316.307442][ T8] usb 5-1: device descriptor read/8, error -71 [ 316.315593][ T5288] lg-g15 0003:046D:C222.0022: hidraw0: USB HID v0.00 Device [HID 046d:c222] on usb-dummy_hcd.2-1/input0 [ 316.439505][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.460978][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.461000][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.518248][ T9588] input: syz0 as /devices/virtual/input/input20 [ 316.532664][ T9588] openvswitch: netlink: Key type 16156 is out of range max 32 [ 316.555084][ T8] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 316.577631][ T8] usb 5-1: device descriptor read/8, error -71 [ 316.596555][ T46] usb 3-1: USB disconnect, device number 73 [ 316.677508][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.686916][ T8] usb usb5-port1: unable to enumerate USB device [ 316.751067][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.791132][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.882719][ T9633] [U]  [ 316.947186][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.130927][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.199774][ T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.209626][ T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.217711][ T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.232150][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.239997][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 317.249901][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.326592][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.332926][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.393554][ T9645] xt_recent: Unsupported userspace flags (00000076) [ 317.477984][ T12] bridge_slave_1: left allmulticast mode [ 317.483685][ T12] bridge_slave_1: left promiscuous mode [ 317.504418][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.545423][ T12] bridge_slave_0: left allmulticast mode [ 317.551129][ T12] bridge_slave_0: left promiscuous mode [ 317.557949][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.646150][ T2631] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 317.684941][ T5288] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 317.827215][ T2631] usb 3-1: Using ep0 maxpacket: 16 [ 317.856111][ T2631] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.860971][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 317.876541][ T2631] usb 3-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 317.876573][ T2631] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.876595][ T2631] usb 3-1: Product: syz [ 317.876610][ T2631] usb 3-1: Manufacturer: syz [ 317.876627][ T2631] usb 3-1: SerialNumber: syz [ 317.878670][ T2631] usb 3-1: config 0 descriptor?? [ 317.904884][ T5288] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 317.984927][ T5288] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 318.014994][ T5288] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 318.033049][ T5288] usb 1-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 318.054668][ T12] erspan0 (unregistering): left promiscuous mode [ 318.061584][ T5288] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.081974][ T5288] usb 1-1: config 0 descriptor?? [ 318.240956][ T2631] usb 3-1: Invalid number of CPorts: 0 [ 318.254834][ T2631] es2_ap_driver 3-1:0.0: probe with driver es2_ap_driver failed with error -22 [ 318.323341][ T5288] hdpvr 1-1:0.0: firmware version 0x0 dated [ 318.345848][ T5288] hdpvr 1-1:0.0: untested firmware, the driver might not work. [ 318.613738][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.636704][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.649549][ T12] bond0 (unregistering): Released all slaves [ 318.735075][ T9650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.763977][ T9650] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.809134][ T9654] netlink: 44 bytes leftover after parsing attributes in process `syz.4.817'. [ 318.822994][ T5288] hdpvr 1-1:0.0: max device number reached, device register failed [ 318.853960][ T5288] usb 1-1: USB disconnect, device number 48 [ 319.326289][ T54] Bluetooth: hci4: command tx timeout [ 319.384940][ T12] batadv_slave_1: left promiscuous mode [ 319.458820][ T9672] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.511790][ T9672] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.541879][ T12] hsr_slave_0: left promiscuous mode [ 319.611854][ T12] hsr_slave_1: left promiscuous mode [ 319.630711][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.655667][ T9680] xt_recent: Unsupported userspace flags (00000076) [ 319.669912][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.689620][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.717578][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.769001][ T12] veth1_macvtap: left promiscuous mode [ 319.774632][ T12] veth0_macvtap: left promiscuous mode [ 319.788254][ T12] veth1_vlan: left promiscuous mode [ 319.797168][ T12] veth0_vlan: left promiscuous mode [ 319.818825][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 319.828710][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 319.838249][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 319.847923][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 319.857496][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 319.864909][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 319.895867][ T2631] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 320.064957][ T2631] usb 5-1: Using ep0 maxpacket: 32 [ 320.076768][ T2631] usb 5-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed [ 320.086654][ T2631] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.100362][ T2631] usb 5-1: Product: syz [ 320.104685][ T2631] usb 5-1: Manufacturer: syz [ 320.110601][ T2631] usb 5-1: SerialNumber: syz [ 320.117448][ T2631] usb 5-1: config 0 descriptor?? [ 320.403937][ T12] team0 (unregistering): Port device team_slave_1 removed [ 320.453852][ T12] team0 (unregistering): Port device team_slave_0 removed [ 320.933669][ T9693] veth1_macvtap: entered allmulticast mode [ 320.955839][ T2631] (unnamed net_device) (uninitialized): Assigned a random MAC address: 42:51:cc:53:65:bf [ 321.069405][ T2631] rtl8150 5-1:0.0: eth5: rtl8150 is detected [ 321.099718][ T2631] usb 5-1: USB disconnect, device number 60 [ 321.172319][ T9648] chnl_net:caif_netlink_parms(): no params data found [ 321.404953][ T5238] Bluetooth: hci4: command tx timeout [ 321.415102][ T5288] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 321.554929][ T5288] usb 1-1: device descriptor read/64, error -71 [ 321.636402][ T9687] chnl_net:caif_netlink_parms(): no params data found [ 321.701934][ T9648] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.733903][ T9648] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.766963][ T9648] bridge_slave_0: entered allmulticast mode [ 321.782638][ T9648] bridge_slave_0: entered promiscuous mode [ 321.794874][ T5288] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 321.805916][ T9648] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.813038][ T9648] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.878115][ T9648] bridge_slave_1: entered allmulticast mode [ 321.895428][ T5238] Bluetooth: hci1: command tx timeout [ 321.899142][ T9648] bridge_slave_1: entered promiscuous mode [ 321.984901][ T5288] usb 1-1: device descriptor read/64, error -71 [ 322.095251][ T5288] usb usb1-port1: attempt power cycle [ 322.172546][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.194860][ T5326] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 322.199661][ T46] usb 3-1: USB disconnect, device number 74 [ 322.357351][ T9648] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.389620][ T5326] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 322.404914][ T5326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.413120][ T5326] usb 5-1: Product: syz [ 322.421591][ T5326] usb 5-1: Manufacturer: syz [ 322.432202][ T5326] usb 5-1: SerialNumber: syz [ 322.450176][ T5326] usb 5-1: config 0 descriptor?? [ 322.455459][ T5288] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 322.464387][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.517837][ T5288] usb 1-1: device descriptor read/8, error -71 [ 322.608599][ T9687] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.616062][ T9687] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.623314][ T9687] bridge_slave_0: entered allmulticast mode [ 322.630977][ T9687] bridge_slave_0: entered promiscuous mode [ 322.640135][ T9648] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.690712][ T5326] hso 5-1:0.0: Can't find BULK IN endpoint [ 322.697241][ T5326] usb-storage 5-1:0.0: USB Mass Storage device detected [ 322.726460][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.748564][ T9687] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.756034][ T5288] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 322.774898][ T8] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 322.798429][ T9687] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.811843][ T5288] usb 1-1: device descriptor read/8, error -71 [ 322.812715][ T9687] bridge_slave_1: entered allmulticast mode [ 322.836849][ T9687] bridge_slave_1: entered promiscuous mode [ 322.891314][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.895739][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 322.910799][ T9726] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.930219][ T9726] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.947209][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 322.958787][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 322.966248][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 322.973627][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 322.981551][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 322.990705][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 322.998350][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.005873][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.014854][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.023981][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.031518][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.033935][ T9737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.039020][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.039052][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.039079][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.039104][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.039130][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.039157][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.039183][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.039208][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.108703][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.116260][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.123673][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.125026][ T9737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 323.131173][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.146431][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.153963][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.161490][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.169111][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.176667][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.184081][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.187845][ T9648] team0: Port device team_slave_0 added [ 323.191568][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.205676][ T937] hid-generic 0000:0000:0000.0023: unknown main item tag 0x0 [ 323.225082][ T937] hid-generic 0000:0000:0000.0023: hidraw0: HID v0.00 Device [syz0] on syz0 [ 323.254948][ T5288] usb usb1-port1: unable to enumerate USB device [ 323.257710][ T9687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 323.302501][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 323.304101][ T9648] team0: Port device team_slave_1 added [ 323.312244][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 323.312276][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 323.312300][ T8] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 323.312335][ T8] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 323.312358][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.366141][ T8] usb 3-1: config 0 descriptor?? [ 323.444394][ T9687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.485587][ T5238] Bluetooth: hci4: command tx timeout [ 323.592402][ T8] hdpvr 3-1:0.0: firmware version 0x0 dated [ 323.599780][ T8] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 323.620780][ T9687] team0: Port device team_slave_0 added [ 323.631090][ T9687] team0: Port device team_slave_1 added [ 323.658163][ T9648] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.681623][ T9648] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.772547][ T9648] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.920291][ T9648] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.949082][ T25] usb 5-1: USB disconnect, device number 61 [ 323.965305][ T5238] Bluetooth: hci1: command tx timeout [ 323.992092][ T9648] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.075256][ T9732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.095734][ T9732] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.103054][ T9648] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 324.151009][ T8] hdpvr 3-1:0.0: max device number reached, device register failed [ 324.195707][ T9687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.202692][ T9687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.216501][ T8] usb 3-1: USB disconnect, device number 75 [ 324.268823][ T9687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.351229][ T12] bridge_slave_1: left allmulticast mode [ 324.360374][ T12] bridge_slave_1: left promiscuous mode [ 324.388099][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.265089][ T9763] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 325.294605][ T9763] PKCS7: Only support pkcs7_signedData type [ 325.594990][ T5238] Bluetooth: hci4: command tx timeout [ 326.047623][ T5238] Bluetooth: hci1: command tx timeout [ 328.128173][ T5238] Bluetooth: hci1: command tx timeout [ 331.705466][ T12] bridge_slave_0: left allmulticast mode [ 331.711166][ T12] bridge_slave_0: left promiscuous mode [ 331.756145][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.152146][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.216866][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.290652][ T12] bond0 (unregistering): Released all slaves [ 333.352546][ T9687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 333.364048][ T9687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 333.409951][ T9687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 333.834569][ T9648] hsr_slave_0: entered promiscuous mode [ 333.851728][ T9648] hsr_slave_1: entered promiscuous mode [ 333.860886][ T9648] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 333.874464][ T9648] Cannot create hsr debugfs directory [ 334.014932][ T46] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 334.181973][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 334.194834][ T46] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 334.230178][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 334.275409][ T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 