last executing test programs: 1m46.502908026s ago: executing program 2 (id=4924): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xf8}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000027c0)=';', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000002740)=[{&(0x7f0000000100)="86", 0x1}], 0x1}}], 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000006480)=ANY=[@ANYBLOB="1201000081b00f207d071004b64356c88b010902300001020000000904000000aa865c00"], 0x0) shutdown(r0, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x4) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000040)=@name={0x1e, 0x2, 0xc5d116e9899720b9, {{0x42}}}, 0x10) r4 = syz_open_dev$rtc(&(0x7f0000000040), 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000080)=@req3={0x0, 0x0, 0x6, 0x4, 0x10001, 0x9}, 0x1c) syz_open_dev$rtc(0x0, 0x8001, 0x80000) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000950000000000000077ebbf241fd9647ae14c44ac694203691e36afe0d05e89b7aa20bba6deb6faf651de8fc4e0d72f381cb2f5d594c766f8b796c4bb17e6662b64cd20ca9db80fa3cbda14f437ac23dca77a5ffda5074f8ccef75e7d5cfae12b7658b550c7026cc8c3a2495f8ec0c1f212f14d237c537c746b39b4adb2ef79bdb610c4e47db3323f34453091a0a5ba4798d43d96cafa90c96b90d8a032f14c64e342429b1d511831e50e84e71d6cf4da07620db0bb3f0341a533f487d2499d1ec513aadd6312ab47063333cd9e1cd7bc9ea6a978612d83"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = fcntl$getown(r4, 0x9) tgkill(r6, 0x0, 0x1e) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)=""/112, 0x121, 0x70, 0x1, 0xa}, 0x20) r8 = syz_open_dev$vbi(&(0x7f00000001c0), 0x1, 0x2) r9 = fcntl$dupfd(r8, 0x0, r8) write$binfmt_script(r9, &(0x7f0000000100), 0xfffffd9d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x13, 0x18, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000001000000000000000300000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509854072870000950000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1m43.326156696s ago: executing program 2 (id=4937): r0 = socket$packet(0x11, 0x3, 0x300) syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) io_setup(0x3, &(0x7f0000000180)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r2, 0x0}]) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000080)={0xf0f041}) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140), 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) syz_emit_ethernet(0xfc1, &(0x7f0000000780)=ANY=[], 0x0) 1m43.030590576s ago: executing program 2 (id=4938): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000003040)={'veth1_virt_wifi\x00', &(0x7f0000002e00)=@ethtool_coalesce={0xe, 0x0, 0xa0, 0xfffffffd, 0x9, 0x1, 0x0, 0x43aef182, 0x0, 0x1, 0xfffffff9, 0x890, 0x1, 0x5, 0x8, 0xe4fa, 0xf62, 0x2, 0x3e4, 0x1, 0x0, 0x7b3f, 0x7046}}) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={&(0x7f00000004c0)="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", &(0x7f0000000080)=""/117, &(0x7f0000000100)="f331a9a340bb49d9f919dcb439230e70846f4146655d2e0b51f7ed9053a52b968cfa51e4336d17b00c47615f59261da6df689c00045b26a7acf8150c166615d5d50564abfe09aabfbb76551541fe6b26eb5092951db06704dc4bd537af46faa8a2089737b4ec7a93d79e99a591956eb198b6336efc08fbad909802119c54c4f1e2de129e2966efc0eeb9e0f4dc77840adef8d2b0b041c9086c33df3e31c783a67788c86cf35734af66b222b454e1ef26b9113fa99c97c1f4e32a439210a9d3da", &(0x7f00000014c0)="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", 0xfffffb62, r1, 0x4}, 0x38) r2 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) preadv(r3, &(0x7f0000000340)=[{&(0x7f00000003c0)=""/250, 0xfa}], 0x1, 0x0, 0x0) 1m42.829568145s ago: executing program 2 (id=4939): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x1f, 0xfffffffe}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000002140)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f0ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007ed10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000889049938edebcd600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffffe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000001240)=@assoc_value={r5}, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000400)={r5, 0x81, 0x30}, &(0x7f0000000440)=0xc) read$FUSE(r2, &(0x7f0000012400)={0x2020}, 0x800000000) syz_fuse_handle_req(r0, &(0x7f000000a380)="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", 0x2000, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="80007a004e3d56d500800000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = syz_open_dev$sndctrl(&(0x7f0000001200), 0x1, 0x414300) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r6, 0xc00455d0, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x368, 0x188, 0x8, 0x7f02ae, 0x188, 0x200, 0x298, 0x2e8, 0x2e8, 0x298, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x148, 0x188, 0x0, {}, [@common=@unspec=@ipvs={{0x48}, {@ipv4=@private}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00'}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) socket$inet6_udplite(0xa, 0x2, 0x88) 1m39.566253012s ago: executing program 2 (id=4965): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) syz_clone3(&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = memfd_secret(0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x7c, r3, 0x1, 0x400, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x5d, 0x33, @beacon={{{}, {}, @device_b}, 0x0, @default, 0x0, @val={0x0, 0xf, @random="733cdd92793987dcc8d829e0090bc7"}, @void, @val={0x3, 0x1}, @void, @void, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a, {0x8ce1, 0x1, 0x3, 0x0, {0x8, 0x6e, 0x0, 0xbe}, 0x1, 0x7f, 0xea}}, @void, @void, @void}}]}, 0x7c}}, 0x8004080) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000d00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b8030020", @ANYRES16=r3, @ANYBLOB="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"], 0x3b8}, 0x1, 0x0, 0x0, 0x4000000}, 0xc4) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008001}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYBLOB="b7312ec2d46e97ca9e4dd3561638c6fe5d2d76d859493f3206d1a314aaa14abf710decb5f007f0489d5fb454224c11b3d90bbf09269a5da1a1a158e22ec5282b6afbe5c1a09011df43a4c0809b47de111757da11ca0d57de0bcfbaa900e80b4f69eed3278b817346d786789f13305b9dc3b2c3f18add6158", @ANYRESHEX, @ANYRES64], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x9000) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x600, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x2, 0x5, @mcast2, @remote, 0x1, 0x7, 0x7, 0x2}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xb, 0x2}, {0xe, 0x5}, {0x2}, {0x0, 0x4}, {0xd, 0x5}, {0x0, 0x2}]}, @const={0x2, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000d40)=""/41, 0x64, 0x29, 0x1, 0x10001}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x25, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000001000000000000007b00000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001836000003000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000bf00000000000000950000000000000018400000f9ffffff0000000000000000184700000800000000000000000000001100f0ff0000000018120000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r10, @ANYRES64=r9], &(0x7f00000004c0)='syzkaller\x00', 0x8ee6, 0x0, 0x0, 0x40f00, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x2fb1}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0) 1m39.062172147s ago: executing program 2 (id=4968): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f00000002c0)={0xc, r1}) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000300)={0x18, 0x2}) 1m37.701510275s ago: executing program 0 (id=4973): syz_usb_connect(0x0, 0x24, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000780)) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000000)=0xfee, 0x4) 1m36.889802976s ago: executing program 0 (id=4974): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r2 = socket(0x0, 0xa, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) (async) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r6, &(0x7f0000002980)=[{&(0x7f0000000700)=""/163, 0xa3}], 0xe) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYRES64=r2, @ANYRES64=r5, @ANYRESOCT=r3], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2}, 0x90) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000), 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000ac0)='percpu_alloc_percpu\x00', r9}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="b40000000000000079109000000000007b0ae8ff00000000950000000000000066f964a7aa9ab220c0d4fbe602d56916111d0c7e770d9682132277a0cb362225d5184f683a76669965cfbdd4559d15913e631709d3f5aacc2c962f62c358cbb65298"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x3f}, 0x48) (async) r10 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r10, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) (async) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r10, 0x40505412, 0x0) recvmsg(r8, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) (async) setsockopt$sock_int(r8, 0x1, 0xa, &(0x7f0000000180)=0x1007e, 0x11fb96e13838704f) (async) sendto$unix(r7, &(0x7f0000000000)="ba", 0x1, 0x48005, 0x0, 0x0) (async) r11 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r11, 0xae01, 0x0) r12 = syz_open_dev$vcsu(&(0x7f00000005c0), 0x0, 0x0) close_range(r12, 0xffffffffffffffff, 0x0) setsockopt$sock_int(r12, 0x1, 0x10, &(0x7f0000000000), 0x4) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000002030000000000000000000005000000ebb30ec9c63aaf0a875b7ba1b2ee98d46cd1f09014185dd4ae701c39793f53ec40255e7381d4d887a3afd690906bd1bbf1294b7bb4de59aa3b8834ef0a58c4130ab5e180"], 0x14}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000008010301010000000000000000000000000c000200fffffffb00000000"], 0x20}}, 0x0) 1m36.393108638s ago: executing program 0 (id=4976): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) ioctl$SNAPSHOT_UNFREEZE(r0, 0x3302) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = fsopen(&(0x7f0000000040)='ramfs\x00', 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$sock_int(r3, 0x1, 0x29, &(0x7f0000000080)=0x5, 0x4) sendto$packet(r3, &(0x7f0000000480)='\x00', 0xffffffffffffff99, 0x84, &(0x7f0000000380)={0x11, 0x0, r4, 0x1, 0x8, 0x6, @random="9d8f0e2116d1"}, 0x14) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=@deltclass={0xb0, 0x29, 0x200, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xb, 0x2}, {0x7, 0x4}, {0x10, 0xfff2}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x8}}}, @c_atm={{0x8}, {0x34, 0x2, [@TCA_ATM_FD={0x8, 0x1, r1}, @TCA_ATM_HDR={0x16, 0x3, "0a64e49581545f7de1b1f8054a44a23b6680"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0x3}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xfff2, 0xc}}]}}, @c_atm={{0x8}, {0x30, 0x2, [@TCA_ATM_HDR={0x23, 0x3, "c898cce422ced03cb1e5f15f37a9c2b36a5954640b396406181f4a512a806e"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xc, 0x10}}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0xc0}, 0x20004000) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r2, 0x0, 0x0) mknodat$loop(r5, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) name_to_handle_at(r5, &(0x7f0000000600)='./file0\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r5, &(0x7f0000000300)=ANY=[], 0x15) r7 = dup(r6) r8 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0) flock(0xffffffffffffffff, 0x2) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r8, 0x8008f511, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000240), 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000340)='qrtr_ns_service_announce_del\x00', r9}, 0x10) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r10, 0xc0502100, &(0x7f0000000a40)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r10, 0xc0182101, &(0x7f0000000200)={r11}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @local}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000180)) 1m35.256924728s ago: executing program 0 (id=4979): semget$private(0x0, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) chown(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000001c0)) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000000c0)=0xfa0, 0x4) getsockopt$inet6_buf(r0, 0x29, 0xdb, &(0x7f0000001500)=""/19, &(0x7f0000000140)=0x2) r1 = socket$unix(0x1, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x202}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r7, 0x24, &(0x7f0000000200)) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRES64=r2, @ANYRES64=r1, @ANYRES8], 0x20000600}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) 1m34.677770366s ago: executing program 0 (id=4983): syz_usb_connect(0x0, 0x24, &(0x7f00000018c0)=ANY=[], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000780)) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000000)=0xfee, 0x4) 1m34.622678524s ago: executing program 0 (id=4984): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) writev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000000c0)='7', 0x1}], 0x100000000000025a) 1m33.634675621s ago: executing program 3 (id=4987): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x4}}], 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES64=r0], 0x230}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000dc0)=[@zcopy_cookie={0x10}, @cswp={0x58, 0x114, 0x7, {{}, 0x0, 0x0}}, @zcopy_cookie={0x10}, @fadd={0x58, 0x114, 0x6, {{}, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x5}}], 0xd0}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001340)) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000580), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x7, 0x4, 0x40, 0x0, 0x1, 0x498ae3b6, '\x00', 0x0, r1, 0x0, 0x0, 0x4}, 0x48) r2 = socket$l2tp(0x2, 0x2, 0x73) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x0) bind$l2tp(r2, &(0x7f00000000c0)={0x2, 0x0, @rand_addr, 0x3}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x44, r5, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}]}, 0x44}}, 0x0) (fail_nth: 8) 1m32.712993683s ago: executing program 3 (id=4989): r0 = socket(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000580)={0x2, 0x0, @local}, 0x10) getsockname$packet(r0, 0x0, &(0x7f00000002c0)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x22301, 0x0) syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYRES64, @ANYRES16=r2, @ANYRES64, @ANYRES64=0x0, @ANYRES32=r1, @ANYRES16=0x0], 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x8c5) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r5 = inotify_init() inotify_add_watch(r5, &(0x7f0000000000)='.\x00', 0x400017e) r6 = syz_open_procfs(0x0, 0x0) r7 = open(&(0x7f0000000a40)='./bus\x00', 0x141a42, 0x0) sendfile(r7, r6, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) userfaultfd(0x0) io_setup(0x0, 0x0) io_submit(0x0, 0x0, 0x0) r8 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'rr\x00'}, 0x2c) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) r9 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_COPY(r9, 0x3b83, 0x0) unshare(0x4000600) r10 = socket$inet_tcp(0x2, 0x1, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0xc01, 0x3, 0x480, 0x2e8, 0x5002004a, 0x6, 0x2e8, 0x3, 0x3e8, 0x3c8, 0x3c8, 0x3e8, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@dev, @broadcast=0xfeffffff, 0x0, 0x0, 'hsr0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2e8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r11}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@inet=@udp={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4e0) 1m32.475674819s ago: executing program 3 (id=4990): sendmsg$NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl2\x00', &(0x7f00000002c0)={'gretap0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x1f, 0x4, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0xfc, 0x0, 0x0, [0x401, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0x1}, {@multicast1}, {@remote, 0x8000}, {@dev, 0x65c}, {@loopback}, {@empty}, {@multicast1, 0xbfd1fc}]}, @cipso={0x86, 0x12, 0x2, [{0x5, 0x9, "9374dbe15c65de"}, {0x7, 0x3, "9b"}]}, @noop, @noop, @end]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$kcm(0x10, 0x2, 0x4) socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="043e240a"], 0x22) syz_emit_vhci(&(0x7f00000001c0)=ANY=[], 0x7) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/partitions\x00', 0x0, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB='j\x00\x00\x00', @ANYRES16=r2, @ANYRES64=r1, @ANYRES32=0x0, @ANYBLOB="0c0099003b0d00007e000000040067000a000600080211000001001606006600f02200000a000600880211000001000006006600e7880000060866000a0000060066000d0000000a000600080211000001000000000000000000000003b7b1166284830b1863d434285817e4441229903feee802c953e26293deb670c8f76a809c949271f3fd2502b0b075ba5d2f6e2f34f5edddfbfb081dbb703e876e5358685ce4252b9828cfbd94b8b3add513c58b01b3ce791723fa2744f99b191f4b5354dd66c767fe19cb28d933257a02"], 0x78}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r3, r2, &(0x7f0000002080)=0x64, 0x23b) socket$caif_seqpacket(0x25, 0x5, 0x4) syz_open_dev$vcsa(&(0x7f0000000140), 0x8000000000000000, 0x48014a05a278c2e) socket(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0xf1, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f0000002080)=0x64, 0x23b) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) 1m31.879400556s ago: executing program 3 (id=4992): semget$private(0x0, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) chown(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000001c0)) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000000c0)=0xfa0, 0x4) getsockopt$inet6_buf(r0, 0x29, 0xdb, &(0x7f0000001500)=""/19, &(0x7f0000000140)=0x2) r1 = socket$unix(0x1, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xa) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x202}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r7, 0x24, &(0x7f0000000200)) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRES64=r2, @ANYRES64=r1, @ANYRES8], 0x20000600}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) 1m31.579610473s ago: executing program 