last executing test programs: 30.297502039s ago: executing program 3 (id=101): socket$l2tp(0x2, 0x2, 0x73) syz_open_dev$loop(&(0x7f0000000040), 0x7, 0x20080) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r2, 0x0, 0xff}, 0x18) mremap(&(0x7f0000724000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) syz_open_dev$usbfs(&(0x7f0000000100), 0x775, 0x8000) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) dup(r3) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r5, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000}) r6 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r6, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_usb_disconnect(r6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[@ANYRES32=0x0], 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 16.469320977s ago: executing program 3 (id=114): socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, 0x0) timer_create(0x2, 0x0, &(0x7f0000000040)) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x24500, 0x0) ioctl$TUNGETFEATURES(r0, 0x800454cf, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/consoles\x00', 0x0, 0x0) r2 = syz_io_uring_setup(0x49d, &(0x7f00000003c0)={0x0, 0x79ac, 0x800, 0x7ff9, 0x32c, 0x0, r1}, 0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f0000000080)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r1, 0x7, &(0x7f00000000c0)=""/207, 0xcf, 0x10, 0x1}) io_uring_enter(r2, 0xfd0, 0x4c1, 0x43, 0x0, 0x0) 16.082050824s ago: executing program 3 (id=117): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000600)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000640)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000003880)={0x34, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000a40)={0x34, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000002c0)={0x20, 0x2f, 0x1, "a5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000001c0)={0x40, 0xd, 0x3, "0bd578"}, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0xc0, 0xa2, 0x2f, "411e99b59a438e032112eda4a4b6cf9c9f9fd94bd4e151fef2f0a060c317badf3b4a604568d9b0770c368ff30bd8a0"}}) 12.767688721s ago: executing program 3 (id=122): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x1000) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) ppoll(&(0x7f0000000100)=[{r2, 0x9622}, {r1, 0x200}], 0x2, 0x0, 0x0, 0x0) mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x100000f, 0x11, r2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000000)=0x4000) socket$nl_route(0x10, 0x3, 0x0) 11.25113022s ago: executing program 1 (id=123): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x14, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 10.986725308s ago: executing program 1 (id=126): syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd, 0x0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/19, 0x13}], 0x1, 0x0, 0x1}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200050016000200"], 0x50}}, 0x0) 10.322428607s ago: executing program 1 (id=129): openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0x8, 0x5, 0x1, 0x1, 0xa, 0x4, 0x7f, 0x0, 0x2, 0x3, 0x3, 0xfb, 0xb1, 0xf9, 0xf}}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = inotify_init() chdir(&(0x7f0000000340)='./cgroup\x00') mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x5000009) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x106, 0x9}}, 0x20) r5 = memfd_create(&(0x7f0000000840)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842.\x17c`\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10d\x89J\xb3zz\x83\x81\x0f\xbd\xdf\xff9**\xb7\xfa\xa9h;<\xe8\x85\v\x9e\x02\x03\xad\xa4\x11R\x14\xbc\xc8\xb5\x89\xffx\x98%O\xf8n~1G\x89\x96\x1d\xecz\xe8\x04\x86G%\xa0\xd5[\xda\xc9', 0x4) fallocate(r5, 0x0, 0x0, 0x100000000) r6 = getpgrp(0x0) move_pages(r6, 0x0, 0x0, 0x0, 0x0, 0x2) syz_emit_ethernet(0x154, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mountinfo\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000180)={0x10004, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}}}, 0x30) 10.240711559s ago: executing program 4 (id=130): socket$pppl2tp(0x18, 0x1, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x302, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 9.422434294s ago: executing program 4 (id=131): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x1c0) msgsnd(r0, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1a5401, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 8.842349893s ago: executing program 4 (id=132): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f0000905030300000000000905"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) 8.086346639s ago: executing program 2 (id=133): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) sched_setattr(r2, &(0x7f0000000040)={0x38, 0x5, 0x8, 0x401, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd700021dcdf10270000000c00018008000100", @ANYRES32, @ANYBLOB="18000180140002"], 0x38}, 0x1, 0x0, 0x0, 0xc4}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r5 = syz_open_dev$evdev(0x0, 0x3, 0x822b01) ioctl$EVIOCSMASK(r5, 0x40104593, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}}, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000880)={0x3, 0x0, 0x0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) socket(0x10, 0x3, 0x0) 8.065533451s ago: executing program 3 (id=134): socket$kcm(0x10, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x2, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x86dd}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0x9}, 0x0) syz_usb_connect(0x0, 0x5f, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r2 = fsopen(&(0x7f0000000080)='binder\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) fchdir(0xffffffffffffffff) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x9, 0x2) 5.340527046s ago: executing program 4 (id=136): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)="12", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)}}], 0x2, 0x48800) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='vegas\x00', 0x6) shutdown(r0, 0x2) 5.178337433s ago: executing program 1 (id=137): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x14, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b000000000000", 0x10, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 4.91023806s ago: executing program 1 (id=138): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x13f}}, 0x20) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400000000000000000100ffff0900010073797a30000000002c000000030a01010001000000000000010040000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000140000000140800034000000002080002400000001208000800000000000900010073797a30"], 