334.323428][ T46] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 334.353621][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.366389][ T9687] hsr_slave_0: entered promiscuous mode [ 334.400494][ T46] usb 5-1: config 0 descriptor?? [ 334.421459][ T9766] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 334.429857][ T9687] hsr_slave_1: entered promiscuous mode [ 334.455908][ T46] hub 5-1:0.0: USB hub found [ 334.468448][ T9687] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 334.503198][ T9687] Cannot create hsr debugfs directory [ 334.879197][ T46] hub 5-1:0.0: config failed, can't read hub descriptor (err -22) [ 335.570849][ T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 335.585539][ T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 335.595587][ T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 335.603958][ T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 335.613580][ T54] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 335.622828][ T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 336.295988][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 336.307647][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 336.321602][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 336.336481][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 336.344332][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 336.352484][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 337.655084][ T54] Bluetooth: hci5: command tx timeout [ 338.445536][ T54] Bluetooth: hci6: command tx timeout [ 339.726351][ T5238] Bluetooth: hci5: command tx timeout [ 340.232339][ T46] usbhid 5-1:0.0: can't add hid device: -32 [ 340.238463][ T46] usbhid 5-1:0.0: probe with driver usbhid failed with error -32 [ 340.524969][ T54] Bluetooth: hci6: command tx timeout [ 341.804950][ T54] Bluetooth: hci5: command tx timeout [ 342.605089][ T54] Bluetooth: hci6: command tx timeout [ 343.884959][ T54] Bluetooth: hci5: command tx timeout [ 344.403857][ T5238] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 344.416993][ T5238] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 344.425200][ T5238] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 344.433113][ T5238] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 344.442808][ T5238] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 344.450687][ T5238] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 344.685667][ T5238] Bluetooth: hci6: command tx timeout [ 346.525005][ T5238] Bluetooth: hci7: command tx timeout [ 348.604924][ T5238] Bluetooth: hci7: command tx timeout [ 350.684930][ T5238] Bluetooth: hci7: command tx timeout [ 352.764959][ T5238] Bluetooth: hci7: command tx timeout [ 378.770571][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.783709][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.273696][ T54] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 379.303575][ T54] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 379.328298][ T54] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 379.420236][ T54] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 379.469445][ T54] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 379.486664][ T54] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 380.794460][ T54] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 380.803561][ T54] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 380.821122][ T54] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 380.829254][ T54] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 380.843835][ T54] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 380.853340][ T54] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 381.644931][ T54] Bluetooth: hci8: command tx timeout [ 382.924978][ T54] Bluetooth: hci9: command tx timeout [ 383.724864][ T54] Bluetooth: hci8: command tx timeout [ 385.005053][ T54] Bluetooth: hci9: command tx timeout [ 385.805039][ T54] Bluetooth: hci8: command tx timeout [ 385.868133][ T5290] usb 5-1: USB disconnect, device number 62 [ 387.084925][ T54] Bluetooth: hci9: command tx timeout [ 387.884957][ T54] Bluetooth: hci8: command tx timeout [ 389.164991][ T54] Bluetooth: hci9: command tx timeout [ 396.523219][ T5238] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 396.532533][ T5238] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 396.544908][ T5238] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 396.559220][ T5238] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 396.567461][ T5238] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 396.584834][ T5238] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 397.043881][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 397.056256][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 397.065576][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 397.074395][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 397.082489][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 397.090637][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 398.685200][ T54] Bluetooth: hci1: command tx timeout [ 399.165134][ T54] Bluetooth: hci2: command tx timeout [ 400.765176][ T54] Bluetooth: hci1: command tx timeout [ 401.245027][ T54] Bluetooth: hci2: command tx timeout [ 402.845104][ T54] Bluetooth: hci1: command tx timeout [ 403.325069][ T54] Bluetooth: hci2: command tx timeout [ 404.925250][ T54] Bluetooth: hci1: command tx timeout [ 405.227728][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 405.244101][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 405.252504][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 405.265382][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 405.273706][ T5238] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 405.282056][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 405.405038][ T5238] Bluetooth: hci2: command tx timeout [ 407.325026][ T5238] Bluetooth: hci3: command tx timeout [ 409.404930][ T5238] Bluetooth: hci3: command tx timeout [ 411.485006][ T5238] Bluetooth: hci3: command tx timeout [ 413.564944][ T5238] Bluetooth: hci3: command tx timeout [ 420.934730][ C0] sched: DL replenish lagged too much [ 426.932239][ T5238] Bluetooth: hci0: command 0x0406 tx timeout [ 439.182934][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 439.192415][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 439.200454][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 439.215980][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 439.228714][ T5238] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 439.236632][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 440.208710][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.224800][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.324929][ T54] Bluetooth: hci4: command tx timeout [ 441.790335][ T5238] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 441.805431][ T5238] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 441.814946][ T5238] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 441.825231][ T5238] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 441.832911][ T5238] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 441.840886][ T5238] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 443.405051][ T5238] Bluetooth: hci4: command tx timeout [ 443.884929][ T5238] Bluetooth: hci10: command tx timeout [ 445.484890][ T5238] Bluetooth: hci4: command tx timeout [ 445.964904][ T5238] Bluetooth: hci10: command tx timeout [ 447.564867][ T5238] Bluetooth: hci4: command tx timeout [ 448.044962][ T5238] Bluetooth: hci10: command tx timeout [ 450.125026][ T5238] Bluetooth: hci10: command tx timeout [ 456.939752][ T54] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 456.948787][ T54] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 456.956885][ T54] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 456.975349][ T54] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 456.983007][ T54] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 456.995430][ T54] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 457.524075][ T5238] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 457.540204][ T5238] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 457.548853][ T5238] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 457.558071][ T5238] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 457.568022][ T5238] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 457.575870][ T5238] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 459.085024][ T54] Bluetooth: hci11: command tx timeout [ 459.644917][ T54] Bluetooth: hci12: command tx timeout [ 461.164972][ T9829] Bluetooth: hci11: command tx timeout [ 461.724828][ T9829] Bluetooth: hci12: command tx timeout [ 462.774859][ T9829] Bluetooth: hci5: command 0x0406 tx timeout [ 462.844973][ T54] Bluetooth: hci6: command 0x0406 tx timeout [ 463.244938][ T54] Bluetooth: hci11: command tx timeout [ 463.804911][ T54] Bluetooth: hci12: command tx timeout [ 465.325312][ T54] Bluetooth: hci11: command tx timeout [ 465.783062][ T5238] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 465.793169][ T5238] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 465.802537][ T5238] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 465.817071][ T5244] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 465.836253][ T5244] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 465.844494][ T5244] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 465.884837][ T54] Bluetooth: hci12: command tx timeout [ 467.885293][ T54] Bluetooth: hci13: command tx timeout [ 467.891714][ T54] Bluetooth: hci7: command 0x0406 tx timeout [ 469.964799][ T5238] Bluetooth: hci13: command tx timeout [ 472.045064][ T5238] Bluetooth: hci13: command tx timeout [ 474.124896][ T54] Bluetooth: hci13: command tx timeout [ 500.741402][ T54] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 500.762414][ T54] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 500.796142][ T54] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 500.880696][ T54] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 500.947176][ T54] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 500.964077][ T54] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 501.653603][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.682314][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.931913][ T9850] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 502.940950][ T9850] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 502.948983][ T9850] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 502.958999][ T9850] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 502.966793][ T9850] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 502.975631][ T9850] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 503.084885][ T9850] Bluetooth: hci14: command tx timeout [ 503.730763][ T9850] Bluetooth: hci9: command 0x0406 tx timeout [ 503.737013][ T54] Bluetooth: hci8: command 0x0406 tx timeout [ 505.005128][ T5244] Bluetooth: hci15: command tx timeout [ 505.164956][ T5244] Bluetooth: hci14: command tx timeout [ 507.084870][ T5244] Bluetooth: hci15: command tx timeout [ 507.245017][ T5244] Bluetooth: hci14: command tx timeout [ 509.165174][ T5244] Bluetooth: hci15: command tx timeout [ 509.324963][ T5244] Bluetooth: hci14: command tx timeout [ 511.244944][ T5238] Bluetooth: hci15: command tx timeout [ 517.620136][ T9850] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 517.629792][ T9850] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 517.637836][ T9850] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 517.646420][ T9850] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 517.654558][ T9850] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 517.668155][ T9850] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 518.158869][ T5244] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 518.168514][ T5244] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 518.179333][ T5244] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 518.187318][ T5244] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 518.195281][ T5244] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 518.202646][ T5244] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 519.091716][ T5244] Bluetooth: hci1: command 0x0406 tx timeout [ 519.733811][ T5238] Bluetooth: hci16: command tx timeout [ 520.289515][ T5238] Bluetooth: hci17: command tx timeout [ 521.804883][ T5238] Bluetooth: hci16: command tx timeout [ 522.364850][ T5238] Bluetooth: hci17: command tx timeout [ 523.889249][ T5238] Bluetooth: hci16: command tx timeout [ 524.205357][ T5238] Bluetooth: hci2: command 0x0406 tx timeout [ 524.444910][ T5244] Bluetooth: hci17: command tx timeout [ 525.973064][ T5244] Bluetooth: hci16: command tx timeout [ 526.317843][ T5238] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 526.327159][ T5238] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 526.337248][ T5238] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 526.345872][ T5238] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 526.355132][ T5238] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 526.362980][ T5238] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 526.524912][ T5238] Bluetooth: hci17: command tx timeout [ 528.444897][ T5238] Bluetooth: hci18: command tx timeout [ 529.333596][ T5238] Bluetooth: hci3: command 0x0406 tx timeout [ 530.524893][ T5244] Bluetooth: hci18: command tx timeout [ 532.609162][ T5244] Bluetooth: hci18: command tx timeout [ 534.684864][ T5244] Bluetooth: hci18: command tx timeout [ 541.324986][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 541.332682][ T30] Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 541.374748][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 541.414561][ T30] task:kworker/u8:1 state:D stack:20496 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 541.504754][ T30] Workqueue: netns cleanup_net [ 541.509603][ T30] Call Trace: [ 541.513316][ T30] [ 541.594901][ T30] __schedule+0x1895/0x4b30 [ 541.599760][ T30] ? __pfx___schedule+0x10/0x10 [ 541.652306][ T30] ? __pfx_lock_release+0x10/0x10 [ 541.669670][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 541.704725][ T30] ? kthread_data+0x52/0xd0 [ 541.709304][ T30] ? schedule+0x90/0x320 [ 541.713577][ T30] ? wq_worker_sleeping+0x66/0x240 [ 541.784835][ T30] ? schedule+0x90/0x320 [ 541.789153][ T30] schedule+0x14b/0x320 [ 541.793341][ T30] schedule_preempt_disabled+0x13/0x30 [ 541.858884][ T30] __mutex_lock+0x6a7/0xd70 [ 541.863461][ T30] ? __mutex_lock+0x52a/0xd70 [ 541.905053][ T30] ? wiphy_unregister+0x236/0xb00 [ 541.910152][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 541.954913][ T30] ? __up_read+0x2c2/0x6b0 [ 541.959492][ T30] ? __pfx___up_read+0x10/0x10 [ 541.964300][ T30] wiphy_unregister+0x236/0xb00 [ 542.022921][ T30] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 542.054733][ T30] ? __pfx_wiphy_unregister+0x10/0x10 [ 542.060287][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 542.114807][ T30] ? ieee80211_unregister_hw+0x144/0x2c0 [ 542.120517][ T30] ieee80211_unregister_hw+0x1e2/0x2c0 [ 542.174831][ T30] mac80211_hwsim_del_radio+0x2c4/0x4c0 [ 542.180445][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 542.228120][ T30] hwsim_exit_net+0x5c1/0x670 [ 542.232873][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 542.272401][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 