3 (id=4993): syz_usb_connect(0x0, 0x24, &(0x7f00000018c0)=ANY=[], 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000780)) listen(0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x21, &(0x7f0000000000)=0xfee, 0x4) 1m31.522594756s ago: executing program 4 (id=4994): socket$packet(0x11, 0x3, 0x300) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000040)={'IDLETIMER\x00'}, &(0x7f0000000240)=0x1e) preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0xfffffd6e}, {&(0x7f0000019740)=""/242}], 0x2, 0x0, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f00000000c0)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000001240)={@host}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000040)={@my=0x1, 0xfffffffc}) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000080)) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000180)={@hyper}) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x84, &(0x7f00000005c0)={0x0, 0x84, "ac65c47dd3a90e8795853fab5d7e244502f7b8436da41d8d0791a45b695aba20a5fb767d9d88b4d97f5558828e631212c4dc041f649a6d72d3cc2abcbda362da552c350755b3b8039fa1dbff3f529a6daf093cd5177c148fa7079afc0f1309dc9eeb4f0a37ab18f58153e96ba13bc1bd9584c9f690a9d3687afff5bb7e40911740d7126f"}, &(0x7f00000002c0)=0x8c) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000140)={&(0x7f0000001280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xfffffffc, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x14000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x800000, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0xf6b, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x356, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb316, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fa, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x7558, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1041, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x1, 0x400}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x69) r5 = accept$alg(r4, 0x0, 0x0) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioprio_set$pid(0x0, 0x0, 0x0) sendfile(r5, r6, 0x0, 0xee33) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x2000005, 0x10, r0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000019640)={&(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES64=r7, @ANYRES64], 0x14}, 0x1, 0x0, 0x0, 0x15}, 0x20008090) madvise(&(0x7f00004ec000/0x1000)=nil, 0x1000, 0xc) mlock(&(0x7f00001e9000/0x1000)=nil, 0x1000) mlock(&(0x7f000000b000/0x4000)=nil, 0x4000) mlock(&(0x7f0000fff000/0x1000)=nil, 0x1000) 1m31.2712162s ago: executing program 3 (id=4995): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x10, 0x3, 0x290, 0x160, 0x160, 0x160, 0x0, 0x0, 0x230, 0x280, 0x280, 0x230, 0x1c0, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0xa4}}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, [], [], 'veth0_to_hsr\x00', 'batadv_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[], 0x154}}, 0x800) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000001c0)=0xb0000) add_key(&(0x7f0000000000)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000140)={@local}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) close(r1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000002c0)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000300000000000019078ac1e0001ac1414bb0c00907800000000450000000000000000000000e0000002ac32e4051414aa"], 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000640)=0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r4, 0xffffffffffffffff, 0x9, 0x0, 0x0, @prog_id}, 0x20) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) bind$unix(r6, &(0x7f0000019700)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) unshare(0x22020400) unshare(0x2c060000) connect$unix(r6, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) syz_usb_disconnect(r5) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r5, 0x4018f50b, &(0x7f0000000000)={0x0, 0x0, 0xa}) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f0000000100)=ANY=[], 0x0) listen(r4, 0x5) 1m30.607963812s ago: executing program 4 (id=4998): getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x80}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={r0, @in={{0x2, 0x4e24, @rand_addr=0x64010100}}}, &(0x7f0000000200)=0x84) socket$can_bcm(0x1d, 0x2, 0x2) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r3 = syz_usb_connect(0x2, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r3, &(0x7f0000000080)={0x14, 0x0, 0x0}, 0x0) r4 = getpid() sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,use', @ANYRESDEC=0x0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=','], 0x0, 0x0, 0x0) r5 = socket(0x10, 0x3, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r6, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r6, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) sched_getattr(r4, &(0x7f0000000340)={0x38}, 0x38, 0x0) setsockopt$XDP_UMEM_FILL_RING(r6, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r6, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) write(r5, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000000080)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 1m27.10512444s ago: executing program 4 (id=5000): prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x3, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) getpgrp(0x0) (async) r0 = getpgrp(0x0) shmctl$IPC_SET(0x0, 0x1, &(0x7f00000002c0)={{0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x2, 0x9, 0x160, 0x10000, 0x0, r0, 0xd4}) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000083c0)={{0x1}}) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) (async) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs2/binder1\x00', 0xef4c24ad29ba7b99, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000200)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x482}}) (async) syz_io_uring_submit(r4, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0x482}}) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_SEQ_PANIC(r3, 0x5100) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0xd0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) r7 = syz_io_uring_setup(0x6de4, &(0x7f0000000040), &(0x7f00000000c0), &(0x7f0000000100)) io_uring_enter(r7, 0x0, 0xe38e, 0x5, 0x0, 0x0) (async) io_uring_enter(r7, 0x0, 0xe38e, 0x5, 0x0, 0x0) io_uring_register$IORING_REGISTER_BUFFERS2(r7, 0xf, &(0x7f00000024c0)={0x0, 0x0, 0x0, &(0x7f0000002400), &(0x7f0000002480)=[0x0, 0x2]}, 0x20) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r7, 0x10, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002cc0)=[{0x0}, {0x0}], 0x0, 0x2}, 0x20) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7ffffffffd) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @ioapic={0x104000, 0x41e, 0x0, 0x0, 0x0, [{0x0, 0x3}, {0x0, 0x8, 0x4}, {}, {0x0, 0x6}, {0x0, 0x0, 0x0, '\x00', 0x22}, {0x0, 0xb, 0x0, '\x00', 0x3}, {0x0, 0x0, 0x1}, {0x5, 0x0, 0x0, '\x00', 0xfa}, {}, {0x41, 0x2, 0x8, '\x00', 0xf1}, {}, {0x20}]}}) 1m26.953685882s ago: executing program 4 (id=5001): semget$private(0x0, 0x3, 0x0) shmctl$IPC_RMID(0x0, 0x0) chown(0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000001c0)) syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000000c0)=0xfa0, 0x4) getsockopt$inet6_buf(r0, 0x29, 0xdb, &(0x7f0000001500)=""/19, &(0x7f0000000140)=0x2) r1 = socket$unix(0x1, 0x2, 0x0) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000200)={0x1d, r2}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000240)={0x50, 0x0, r6, {0x7, 0x1f, 0x0, 0x202}}, 0x50) syz_fuse_handle_req(r5, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r7, 0x24, &(0x7f0000000200)) sendmsg$can_bcm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRESHEX=r0, @ANYRES64=r2, @ANYRES64=r1, @ANYRES8], 0x20000600}}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing', 0x0, 0x0) 1m24.579053791s ago: executing program 4 (id=5002): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907070000000f0000ff3f04000000170a0017000000000400140010000300013025642558b9a64411f6bbf44dc48f57", 0xff4d}], 0x1) unshare(0x68060200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0xc7) open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000340)='devices.list\x00', 0x275a, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x6, &(0x7f0000000400)=[{0x6, 0x3, 0x0, 0x7613}, {0x6, 0x2, 0x8, 0x2b52}, {0x401, 0x9, 0x9, 0x3ff}, {0x825b, 0x81, 0x2, 0x634}, {0xc0e, 0x3f, 0x55, 0x1f}, {0x0, 0x0, 0x7, 0x2}]}) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xf, &(0x7f0000000080)={0x1, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) io_uring_setup(0xfc5, &(0x7f0000000180)={0x0, 0x2, 0x10, 0x0, 0x19}) r2 = syz_io_uring_setup(0x64db, &(0x7f0000000080), &(0x7f0000000380), &(0x7f0000000100)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r2, 0x3, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x52}, 0x20) syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="04"], 0x47) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r3, 0x40000000af01, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000240)) r5 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r5, 0x40085112, &(0x7f0000000800)=@t={0x81, 0x5, 0x0, 0x0, @generic=0x20a}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/255}) r6 = dup(r4) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000000)={0x1, r6}) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) 1m24.085798746s ago: executing program 4 (id=5005): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) unshare(0x20040600) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000240)=0x14) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xfa3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c) sendto$inet6(r2, &(0x7f0000000180), 0xffffffffffffff22, 0x4000001, &(0x7f0000000200)={0xa, 0x4e23, 0x40, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0xbcff, 0x0, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') openat$drirender128(0xffffffffffffff9c, 0x0, 0x4c980, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000a80)={'filter\x00', 0x7, 0x4, 0x3d0, 0x0, 0x1f8, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000140), {[{{@arp={@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, 0xffffff00, 0xff, 0x10, 0xb, {@mac=@local, {[0xff, 0x0, 0xff, 0xff, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x7, 0x4, 0xa, 0x7328, 0x9, 0xfff7, 'team_slave_1\x00', 'team0\x00', {}, {0xff}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x10, 'mangle\x00', 0x0, {@empty, @empty, @loopback, @empty, 0x8}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x18}, @rand_addr=0x64010100, 0xff000000, 0xff, 0xf, 0x9, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@link_local, {[0xff, 0xff, 0x0, 0x0, 0xff, 0xff]}}, 0x81, 0x6, 0x4, 0x4794, 0x9, 0x100, 'wg1\x00', 'veth0\x00', {}, {0xff}, 0x0, 0x2}, 0xc0, 0xf0}, @mangle={0x0, 'mangle\x00', 0x0, {@mac=@local, @empty, @broadcast, @empty, 0x8}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0xfd) ioctl$DRM_IOCTL_VERSION(0xffffffffffffffff, 0xc0406400, &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x5b, &(0x7f0000001b40)=""/91, 0x0, 0x0, 0x0, 0x0}) r4 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000040)=0x20) ioctl$SNDCTL_DSP_SYNC(r4, 0x5001, 0x0) sendto$inet6(r3, &(0x7f0000000280)="a5", 0x1, 0x4044000, 0x0, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a02fa560186d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f68530c2b21a100efb76cba37ff3111d6847e0c7f719e169a596e5fc008daefba68f6222103472bc55704cdb72b4b996ed82ccb1eaae27969d008ba7d34171113d806726615380fe65a6a0a72e19c2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13e4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe3635b2ee97c143f28def4b73905ca14d90d1f6"}) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000580)) ioctl$I2C_RETRIES(r3, 0x701, 0x3) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r0, 0xc00864bf, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000380)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000003c0)) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000440)) ioctl$USBDEVFS_FORBID_SUSPEND(r5, 0x5521) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)}, 0x4) 6.653867536s ago: executing program 1 (id=5067): fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000280)={0x0, 0x0}) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha512\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x4, &(0x7f0000000180), 0x4) setsockopt$ALG_SET_AEAD_AUTHSIZE(0xffffffffffffffff, 0x117, 0x7, 0x0, 0x10000) r1 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140c}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)="8b", 0x1}], 0x1, 0x0, 0x0, 0x900}, 0x60) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000202020731a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000a00000009500000000000000f0d3789276440476fe39ec20a88c3154c056698f7beba3d55c14124f5ec4a78919c002f56eae83db6a2abdea9ce76342c86ec0247a3305e30724337eee522f0c105b875c1c4979f8cd7c0e3583d174586d739ad28fc07c6f3868fd10a22af5e3df1fdd9c"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x18, 0x39, 0x9, 0x0, 0x0, {0x3}, [@typed={0x4}, @generic]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x3, &(0x7f00000002c0)=[{0x3, 0x6, 0x5, 0x3}, {0x0, 0x40, 0x2, 0x226}, {0x1, 0x3, 0x7, 0x55b0}, {0x9712, 0x4, 0xf9, 0x1000}, {0x0, 0x77, 0x2, 0x26bb}, {0x87, 0x1, 0x7, 0x1}]}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="310300000000000000", @ANYBLOB], 0x24}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x8, 'vlan1\x00', {'macvlan0\x00'}}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB="feff"]) 6.651430828s ago: executing program 1 (id=5068): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000380)=0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000000400)={0x20, 0x37, 0x2, {0x0, 0x10001, 0x5, r3, 0x2, '%\\'}}, 0x20) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000040), 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x989, 0x0, 0x10}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x0, 0x20}, 0xc) sendmmsg$inet6(r4, &(0x7f0000003f00)=[{{0x0, 0xf, &(0x7f0000000300)=[{&(0x7f0000000140)="a2", 0x1a058}], 0x1}}], 0x1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f00000003c0)='k', 0x1600}], 0x1) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, {0x9}}}]}}]}}, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x14) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00001b0000/0x18000)=nil, &(0x7f0000000440)=[@textreal={0x8, &(0x7f0000000000)="f00fc7484d36f08266060266b9800000c00f326635000400000f308bc1de780066b9aa0200000f322e0f01cf66b9ab0900000f32f2f031b3e759dc2c", 0x3c}], 0x1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r5) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.515004981s ago: executing program 1 (id=5069): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) syz_clone3(&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) memfd_secret(0x80000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x7c, r2, 0x1, 0x400, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x5d, 0x33, @beacon={{{}, {}, @device_b}, 0x0, @default, 0x0, @val={0x0, 0xf, @random="733cdd92793987dcc8d829e0090bc7"}, @void, @val={0x3, 0x1}, @void, @void, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a, {0x8ce1, 0x1, 0x3, 0x0, {0x8, 0x6e, 0x0, 0xbe, 0x0, 0x0, 0x0, 0x2}, 0x1, 0x7f, 0xea}}, @void, @void, @void}}]}, 0x7c}}, 0x8004080) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000d00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000cc0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b8030020", @ANYRES16=r2, @ANYBLOB="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"], 0x3b8}, 0x1, 0x0, 0x0, 0x4000000}, 0xc4) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008001}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYBLOB="b7312ec2d46e97ca9e4dd3561638c6fe5d2d76d859493f3206d1a314aaa14abf710decb5f007f0489d5fb454224c11b3d90bbf09269a5da1a1a158e22ec5282b6afbe5c1a09011df43a4c0809b47de111757da11ca0d57de0bcfbaa900e80b4f69eed3278b817346d786789f13305b9dc3b2c3f18add6158", @ANYRESHEX, @ANYRES64], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x9000) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x600, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x2, 0x5, @mcast2, @remote, 0x1, 0x7, 0x7, 0x2}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xb, 0x2}, {0xe, 0x5}, {0x2}, {0x0, 0x4}, {0xd, 0x5}, {0x0, 0x2}]}, @const={0x2, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000d40)=""/41, 0x64, 0x29, 0x1, 0x10001}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x25, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000001000000000000007b00000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001836000003000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000bf00000000000000950000000000000018400000f9ffffff0000000000000000184700000800000000000000000000001100f0ff0000000018120000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r9, @ANYRES64=r8], &(0x7f00000004c0)='syzkaller\x00', 0x8ee6, 0x0, 0x0, 0x40f00, 0x0, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x2fb1}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0) 3.408059203s ago: executing program 1 (id=5070): syz_open_dev$ttys(0xc, 0x2, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x202}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) fcntl$lock(r2, 0x24, 0x0) 225.746703ms ago: executing program 1 (id=5071): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$l2tp(0x2, 0x2, 0x73) syz_clone3(&(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = memfd_secret(0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x7c, r3, 0x1, 0x400, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x5d, 0x33, @beacon={{{}, {}, @device_b}, 0x0, @default, 0x0, @val={0x0, 0xf, @random="733cdd92793987dcc8d829e0090bc7"}, @void, @val={0x3, 0x1}, @void, @void, @void, @val={0x25, 0x3}, @void, @void, @val={0x2d, 