0x108}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x20) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4000, 0x10, @mcast1, 0x5}, 0x1c) 4.909737396s ago: executing program 4 (id=139): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000080)={@dev={0xfe, 0x80, '\x00', 0x28}}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000000206056fd30000000000000000000000140007800800114000000000050015000c0000000500010006000000050005000200000005000400000000000900020073797a300000000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) 4.410384677s ago: executing program 0 (id=141): socket$pppl2tp(0x18, 0x1, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x302, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 3.64199653s ago: executing program 0 (id=142): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x1c0) msgsnd(r0, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1a5401, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.392473302s ago: executing program 0 (id=143): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000300012800b00010065727370616e00002000028004001200050016000200"], 0x50}}, 0x0) 3.217736068s ago: executing program 2 (id=144): ioctl$DRM_IOCTL_GET_CAP(0xffffffffffffffff, 0xc010640c, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000300)={0x0, 0x400004, 0x13900}, &(0x7f0000000000), &(0x7f0000000200)) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001d906e20501dc6609b620103000109021b0001000010000904f7000176246700090582020002"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) preadv(r0, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/178, 0xb2}], 0x1, 0x1ff, 0x401) 3.08302704s ago: executing program 3 (id=145): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) setxattr$incfs_metadata(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa15, 0xffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20004040) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) keyctl$join(0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r4) inotify_init1(0x80000) 3.019197549s ago: executing program 0 (id=146): socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r2, r3, 0x0, 0x201f00) 1.746642828s ago: executing program 2 (id=147): openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0x8, 0x5, 0x1, 0x1, 0xa, 0x4, 0x7f, 0x0, 0x2, 0x3, 0x3, 0xfb, 0xb1, 0xf9, 0xf}}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r3 = inotify_init() chdir(&(0x7f0000000340)='./cgroup\x00') mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00') inotify_add_watch(r3, &(0x7f00000000c0)='.\x00', 0x5000009) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, 0x0, 0x106, 0x9}}, 0x20) r5 = memfd_create(&(0x7f0000000840)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842.\x17c`\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10d\x89J\xb3zz\x83\x81\x0f\xbd\xdf\xff9**\xb7\xfa\xa9h;<\xe8\x85\v\x9e\x02\x03\xad\xa4\x11R\x14\xbc\xc8\xb5\x89\xffx\x98%O\xf8n~1G\x89\x96\x1d\xecz\xe8\x04\x86G%\xa0\xd5[\xda\xc9', 0x4) fallocate(r5, 0x0, 0x0, 0x100000000) r6 = getpgrp(0x0) move_pages(r6, 0x0, 0x0, 0x0, 0x0, 0x2) syz_emit_ethernet(0x154, 0x0, 0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mountinfo\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000180)={0x10004, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) write$RDMA_USER_CM_CMD_BIND_IP(r4, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @remote, 0xf}}}, 0x30) 1.63032258s ago: executing program 0 (id=148): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)=@newtaction={0x14, 0x30, 0xc96f2b0dc02612b1, 0x71bd23, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000", 0x11, 0x8804, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.366398471s ago: executing program 0 (id=149): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) epoll_create1(0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x149a40, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$inet(r3, 0x0, 0x20000090) listen(r3, 0x5) io_uring_enter(r4, 0x3517, 0xc2de, 0x9, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 816.460454ms ago: executing program 4 (id=150): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x108242, 0x1f6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0003}]}) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff, 0x100) r4 = gettid() write$rfkill(r3, 0x0, 0x0) openat$iommufd(0xffffff9c, 0x0, 0x400000, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) ioctl$BTRFS_IOC_RESIZE(r2, 0x50009403, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f0000000340)=0x2) openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x189a42, 0x0) vmsplice(r1, &(0x7f0000003680)=[{&(0x7f00000000c0)="ab8c16e645c2", 0x6}], 0x1000000000000231, 0xe) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000040)={0x40, 0x7, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 694.625187ms ago: executing program 2 (id=151): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2037) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x7, {0x0, 0x1b}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r2, 0x0, 0x0) close(r0) ioctl$NBD_DISCONNECT(r2, 0xab08) 296.71974ms ago: executing program 2 (id=152): socket$pppl2tp(0x18, 0x1, 0x1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x302, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) 295.59563ms ago: executing program 1 (id=153): open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = msgget$private(0x0, 0x1c0) msgsnd(r0, 0x0, 0x8, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1a5401, 0x0) dup3(r1, 0xffffffffffffffff, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 2 (id=154): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4e20, @remote}, 0x10, 0x0}, 0x3000d041) writev(0xffffffffffffffff, &(0x7f0000000280)=[{0x0}], 0x1) accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000200), 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$revoke(0x3, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x0) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0xfe, 0x0, 0x7ffffffe}]}) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000300)='./file1\x00', 0x14b042, 0xc4) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) syz_usb_connect(0x7, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008e3cbb40991107902402000000010902520001100030000904004b029a36d20c0b24020102020306f781aa0e240201080308014c5aacec279f0a24020101028101c7810b2402010703800898c3350905070020000400040e"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.185' (ED25519) to the list of known hosts. [ 85.868494][ T5825] cgroup: Unknown subsys name 'net' [ 86.145847][ T5825] cgroup: Unknown subsys name 'cpuset' [ 86.191088][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.753840][ T989] cfg80211: failed to load regulatory.db [ 