542.294877][ T30] cleanup_net+0x802/0xcc0 [ 542.299377][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 542.304364][ T30] ? process_scheduled_works+0x976/0x1850 [ 542.322745][ T30] process_scheduled_works+0xa63/0x1850 [ 542.332986][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 542.343827][ T30] ? assign_work+0x364/0x3d0 [ 542.351747][ T30] worker_thread+0x870/0xd30 [ 542.361111][ T30] ? __kthread_parkme+0x169/0x1d0 [ 542.372423][ T30] ? __pfx_worker_thread+0x10/0x10 [ 542.383567][ T30] kthread+0x2f0/0x390 [ 542.390301][ T30] ? __pfx_worker_thread+0x10/0x10 [ 542.400026][ T30] ? __pfx_kthread+0x10/0x10 [ 542.407155][ T30] ret_from_fork+0x4b/0x80 [ 542.411609][ T30] ? __pfx_kthread+0x10/0x10 [ 542.421386][ T30] ret_from_fork_asm+0x1a/0x30 [ 542.429955][ T30] [ 542.433797][ T30] INFO: task kworker/u8:8:3017 blocked for more than 144 seconds. [ 542.444886][ T30] Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 542.452549][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 542.471065][ T30] task:kworker/u8:8 state:D stack:18576 pid:3017 tgid:3017 ppid:2 flags:0x00004000 [ 542.484063][ T30] Workqueue: events_unbound linkwatch_event [ 542.494734][ T30] Call Trace: [ 542.498052][ T30] [ 542.501013][ T30] __schedule+0x1895/0x4b30 [ 542.511638][ T30] ? __pfx___schedule+0x10/0x10 [ 542.521058][ T30] ? __pfx_lock_release+0x10/0x10 [ 542.533745][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 542.540226][ T30] ? kthread_data+0x52/0xd0 [ 542.550340][ T30] ? schedule+0x90/0x320 [ 542.554621][ T30] ? wq_worker_sleeping+0x66/0x240 [ 542.561834][ T30] ? schedule+0x90/0x320 [ 542.572035][ T30] schedule+0x14b/0x320 [ 542.578899][ T30] schedule_preempt_disabled+0x13/0x30 [ 542.584410][ T30] __mutex_lock+0x6a7/0xd70 [ 542.600769][ T30] ? __mutex_lock+0x52a/0xd70 [ 542.609969][ T30] ? linkwatch_event+0xe/0x60 [ 542.621874][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 542.628382][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 542.633802][ T30] ? process_scheduled_works+0x976/0x1850 [ 542.644712][ T30] linkwatch_event+0xe/0x60 [ 542.649261][ T30] process_scheduled_works+0xa63/0x1850 [ 542.662931][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 542.669286][ T30] ? assign_work+0x364/0x3d0 [ 542.673918][ T30] worker_thread+0x870/0xd30 [ 542.686961][ T30] ? __kthread_parkme+0x169/0x1d0 [ 542.692041][ T30] ? __pfx_worker_thread+0x10/0x10 [ 542.703183][ T30] kthread+0x2f0/0x390 [ 542.710654][ T30] ? __pfx_worker_thread+0x10/0x10 [ 542.721539][ T30] ? __pfx_kthread+0x10/0x10 [ 542.727562][ T30] ret_from_fork+0x4b/0x80 [ 542.732021][ T30] ? __pfx_kthread+0x10/0x10 [ 542.743337][ T30] ret_from_fork_asm+0x1a/0x30 [ 542.750108][ T30] [ 542.753250][ T30] INFO: task syz-executor:9648 blocked for more than 144 seconds. [ 542.770737][ T30] Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 542.780865][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 542.794299][ T30] task:syz-executor state:D stack:21728 pid:9648 tgid:9648 ppid:1 flags:0x00004006 [ 542.812704][ T30] Call Trace: [ 542.816320][ T30] [ 542.819279][ T30] __schedule+0x1895/0x4b30 [ 542.823830][ T30] ? __pfx___schedule+0x10/0x10 [ 542.834684][ T30] ? __pfx_lock_release+0x10/0x10 [ 542.839761][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 542.852701][ T30] ? schedule+0x90/0x320 [ 542.859047][ T30] schedule+0x14b/0x320 [ 542.863252][ T30] schedule_preempt_disabled+0x13/0x30 [ 542.875074][ T30] __mutex_lock+0x6a7/0xd70 [ 542.879627][ T30] ? __mutex_lock+0x52a/0xd70 [ 542.884327][ T30] ? tun_chr_close+0x3b/0x1b0 [ 542.895212][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 542.900284][ T30] ? __pfx_call_rcu+0x10/0x10 [ 542.912312][ T30] tun_chr_close+0x3b/0x1b0 [ 542.918284][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 542.923431][ T30] __fput+0x23f/0x880 [ 542.934289][ T30] task_work_run+0x24f/0x310 [ 542.940620][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 542.952528][ T30] ? __pfx_task_work_run+0x10/0x10 [ 542.960645][ T30] ? do_exit+0xa2a/0x28e0 [ 542.971655][ T30] ? kmem_cache_free+0x1a2/0x420 [ 542.976987][ T30] ? do_exit+0xa2a/0x28e0 [ 542.981372][ T30] do_exit+0xa2f/0x28e0 [ 542.992539][ T30] ? __pfx_do_exit+0x10/0x10 [ 542.997498][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 543.002911][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 543.018141][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 543.024610][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 543.033486][ T30] do_group_exit+0x207/0x2c0 [ 543.041710][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 543.051192][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 543.062149][ T30] get_signal+0x16a3/0x1740 [ 543.070745][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 543.079924][ T30] ? __pfx_get_signal+0x10/0x10 [ 543.091122][ T30] arch_do_signal_or_restart+0x96/0x860 [ 543.100482][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 543.111762][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 543.121406][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 543.130912][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 543.140096][ T30] do_syscall_64+0x100/0x230 [ 543.148304][ T30] ? clear_bhb_loop+0x35/0x90 [ 543.153686][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.164445][ T30] RIP: 0033:0x7f19a577fe8c [ 543.172931][ T30] RSP: 002b:00007f19a5a5f660 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 543.185128][ T30] RAX: 0000000000000054 RBX: 00007f19a6464620 RCX: 00007f19a577fe8c [ 543.193159][ T30] RDX: 0000000000000054 RSI: 00007f19a6464670 RDI: 0000000000000003 [ 543.208652][ T30] RBP: 0000000000000000 R08: 00007f19a5a5f6b4 R09: 000000000000000c [ 543.220362][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 543.233058][ T30] R13: 0000000000000000 R14: 00007f19a6464670 R15: 0000000000000000 [ 543.243601][ T30] [ 543.252220][ T30] INFO: task syz-executor:9687 blocked for more than 145 seconds. [ 543.267964][ T30] Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 543.280084][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 543.292201][ T30] task:syz-executor state:D stack:21728 pid:9687 tgid:9687 ppid:1 flags:0x00004006 [ 543.304909][ T30] Call Trace: [ 543.308223][ T30] [ 543.311177][ T30] __schedule+0x1895/0x4b30 [ 543.323710][ T30] ? __pfx___schedule+0x10/0x10 [ 543.334381][ T30] ? __pfx_lock_release+0x10/0x10 [ 543.344904][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 543.350413][ T30] ? schedule+0x90/0x320 [ 543.361707][ T30] schedule+0x14b/0x320 [ 543.369474][ T30] schedule_preempt_disabled+0x13/0x30 [ 543.382365][ T30] __mutex_lock+0x6a7/0xd70 [ 543.387223][ T30] ? __mutex_lock+0x52a/0xd70 [ 543.391935][ T30] ? tun_chr_close+0x3b/0x1b0 [ 543.403713][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 543.413021][ T30] ? __pfx_call_rcu+0x10/0x10 [ 543.425874][ T30] tun_chr_close+0x3b/0x1b0 [ 543.430421][ T30] ? __pfx_tun_chr_close+0x10/0x10 [ 543.442836][ T30] __fput+0x23f/0x880 [ 543.447166][ T30] task_work_run+0x24f/0x310 [ 543.452139][ T30] ? kasan_quarantine_put+0xdc/0x230 [ 543.466236][ T30] ? __pfx_task_work_run+0x10/0x10 [ 543.471409][ T30] ? do_exit+0xa2a/0x28e0 [ 543.482259][ T30] ? kmem_cache_free+0x1a2/0x420 [ 543.488944][ T30] ? do_exit+0xa2a/0x28e0 [ 543.493338][ T30] do_exit+0xa2f/0x28e0 [ 543.504478][ T30] ? __pfx_do_exit+0x10/0x10 [ 543.509427][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 543.523151][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 543.529481][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 543.542790][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 543.548700][ T30] do_group_exit+0x207/0x2c0 [ 543.553331][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 543.564829][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 