0x1a, {0x8ce1, 0x1, 0x3, 0x0, {0x8, 0x6e, 0x0, 0xbe, 0x0, 0x0, 0x0, 0x2}, 0x1, 0x7f, 0xea}}, @void, @void, @void}}]}, 0x7c}}, 0x8004080) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="b8030020", @ANYRES16=r3, @ANYBLOB="00012dbd7000fbdbdf253b00000023003300e0840800080211000000080211000000ffffffffffff08080201ca80070001000c00cd000700010005000100040087007301330020b43f00080211000001080211000000505050505050f1031601cd810080030008021100000000060202020202020105816083ec002d1aa00b1b06000000000000000000ff000c00000001000700000080dd8ecf24e307189f2b1c40e227ad8146dda19458a8333bbe10e3ace1c8758720ef69c8159b758edb6b57c434b040f0f93110adaf6320367ceb77725ebb6e9624d79ef7ac0538f730a4b69748b876e82fdc66ce272b85a84f1e0669b19790b8d5a6c2a6f2dcebcc208294f9c94b45c6b9cc9cda2779bb6ebc085470b691ce1dbad3216bc6efc18245004c2fe3121bf56fdd170f9e5a1b043ee1a4898e752ff60b4b3fbb7718df9a3001dd38558a4f68e63431b845bd95822b04c85a74dd441c45548ecf30702045811e03360d7aded478b3460ceb3757a987fd28a318d5dd1d9820844bdd3986499927d7e3a9e715469853326d624dde6401c5742e2e7799eedae6485564afbf3c663c700f5a806a2b72318583979eeb8b5920b88cd0201500d101330080a80100080211000001ffffffffffff080211000000067b0200438101000000000000006400040000060101010101010105a40184ec9b250300b4073c04013fb4292d1a00401003000000000000002000b1000300000001000900000002ddde161ac2ac9aa67b98fdfb49d6f7e746c1526a1756d19b912d3fd146fc6c1aa2ffa386860f66e7812f27eef12c9249565c3871bd3dd211ba3764da557c5c97c9916b6eb6d0e6e7013a447c017ac12187a5630f108e63b1bf9f042b45ca5be7253afbe59292e26c2e9f07e9579f1898b5b3eb7e69f028eab3681c211887bffd5ea2f21641664779b9e8067f7f7aabec5200aba40f211e99cbc91d295a2734c1dcc37652ed26231d5761afb0064763ae49902b39fe913518a0c7a8e7a4570132df39f1b87ca81e71e5ae51de470005b5e240da6d0e07faf487a2e25957e00664dd8d6f47b18c02cddb481847c9787af0069e6752dd19b4baeaecfb466953f203a5c4433620e10899677b4cac823db03ea5f70151195521a4a33c15d126f39008cb0c719266dd1a34b905227b2e12b3b2f63211e8d4eecae847a3551d68c580243ca58ed56dfd0e78f7a87335d6e68809fb17ee0655bc724122f3d04c218fc4c338526ecb3083de85c7bfc3718639f90000000800a000070000000800a00006000000050019010e0000000800a0000000008008005700a30a0000"], 0x3b8}, 0x1, 0x0, 0x0, 0x4000000}, 0xc4) r6 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) r7 = ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_REMOVE(r6, 0x4c81, r7) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80008001}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRESHEX, @ANYBLOB="b7312ec2d46e97ca9e4dd3561638c6fe5d2d76d859493f3206d1a314aaa14abf710decb5f007f0489d5fb454224c11b3d90bbf09269a5da1a1a158e22ec5282b6afbe5c1a09011df43a4c0809b47de111757da11ca0d57de0bcfbaa900e80b4f69eed3278b817346d786789f13305b9dc3b2c3f18add6158", @ANYRESHEX, @ANYRES64], 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r8 = socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x9000) r9 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x600, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x2, 0x5, @mcast2, @remote, 0x1, 0x7, 0x7, 0x2}}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x4, [@func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{0xb, 0x2}, {0xe, 0x5}, {0x2}, {0x0, 0x4}, {0xd, 0x5}, {0x0, 0x2}]}, @const={0x2, 0x0, 0x0, 0xa, 0x5}]}, {0x0, [0x30, 0x61]}}, &(0x7f0000000d40)=""/41, 0x64, 0x29, 0x1, 0x10001}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x25, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000001000000000000007b00000018110000", @ANYRES8=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000001836000003000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000bf00000000000000950000000000000018400000f9ffffff0000000000000000184700000800000000000000000000001100f0ff0000000018120000", @ANYRESDEC=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000018110000", @ANYRES32=r10, @ANYRES64=r9], &(0x7f00000004c0)='syzkaller\x00', 0x8ee6, 0x0, 0x0, 0x40f00, 0x0, '\x00', r11, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x2, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x10, 0x2fb1}, 0x90) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_LIMIT={0x8}, @TCA_CODEL_ECN={0x8}]}}]}, 0x44}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="04005b000600650040000000"], 0x28}}, 0x0) 0s ago: executing program 1 (id=5072): socket(0x10, 0x0, 0x0) io_uring_setup(0x668, &(0x7f0000000240)={0x0, 0x25a1, 0x400, 0x40001}) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0x19}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, 0x0) mkdir(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = fcntl$getown(0xffffffffffffffff, 0x9) sched_setaffinity(r3, 0x8, &(0x7f00000000c0)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) dup(0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c000000010405000000000000000000000000000600064000000000080005400000000005000100010000000a0002000000000000000000080003400000c018060006400000000008000440000000000a000200190ab2ca6d"], 0x7c}}, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000680)=[{&(0x7f0000000200)="05", 0x6a000}], 0x1, 0x6000000, 0x0, 0x0) sendfile(0xffffffffffffffff, r6, 0x0, 0x0) ioctl$KDFONTOP_GET(0xffffffffffffffff, 0x4b72, &(0x7f0000000080)={0x1, 0x1, 0x10, 0x10, 0x3b, &(0x7f00000006c0)}) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000040), 0x4) setsockopt$packet_fanout_data(r7, 0x107, 0x16, &(0x7f0000000280)={0x2, &(0x7f00000002c0)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x4c}]}, 0x10) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1de6b9}) kernel console output (not intermixed with test programs): sing interface batadv_slave_1 (retrying later): interface not active [ 1420.427233][T28782] veth0_vlan: entered promiscuous mode [ 1420.509601][T28908] hsr_slave_0: entered promiscuous mode [ 1420.518200][T28908] hsr_slave_1: entered promiscuous mode [ 1420.528796][T28908] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1420.537990][T28908] Cannot create hsr debugfs directory [ 1420.621069][ T5107] Bluetooth: hci4: command tx timeout [ 1420.626845][T13851] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.677256][T28782] veth1_vlan: entered promiscuous mode [ 1420.776182][ T928] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1420.817756][T13851] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1420.928852][ T5104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1420.943407][ T5104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1420.953636][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1420.963750][ T5104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1420.971689][ T5104] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1420.979683][ T5104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1420.988710][ T928] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1421.002263][ T928] usb 3-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 1421.017455][ T928] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1421.028809][ T928] usb 3-1: config 1 has no interface number 1 [ 1421.045870][ T928] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 156, changing to 7 [ 1421.057958][ T928] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 17696, setting to 1024 [ 1421.075669][ T928] usb 3-1: string descriptor 0 read error: -22 [ 1421.075727][T13851] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.082171][ T928] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1421.102946][ T928] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.125410][ T928] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1421.245307][T13851] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1421.435910][T28782] veth0_macvtap: entered promiscuous mode [ 1421.563522][T28782] veth1_macvtap: entered promiscuous mode [ 1421.800202][T29005] chnl_net:caif_netlink_parms(): no params data found [ 1421.958224][T28782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1421.979794][T28782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1421.990681][T28782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.002889][T28782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.016969][T28782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.029367][T28782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.042707][T28782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1422.054277][T28782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.093424][T28782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1422.141702][ T5104] Bluetooth: hci5: command tx timeout [ 1422.267518][T28782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.278810][T28782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.290281][T28782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.301780][T28782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.311802][T28782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.325380][T28782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.335414][T28782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1422.346347][T28782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1422.362613][T28782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1422.371938][T13851] bridge_slave_1: left allmulticast mode [ 1422.377869][T13851] bridge_slave_1: left promiscuous mode [ 1422.385247][T13851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1422.395094][T13851] bridge_slave_0: left allmulticast mode [ 1422.401240][T13851] bridge_slave_0: left promiscuous mode [ 1422.407445][T13851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1422.712468][ T5104] Bluetooth: hci4: command tx timeout [ 1422.892576][T13851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1422.914790][T13851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1422.926124][T13851] bond0 (unregistering): Released all slaves [ 1422.989558][T28782] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.016904][T28782] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.020892][ T5104] Bluetooth: hci2: command tx timeout [ 1423.044232][T28782] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.053126][T28782] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1423.424910][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.432274][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.443512][T29005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1423.453216][T29005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1423.461951][T29005] bridge_slave_0: entered allmulticast mode [ 1423.475612][T29005] bridge_slave_0: entered promiscuous mode [ 1423.633436][ T9] usb 3-1: USB disconnect, device number 127 [ 1423.666366][T13851] hsr_slave_0: left promiscuous mode [ 1423.677539][T13851] hsr_slave_1: left promiscuous mode [ 1423.691851][T13851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1423.699305][T13851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1423.717204][T13851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1423.724847][T13851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1423.757107][T13851] veth1_macvtap: left promiscuous mode [ 1423.762981][T13851] veth0_macvtap: left promiscuous mode [ 1423.768621][T13851] veth1_vlan: left promiscuous mode [ 1423.775574][T13851] veth0_vlan: left promiscuous mode [ 1424.223851][ T5104] Bluetooth: hci5: command tx timeout [ 1424.376014][T13851] team0 (unregistering): Port device team_slave_1 removed [ 1424.435168][T13851] team0 (unregistering): Port device team_slave_0 removed [ 1424.893774][T29005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1424.904270][T29005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1424.912125][T29005] bridge_slave_1: entered allmulticast mode [ 1424.920436][T29005] bridge_slave_1: entered promiscuous mode [ 1424.959712][T29046] netlink: 'syz.2.4814': attribute type 1 has an invalid length. [ 1425.102364][ T5104] Bluetooth: hci2: command tx timeout [ 1425.148171][T29018] chnl_net:caif_netlink_parms(): no params data found [ 1425.205567][T29005] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1425.233358][T29005] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1425.382349][T29071] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4816'. [ 1425.410181][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1425.434627][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1425.472931][T29005] team0: Port device team_slave_0 added [ 1425.489685][T29005] team0: Port device team_slave_1 added [ 1425.646639][T29005] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1425.654895][T29005] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1425.690404][T29005] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1425.779185][T28908] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1425.791602][T29005] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1425.798588][T29005] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1425.841028][T29005] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1425.861271][T29018] bridge0: port 1(bridge_slave_0) entered blocking state [ 1425.868572][T29018] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.884230][T29018] bridge_slave_0: entered allmulticast mode [ 1425.896181][T29018] bridge_slave_0: entered promiscuous mode [ 1425.910125][T29018] bridge0: port 2(bridge_slave_1) entered blocking state [ 1425.930398][T29018] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.937749][T29018] bridge_slave_1: entered allmulticast mode [ 1425.954465][T29018] bridge_slave_1: entered promiscuous mode [ 1425.965767][T28908] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1425.970737][ T5150] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1426.016728][T28908] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1426.031338][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1426.039665][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1426.057784][T28908] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1426.107284][T29018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1426.170677][ T5150] usb 3-1: Using ep0 maxpacket: 8 [ 1426.184400][ T5150] usb 3-1: config 0 has an invalid descriptor of length 124, skipping remainder of the config [ 1426.195251][ T5150] usb 3-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 1426.206641][ T5150] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1426.221322][T13851] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.225108][ T5150] usb 3-1: config 0 descriptor?? [ 1426.277620][T29018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1426.300874][ T5104] Bluetooth: hci5: command tx timeout [ 1426.423807][T13851] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.457897][T29083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1426.487431][T29083] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1426.555889][ T5150] usb 3-1: string descriptor 0 read error: -71 [ 1426.569241][ T5150] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1426.597820][ T5150] usb 3-1: USB disconnect, device number 2 [ 1426.609370][T29005] hsr_slave_0: entered promiscuous mode [ 1426.642157][T29005] hsr_slave_1: entered promiscuous mode [ 1426.656281][T29005] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1426.681305][T29005] Cannot create hsr debugfs directory [ 1426.713790][T29018] team0: Port device team_slave_0 added [ 1426.737260][T29018] team0: Port device team_slave_1 added [ 1426.806095][T13851] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1426.981171][ T8] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 1427.080014][T13851] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1427.167110][ T8] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1427.181038][ T5107] Bluetooth: hci2: command tx timeout [ 1427.204140][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.227655][ T8] usb 5-1: Product: syz [ 1427.234914][T29018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1427.245513][ T8] usb 5-1: Manufacturer: syz [ 1427.265721][T29018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1427.298161][ T8] usb 5-1: SerialNumber: syz [ 1427.329529][ T8] usb 5-1: config 0 descriptor?? [ 1427.338188][T29018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1427.411829][T29018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1427.418839][T29018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1427.451620][T29018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1427.739696][T29138] syz.2.4823 (29138): drop_caches: 2 [ 1427.761065][ T8] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1427.803218][ T8] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1427.808939][T29138] syz.2.4823 (29138): drop_caches: 2 [ 1427.816553][ T8] dvb-usb: AME DTV-5100 USB2.0 DVB-T error while loading driver (-19) [ 1427.888663][T29018] hsr_slave_0: entered promiscuous mode [ 1427.908968][T29018] hsr_slave_1: entered promiscuous mode [ 1427.915235][T29018] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1427.933779][T29018] Cannot create hsr debugfs directory [ 1428.019001][T29119] fuse: Unknown parameter 'fd0x0000000000000004' [ 1428.072626][T29145] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4824'. [ 1428.120503][T13851] bridge_slave_1: left allmulticast mode [ 1428.135687][T13851] bridge_slave_1: left promiscuous mode [ 1428.152696][T13851] bridge0: port 2(bridge_slave_1) entered disabled state [ 1428.173199][T13851] bridge_slave_0: left allmulticast mode [ 1428.178925][T13851] bridge_slave_0: left promiscuous mode [ 1428.185001][T13851] bridge0: port 1(bridge_slave_0) entered disabled state [ 1428.380879][ T5107] Bluetooth: hci5: command tx timeout [ 1428.544167][ T5107] Bluetooth: hci1: command tx timeout [ 1429.027478][T13851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1429.075268][T13851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1429.094847][T13851] bond0 (unregistering): Released all slaves [ 1429.260763][ T5107] Bluetooth: hci2: command tx timeout [ 1429.277963][T29146] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4818'. [ 