88.064521][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.859088][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.861074][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.870966][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.873346][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.873517][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 90.874612][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 90.879057][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 90.879207][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.890369][ T5846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 90.892364][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 90.966583][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.967870][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 90.968550][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 90.969588][ T5846] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 90.970205][ T5846] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.066820][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 91.077804][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 91.078536][ T5846] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.096424][ T5846] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.098161][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.128832][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 91.138277][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.139415][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.155681][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.157862][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.786594][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 91.922219][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 92.106135][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 92.376112][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 92.516196][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 92.548299][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.549265][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.549641][ T5842] bridge_slave_0: entered allmulticast mode [ 92.552168][ T5842] bridge_slave_0: entered promiscuous mode [ 92.671403][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.671541][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.671959][ T5842] bridge_slave_1: entered allmulticast mode [ 92.674551][ T5842] bridge_slave_1: entered promiscuous mode [ 92.971838][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.971948][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.972069][ T5841] bridge_slave_0: entered allmulticast mode [ 92.973846][ T5841] bridge_slave_0: entered promiscuous mode [ 92.991569][ T5846] Bluetooth: hci0: command tx timeout [ 92.991575][ T5157] Bluetooth: hci1: command tx timeout [ 93.071158][ T5157] Bluetooth: hci2: command tx timeout [ 93.129454][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.129559][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.129880][ T5841] bridge_slave_1: entered allmulticast mode [ 93.150622][ T5157] Bluetooth: hci3: command tx timeout [ 93.157928][ T5841] bridge_slave_1: entered promiscuous mode [ 93.230659][ T5157] Bluetooth: hci4: command tx timeout [ 93.250961][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.363966][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.364182][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.364420][ T5850] bridge_slave_0: entered allmulticast mode [ 93.367519][ T5850] bridge_slave_0: entered promiscuous mode [ 93.373245][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.525436][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.525579][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.526082][ T5850] bridge_slave_1: entered allmulticast mode [ 93.527799][ T5850] bridge_slave_1: entered promiscuous mode [ 93.686434][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.003909][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.004232][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.004327][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.004446][ T5852] bridge_slave_0: entered allmulticast mode [ 94.006255][ T5852] bridge_slave_0: entered promiscuous mode [ 94.107250][ T5842] team0: Port device team_slave_0 added [ 94.107933][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.108077][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.109245][ T5854] bridge_slave_0: entered allmulticast mode [ 94.137195][ T5854] bridge_slave_0: entered promiscuous mode [ 94.212550][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.212686][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.212841][ T5852] bridge_slave_1: entered allmulticast mode [ 94.214446][ T5852] bridge_slave_1: entered promiscuous mode [ 94.334672][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.336621][ T5842] team0: Port device team_slave_1 added [ 94.337149][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.337249][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.337366][ T5854] bridge_slave_1: entered allmulticast mode [ 94.339073][ T5854] bridge_slave_1: entered promiscuous mode [ 94.498368][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.650394][ T5841] team0: Port device team_slave_0 added [ 94.933127][ T5841] team0: Port device team_slave_1 added [ 94.936778][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.014246][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.014263][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.014287][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.020203][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.070587][ T5157] Bluetooth: hci0: command tx timeout [ 95.080683][ T5157] Bluetooth: hci1: command tx timeout [ 95.096425][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.098501][ T5850] team0: Port device team_slave_0 added [ 95.099574][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.099587][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.099611][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.103722][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.150605][ T5157] Bluetooth: hci2: command tx timeout [ 95.230864][ T5157] Bluetooth: hci3: command tx timeout [ 95.285859][ T5850] team0: Port device team_slave_1 added [ 95.310631][ T5157] Bluetooth: hci4: command tx timeout [ 95.373551][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.373564][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.373582][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.781321][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.781338][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.781362][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.784448][ T5852] team0: Port device team_slave_0 added [ 95.865934][ T5854] team0: Port device team_slave_0 added [ 95.880110][ T5852] team0: Port device team_slave_1 added [ 95.882098][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.882111][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.882139][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.963907][ T5854] team0: Port device team_slave_1 added [ 96.042359][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.042376][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.042402][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.256543][ T5842] hsr_slave_0: entered promiscuous mode [ 96.257951][ T5842] hsr_slave_1: entered promiscuous mode [ 96.401845][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.401859][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.401875][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.406277][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.406288][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.406304][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.563727][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.563744][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.563769][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.567501][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.567515][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.567542][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.779508][ T5841] hsr_slave_0: entered promiscuous mode [ 96.780431][ T5841] hsr_slave_1: entered promiscuous mode [ 96.782360][ T5841] debugfs: 'hsr0' already exists in 'hsr' [ 96.782503][ T5841] Cannot create hsr debugfs directory [ 97.046831][ T5850] hsr_slave_0: entered promiscuous mode [ 97.049546][ T5850] hsr_slave_1: entered promiscuous mode [ 97.059379][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 97.059407][ T5850] Cannot create hsr debugfs directory [ 97.150683][ T5157] Bluetooth: hci1: command tx timeout [ 97.150716][ T5157] Bluetooth: hci0: command tx timeout [ 97.240527][ T5846] Bluetooth: hci2: command tx timeout [ 97.310971][ T5846] Bluetooth: hci3: command tx timeout [ 97.400623][ T5846] Bluetooth: hci4: command tx timeout [ 97.778922][ T5852] hsr_slave_0: entered promiscuous mode [ 97.779866][ T5852] hsr_slave_1: entered promiscuous mode [ 97.780441][ T5852] debugfs: 'hsr0' already exists in 'hsr' [ 97.781144][ T5852] Cannot create hsr debugfs directory [ 97.879931][ T5854] hsr_slave_0: entered promiscuous mode [ 97.883532][ T5854] hsr_slave_1: entered promiscuous mode [ 97.884532][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 97.884555][ T5854] Cannot create hsr debugfs directory [ 99.168551][ T5842] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 99.201878][ T5842] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 99.230815][ T5157] Bluetooth: hci1: command tx timeout [ 99.230862][ T5846] Bluetooth: hci0: command tx timeout [ 99.241356][ T5842] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 99.284464][ T5842] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 99.313337][ T5846] Bluetooth: hci2: command tx timeout [ 99.391622][ T5846] Bluetooth: hci3: command tx timeout [ 99.419779][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 99.467429][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 99.472161][ T5846] Bluetooth: hci4: command tx timeout [ 99.508541][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 99.561978][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 99.729014][ T5850] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 99.777320][ T5850] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 99.816285][ T5850] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 99.871534][ T5850] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.025544][ T5852] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.078506][ T5852] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.115980][ T5852] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.165126][ T5852] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.257878][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.338798][ T5854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 100.398913][ T5854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 100.442695][ T5854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 100.499008][ T5854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 100.542122][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.598544][ T3621] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.599389][ T3621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.648210][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.650105][ T3621] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.650286][ T3621] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.772807][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.825258][ T3737] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.825404][ T3737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.865174][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.891291][ T3727] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.891395][ T3727] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.979938][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.025694][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.072640][ T3737] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.072870][ T3737] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.129133][ T3737] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.129287][ T3737] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.205871][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.266047][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.289130][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.289346][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.346531][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.347580][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.497220][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.573499][ T3693] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.573721][ T3693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.616588][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.648269][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.648408][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.863425][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.034658][ T5842] veth0_vlan: entered promiscuous mode [ 102.111474][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.134357][ T5842] veth1_vlan: entered promiscuous mode [ 102.204010][ T5841] veth0_vlan: entered promiscuous mode [ 102.254168][ T5841] veth1_vlan: entered promiscuous mode [ 102.384037][ T5842] veth0_macvtap: entered promiscuous mode [ 102.411859][ T5850] veth0_vlan: entered promiscuous mode [ 102.414299][ T5842] veth1_macvtap: entered promiscuous mode [ 102.446910][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.479802][ T5850] veth1_vlan: entered promiscuous mode [ 102.489608][ T5841] veth0_macvtap: entered promiscuous mode [ 102.539282][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.548679][ T5841] veth1_macvtap: entered promiscuous mode [ 102.573169][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.578644][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.658734][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.673327][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.692375][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.693263][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.716489][ T67] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.827402][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.858821][ T5850] veth0_macvtap: entered promiscuous mode [ 102.918029][ T5852] veth0_vlan: entered promiscuous mode [ 102.928479][ T3570] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.942776][ T3570] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.943402][ T5850] veth1_macvtap: entered promiscuous mode [ 102.967565][ T3570] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.030241][ T3570] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.119661][ T5852] veth1_vlan: entered promiscuous mode [ 103.244644][ T3642] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.244674][ T3642] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.245950][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.361044][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.438648][ T3621] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.458339][ T3693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.458357][ T3693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.474744][ T3621] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.483355][ T3621] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.504785][ T3621] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.626836][ T5852] veth0_macvtap: entered promiscuous mode [ 103.629174][ T3693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.629190][ T3693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.741303][ T5854] veth0_vlan: entered promiscuous mode [ 103.743581][ T5852] veth1_macvtap: entered promiscuous mode [ 103.843152][ T5952] binder: 5951:5952 ioctl 4018620d 0 returned -22 [ 103.926468][ T3727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.926487][ T3727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.937672][ T5854] veth1_vlan: entered promiscuous mode [ 104.059060][ T3727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.059080][ T3727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.065282][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.247211][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.340759][ T3693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.340780][ T3693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.351546][ T3642] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.353384][ T3642] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.354828][ T3642] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.363816][ T3642] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.595314][ T5854] veth0_macvtap: entered promiscuous mode [ 104.636051][ T5854] veth1_macvtap: entered promiscuous mode [ 105.053939][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.074636][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.137683][ T3570] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.207545][ T3570] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.211155][ T3570] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.313886][ T3570] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.394151][ T3727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.394172][ T3727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.581447][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 105.760536][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 106.348048][ T3727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.348062][ T3727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.589643][ T3727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.589662][ T3727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.979766][ T3693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.979785][ T3693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.400503][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.520528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.521719][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.522855][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.523999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.525141][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.526310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 107.527454][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 108.256150][ T5979] input: syz0 as /devices/virtual/input/input5 [ 108.348441][ T5983] fuse: Unknown parameter 'user00000000000000000000' [ 109.185321][ T5991] Zero length message leads to an empty skb [ 109.648477][ T5995] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 113.510781][ T6018] sp0: Synchronizing with TNC [ 114.962769][ T6017] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 114.962900][ T6017] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 115.480423][ T6017] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 115.632894][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.103474][ T6017] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 116.103565][ T6017] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 116.219674][ T6017] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 116.398325][ T6017] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 116.398414][ T6017] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 116.586171][ T6017] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 116.783907][ T6017] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 116.784859][ T6017] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.060576][ T6017] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.195529][ T6017] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 117.195666][ T6017] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 117.313360][ T6017] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 