543.570102][ T30] get_signal+0x16a3/0x1740 [ 543.583792][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 543.589293][ T30] ? __pfx_get_signal+0x10/0x10 [ 543.594204][ T30] arch_do_signal_or_restart+0x96/0x860 [ 543.604693][ T30] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 543.610914][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 543.625164][ T30] ? syscall_exit_to_user_mode+0xa3/0x370 [ 543.630971][ T30] syscall_exit_to_user_mode+0xc9/0x370 [ 543.643584][ T30] do_syscall_64+0x100/0x230 [ 543.650340][ T30] ? clear_bhb_loop+0x35/0x90 [ 543.661563][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.670684][ T30] RIP: 0033:0x7f255d97fe8c [ 543.677773][ T30] RSP: 002b:00007f255dc5f670 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 543.691445][ T30] RAX: 000000000000004c RBX: 00007f255e664620 RCX: 00007f255d97fe8c [ 543.701100][ T30] RDX: 000000000000004c RSI: 00007f255e664670 RDI: 0000000000000003 [ 543.714753][ T30] RBP: 0000000000000000 R08: 00007f255dc5f6c4 R09: 000000000000000c [ 543.722949][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 543.741132][ T30] R13: 0000000000000000 R14: 00007f255e664670 R15: 0000000000000000 [ 543.758401][ T30] [ 543.761539][ T30] INFO: task syz-executor:9801 blocked for more than 145 seconds. [ 543.774148][ T30] Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 543.786100][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 543.800868][ T30] task:syz-executor state:D stack:26640 pid:9801 tgid:9801 ppid:1 flags:0x00004004 [ 543.813764][ T30] Call Trace: [ 543.822994][ T30] [ 543.826377][ T30] __schedule+0x1895/0x4b30 [ 543.830940][ T30] ? __pfx___schedule+0x10/0x10 [ 543.842817][ T30] ? __pfx_lock_release+0x10/0x10 [ 543.849410][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 543.861698][ T30] ? schedule+0x90/0x320 [ 543.866437][ T30] schedule+0x14b/0x320 [ 543.870632][ T30] schedule_preempt_disabled+0x13/0x30 [ 543.883727][ T30] __mutex_lock+0x6a7/0xd70 [ 543.891495][ T30] ? __mutex_lock+0x52a/0xd70 [ 543.904230][ T30] ? register_nexthop_notifier+0x84/0x290 [ 543.910304][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 543.922092][ T30] ? __asan_memset+0x23/0x50 [ 543.927129][ T30] register_nexthop_notifier+0x84/0x290 [ 543.932714][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 543.944742][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 543.951037][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 543.968662][ T30] ? __asan_memset+0x23/0x50 [ 543.973306][ T30] ops_init+0x31e/0x590 [ 543.986016][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 543.991442][ T30] setup_net+0x287/0x9e0 [ 544.003586][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 544.010665][ T30] ? __pfx_setup_net+0x10/0x10 [ 544.021163][ T30] copy_net_ns+0x33f/0x570 [ 544.027122][ T30] create_new_namespaces+0x425/0x7b0 [ 544.032459][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 544.045030][ T30] ksys_unshare+0x57d/0xa70 [ 544.049595][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 544.061021][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 544.067829][ T30] ? do_syscall_64+0x100/0x230 [ 544.073293][ T30] __x64_sys_unshare+0x38/0x40 [ 544.084758][ T30] do_syscall_64+0xf3/0x230 [ 544.090090][ T30] ? clear_bhb_loop+0x35/0x90 [ 544.102361][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.109727][ T30] RIP: 0033:0x7ff3b2d7f7f7 [ 544.114173][ T30] RSP: 002b:00007ff3b305ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 544.129839][ T30] RAX: ffffffffffffffda RBX: 00007ff3b2df1a85 RCX: 00007ff3b2d7f7f7 [ 544.140392][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 544.154126][ T30] RBP: 0000000000000000 R08: 00007ff3b3a67d60 R09: 0000000000000000 [ 544.163521][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 544.180659][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 544.189553][ T30] [ 544.202103][ T30] INFO: task syz-executor:9804 blocked for more than 146 seconds. [ 544.211050][ T30] Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 544.227779][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 544.242581][ T30] task:syz-executor state:D stack:25520 pid:9804 tgid:9804 ppid:1 flags:0x00004004 [ 544.254300][ T30] Call Trace: [ 544.263473][ T30] [ 544.267915][ T30] __schedule+0x1895/0x4b30 [ 544.272487][ T30] ? __pfx___schedule+0x10/0x10 [ 544.284996][ T30] ? __pfx_lock_release+0x10/0x10 [ 544.290164][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 544.302479][ T30] ? schedule+0x90/0x320 [ 544.307455][ T30] schedule+0x14b/0x320 [ 544.311702][ T30] schedule_preempt_disabled+0x13/0x30 [ 544.323750][ T30] __mutex_lock+0x6a7/0xd70 [ 544.330778][ T30] ? __mutex_lock+0x52a/0xd70 [ 544.340154][ T30] ? register_nexthop_notifier+0x84/0x290 [ 544.348440][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 544.353517][ T30] ? __asan_memset+0x23/0x50 [ 544.362962][ T30] register_nexthop_notifier+0x84/0x290 [ 544.374308][ T30] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 544.384813][ T30] ? __pfx_debug_check_no_locks_freed+0x10/0x10 [ 544.391099][ T30] ? __pfx_register_nexthop_notifier+0x10/0x10 [ 544.404537][ T30] ? __asan_memset+0x23/0x50 [ 544.409570][ T30] ops_init+0x31e/0x590 [ 544.413774][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 544.425137][ T30] setup_net+0x287/0x9e0 [ 544.429449][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 544.441497][ T30] ? __pfx_setup_net+0x10/0x10 [ 544.452059][ T30] copy_net_ns+0x33f/0x570 [ 544.463549][ T30] create_new_namespaces+0x425/0x7b0 [ 544.470438][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 544.480683][ T30] ksys_unshare+0x57d/0xa70 [ 544.488872][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 544.493945][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 544.504401][ T30] ? do_syscall_64+0x100/0x230 [ 544.513023][ T30] __x64_sys_unshare+0x38/0x40 [ 544.521364][ T30] do_syscall_64+0xf3/0x230 [ 544.532302][ T30] ? clear_bhb_loop+0x35/0x90 [ 544.540994][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.550509][ T30] RIP: 0033:0x7fa85f57f7f7 [ 544.558481][ T30] RSP: 002b:00007fa85f85ffa8 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 544.570528][ T30] RAX: ffffffffffffffda RBX: 00007fa85f5f1a85 RCX: 00007fa85f57f7f7 [ 544.584459][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 544.598671][ T30] RBP: 0000000000000000 R08: 00007fa860267d60 R09: 0000000000000000 [ 544.609567][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 000000000000000c [ 544.623473][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 544.634117][ T30] [ 544.642098][ T30] [ 544.642098][ T30] Showing all locks held in the system: [ 544.652993][ T30] 4 locks held by kworker/0:0/8: [ 544.664097][ T30] 4 locks held by kworker/u8:1/12: [ 544.671703][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 544.684830][ T30] #1: ffffc90000117d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 544.704426][ T30] #2: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 544.722827][ T30] #3: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: wiphy_unregister+0x236/0xb00 [ 544.732567][ T30] 1 lock held by khungtaskd/30: [ 544.744334][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 544.754613][ T30] 3 locks held by kworker/u8:4/61: [ 544.767362][ T30] #0: ffff88814baf4148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 544.788584][ T30] #1: ffffc900015c7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 544.811326][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 544.822789][ T30] 3 locks held by kworker/u8:8/3017: [ 544.833831][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 544.852489][ T30] #1: ffffc9000a737d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 544.873235][ T30] #2: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 544.882637][ T30] 1 lock held by dhcpcd/4901: [ 544.894703][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 544.904193][ T30] 2 locks held by getty/4982: [ 544.917778][ T30] #0: ffff88814bc660a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 544.935223][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 544.952044][ T30] 6 locks held by kworker/0:4/5288: [ 544.958619][ T30] 2 locks held by syz-executor/9287: [ 544.963926][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 544.980352][ T30] #1: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 544.994055][ T30] 1 lock held by syz-executor/9648: [ 545.006313][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 545.025326][ T30] 1 lock held by syz-executor/9687: [ 545.030563][ T30] #0: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: tun_chr_close+0x3b/0x1b0 [ 545.044771][ T30] 2 locks held by syz.0.834/9758: [ 545.049832][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 545.067581][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: ppp_exit_net+0xe3/0x3d0 [ 545.081824][ T30] 2 locks held by syz-executor/9784: [ 545.090200][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 545.108865][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 545.122418][ T30] 2 locks held by syz-executor/9787: [ 545.131580][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 545.149887][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 545.160830][ T30] 2 locks held by syz-executor/9790: [ 545.171982][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 545.182929][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 545.201591][ T30] 2 locks held by syz-executor/9793: [ 545.208356][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 545.223950][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 545.236130][ T30] 2 locks held by syz-executor/9796: [ 545.241440][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 545.258194][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 545.271458][ T30] 2 locks held by syz-executor/9801: [ 545.281572][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 545.294739][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 545.311937][ T30] 2 locks held by syz-executor/9804: [ 545.317636][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 545.336528][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 545.353697][ T30] 2 locks held by syz-executor/9808: [ 545.359318][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 545.374673][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 545.391391][ T30] 2 locks held by syz-executor/9816: [ 545.397054][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 545.415112][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 545.433873][ T30] 2 locks held by syz-executor/9819: [ 545.439534][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 545.456155][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 545.478293][ T30] 2 locks held by syz-executor/9823: [ 545.483615][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 545.504453][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 545.523479][ T30] 2 locks held by syz-executor/9828: [ 545.529500][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 545.544940][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 545.562005][ T30] 2 locks held by syz-executor/9842: [ 545.570453][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 545.584707][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 545.601060][ T30] 2 locks held by syz-executor/9846: [ 545.607448][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 545.627787][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 545.644244][ T30] 2 locks held by syz-executor/9852: [ 545.651218][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 545.669819][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 545.683678][ T30] 2 locks held by syz-executor/9857: [ 545.692679][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 545.709231][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 545.722984][ T30] 2 locks held by syz-executor/9860: [ 545.737876][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 545.751432][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 545.764715][ T30] 2 locks held by syz-executor/9865: [ 545.770031][ T30] #0: ffffffff8fcc4f50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 545.786206][ T30] #1: ffffffff8fcd1a48 (rtnl_mutex){+.+.}-{3:3}, at: register_nexthop_notifier+0x84/0x290 [ 545.802180][ T30] [ 545.804533][ T30] ============================================= [ 545.804533][ T30] [ 545.823121][ T30] NMI backtrace for cpu 1 [ 545.827509][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 545.838033][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 545.848110][ T30] Call Trace: [ 545.851404][ T30] [ 545.854347][ T30] dump_stack_lvl+0x241/0x360 [ 545.859053][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 545.864271][ T30] ? __pfx__printk+0x10/0x10 [ 545.868895][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 545.873859][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 545.879338][ T30] ? _printk+0xd5/0x120 [ 545.883516][ T30] ? __pfx__printk+0x10/0x10 [ 545.888126][ T30] ? __wake_up_klogd+0xcc/0x110 [ 545.892997][ T30] ? __pfx__printk+0x10/0x10 [ 545.897617][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 545.902661][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 545.908666][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 545.914669][ T30] watchdog+0xff4/0x1040 [ 545.918936][ T30] ? watchdog+0x1ea/0x1040 [ 545.923376][ T30] ? __pfx_watchdog+0x10/0x10 [ 545.928071][ T30] kthread+0x2f0/0x390 [ 545.932158][ T30] ? __pfx_watchdog+0x10/0x10 [ 545.936856][ T30] ? __pfx_kthread+0x10/0x10 [ 545.941471][ T30] ret_from_fork+0x4b/0x80 [ 545.945914][ T30] ? __pfx_kthread+0x10/0x10 [ 545.950518][ T30] ret_from_fork_asm+0x1a/0x30 [ 545.955316][ T30] [ 545.958867][ T30] Sending NMI from CPU 1 to CPUs 0: [ 545.964107][ C0] NMI backtrace for cpu 0 [ 545.964120][ C0] CPU: 0 UID: 0 PID: 5288 Comm: kworker/0:4 Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 545.964141][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 545.964153][ C0] Workqueue: events_long defense_work_handler [ 545.964178][ C0] RIP: 0010:kasan_save_alloc_info+0x4/0x40 [ 545.964202][ C0] Code: 90 90 90 90 90 90 66 0f 1f 00 31 f6 e9 25 ff ff ff 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 66 0f 1f 00 <55> 53 48 63 87 bc 00 00 00 48 85 c0 74 25 48 89 f3 48 01 c3 74 1d [ 545.964216][ C0] RSP: 0018:ffffc900000069c0 EFLAGS: 00000202 [ 545.964230][ C0] RAX: ffffed1007987e44 RBX: ffff88803cc3f200 RCX: 00000000000000fc [ 545.964242][ C0] RDX: 0000000000002920 RSI: ffff88803cc3f200 RDI: ffff88801ac41780 [ 545.964254][ C0] RBP: 0000000000000020 R08: dffffc0000000000 R09: 0000000000000004 [ 545.964266][ C0] R10: ffffed1007987e44 R11: fffff52000000d60 R12: 0000000000000020 [ 545.964279][ C0] R13: ffff88801ac41780 R14: 0000000000002920 R15: ffff88801ac41780 [ 545.964291][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 545.964307][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 545.964319][ C0] CR2: 0000000000000040 CR3: 000000000e734000 CR4: 00000000003526f0 [ 545.964333][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 545.964343][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 545.964354][ C0] Call Trace: [ 545.964360][ C0] [ 545.964367][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 545.964387][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 545.964410][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 545.964428][ C0] ? nmi_handle+0x2a/0x5a0 [ 545.964452][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 