1429.955394][T13851] hsr_slave_0: left promiscuous mode [ 1429.979305][T13851] hsr_slave_1: left promiscuous mode [ 1430.008704][T13851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1430.033460][T13851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1430.058908][T13851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1430.080693][T13851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1430.165654][T13851] veth1_macvtap: left promiscuous mode [ 1430.184379][T13851] veth0_macvtap: left promiscuous mode [ 1430.194952][T13851] veth1_vlan: left promiscuous mode [ 1430.210836][T13851] veth0_vlan: left promiscuous mode [ 1430.559737][T27486] usb 5-1: USB disconnect, device number 42 [ 1431.387401][T13851] team0 (unregistering): Port device team_slave_1 removed [ 1431.487755][T13851] team0 (unregistering): Port device team_slave_0 removed [ 1432.250460][T28908] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1432.306028][T28908] 8021q: adding VLAN 0 to HW filter on device team0 [ 1432.360745][T20721] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 1432.428484][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 1432.436112][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1432.512712][ T5152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1432.519889][ T5152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1432.595297][T20721] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1432.615180][T20721] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1432.693579][T20721] usb 3-1: Product: syz [ 1432.714811][T20721] usb 3-1: Manufacturer: syz [ 1432.754176][T20721] usb 3-1: SerialNumber: syz [ 1432.808219][T20721] usb 3-1: config 0 descriptor?? [ 1432.829825][T28908] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1432.957628][T28908] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1433.045594][T29189] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4832'. [ 1433.157196][T29005] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1433.180208][T29005] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1433.237716][T29005] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1433.266427][T29005] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1433.273609][T29184] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1433.475811][T29184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4831'. [ 1433.572560][T20721] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 1433.893867][T28908] veth0_vlan: entered promiscuous mode [ 1433.943338][T28908] veth1_vlan: entered promiscuous mode [ 1434.050361][T29018] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1434.098945][T29018] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1434.109243][T29018] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1434.130408][T29018] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1434.169279][T29005] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1434.237371][T28908] veth0_macvtap: entered promiscuous mode [ 1434.281438][T28908] veth1_macvtap: entered promiscuous mode [ 1434.327299][T29005] 8021q: adding VLAN 0 to HW filter on device team0 [ 1434.364280][T28908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.378371][T28908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.390174][T28908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.407419][T28908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.419790][T28908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1434.434522][T28908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.448495][T28908] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1434.465515][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1434.472874][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1434.523089][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1434.530212][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1434.552257][T28908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.570916][T28908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.581518][T28908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.592858][T28908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.606139][T28908] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1434.618013][T28908] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1434.633108][T28908] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1434.668734][T28908] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.684912][T28908] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.694926][T28908] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.704485][T28908] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1434.901003][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1434.924574][T29018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1434.934888][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1435.034083][ T9] usb 3-1: USB disconnect, device number 3 [ 1435.046329][T29018] 8021q: adding VLAN 0 to HW filter on device team0 [ 1435.055115][ T2441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1435.088104][ T2441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1435.108407][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 1435.115679][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1435.184552][T29005] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1435.225478][T17394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1435.232719][T17394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1435.348147][T29210] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4797'. [ 1435.477779][T29005] veth0_vlan: entered promiscuous mode [ 1435.533142][ T5107] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1435.546885][T29005] veth1_vlan: entered promiscuous mode [ 1435.589478][T29018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1435.619574][T29216] syz.2.4836 (29216): drop_caches: 2 [ 1435.657633][T29216] syz.2.4836 (29216): drop_caches: 2 [ 1435.680960][ T5154] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1435.718614][T29005] veth0_macvtap: entered promiscuous mode [ 1435.769762][T29005] veth1_macvtap: entered promiscuous mode [ 1435.872631][T29005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1435.883751][T29005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.893967][ T5154] usb 5-1: Using ep0 maxpacket: 8 [ 1435.894636][T29005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1435.911936][T29005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1435.923101][T29005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1435.943319][ T5154] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1435.956241][ T5154] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1435.966480][ T5154] usb 5-1: config 0 has no interface number 0 [ 1435.990326][ T5154] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1435.992447][T29005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.018341][ T5154] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1436.027965][T29005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1436.047237][T29005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.070508][T29005] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1436.072521][ T5154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1436.106929][ T5154] usb 5-1: config 0 descriptor?? [ 1436.121665][ T5154] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 1436.196432][T29005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.209031][T29005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.219716][T29005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.243142][T29005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.256651][T29005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.269313][T29005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.279776][T29005] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1436.292425][T29005] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1436.307181][T29005] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1436.376219][T29018] veth0_vlan: entered promiscuous mode [ 1436.421193][T29005] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.435920][T29005] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.448613][T29005] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.458675][T29005] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1436.495391][T29226] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4839'. [ 1436.607284][T13851] tipc: Subscription rejected, illegal request [ 1436.778564][T29018] veth1_vlan: entered promiscuous mode [ 1436.801466][T29231] program syz.2.4840 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1436.998831][T29018] veth0_macvtap: entered promiscuous mode [ 1437.035306][T29018] veth1_macvtap: entered promiscuous mode [ 1437.077772][ T5150] usb 5-1: USB disconnect, device number 43 [ 1437.160414][T29018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1437.182905][T29018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.201923][T29018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1437.217937][T29231] kvm_intel: kvm [29230]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xff5556c5 [ 1437.221873][T29018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.248192][T29018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1437.252578][T29241] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4843'. [ 1437.261568][T29018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.270179][T29231] kvm_intel: kvm [29230]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0xff6aff555ec3 [ 1437.287078][T29018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1437.299697][T29018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.302604][T27486] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 1437.310509][T29018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1437.368107][T29018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.407414][T29018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1437.431209][T13852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.451097][T13852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1437.519122][T29018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.529141][T27486] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1437.544439][T27486] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1437.549214][T29018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.560465][T27486] usb 1-1: Product: syz [ 1437.578089][T29018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.587301][T27486] usb 1-1: Manufacturer: syz [ 1437.602920][T29018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.617133][T27486] usb 1-1: SerialNumber: syz [ 1437.617804][T29018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.640642][T29018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.645589][T27486] usb 1-1: config 0 descriptor?? [ 1437.651359][T29018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.679081][T29018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.709856][T29018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1437.722422][T29018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1437.758372][T29018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1437.820000][T29018] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.829508][T29018] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.854431][T29018] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.865621][T29018] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1437.900359][T10390] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1437.925972][T10390] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.139757][T29239] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1438.177257][T10390] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.205367][T10390] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.265418][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1438.283393][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1438.359680][T29239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4842'. [ 1438.436397][T29250] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.445275][T29250] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.454118][T29250] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.463365][T29250] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1438.477380][T27486] dvb_usb_dtv5100 1-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 1438.653687][ T5150] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 1438.848053][ T5150] usb 3-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1438.876683][ T5150] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1438.905929][ T5150] usb 3-1: Product: syz [ 1438.921288][ T5150] usb 3-1: Manufacturer: syz [ 1438.944497][ T5150] usb 3-1: SerialNumber: syz [ 1438.957464][ T5150] usb 3-1: config 0 descriptor?? [ 1439.436768][T29248] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1440.051899][ T5150] dvb_usb_dtv5100 3-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 1440.108654][T29248] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4844'. [ 1440.231654][ T5154] usb 1-1: USB disconnect, device number 10 [ 1440.330385][T29281] syz.1.4846 (29281): drop_caches: 2 [ 1440.490399][T29281] syz.1.4846 (29281): drop_caches: 2 [ 1440.943410][T29306] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1440.952541][T29306] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1440.962850][T29306] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1440.971715][T29306] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1440.998164][T29312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4854'. [ 1441.528073][ T9] usb 3-1: USB disconnect, device number 4 [ 1441.681314][T29324] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4857'. [ 1442.301036][ T5107] Bluetooth: hci5: command tx timeout [ 1442.410721][ T5151] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 1442.583128][ T5107] Bluetooth: hci5: Ignoring HCI_Connection_Complete for existing connection [ 1442.629380][ T5151] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1442.638706][ T5151] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1442.650423][ T5151] usb 5-1: Product: syz [ 1442.655037][ T5151] usb 5-1: Manufacturer: syz [ 1442.660143][ T5151] usb 5-1: SerialNumber: syz [ 1442.676570][ T5151] usb 5-1: config 0 descriptor?? [ 1442.785929][T29335] syz.1.4860 (29335): drop_caches: 2 [ 1442.793712][T29342] syz.1.4860 (29342): drop_caches: 2 [ 1442.931864][T29335] syz.1.4860 (29335): drop_caches: 2 [ 1442.953917][T29342] syz.1.4860 (29342): drop_caches: 2 [ 1443.116458][T29328] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 1443.410924][ T5151] dvb_usb_dtv5100 5-1:0.0: probe with driver dvb_usb_dtv5100 failed with error -110 [ 1443.475634][T29361] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1443.504789][T29328] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4858'. [ 1443.690871][ T5150] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1443.906063][ T5150] usb 4-1: Using ep0 maxpacket: 8 [ 1443.931487][ T5150] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1443.957884][ T5150] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1444.006935][ T5150] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1444.065658][ T5150] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1444.123433][ T5150] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1444.163918][T29378] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4868'. [ 1444.176435][ T5150] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1444.207771][ T5150] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1444.495372][ T5150] usb 4-1: GET_CAPABILITIES returned 0 [ 1444.510763][T20721] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1444.524989][ T5150] usbtmc 4-1:16.0: can't read capabilities [ 1444.711406][T20721] usb 1-1: Using ep0 maxpacket: 16 [ 1444.784803][T20721] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1444.828873][T20721] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1444.853453][T20721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1444.911863][T20721] usb 1-1: Product: syz [ 1444.926605][T20721] usb 1-1: SerialNumber: syz [ 1444.958149][T20721] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 1445.076802][ T9] usb 5-1: USB disconnect, device number 44 [ 1445.260987][ T5104] Bluetooth: hci2: command tx timeout [ 1445.730894][ T5150] usb 1-1: USB disconnect, device number 11 [ 1445.812039][ T5104] Bluetooth: hci1: Ignoring HCI_Connection_Complete for existing connection [ 1445.852644][T29411] syz.2.4876 (29411): drop_caches: 2 [ 1445.868833][T29411] syz.2.4876 (29411): drop_caches: 2 [ 1445.901678][T29414] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4877'. [ 1445.944519][T29411] syz.2.4876 (29411): drop_caches: 2 [ 1445.961579][T29411] syz.2.4876 (29411): drop_caches: 2 [ 1446.249339][ T9] usb 4-1: USB disconnect, device number 27 [ 1446.389385][ T2441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1446.397740][ T2441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1446.513702][T29425] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1446.548446][ T5107] Bluetooth: Unexpected start frame (len 16) [ 1446.555010][ T5107] Bluetooth: Frame is too long (len 16, expected len 4) [ 1446.856337][T29432] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1446.865490][T29432] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1446.874342][T29432] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1446.883186][T29432] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1447.400745][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1447.507034][T29446] syz.3.4888 (29446): drop_caches: 2 [ 1447.518863][T29446] syz.3.4888 (29446): drop_caches: 2 [ 1447.602697][ T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1447.626792][ T9] usb 