117.711165][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.046152][ T6017] [U] è [ 118.111197][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 118.325126][ T6049] hub 9-0:1.0: USB hub found [ 118.430942][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 118.440376][ T6049] hub 9-0:1.0: 1 port detected [ 118.896451][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.230614][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 119.790562][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 120.278146][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.510601][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 120.531195][ T6058] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 120.843413][ T6071] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 120.911029][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.320712][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 122.372737][ T5157] Bluetooth: hci1: command 0x0c1a tx timeout [ 122.577207][ T6080] sp0: Synchronizing with TNC [ 122.592569][ T5157] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.056690][ T5157] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.392621][ T5157] Bluetooth: hci4: command 0x0c1a tx timeout [ 124.338704][ T6084] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 124.338945][ T6084] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 124.339667][ T6084] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 124.341781][ T6084] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 124.341972][ T6084] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 124.840801][ T5846] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.175181][ C1] vkms_vblank_simulate: vblank timer overrun [ 126.982184][ T5846] Bluetooth: hci4: command 0x0c1a tx timeout [ 126.982836][ T5846] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.983485][ T5846] Bluetooth: hci2: command 0x0c1a tx timeout [ 126.984108][ T5846] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.139318][ T6107] input: syz0 as /devices/virtual/input/input6 [ 127.286823][ T6077] [U] è [ 128.172518][ T5933] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 128.261717][ T6120] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 128.560915][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 128.560944][ T5933] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 128.560960][ T5933] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 128.563676][ T5933] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 128.563695][ T5933] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.563708][ T5933] usb 2-1: Product: syz [ 128.563718][ T5933] usb 2-1: Manufacturer: syz [ 128.563727][ T5933] usb 2-1: SerialNumber: syz [ 128.575509][ T5933] usb 2-1: config 0 descriptor?? [ 128.860165][ T5933] adutux 2-1:0.0: interrupt endpoints not found [ 130.919875][ T989] usb 2-1: USB disconnect, device number 2 [ 131.481573][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.42'. [ 134.328477][ T6156] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 135.370622][ T5997] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 135.558798][ T5997] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 135.558830][ T5997] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.558850][ T5997] usb 1-1: Product: syz [ 135.558864][ T5997] usb 1-1: Manufacturer: syz [ 135.558877][ T5997] usb 1-1: SerialNumber: syz [ 135.777447][ T5997] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 135.777514][ T5997] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 135.777533][ T5997] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 135.859923][ T5997] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 137.873061][ T45] usb 1-1: USB disconnect, device number 2 [ 137.959995][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.960165][ T1323] ieee802154 phy1 wpan1: encryption failed: -22 [ 140.384126][ T5933] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 140.576733][ T5933] usb 4-1: config 0 has no interfaces? [ 140.580880][ T5933] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 140.580899][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.580912][ T5933] usb 4-1: Product: syz [ 140.580921][ T5933] usb 4-1: Manufacturer: syz [ 140.580930][ T5933] usb 4-1: SerialNumber: syz [ 140.586689][ T5933] usb 4-1: config 0 descriptor?? [ 140.800800][ T6209] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 140.801404][ T6209] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.176313][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.60'. [ 143.866037][ T6233] fuse: Unknown parameter 'user_id00000000000000000000' [ 143.950635][ T5933] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 144.120646][ T5933] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 144.120677][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.120695][ T5933] usb 1-1: Product: syz [ 144.120709][ T5933] usb 1-1: Manufacturer: syz [ 144.120723][ T5933] usb 1-1: SerialNumber: syz [ 144.337264][ T5933] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 144.337302][ T5933] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 144.337392][ T5933] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 144.426600][ T5933] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32 [ 144.746862][ T5933] usb 4-1: USB disconnect, device number 2 [ 145.023655][ T6246] netlink: 16 bytes leftover after parsing attributes in process `syz.2.71'. [ 145.150727][ T5933] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 145.310607][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 145.313964][ T5933] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 145.313991][ T5933] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 145.314016][ T5933] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 64 [ 145.314042][ T5933] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 145.314083][ T5933] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 145.314105][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.462366][ T5933] usbtmc 4-1:16.0: bulk endpoints not found [ 147.106855][ T45] usb 1-1: USB disconnect, device number 3 [ 147.838222][ T5886] usb 4-1: USB disconnect, device number 3 [ 151.594315][ T6294] hub 9-0:1.0: USB hub found [ 151.600654][ T6294] hub 9-0:1.0: 1 port detected [ 153.331678][ T6311] binder: 6310:6311 ioctl 4018620d 0 returned -22 [ 153.645363][ T5843] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 153.852640][ T5843] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 153.852882][ T5843] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.852944][ T5843] usb 2-1: Product: syz [ 153.853763][ T5843] usb 2-1: Manufacturer: syz [ 153.853781][ T5843] usb 2-1: SerialNumber: syz [ 