545.964471][ C0] ? nmi_handle+0x14f/0x5a0 [ 545.964487][ C0] ? nmi_handle+0x2a/0x5a0 [ 545.964504][ C0] ? kasan_save_alloc_info+0x4/0x40 [ 545.964524][ C0] ? default_do_nmi+0x63/0x160 [ 545.964542][ C0] ? exc_nmi+0x123/0x1f0 [ 545.964560][ C0] ? end_repeat_nmi+0xf/0x53 [ 545.964581][ C0] ? kasan_save_alloc_info+0x4/0x40 [ 545.964601][ C0] ? kasan_save_alloc_info+0x4/0x40 [ 545.964622][ C0] ? kasan_save_alloc_info+0x4/0x40 [ 545.964650][ C0] [ 545.964656][ C0] [ 545.964662][ C0] __kasan_kmalloc+0x98/0xb0 [ 545.964678][ C0] ? ref_tracker_alloc+0x14b/0x490 [ 545.964693][ C0] __kmalloc_cache_noprof+0x19c/0x2c0 [ 545.964715][ C0] ref_tracker_alloc+0x14b/0x490 [ 545.964731][ C0] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 545.964755][ C0] dst_init+0xee/0x490 [ 545.964768][ C0] ? kmem_cache_alloc_noprof+0x185/0x2a0 [ 545.964789][ C0] dst_alloc+0x14f/0x190 [ 545.964806][ C0] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 545.964836][ C0] ip_route_output_key_hash+0x193/0x2b0 [ 545.964857][ C0] ? ip_route_output_key_hash+0xdf/0x2b0 [ 545.964877][ C0] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 545.964898][ C0] ? __pfx_lock_release+0x10/0x10 [ 545.964918][ C0] ? worker_thread+0x870/0xd30 [ 545.964943][ C0] ip_route_output_flow+0x29/0x140 [ 545.964963][ C0] ip_route_me_harder+0x80d/0x1300 [ 545.964988][ C0] ? __pfx_ip_route_me_harder+0x10/0x10 [ 545.965008][ C0] ? trace_kmalloc+0x1f/0xd0 [ 545.965025][ C0] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 545.965055][ C0] synproxy_send_tcp+0x356/0x6c0 [ 545.965078][ C0] synproxy_send_client_synack+0x8b8/0xf30 [ 545.965103][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 545.965124][ C0] ? synproxy_pernet+0x45/0x270 [ 545.965146][ C0] nft_synproxy_eval_v4+0x3ca/0x610 [ 545.965169][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 545.965190][ C0] ? nf_ip_checksum+0x13a/0x500 [ 545.965213][ C0] nft_synproxy_do_eval+0x362/0xa60 [ 545.965235][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 545.965255][ C0] ? validate_chain+0x11e/0x5920 [ 545.965274][ C0] ? __pfx_validate_chain+0x10/0x10 [ 545.965291][ C0] ? validate_chain+0x11e/0x5920 [ 545.965312][ C0] nft_do_chain+0x4ad/0x1da0 [ 545.965339][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 545.965358][ C0] ? __local_bh_enable_ip+0x168/0x200 [ 545.965390][ C0] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 545.965409][ C0] nft_do_chain_inet+0x418/0x6b0 [ 545.965431][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 545.965450][ C0] ? ipt_do_table+0x312/0x1860 [ 545.965477][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 545.965496][ C0] nf_hook_slow+0xc3/0x220 [ 545.965515][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 545.965533][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 545.965550][ C0] NF_HOOK+0x29e/0x450 [ 545.965568][ C0] ? NF_HOOK+0x9a/0x450 [ 545.965584][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 545.965601][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 545.965621][ C0] ? ip_rcv_finish+0x406/0x560 [ 545.965639][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 545.965661][ C0] NF_HOOK+0x3a4/0x450 [ 545.965677][ C0] ? __lock_acquire+0x1384/0x2050 [ 545.965698][ C0] ? NF_HOOK+0x9a/0x450 [ 545.965714][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 545.965730][ C0] ? ip_rcv_core+0x801/0xd10 [ 545.965747][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 545.965768][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 545.965785][ C0] __netif_receive_skb+0x2bf/0x650 [ 545.965804][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 545.965825][ C0] ? __pfx___netif_receive_skb+0x10/0x10 [ 545.965842][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 545.965863][ C0] ? __pfx_lock_release+0x10/0x10 [ 545.965884][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 545.965910][ C0] process_backlog+0x662/0x15b0 [ 545.965931][ C0] ? process_backlog+0x33b/0x15b0 [ 545.965953][ C0] ? __pfx_process_backlog+0x10/0x10 [ 545.965972][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 545.965994][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 545.966017][ C0] __napi_poll+0xcb/0x490 [ 545.966036][ C0] net_rx_action+0x89b/0x1240 [ 545.966065][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 545.966084][ C0] ? __pfx_tmigr_handle_remote+0x10/0x10 [ 545.966119][ C0] handle_softirqs+0x2c5/0x980 [ 545.966141][ C0] ? do_softirq+0x11b/0x1e0 [ 545.966161][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 545.966184][ C0] do_softirq+0x11b/0x1e0 [ 545.966202][ C0] [ 545.966208][ C0] [ 545.966215][ C0] ? __pfx_do_softirq+0x10/0x10 [ 545.966234][ C0] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 545.966254][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 545.966275][ C0] ? rcu_is_watching+0x15/0xb0 [ 545.966294][ C0] __local_bh_enable_ip+0x1bb/0x200 [ 545.966314][ C0] ? update_defense_level+0x122/0xcf0 [ 545.966333][ C0] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 545.966353][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 545.966373][ C0] ? update_defense_level+0x122/0xcf0 [ 545.966392][ C0] ? update_defense_level+0x122/0xcf0 [ 545.966412][ C0] update_defense_level+0x8ec/0xcf0 [ 545.966433][ C0] ? update_defense_level+0x122/0xcf0 [ 545.966452][ C0] ? __pfx_update_defense_level+0x10/0x10 [ 545.966476][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 545.966500][ C0] ? process_scheduled_works+0x976/0x1850 [ 545.966520][ C0] defense_work_handler+0x22/0xd0 [ 545.966540][ C0] process_scheduled_works+0xa63/0x1850 [ 545.966571][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 545.966595][ C0] ? assign_work+0x364/0x3d0 [ 545.966616][ C0] worker_thread+0x870/0xd30 [ 545.966640][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 545.966666][ C0] ? __kthread_parkme+0x169/0x1d0 [ 545.966688][ C0] ? __pfx_worker_thread+0x10/0x10 [ 545.966708][ C0] kthread+0x2f0/0x390 [ 545.966723][ C0] ? __pfx_worker_thread+0x10/0x10 [ 545.966742][ C0] ? __pfx_kthread+0x10/0x10 [ 545.966758][ C0] ret_from_fork+0x4b/0x80 [ 545.966777][ C0] ? __pfx_kthread+0x10/0x10 [ 545.966792][ C0] ret_from_fork_asm+0x1a/0x30 [ 545.966819][ C0] [ 546.763377][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 546.770355][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00330-gfc20a3e57247 #0 [ 546.780881][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 546.790963][ T30] Call Trace: [ 546.794256][ T30] [ 546.797199][ T30] dump_stack_lvl+0x241/0x360 [ 546.801900][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 546.807114][ T30] ? __pfx__printk+0x10/0x10 [ 546.811733][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 546.817743][ T30] ? vscnprintf+0x5d/0x90 [ 546.822091][ T30] panic+0x349/0x880 [ 546.826020][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 546.832196][ T30] ? __pfx_panic+0x10/0x10 [ 546.836633][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 546.842023][ T30] ? __irq_work_queue_local+0x137/0x410 [ 546.847600][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 546.853033][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 546.859206][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 546.865383][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 546.871560][ T30] watchdog+0x1033/0x1040 [ 546.875913][ T30] ? watchdog+0x1ea/0x1040 [ 546.880353][ T30] ? __pfx_watchdog+0x10/0x10 [ 546.886434][ T30] kthread+0x2f0/0x390 [ 546.890514][ T30] ? __pfx_watchdog+0x10/0x10 [ 546.895219][ T30] ? __pfx_kthread+0x10/0x10 [ 546.899826][ T30] ret_from_fork+0x4b/0x80 [ 546.904266][ T30] ? __pfx_kthread+0x10/0x10 [ 546.908961][ T30] ret_from_fork_asm+0x1a/0x30 [ 546.913756][ T30] [ 546.917152][ T30] Kernel Offset: disabled [ 546.921479][ T30] Rebooting in 86400 seconds..