3-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 1447.638376][ T9] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1447.649095][ T9] usb 3-1: config 1 has no interface number 1 [ 1447.651404][T29446] syz.3.4888 (29446): drop_caches: 2 [ 1447.655986][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 156, changing to 7 [ 1447.704889][T29446] syz.3.4888 (29446): drop_caches: 2 [ 1447.724022][ T9] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 17696, setting to 1024 [ 1447.770443][ T9] usb 3-1: string descriptor 0 read error: -22 [ 1447.786988][ T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1447.812676][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1447.848807][ T9] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1447.864044][T29451] tipc: Started in network mode [ 1447.873755][T29451] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 1447.919444][T29451] tipc: Enabled bearer , priority 10 [ 1448.923042][ T9] tipc: Node number set to 8432298 [ 1449.142365][T10390] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1449.180851][T10390] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.342502][T10390] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1449.382096][T10390] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.501092][ T5107] Bluetooth: hci2: command tx timeout [ 1449.579806][T10390] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1449.631072][T10390] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.702161][T29478] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4900'. [ 1449.818618][T10390] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1449.840781][T29480] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4901'. [ 1449.855194][T10390] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1449.916646][ T5104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1449.931271][ T5104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1449.948123][ T5104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1449.960494][ T5104] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1449.968303][ T5104] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1449.977370][ T5104] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1450.194683][T20721] usb 3-1: USB disconnect, device number 5 [ 1450.217321][T10390] bridge_slave_1: left allmulticast mode [ 1450.228131][T10390] bridge_slave_1: left promiscuous mode [ 1450.244785][T10390] bridge0: port 2(bridge_slave_1) entered disabled state [ 1450.268672][T10390] bridge_slave_0: left allmulticast mode [ 1450.279000][T10390] bridge_slave_0: left promiscuous mode [ 1450.286378][T10390] bridge0: port 1(bridge_slave_0) entered disabled state [ 1450.824413][T10390] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1450.836872][T10390] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1450.848750][T10390] bond0 (unregistering): Released all slaves [ 1450.998815][T10390] tipc: Disabling bearer [ 1451.028395][T10390] tipc: Left network mode [ 1451.543773][T29511] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1451.552669][T29511] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1451.561504][T29511] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1451.570259][T29511] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1451.592894][T29485] chnl_net:caif_netlink_parms(): no params data found [ 1451.648023][T10390] hsr_slave_0: left promiscuous mode [ 1451.662872][T10390] hsr_slave_1: left promiscuous mode [ 1451.670189][T10390] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1451.693407][T10390] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1451.713233][T10390] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1451.725219][T10390] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1451.749819][T10390] veth1_macvtap: left promiscuous mode [ 1451.755673][T10390] veth0_macvtap: left promiscuous mode [ 1451.761971][T10390] veth1_vlan: left promiscuous mode [ 1451.767503][T10390] veth0_vlan: left promiscuous mode [ 1452.070242][ T5107] Bluetooth: hci4: command tx timeout [ 1452.430858][T20721] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1452.609369][T10390] team0 (unregistering): Port device team_slave_1 removed [ 1452.610801][T20721] usb 5-1: Using ep0 maxpacket: 8 [ 1452.632826][T20721] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=18.dc [ 1452.645399][T20721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1452.674542][T20721] usb 5-1: config 0 descriptor?? [ 1452.685238][T20721] sierra 5-1:0.0: Sierra USB modem converter detected [ 1452.727033][T10390] team0 (unregistering): Port device team_slave_0 removed [ 1452.893097][T20721] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 1452.917583][T20721] usb 5-1: USB disconnect, device number 45 [ 1452.937912][T20721] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1452.954376][T20721] sierra 5-1:0.0: device disconnected [ 1453.323985][T29541] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4914'. [ 1453.455459][T29485] bridge0: port 1(bridge_slave_0) entered blocking state [ 1453.504050][T29485] bridge0: port 1(bridge_slave_0) entered disabled state [ 1453.521484][ T5107] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1453.529433][T29485] bridge_slave_0: entered allmulticast mode [ 1453.562438][T29485] bridge_slave_0: entered promiscuous mode [ 1453.627115][T29485] bridge0: port 2(bridge_slave_1) entered blocking state [ 1453.660864][T29485] bridge0: port 2(bridge_slave_1) entered disabled state [ 1453.670810][T20721] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 1453.706693][T29485] bridge_slave_1: entered allmulticast mode [ 1453.749236][T29485] bridge_slave_1: entered promiscuous mode [ 1453.896325][T20721] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1453.921386][T20721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1453.941167][T29556] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4917'. [ 1453.963400][T20721] usb 2-1: Product: syz [ 1453.967606][T20721] usb 2-1: Manufacturer: syz [ 1454.018452][T29485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1454.050521][T20721] usb 2-1: SerialNumber: syz [ 1454.064350][T29485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1454.111033][T20721] usb 2-1: config 0 descriptor?? [ 1454.143702][ T5107] Bluetooth: hci4: command tx timeout [ 1454.307019][T29485] team0: Port device team_slave_0 added [ 1454.364178][T29485] team0: Port device team_slave_1 added [ 1454.493817][T29485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1454.503489][T29485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1454.543203][T29485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1454.620885][ T9] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1454.636973][T20721] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1454.713606][T20721] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1454.725983][T29485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1454.735760][T29485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1454.783877][T20721] dvb-usb: AME DTV-5100 USB2.0 DVB-T error while loading driver (-19) [ 1454.810384][ T9] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 1454.837992][T29485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1454.887326][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1454.923234][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1454.961620][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1454.976478][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1454.988739][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1455.004034][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1455.015966][T29545] fuse: Unknown parameter 'fd0x0000000000000004' [ 1455.028540][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1455.057824][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1455.086043][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1455.106379][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1455.124855][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1455.158410][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1455.169989][T29485] hsr_slave_0: entered promiscuous mode [ 1455.179651][T29485] hsr_slave_1: entered promiscuous mode [ 1455.187720][T29485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1455.207784][T29485] Cannot create hsr debugfs directory [ 1455.210485][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1455.246526][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1455.324048][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1455.347627][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1455.373545][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1455.411199][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1455.460485][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1455.474568][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1455.501685][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1455.524685][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1455.551607][ T9] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1455.582548][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1455.618506][ T9] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1455.638512][ T9] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1455.666478][ T9] usb 4-1: Product: syz [ 1455.683498][ T9] usb 4-1: Manufacturer: syz [ 1455.702069][ T9] usb 4-1: SerialNumber: syz [ 1455.724335][ T9] usb 4-1: config 0 descriptor?? [ 1455.741105][ T9] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 1456.205131][T29545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4915'. [ 1456.233747][ T5107] Bluetooth: hci4: command tx timeout [ 1456.499683][T29485] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1456.564512][T29485] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1456.614295][T29485] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1456.655799][T29485] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1456.695796][T29599] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4922'. [ 1456.918981][T29605] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4924'. [ 1457.000054][T29485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1457.046066][T29485] 8021q: adding VLAN 0 to HW filter on device team0 [ 1457.082128][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1457.089337][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1457.136831][T17394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1457.144059][T17394] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1457.190924][ T5151] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1457.221011][ T5150] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1457.304403][T29485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1457.343354][ C0] usb 4-1: yurex_control_callback - control failed: -2 [ 1457.381820][ T9] usb 4-1: USB disconnect, device number 28 [ 1457.390797][ T5151] usb 5-1: Using ep0 maxpacket: 8 [ 1457.408925][ T9] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 1457.415827][ T5150] usb 3-1: Using ep0 maxpacket: 32 [ 1457.427090][T29485] veth0_vlan: entered promiscuous mode [ 1457.446345][ T5151] usb 5-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=18.dc [ 1457.466540][ T5150] usb 3-1: config index 0 descriptor too short (expected 48, got 18) [ 1457.490610][T29485] veth1_vlan: entered promiscuous mode [ 1457.501058][ T5151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1457.525047][ T5150] usb 3-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice=43.b6 [ 1457.538832][ T5151] usb 5-1: config 0 descriptor?? [ 1457.548528][ T5150] usb 3-1: New USB device strings: Mfr=86, Product=200, SerialNumber=139 [ 1457.561806][ T5151] sierra 5-1:0.0: Sierra USB modem converter detected [ 1457.568934][ T5150] usb 3-1: Product: syz [ 1457.589378][ T5150] usb 3-1: Manufacturer: syz [ 1457.618498][ T5150] usb 3-1: SerialNumber: syz [ 1457.643487][ T5150] powermate 3-1:2.0: probe with driver powermate failed with error -22 [ 1457.708425][T29485] veth0_macvtap: entered promiscuous mode [ 1457.736857][T29616] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4927'. [ 1457.767450][ T5151] usb 5-1: Sierra USB modem converter now attached to ttyUSB0 [ 1457.779067][T29485] veth1_macvtap: entered promiscuous mode [ 1457.808746][ T5151] usb 5-1: USB disconnect, device number 46 [ 1457.829125][ T5151] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0 [ 1457.893269][ T5151] sierra 5-1:0.0: device disconnected [ 1457.931691][T17394] usb 2-1: USB disconnect, device number 20 [ 1457.992370][ T5107] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1458.152133][T29485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.213574][T29485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.224351][T29485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.243501][T29485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.257396][T29485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.269981][T29485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.280645][T29485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.292419][T29485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.304614][ T5107] Bluetooth: hci4: command tx timeout [ 1458.310664][T29485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1458.321434][T29485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.338830][T29485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1458.360152][T29485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.374771][T29485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.386052][T29485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.396819][T29485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.429296][T29485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.453922][T29485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.473816][T29634] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4930'. [ 1458.486068][T29485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.497430][T29485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.522287][T29485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1458.551773][T29485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1458.586335][T29485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1458.648940][T29485] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.671759][T29485] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.700048][T29485] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1458.730296][T29485] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1459.268552][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.276546][ T2441] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1459.321565][ T2441] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1459.341947][T29645] syz.3.4932 (29645): drop_caches: 2 [ 1459.355434][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1459.395863][T29645] syz.3.4932 (29645): drop_caches: 2 [ 1459.452179][T29651] syz.3.4932 (29651): drop_caches: 2 [ 1459.630409][T29651] syz.3.4932 (29651): drop_caches: 2 [ 1459.825418][ T8] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1459.939442][T17394] usb 3-1: USB disconnect, device number 6 [ 1460.048304][T29676] vivid-000: disconnect [ 1460.062743][ T8] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1460.076901][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1460.088087][T29675] vivid-000: reconnect [ 1460.094555][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1460.123649][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1460.138141][T29672] syz.3.4936 (29672): drop_caches: 2 [ 1460.152180][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1460.174314][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1460.234904][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1460.247663][T29678] syz.3.4936 (29678): drop_caches: 2 [ 1460.260005][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1460.273782][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1460.306624][T29672] syz.3.4936 (29672): drop_caches: 2 [ 1460.317842][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1460.339034][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1460.408300][T29678] syz.3.4936 (29678): drop_caches: 2 [ 1460.434222][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1460.515815][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1460.527952][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1460.550315][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1460.587991][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1460.605415][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1460.631904][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1460.656356][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1460.677082][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1460.687771][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1460.713611][T29696] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4941'. [ 1460.726587][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1460.736657][ T8] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1460.745952][ T8] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1460.771799][ T8] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1460.789074][ T8] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1460.802105][ T8] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1460.820673][ T8] usb 2-1: Product: syz [ 1460.828378][T29697] sctp: [Deprecated]: syz.2.4939 (pid 29697) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1460.828378][T29697] Use struct sctp_sack_info instead [ 1460.850962][ T5107] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1460.859809][ T8] usb 2-1: Manufacturer: syz [ 1460.872424][ T8] usb 2-1: SerialNumber: syz [ 1460.881564][ T8] usb 2-1: config 0 descriptor?? [ 1460.891440][ T8] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1461.329251][T29717] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1461.338979][T29717] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1461.348653][T29717] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1461.357451][T29717] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1462.421176][T17394] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1462.477363][ C0] usb 2-1: yurex_control_callback - control failed: -2 [ 1462.532580][ T928] usb 2-1: USB disconnect, device number 21 [ 1462.578536][ T928] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1462.622636][T17394] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.646688][T17394] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1462.659850][T17394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.706868][T17394] usb 5-1: config 0 descriptor?? [ 1462.758134][T29764] netlink: 5 bytes leftover after parsing attributes in process `syz.3.4955'. [ 1462.960911][ T5107] Bluetooth: hci2: Received unexpected HCI Event 0x00 [ 1463.162406][T29748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1463.182432][T29748] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1463.575077][T29794] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1463.584504][T29794] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1463.594006][T29794] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1463.603321][T29794] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1463.680033][T29797] netlink: 201400 bytes leftover after parsing attributes in process `syz.1.4963'. [ 1463.849460][T29801] FAULT_INJECTION: forcing a failure. [ 1463.849460][T29801] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1463.866469][T29801] CPU: 1 PID: 29801 Comm: syz.3.4966 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 1463.876316][T29801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1463.886377][T29801] Call Trace: [ 1463.889671][T29801] [ 1463.892623][T29801] dump_stack_lvl+0x241/0x360 [ 1463.897327][T29801] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1463.902553][T29801] ? __pfx__printk+0x10/0x10 [ 1463.907174][T29801] ? snprintf+0xda/0x120 [ 1463.911439][T29801] should_fail_ex+0x3b0/0x4e0 [ 1463.916143][T29801] _copy_to_user+0x2f/0xb0 [ 1463.920582][T29801] simple_read_from_buffer+0xca/0x150 [ 1463.925986][T29801] proc_fail_nth_read+0x1e9/0x250 [ 1463.931479][T29801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1463.937061][T29801] ? rw_verify_area+0x520/0x6b0 [ 1463.941920][T29801] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1463.947487][T29801] vfs_read+0x204/0xbc0 [ 1463.951661][T29801] ? __pfx_lock_release+0x10/0x10 [ 1463.956704][T29801] ? __pfx_vfs_read+0x10/0x10 [ 1463.961401][T29801] ? __fget_files+0x29/0x470 [ 1463.966004][T29801] ? __fget_files+0x3f6/0x470 [ 1463.970797][T29801] ksys_read+0x1a0/0x2c0 [ 1463.975065][T29801] ? __pfx_ksys_read+0x10/0x10 [ 1463.979849][T29801] ? do_syscall_64+0x100/0x230 [ 1463.984632][T29801] ? do_syscall_64+0xb6/0x230 [ 1463.989327][T29801] do_syscall_64+0xf3/0x230 [ 1463.993835][T29801] ? clear_bhb_loop+0x35/0x90 [ 1463.998530][T29801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1464.004876][T29801] RIP: 0033:0x7fa2e6f7463c [ 1464.009304][T29801] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8c 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 1f 8d 02 00 48 [ 1464.028926][T29801] RSP: 002b:00007fa2e7e2e040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1464.037346][T29801] RAX: ffffffffffffffda RBX: 00007fa2e7105f60 RCX: 00007fa2e6f7463c [ 1464.045334][T29801] RDX: 000000000000000f RSI: 00007fa2e7e2e0b0 RDI: 0000000000000004 [ 1464.053321][T29801] RBP: 00007fa2e7e2e0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1464.061289][T29801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1464.069451][T29801] R13: 000000000000000b R14: 00007fa2e7105f60 R15: 00007fa2e722fa78 [ 1464.077537][T29801] [ 1464.150886][ T5151] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1464.335265][T13852] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1464.346681][T13852] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.357792][ T5151] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1464.391935][ T5151] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1464.419928][ T5151] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1464.475616][ T5151] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1464.512554][ T5151] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1464.530145][ T5151] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1464.554360][ T5151] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1464.580282][ T5151] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1464.610122][ T5151] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1464.625714][T13852] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1464.636720][ T5151] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1464.643989][T13852] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.656125][ T5151] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1464.677975][ T5151] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1464.712580][ T5151] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1464.727713][ T5151] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1464.748254][T29807] netlink: 5 bytes leftover after parsing attributes in process `syz.0.4970'. [ 1464.760880][ T5151] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1464.772959][ T5151] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1464.805066][ T5151] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1464.832638][ T5151] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1464.865235][T13852] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1464.877902][ T5151] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1464.886533][T13852] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1464.898809][ T5151] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1464.916561][ T5151] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1464.930266][ T5151] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1464.948997][ T5151] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1464.986771][ T5151] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1465.008934][ T5107] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 1465.034896][T17394] ath6kl: Failed to read usb control message: -110 [ 1465.042794][T17394] ath6kl: Unable to read the bmi data from the device: -110 [ 1465.045444][ T5151] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1465.050093][T17394] ath6kl: Unable to recv target info: -110 [ 1465.051143][T17394] ath6kl: Failed to init ath6kl core: -110 [ 1465.069375][T17394] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1465.123849][ T5151] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1465.143256][T13852] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1465.153894][T13852] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1465.155427][ T5151] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1465.174115][ T928] usb 5-1: USB disconnect, device number 47 [ 1465.228100][ T5151] usb 2-1: Product: syz [ 1465.248206][ T5151] usb 2-1: Manufacturer: syz [ 1465.263041][ T5151] usb 2-1: SerialNumber: syz [ 1465.284033][ T5151] usb 2-1: config 0 descriptor?? [ 1465.303103][ T5151] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1465.393643][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1465.405976][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1465.428331][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1465.443076][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1465.451574][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1465.458988][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1465.557499][T29821] netlink: 56 bytes leftover after parsing attributes in process `syz.4.4972'. [ 1465.610714][ T8] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 1465.674636][T13852] bridge_slave_1: left allmulticast mode [ 1465.680309][T13852] bridge_slave_1: left promiscuous mode [ 1465.708332][T13852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1465.792088][T13852] bridge_slave_0: left allmulticast mode [ 1465.839225][T13852] bridge_slave_0: left promiscuous mode [ 1465.845935][ T5150] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1465.865742][T13852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1465.865932][ T8] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 384 [ 1465.923287][ T8] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1465.947777][ T8] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1465.957854][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1465.967372][ T8] usb 4-1: SerialNumber: syz [ 1466.013480][T29816] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1466.054694][ T5150] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1466.098684][ T5150] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1466.129871][ T5150] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1466.165599][ T5150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1466.199655][T29821] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 1466.270233][T29816] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1466.822315][ C1] usb 2-1: yurex_control_callback - control failed: -2 [ 1466.868978][ T928] usb 2-1: USB disconnect, device number 22 [ 1466.898645][ T928] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1467.234330][ T29] audit: type=1326 audit(1721626992.797:2255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29834 comm="syz.0.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5d175b59 code=0x7fc00000 [ 1467.587087][ T5104] Bluetooth: hci1: command tx timeout [ 1467.631052][T13852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1467.666237][T13852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1467.681683][T13852] bond0 (unregistering): Released all slaves [ 1467.911500][ T29] audit: type=1326 audit(1721626993.477:2256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29834 comm="syz.0.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c5d175b59 code=0x7fc00000 [ 1467.993261][ T29] audit: type=1326 audit(1721626993.477:2257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29834 comm="syz.0.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5d175b59 code=0x7fc00000 [ 1468.077476][ T29] audit: type=1326 audit(1721626993.477:2258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29834 comm="syz.0.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5d175b59 code=0x7fc00000 [ 1468.139032][ T29] audit: type=1326 audit(1721626993.477:2259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29834 comm="syz.0.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5d175b59 code=0x7fc00000 [ 1468.193273][ T29] audit: type=1326 audit(1721626993.477:2260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29834 comm="syz.0.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5d175b59 code=0x7fc00000 [ 1468.219071][ T8] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 1468.252535][ T29] audit: type=1326 audit(1721626993.477:2261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29834 comm="syz.0.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5d175b59 code=0x7fc00000 [ 1468.295147][ T29] audit: type=1326 audit(1721626993.477:2262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29834 comm="syz.0.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5d175b59 code=0x7fc00000 [ 1468.357839][ T8] usb 4-1: USB disconnect, device number 29 [ 1468.461318][ T928] usb 5-1: USB disconnect, device number 48 [ 1468.487247][ T29] audit: type=1326 audit(1721626993.477:2263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29834 comm="syz.0.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5d175b59 code=0x7fc00000 [ 1468.628896][ T29] audit: type=1326 audit(1721626993.477:2264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29834 comm="syz.0.4976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c5d175b59 code=0x7fc00000 [ 1468.803813][T29865] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4982'. [ 1468.868912][ T5107] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1469.073482][T29863] syz.3.4981 (29863): drop_caches: 2 [ 1469.079698][T13852] hsr_slave_0: left promiscuous mode [ 1469.103053][T13852] hsr_slave_1: left promiscuous mode [ 1469.116001][T13852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1469.157645][T13852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1469.189179][T13852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1469.197456][T29863] syz.3.4981 (29863): drop_caches: 2 [ 1469.212382][T13852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1469.296888][T13852] veth1_macvtap: left promiscuous mode [ 1469.308222][T13852] veth0_macvtap: left promiscuous mode [ 1469.310424][T29863] syz.3.4981 (29863): drop_caches: 2 [ 1469.320043][T13852] veth1_vlan: left promiscuous mode [ 1469.337256][T13852] veth0_vlan: left promiscuous mode [ 1469.338444][T29863] syz.3.4981 (29863): drop_caches: 2 [ 1469.492382][ T5104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1469.506576][ T5104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1469.515452][ T5104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1469.535880][ T5104] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1469.544959][ T5104] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1469.555709][ T5104] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1469.661680][ T5104] Bluetooth: hci1: command tx timeout [ 1469.775029][T29888] FAULT_INJECTION: forcing a failure. [ 1469.775029][T29888] name failslab, interval 1, probability 0, space 0, times 0 [ 1469.794113][T29888] CPU: 1 PID: 29888 Comm: syz.3.4987 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 1469.804105][T29888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1469.814175][T29888] Call Trace: [ 1469.817459][T29888] [ 1469.820378][T29888] dump_stack_lvl+0x241/0x360 [ 1469.825052][T29888] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1469.830679][T29888] ? __pfx__printk+0x10/0x10 [ 1469.835268][T29888] ? register_lock_class+0x102/0x980 [ 1469.840581][T29888] ? __pfx_register_lock_class+0x10/0x10 [ 1469.846243][T29888] should_fail_ex+0x3b0/0x4e0 [ 1469.850930][T29888] ? radix_tree_node_alloc+0x8b/0x3c0 [ 1469.856345][T29888] should_failslab+0x9/0x20 [ 1469.860867][T29888] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 1469.866245][T29888] radix_tree_node_alloc+0x8b/0x3c0 [ 1469.871444][T29888] idr_get_free+0x296/0xab0 [ 1469.875948][T29888] idr_alloc_u32+0x195/0x330 [ 1469.880536][T29888] ? __pfx_idr_alloc_u32+0x10/0x10 [ 1469.885655][T29888] ? l2tp_tunnel_register+0x131/0x1c50 [ 1469.891107][T29888] l2tp_tunnel_register+0x153/0x1c50 [ 1469.896402][T29888] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 1469.902322][T29888] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1469.908365][T29888] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 1469.914099][T29888] ? __asan_memset+0x23/0x50 [ 1469.918699][T29888] ? lockdep_init_map_type+0xa1/0x910 [ 1469.924073][T29888] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1469.929875][T29888] ? __kasan_kmalloc+0x98/0xb0 [ 1469.934636][T29888] l2tp_nl_cmd_tunnel_create+0x713/0xae0 [ 1469.940275][T29888] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 1469.946422][T29888] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 1469.952681][T29888] ? __nla_parse+0x40/0x60 [ 1469.957123][T29888] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 1469.963458][T29888] genl_rcv_msg+0xb14/0xec0 [ 1469.967955][T29888] ? mark_lock+0x9a/0x350 [ 1469.972282][T29888] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1469.977354][T29888] ? __pfx_lock_acquire+0x10/0x10 [ 1469.982375][T29888] ? __pfx_l2tp_nl_cmd_tunnel_create+0x10/0x10 [ 1469.988523][T29888] ? __pfx___might_resched+0x10/0x10 [ 1469.993805][T29888] netlink_rcv_skb+0x1e3/0x430 [ 1469.998557][T29888] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1470.003590][T29888] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1470.008896][T29888] ? __netlink_deliver_tap+0x77e/0x7c0 [ 1470.014353][T29888] genl_rcv+0x28/0x40 [ 1470.018328][T29888] netlink_unicast+0x7f0/0x990 [ 1470.023092][T29888] ? __pfx_netlink_unicast+0x10/0x10 [ 1470.028368][T29888] ? __virt_addr_valid+0x183/0x530 [ 1470.033482][T29888] ? __check_object_size+0x49c/0x900 [ 1470.038757][T29888] ? bpf_lsm_netlink_send+0x9/0x10 [ 1470.043870][T29888] netlink_sendmsg+0x8e4/0xcb0 [ 1470.048638][T29888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1470.053929][T29888] ? __import_iovec+0x536/0x820 [ 1470.058800][T29888] ? aa_sock_msg_perm+0x91/0x160 [ 1470.063753][T29888] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1470.069030][T29888] ? security_socket_sendmsg+0x87/0xb0 [ 1470.074483][T29888] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1470.079768][T29888] __sock_sendmsg+0x221/0x270 [ 1470.084446][T29888] ____sys_sendmsg+0x525/0x7d0 [ 1470.089205][T29888] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1470.094503][T29888] __sys_sendmsg+0x2b0/0x3a0 [ 1470.099174][T29888] ? __pfx___sys_sendmsg+0x10/0x10 [ 1470.104286][T29888] ? vfs_write+0x7c4/0xc90 [ 1470.108732][T29888] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1470.115059][T29888] ? do_syscall_64+0x100/0x230 [ 1470.119815][T29888] ? do_syscall_64+0xb6/0x230 [ 1470.124482][T29888] do_syscall_64+0xf3/0x230 [ 1470.128976][T29888] ? clear_bhb_loop+0x35/0x90 [ 1470.133653][T29888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1470.139535][T29888] RIP: 0033:0x7fa2e6f75b59 [ 1470.143954][T29888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1470.163593][T29888] RSP: 002b:00007fa2e7e0d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1470.172005][T29888] RAX: ffffffffffffffda RBX: 00007fa2e7106038 RCX: 00007fa2e6f75b59 [ 1470.179966][T29888] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000007 [ 1470.187923][T29888] RBP: 00007fa2e7e0d0a0 R08: 0000000000000000 R09: 0000000000000000 [ 1470.195882][T29888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1470.203944][T29888] R13: 000000000000006e R14: 00007fa2e7106038 R15: 00007fa2e722fa78 [ 1470.212025][T29888] [ 1470.547908][T13852] team0 (unregistering): Port device team_slave_1 removed [ 1470.624378][T13852] team0 (unregistering): Port device team_slave_0 removed [ 1470.743602][ T5151] IPVS: starting estimator thread 0... [ 1470.840895][T29894] IPVS: using max 22 ests per chain, 52800 per kthread [ 1470.949865][T29896] syz.3.4990 (29896): drop_caches: 2 [ 1470.978227][T29896] syz.3.4990 (29896): drop_caches: 2 [ 1471.035968][T29896] syz.3.4990 (29896): drop_caches: 2 [ 1471.043170][T29896] syz.3.4990 (29896): drop_caches: 2 [ 1471.318187][T29890] tipc: Started in network mode [ 1471.323338][T29890] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 1471.338499][T29890] tipc: Enabled bearer , priority 10 [ 1471.581303][ T5107] Bluetooth: hci4: command tx timeout [ 1471.751809][ T5107] Bluetooth: hci1: command tx timeout [ 1471.923203][T13852] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1471.935109][T13852] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.036006][T13852] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1472.046530][T13852] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.204172][T13852] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1472.236055][T13852] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.450845][T27486] tipc: Node number set to 8432298 [ 1472.451429][T13852] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1472.504798][T13852] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1472.771335][T13852] bridge_slave_1: left allmulticast mode [ 1472.786607][T13852] bridge_slave_1: left promiscuous mode [ 1472.792998][T13852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1472.812930][T13852] bridge_slave_0: left allmulticast mode [ 1472.818750][T13852] bridge_slave_0: left promiscuous mode [ 1472.831925][T13852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1472.890932][ T5150] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1472.957441][ T5104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1472.979668][ T5104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1472.989093][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1473.003535][ T5104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1473.019451][ T5104] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1473.029107][ T5104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1473.080796][ T5150] usb 2-1: Using ep0 maxpacket: 8 [ 1473.087438][ T5150] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 1473.119450][ T5150] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1473.170822][ T5150] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1473.208118][ T5150] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1473.233597][ T5150] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1473.296261][ T5150] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1473.311232][ T5150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1473.320825][T20721] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 1473.518933][T20721] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1473.543889][T20721] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1473.552344][T20721] usb 5-1: Product: syz [ 1473.556713][T20721] usb 5-1: Manufacturer: syz [ 1473.571756][T20721] usb 5-1: SerialNumber: syz [ 1473.585047][ T5150] usb 2-1: GET_CAPABILITIES returned 0 [ 1473.591508][T20721] usb 5-1: config 0 descriptor?? [ 1473.599361][ T5150] usbtmc 2-1:16.0: can't read capabilities [ 1473.670666][ T5104] Bluetooth: hci4: command tx timeout [ 1473.766434][T13852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1473.784957][T13852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1473.819765][T13852] bond0 (unregistering): Released all slaves [ 1473.830726][ T5104] Bluetooth: hci1: command tx timeout [ 1474.052716][T20721] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1474.123322][T20721] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1474.175873][T20721] dvb-usb: AME DTV-5100 USB2.0 DVB-T error while loading driver (-19) [ 1474.269348][T29920] fuse: Unknown parameter 'fd0x0000000000000004' [ 1474.476921][T13852] hsr_slave_0: left promiscuous mode [ 1474.490333][T13852] hsr_slave_1: left promiscuous mode [ 1474.505354][T13852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1474.519904][T13852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1474.536621][T13852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1474.544234][ T5104] Bluetooth: hci5: command tx timeout [ 1474.563127][T13852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1474.602530][T13852] veth1_macvtap: left promiscuous mode [ 1474.608439][T13852] veth0_macvtap: left promiscuous mode [ 1474.620590][T13852] veth1_vlan: left promiscuous mode [ 1474.641546][T13852] veth0_vlan: left promiscuous mode [ 1475.111973][ T5104] Bluetooth: hci2: command tx timeout [ 1475.468238][T20721] usb 2-1: USB disconnect, device number 23 [ 1475.609571][T13852] team0 (unregistering): Port device team_slave_1 removed [ 1475.682976][T13852] team0 (unregistering): Port device team_slave_0 removed [ 1475.741010][ T5104] Bluetooth: hci4: command tx timeout [ 1476.062476][T20721] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1476.178953][T29924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4998'. [ 1476.203845][T27486] usb 5-1: USB disconnect, device number 49 [ 1476.270716][T20721] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1476.285130][T20721] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1476.296522][T20721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1476.307127][T20721] usb 2-1: config 0 descriptor?? [ 1476.545981][T13852] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1476.557163][T13852] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.624638][T13852] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1476.636242][T13852] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.721477][T29931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1476.730250][T29931] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1476.736253][T13852] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1476.748465][T13852] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.819808][T13852] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1476.830204][T13852] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1476.932639][T13852] bridge_slave_1: left allmulticast mode [ 1476.938585][T13852] bridge_slave_1: left promiscuous mode [ 1476.944768][T13852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1476.955226][T13852] bridge_slave_0: left allmulticast mode [ 1476.961748][T13852] bridge_slave_0: left promiscuous mode [ 1476.967634][T13852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1477.188575][ T5104] Bluetooth: hci2: command tx timeout [ 1477.403966][T13852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1477.419695][T13852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1477.431760][T13852] bond0 (unregistering): Released all slaves [ 1477.693184][T13852] hsr_slave_0: left promiscuous mode [ 1477.699190][T13852] hsr_slave_1: left promiscuous mode [ 1477.707573][T13852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1477.719072][T13852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1477.728873][T13852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1477.740685][T13852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1477.765338][T13852] veth1_macvtap: left promiscuous mode [ 1477.771166][T13852] veth0_macvtap: left promiscuous mode [ 1477.776798][T13852] veth1_vlan: left promiscuous mode [ 1477.782612][T13852] veth0_vlan: left promiscuous mode [ 1477.820850][ T5104] Bluetooth: hci4: command tx timeout [ 1478.320750][T13852] team0 (unregistering): Port device team_slave_1 removed [ 1478.376634][T13852] team0 (unregistering): Port device team_slave_0 removed [ 1478.543828][T20721] ath6kl: Failed to read usb control message: -110 [ 1478.550398][T20721] ath6kl: Unable to read the bmi data from the device: -110 [ 1478.563443][T20721] ath6kl: Unable to recv target info: -110 [ 1478.580095][T20721] ath6kl: Failed to init ath6kl core: -110 [ 1478.588805][T20721] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1478.900300][T20721] usb 2-1: USB disconnect, device number 24 [ 1479.260767][ T5104] Bluetooth: hci2: command tx timeout [ 1479.329305][T13852] IPVS: stop unused estimator thread 0... [ 1479.555175][T13852] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1479.573388][ T5107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1479.594096][ T5107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1479.594823][T13852] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.613619][ T5107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1479.622789][ T5107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1479.631947][ T5107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1479.639319][ T5107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1479.707089][T13852] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1479.718725][T13852] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.811328][T13852] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1479.822499][T13852] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1479.901658][T13852] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1479.912177][T13852] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1480.020838][T13852] bridge_slave_1: left allmulticast mode [ 1480.038164][T13852] bridge_slave_1: left promiscuous mode [ 1480.044036][T13852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1480.064339][T13852] bridge_slave_0: left allmulticast mode [ 1480.070111][T13852] bridge_slave_0: left promiscuous mode [ 1480.082493][T13852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1480.444694][ T5150] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 1480.541365][T13852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1480.554168][T13852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1480.566443][T13852] bond0 (unregistering): Released all slaves [ 1480.655497][ T5150] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 1480.673576][ T5150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1480.682119][ T5150] usb 2-1: Product: syz [ 1480.686378][ T5150] usb 2-1: Manufacturer: syz [ 1480.700214][ T5150] usb 2-1: SerialNumber: syz [ 1480.727473][ T5150] usb 2-1: config 0 descriptor?? [ 1480.891831][T13852] hsr_slave_0: left promiscuous mode [ 1480.898275][T13852] hsr_slave_1: left promiscuous mode [ 1480.905042][T13852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1480.913153][T13852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1480.927397][T13852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1480.935315][T13852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1480.966504][T13852] veth1_macvtap: left promiscuous mode [ 1480.972295][T13852] veth0_macvtap: left promiscuous mode [ 1480.978492][T13852] veth1_vlan: left promiscuous mode [ 1480.984860][T13852] veth0_vlan: left promiscuous mode [ 1481.162189][ T5150] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 1481.189821][ T5150] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1481.227178][ T5150] dvb-usb: AME DTV-5100 USB2.0 DVB-T error while loading driver (-19) [ 1481.350726][ T5104] Bluetooth: hci2: command tx timeout [ 1481.407953][T29956] fuse: Unknown parameter 'fd0x0000000000000004' [ 1481.702330][T13852] team0 (unregistering): Port device team_slave_1 removed [ 1481.746784][ T5104] Bluetooth: hci3: command tx timeout [ 1481.768254][T13852] team0 (unregistering): Port device team_slave_0 removed [ 1482.363002][T29957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5007'. [ 1483.408953][ T928] usb 2-1: USB disconnect, device number 25 [ 1483.586717][T29962] fuse: Bad value for 'fd' [ 1483.830722][ T5104] Bluetooth: hci3: command tx timeout [ 1484.640700][ T5151] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1484.821935][ T5151] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1484.830836][ T5151] usb 2-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 1484.841183][ T5151] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1484.850163][ T5151] usb 2-1: config 1 has no interface number 1 [ 1484.856376][ T5151] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 156, changing to 7 [ 1484.870599][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.870750][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.883778][ T5151] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 17696, setting to 1024 [ 1484.897902][ T5151] usb 2-1: string descriptor 0 read error: -22 [ 1484.904327][ T5151] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1484.914045][ T5151] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1484.926531][ T5151] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1485.900899][ T5104] Bluetooth: hci3: command tx timeout [ 1487.462988][ T928] usb 2-1: USB disconnect, device number 26 [ 1487.960678][ T928] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 1487.980788][ T5104] Bluetooth: hci3: command tx timeout [ 1488.152726][ T928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1488.162908][ T928] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1488.173386][ T928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1488.183171][ T928] usb 2-1: config 0 descriptor?? [ 1488.592816][T29970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1488.601797][T29970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1490.461051][ T928] ath6kl: Failed to read usb control message: -110 [ 1490.467676][ T928] ath6kl: Unable to read the bmi data from the device: -110 [ 1490.475197][ T928] ath6kl: Unable to recv target info: -110 [ 1490.481740][ T928] ath6kl: Failed to init ath6kl core: -110 [ 1490.487850][ T928] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110 [ 1490.521163][ T928] usb 2-1: USB disconnect, device number 27 [ 1491.681394][T29984] syz.1.5015 (29984): drop_caches: 2 [ 1491.687554][T29984] syz.1.5015 (29984): drop_caches: 2 [ 1491.727841][T29984] syz.1.5015 (29984): drop_caches: 2 [ 1491.734830][T29984] syz.1.5015 (29984): drop_caches: 2 [ 1492.110728][T17394] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 1492.302417][T17394] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1492.311204][T17394] usb 2-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 1492.321647][T17394] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1492.330670][T17394] usb 2-1: config 1 has no interface number 1 [ 1492.336770][T17394] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 156, changing to 7 [ 1492.347979][T17394] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 17696, setting to 1024 [ 1492.364588][T17394] usb 2-1: string descriptor 0 read error: -22 [ 1492.370863][T17394] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1492.379989][T17394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1492.394356][T17394] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1494.931055][ T928] usb 2-1: USB disconnect, device number 28 [ 1495.109622][T13852] bridge_slave_1: left allmulticast mode [ 1495.115482][T13852] bridge_slave_1: left promiscuous mode [ 1495.121390][T13852] bridge0: port 2(bridge_slave_1) entered disabled state [ 1495.130160][T13852] bridge_slave_0: left allmulticast mode [ 1495.135916][T13852] bridge_slave_0: left promiscuous mode [ 1495.143266][T13852] bridge0: port 1(bridge_slave_0) entered disabled state [ 1495.425222][ T928] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1495.454146][T13852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1495.464805][T13852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1495.476157][T13852] bond0 (unregistering): Released all slaves [ 1495.591024][ T928] usb 2-1: device descriptor read/64, error -71 [ 1495.770992][T13852] hsr_slave_0: left promiscuous mode [ 1495.776920][T13852] hsr_slave_1: left promiscuous mode [ 1495.784127][T13852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1495.793379][T13852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1495.802150][T13852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1495.809551][T13852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1495.829464][T13852] veth1_macvtap: left promiscuous mode [ 1495.835165][T13852] veth0_macvtap: left promiscuous mode [ 1495.841895][T13852] veth1_vlan: left promiscuous mode [ 1495.847432][T13852] veth0_vlan: left promiscuous mode [ 1495.870789][ T928] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1496.053326][ T928] usb 2-1: device descriptor read/64, error -71 [ 1496.174444][ T928] usb usb2-port1: attempt power cycle [ 1496.260223][T13852] team0 (unregistering): Port device team_slave_1 removed [ 1496.305908][T13852] team0 (unregistering): Port device team_slave_0 removed [ 1496.612723][ T928] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 1496.653744][ T928] usb 2-1: device descriptor read/8, error -71 [ 1496.921408][ T928] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1496.968286][ T928] usb 2-1: device descriptor read/8, error -71 [ 1497.091222][ T928] usb usb2-port1: unable to enumerate USB device [ 1500.230763][T17394] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1500.423096][T17394] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1500.431845][T17394] usb 2-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 1500.442300][T17394] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1500.451329][T17394] usb 2-1: config 1 has no interface number 1 [ 