154.444100][ T5843] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 154.444159][ T5843] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 154.444181][ T5843] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 154.596408][ T5843] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -32 [ 156.532586][ T5997] usb 2-1: USB disconnect, device number 3 [ 165.675686][ T6361] syz.2.96 (6361): drop_caches: 2 [ 166.191900][ T5997] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 166.273574][ T6356] [U] `è [ 167.241990][ T6382] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 167.570643][ T5997] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 168.258400][ T5997] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 168.258429][ T5997] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 168.258451][ T5997] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 168.302030][ T5997] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 168.302063][ T5997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.302076][ T5997] usb 4-1: Product: syz [ 168.302085][ T5997] usb 4-1: Manufacturer: syz [ 168.302094][ T5997] usb 4-1: SerialNumber: syz [ 168.471961][ T5997] hub 4-1:1.0: bad descriptor, ignoring hub [ 168.472005][ T5997] hub 4-1:1.0: probe with driver hub failed with error -5 [ 168.664587][ T5997] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 169.011029][ T5843] usb 4-1: USB disconnect, device number 5 [ 169.120688][ T989] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 169.128517][ T5843] usblp0: removed [ 169.376785][ T989] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 169.376827][ T989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.376848][ T989] usb 5-1: Product: syz [ 169.376863][ T989] usb 5-1: Manufacturer: syz [ 169.376878][ T989] usb 5-1: SerialNumber: syz [ 169.590939][ T5933] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 169.763719][ T5933] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 169.763751][ T5933] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 169.763774][ T5933] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.836793][ T5933] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 169.836858][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.836876][ T5933] usb 4-1: Product: syz [ 169.836887][ T5933] usb 4-1: Manufacturer: syz [ 169.836896][ T5933] usb 4-1: SerialNumber: syz [ 170.051206][ T989] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 170.051264][ T989] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 170.051285][ T989] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 170.105022][ T5933] hub 4-1:1.0: bad descriptor, ignoring hub [ 170.105049][ T5933] hub 4-1:1.0: probe with driver hub failed with error -5 [ 170.152340][ T989] lan78xx 5-1:1.0: probe with driver lan78xx failed with error -32 [ 171.149619][ T6411] hub 9-0:1.0: USB hub found [ 171.159122][ T6411] hub 9-0:1.0: 1 port detected [ 171.813696][ T5902] usb 5-1: USB disconnect, device number 2 [ 176.942585][ T5933] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 177.323503][ T6441] syz.2.110 (6441): drop_caches: 2 [ 178.820571][ T45] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 179.002208][ T45] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 179.002230][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 179.002245][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 179.002258][ T45] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 179.002285][ T45] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 179.002298][ T45] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.006253][ T45] usb 1-1: config 0 descriptor?? [ 179.585037][ T45] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max [ 179.789701][ T45] plantronics 0003:047F:FFFF.0001: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 179.857612][ T45] usb 1-1: USB disconnect, device number 4 [ 180.185095][ T6466] fido_id[6466]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 180.541010][ T5886] usb 4-1: USB disconnect, device number 6 [ 180.558567][ T5886] usblp0: removed [ 181.215358][ T989] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 181.465809][ T989] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 181.465841][ T989] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.465861][ T989] usb 4-1: Product: syz [ 181.465876][ T989] usb 4-1: Manufacturer: syz [ 181.465891][ T989] usb 4-1: SerialNumber: syz [ 181.802890][ T989] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 181.802932][ T989] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32 [ 181.802946][ T989] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 181.872451][ T989] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -32 [ 184.149129][ T5902] usb 4-1: USB disconnect, device number 7 [ 186.229660][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 186.413713][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 186.413746][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 186.413771][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 186.413792][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 186.413833][ T9] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 186.413856][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.419671][ T9] usb 3-1: config 0 descriptor?? [ 186.996358][ T9] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max [ 187.057333][ T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 188.278901][ T45] usb 3-1: USB disconnect, device number 2 [ 188.500621][ T5909] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 188.663148][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 188.663180][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 188.663201][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 188.666317][ T5909] usb 5-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 188.666343][ T5909] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.666367][ T5909] usb 5-1: Product: syz [ 188.666380][ T5909] usb 5-1: Manufacturer: syz [ 188.666394][ T5909] usb 5-1: SerialNumber: syz [ 188.747802][ T5909] usb 5-1: config 0 descriptor?? [ 188.774894][ T5909] adutux 5-1:0.0: interrupt endpoints not found [ 189.095359][ T6571] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 190.150615][ T45] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 190.300599][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 190.303071][ T45] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 190.303100][ T45] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 190.308073][ T45] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 190.308100][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.308120][ T45] usb 1-1: Product: syz [ 190.308133][ T45] usb 1-1: Manufacturer: syz [ 190.308148][ T45] usb 1-1: SerialNumber: syz [ 190.391591][ T45] usb 1-1: config 0 descriptor?? [ 190.407459][ T45] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 190.407481][ T45] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 191.400843][ T45] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 191.402494][ T45] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 191.402902][ T45] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 191.402916][ T45] em28xx 1-1:0.0: No AC97 audio processor [ 191.504392][ T45] usb 1-1: USB disconnect, device number 5 [ 191.521180][ T45] em28xx 1-1:0.0: Disconnecting em28xx [ 191.563975][ T5843] usb 5-1: USB disconnect, device number 3 [ 191.639415][ T45] em28xx 1-1:0.0: Freeing device [ 193.854760][ T6617] netlink: 16 bytes leftover after parsing attributes in process `syz.0.143'. [ 194.100532][ T5843] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 194.330713][ T5843] usb 3-1: Using ep0 maxpacket: 32 [ 194.333680][ T5843] usb 3-1: config 0 has an invalid interface number: 247 but max is 0 [ 194.333698][ T5843] usb 3-1: config 0 has no interface number 0 [ 194.337430][ T5843] usb 3-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 194.337456][ T5843] usb 3-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 194.337475][ T5843] usb 3-1: Product: syz [ 194.337489][ T5843] usb 3-1: Manufacturer: syz [ 194.409085][ T5843] usb 3-1: config 0 descriptor?? [ 194.633529][ T5843] usb 3-1: USB disconnect, device number 3 [ 196.533883][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 196.690908][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 196.693530][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 196.693559][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 196.697832][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 196.697857][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.697874][ T9] usb 5-1: Product: syz [ 196.697887][ T9] usb 5-1: Manufacturer: syz [ 196.697900][ T9] usb 5-1: SerialNumber: syz [ 196.704122][ T9] usb 5-1: config 0 descriptor?? [ 196.847955][ T9] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 196.847987][ T9] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 197.938152][ T6640] BUG: sleeping function called from invalid context at kernel/locking/spinlock_rt.c:48 [ 197.938172][ T6640] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 6640, name: syz.4.150 [ 197.938183][ T6640] preempt_count: 0, expected: 0 [ 197.938189][ T6640] RCU nest depth: 0, expected: 0 [ 197.938206][ T6640] 1 lock held by syz.4.150/6640: [ 197.938214][ T6640] #0: ffff888027a38058 (&dum_hcd->dum->lock){+.+.}-{3:3}, at: dummy_dequeue+0x164/0x480 [ 197.938270][ T6640] irq event stamp: 9544 [ 197.938275][ T6640] hardirqs last enabled at (9543): [] _raw_spin_unlock_irq+0x23/0x50 [ 197.938316][ T6640] hardirqs last disabled at (9544): [] dummy_dequeue+0x151/0x480 [ 197.938354][ T6640] softirqs last enabled at (9144): [] __local_bh_enable_ip+0x1a4/0x270 [ 197.938376][ T6640] softirqs last disabled at (9142): [] inet6_fill_ifla6_attrs+0x116b/0x2400 [ 197.938417][ T6640] CPU: 0 UID: 0 PID: 6640 Comm: syz.4.150 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 197.938434][ T6640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 197.938448][ T6640] Call Trace: [ 197.938454][ T6640] [ 197.938461][ T6640] dump_stack_lvl+0x189/0x250 [ 197.938486][ T6640] ? inet6_fill_ifla6_attrs+0x116b/0x2400 [ 197.938503][ T6640] ? inet6_fill_ifla6_attrs+0x116b/0x2400 [ 197.938523][ T6640] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.938552][ T6640] ? print_lock_name+0xde/0x100 [ 197.938572][ T6640] __might_resched+0x44b/0x5d0 [ 197.938594][ T6640] ? __pfx___might_resched+0x10/0x10 [ 197.938610][ T6640] ? dummy_dequeue+0x164/0x480 [ 197.938639][ T6640] rt_spin_lock+0xc7/0x2c0 [ 197.938657][ T6640] ? _raw_spin_unlock_irq+0x23/0x50 [ 197.938680][ T6640] ? __pfx_rt_spin_lock+0x10/0x10 [ 197.938702][ T6640] ? rcu_is_watching+0x15/0xb0 [ 197.938727][ T6640] dummy_dequeue+0x164/0x480 [ 197.938751][ T6640] ? __pfx_dummy_dequeue+0x10/0x10 [ 197.938768][ T6640] ? __pfx_schedule_timeout+0x10/0x10 [ 197.938807][ T6640] ? __pfx___wait_for_common+0x10/0x10 [ 197.938868][ T6640] usb_ep_dequeue+0x66/0x250 [ 197.938891][ T6640] raw_process_ep0_io+0x435/0x980 [ 197.938919][ T6640] raw_ioctl+0x2609/0x3ba0 [ 197.938941][ T6640] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 197.938962][ T6640] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 197.938983][ T6640] ? do_vfs_ioctl+0xbeb/0x1440 [ 197.939003][ T6640] ? __pfx_raw_ioctl+0x10/0x10 [ 197.939023][ T6640] ? __pfx_smack_log+0x10/0x10 [ 197.939048][ T6640] ? smk_access+0x14c/0x4e0 [ 197.939077][ T6640] ? smk_tskacc+0x2fc/0x370 [ 197.939105][ T6640] ? smack_file_ioctl+0x2ac/0x340 [ 197.939123][ T6640] ? __pfx_smack_file_ioctl+0x10/0x10 [ 197.939148][ T6640] ? __fget_files+0x2a/0x420 [ 197.939169][ T6640] ? __fget_files+0x3a6/0x420 [ 197.939191][ T6640] ? __fget_files+0x2a/0x420 [ 197.939216][ T6640] ? bpf_lsm_file_ioctl+0x9/0x20 [ 197.939234][ T6640] ? __pfx_raw_ioctl+0x10/0x10 [ 197.939254][ T6640] __se_sys_ioctl+0xff/0x170 [ 197.939273][ T6640] do_syscall_64+0xfa/0x3b0 [ 197.939286][ T6640] ? lockdep_hardirqs_on+0x9c/0x150 [ 197.939315][ T6640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.939331][ T6640] ? clear_bhb_loop+0x60/0xb0 [ 197.939350][ T6640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.939365][ T6640] RIP: 0033:0x7f7ece72e7ab [ 197.939382][ T6640] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 197.939395][ T6640] RSP: 002b:00007f7ecc993f60 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 197.939411][ T6640] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f7ece72e7ab [ 197.939421][ T6640] RDX: 00007f7ecc993fe0 RSI: 00000000c0085504 RDI: 0000000000000003 [ 197.939431][ T6640] RBP: 00007f7ece7b1e19 R08: 0000000000000001 R09: 0000000000000000 [ 197.939440][ T6640] R10: 0000000000000003 R11: 0000000000000246 R12: 00007f7ecc993fe8 [ 197.939450][ T6640] R13: 0000000000000000 R14: 00007f7ece975fa0 R15: 00007ffdf02a1a78 [ 197.939484][ T6640] [ 197.999014][ T9] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 198.687329][ T9] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 198.688258][ T9] em28xx 5-1:0.0: AC97 chip type couldn't be determined [ 198.688276][ T9] em28xx 5-1:0.0: No AC97 audio processor [ 198.886792][ T9] usb 5-1: USB disconnect, device number 4 [ 198.954244][ T9] em28xx 5-1:0.0: Disconnecting em28xx [ 199.017116][ T9] em28xx 5-1:0.0: Freeing device [ 199.427822][ T1323] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.427901][ T1323] ieee802154 phy1 wpan1: encryption failed: -22