1500.457674][T17394] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 156, changing to 7 [ 1500.468800][T17394] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 17696, setting to 1024 [ 1500.482941][T17394] usb 2-1: string descriptor 0 read error: -22 [ 1500.489176][T17394] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1500.498251][T17394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1500.510856][T17394] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1503.053497][ T928] usb 2-1: USB disconnect, device number 33 [ 1503.530702][ T928] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1503.681396][ T928] usb 2-1: device descriptor read/64, error -71 [ 1503.950725][ T928] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 1504.100673][ T928] usb 2-1: device descriptor read/64, error -71 [ 1504.220963][ T928] usb usb2-port1: attempt power cycle [ 1504.630720][ T928] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1504.662157][ T928] usb 2-1: device descriptor read/8, error -71 [ 1504.931347][ T928] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 1504.961123][ T928] usb 2-1: device descriptor read/8, error -71 [ 1505.082077][ T928] usb usb2-port1: unable to enumerate USB device [ 1507.520860][T20721] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 1507.702497][T20721] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1507.711278][T20721] usb 2-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 1507.721632][T20721] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1507.731002][T20721] usb 2-1: config 1 has no interface number 1 [ 1507.737176][T20721] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 156, changing to 7 [ 1507.748503][T20721] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 17696, setting to 1024 [ 1507.763848][T20721] usb 2-1: string descriptor 0 read error: -22 [ 1507.770085][T20721] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1507.779172][T20721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.792127][T20721] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1510.305836][ T928] usb 2-1: USB disconnect, device number 38 [ 1510.790725][ T928] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 1510.940724][ T928] usb 2-1: device descriptor read/64, error -71 [ 1511.210700][ T928] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 1511.360790][ T928] usb 2-1: device descriptor read/64, error -71 [ 1511.480945][ T928] usb usb2-port1: attempt power cycle [ 1511.901711][ T928] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 1511.931346][ T928] usb 2-1: device descriptor read/8, error -71 [ 1512.200774][ T928] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1512.231280][ T928] usb 2-1: device descriptor read/8, error -71 [ 1512.360992][ T928] usb usb2-port1: unable to enumerate USB device [ 1514.750784][ T928] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 1514.930726][ T928] usb 2-1: Using ep0 maxpacket: 8 [ 1514.937548][ T928] usb 2-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 1514.946667][ T928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1514.956300][ T928] usb 2-1: config 0 descriptor?? [ 1514.964304][ T928] ums-alauda 2-1:0.0: USB Mass Storage device detected [ 1515.809833][T20721] usb 2-1: USB disconnect, device number 43 [ 1516.230690][T20721] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 1516.412080][T20721] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1516.420857][T20721] usb 2-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 1516.431278][T20721] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1516.440229][T20721] usb 2-1: config 1 has no interface number 1 [ 1516.446451][T20721] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 156, changing to 7 [ 1516.457824][T20721] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 17696, setting to 1024 [ 1516.471738][T20721] usb 2-1: string descriptor 0 read error: -22 [ 1516.477981][T20721] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1516.487058][T20721] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.500155][T20721] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1518.944614][ T928] usb 2-1: USB disconnect, device number 44 [ 1519.430839][ T928] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 1519.622347][ T928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1519.632698][ T928] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1519.641790][ T928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1519.651492][ T928] usb 2-1: config 0 descriptor?? [ 1520.059281][ T928] ath6kl: Unsupported hardware version: 0x0 [ 1520.065909][ T928] ath6kl: Failed to init ath6kl core: -22 [ 1520.072234][ T928] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1520.264698][T30062] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1520.273459][T30062] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1521.977242][ T8] usb 2-1: USB disconnect, device number 45 [ 1522.500689][ T8] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 1522.651619][ T8] usb 2-1: device descriptor read/64, error -71 [ 1522.921331][ T8] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 1523.071373][ T8] usb 2-1: device descriptor read/64, error -71 [ 1523.191483][ T8] usb usb2-port1: attempt power cycle [ 1523.600784][ T8] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 1523.631513][ T8] usb 2-1: device descriptor read/8, error -71 [ 1523.910806][ T8] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1523.941277][ T8] usb 2-1: device descriptor read/8, error -71 [ 1524.060991][ T8] usb usb2-port1: unable to enumerate USB device [ 1525.438129][ T5107] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1525.449525][ T5107] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1525.467219][ T5107] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1525.476723][ T5107] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1525.484585][ T5107] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1525.493415][ T5107] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1525.664926][T13852] bond0 (unregistering): Released all slaves [ 1526.640680][T20721] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1526.820711][T20721] usb 2-1: Using ep0 maxpacket: 16 [ 1526.827201][T20721] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1526.841416][T20721] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 1526.850457][T20721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1526.860383][T20721] usb 2-1: config 0 descriptor?? [ 1526.869060][T20721] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input39 [ 1527.287908][ T4539] bcm5974 2-1:0.0: could not read from device [ 1527.304186][T30084] bcm5974 2-1:0.0: could not read from device [ 1527.580721][ T5107] Bluetooth: hci1: command tx timeout [ 1529.482535][ T4539] bcm5974 2-1:0.0: could not read from device [ 1529.496956][ T928] usb 2-1: USB disconnect, device number 50 [ 1529.521395][T29075] bcm5974 2-1:0.0: could not read from device [ 1529.534019][ T4539] bcm5974 2-1:0.0: could not read from device [ 1529.637437][ T5104] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1529.651588][ T5104] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1529.660099][ T5104] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1529.670995][ T4499] Bluetooth: hci1: command tx timeout [ 1529.688874][ T5104] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1529.711792][ T5104] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1529.725691][ T5104] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1529.937816][ T35] bond0 (unregistering): Released all slaves [ 1529.952242][T30094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5043'. [ 1529.961713][T30094] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5043'. [ 1530.790797][ T5150] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1530.972309][ T5150] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1530.981040][ T5150] usb 2-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 1530.991334][ T5150] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1531.000280][ T5150] usb 2-1: config 1 has no interface number 1 [ 1531.006438][ T5150] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 156, changing to 7 [ 1531.017500][ T5150] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 17696, setting to 1024 [ 1531.031771][ T5150] usb 2-1: string descriptor 0 read error: -22 [ 1531.038017][ T5150] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1531.047092][ T5150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1531.060190][ T5150] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1531.740713][ T5107] Bluetooth: hci1: command tx timeout [ 1531.820815][ T5107] Bluetooth: hci6: command tx timeout [ 1533.028015][ T5104] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1533.041581][ T5104] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1533.050034][ T5104] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1533.060902][ T5104] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1533.068720][ T5104] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1533.076168][ T5104] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1533.401345][T30108] bond0 (unregistering): Released all slaves [ 1533.604327][T17394] usb 2-1: USB disconnect, device number 51 [ 1533.830726][ T5107] Bluetooth: hci1: command tx timeout [ 1533.900722][ T5107] Bluetooth: hci6: command tx timeout [ 1534.070783][T17394] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1534.262062][T17394] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.272321][T17394] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1534.281420][T17394] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.291104][T17394] usb 2-1: config 0 descriptor?? [ 1534.702171][T17394] ath6kl: Unsupported hardware version: 0x0 [ 1534.708895][T17394] ath6kl: Failed to init ath6kl core: -22 [ 1534.715297][T17394] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 1534.920186][T30122] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1534.928860][T30122] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1535.190876][ T5107] Bluetooth: hci4: command tx timeout [ 1535.980749][ T5107] Bluetooth: hci6: command tx timeout [ 1536.658675][ T928] usb 2-1: USB disconnect, device number 52 [ 1537.170677][ T928] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1537.260796][ T5107] Bluetooth: hci4: command tx timeout [ 1537.320774][ T928] usb 2-1: device descriptor read/64, error -71 [ 1537.600788][ T928] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1537.750866][ T928] usb 2-1: device descriptor read/64, error -71 [ 1537.871627][ T928] usb usb2-port1: attempt power cycle [ 1538.060776][ T5107] Bluetooth: hci6: command tx timeout [ 1538.281379][ T928] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1538.321785][ T928] usb 2-1: device descriptor read/8, error -71 [ 1538.590668][ T928] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 1538.621363][ T928] usb 2-1: device descriptor read/8, error -71 [ 1538.741445][ T928] usb usb2-port1: unable to enumerate USB device [ 1539.340755][ T5107] Bluetooth: hci4: command tx timeout [ 1540.098611][ T5104] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1540.112746][ T5104] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1540.122276][ T5104] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1540.132903][ T5104] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1540.142808][ T5104] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1540.150788][ T5104] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1540.290155][T30102] bond0 (unregistering): Released all slaves [ 1541.420692][ T5107] Bluetooth: hci4: command tx timeout [ 1542.220867][ T5107] Bluetooth: hci2: command tx timeout [ 1542.630667][ T5150] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 1542.812333][ T5150] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1542.821109][ T5150] usb 2-1: config 1 has an invalid descriptor of length 110, skipping remainder of the config [ 1542.831650][ T5150] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1542.841560][ T5150] usb 2-1: config 1 has no interface number 1 [ 1542.847745][ T5150] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 156, changing to 7 [ 1542.858821][ T5150] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 17696, setting to 1024 [ 1542.873767][ T5150] usb 2-1: string descriptor 0 read error: -22 [ 1542.880015][ T5150] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1542.889124][ T5150] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1542.902567][ T5150] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1543.260844][ T5107] Bluetooth: hci5: command 0x0406 tx timeout [ 1544.300944][ T5104] Bluetooth: hci2: command tx timeout [ 1545.444013][T17394] usb 2-1: USB disconnect, device number 57 [ 1545.830879][T17394] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 1546.010759][T17394] usb 2-1: Using ep0 maxpacket: 16 [ 1546.017446][T17394] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1546.033664][T17394] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1546.042801][T17394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.050933][T17394] usb 2-1: Product: syz [ 1546.055097][T17394] usb 2-1: Manufacturer: syz [ 1546.059676][T17394] usb 2-1: SerialNumber: syz [ 1546.068311][T17394] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22 [ 1546.284077][T17394] usb 2-1: USB disconnect, device number 58 [ 1546.302888][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.309348][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.380729][ T5104] Bluetooth: hci2: command tx timeout [ 1547.090694][ T928] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 1547.270870][ T928] usb 2-1: Using ep0 maxpacket: 8 [ 1547.277969][ T928] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1547.288262][ T928] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1547.297295][ T928] usb 2-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=18.dc [ 1547.306397][ T928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1547.316247][ T928] usb 2-1: config 0 descriptor?? [ 1547.530488][ T928] usb 2-1: USB disconnect, device number 59 [ 1548.099915][T30158] syz.1.5054 (30158): drop_caches: 2 [ 1548.106988][T30158] syz.1.5054 (30158): drop_caches: 2 [ 1548.128999][T30158] syz.1.5054 (30158): drop_caches: 2 [ 1548.135100][T30158] syz.1.5054 (30158): drop_caches: 2 [ 1548.460723][ T5104] Bluetooth: hci2: command tx timeout [ 1549.124229][T30165] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5056'. [ 1549.420672][ T5150] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 1549.602377][ T5150] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1549.612584][ T5150] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1549.622772][ T5150] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1549.631944][ T5150] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1549.639931][ T5150] usb 2-1: SerialNumber: syz [ 1549.894918][T30165] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5056'. [ 1549.905344][T30165] veth0_to_bond: entered allmulticast mode [ 1549.917093][T30165] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5056'. [ 1549.940087][ T5150] usb 2-1: 0:2 : does not exist [ 1549.947533][ T5150] usb 2-1: unit 5 not found! [ 1549.968952][ T5150] usb 2-1: USB disconnect, device number 60 [ 1550.181847][T28081] udevd[28081]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1550.810688][T17394] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 1550.991462][T17394] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 1551.000049][T17394] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1551.009051][T17394] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1551.020084][T17394] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1551.027993][T17394] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1551.036932][T17394] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1551.047826][T17394] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1551.055407][T17394] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1551.064336][T17394] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1551.075259][T17394] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1551.083035][T17394] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1551.091988][T17394] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1551.102982][T17394] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1551.110461][T17394] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1551.119445][T17394] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1551.130330][T17394] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1551.138043][T17394] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1551.146941][T17394] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1551.157938][T17394] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1551.165440][T17394] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1551.174389][T17394] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1551.185362][T17394] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1551.193051][T17394] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 1551.202070][T17394] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 1551.212974][T17394] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1551.222039][T17394] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 1551.231141][T17394] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 1551.239473][T17394] usb 2-1: Product: syz [ 1551.243727][T17394] usb 2-1: Manufacturer: syz [ 1551.248333][T17394] usb 2-1: SerialNumber: syz [ 1551.255251][T17394] usb 2-1: config 0 descriptor?? [ 1551.263799][T17394] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 1551.474579][T20721] usb 2-1: USB disconnect, device number 61 [ 1551.492331][T20721] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 1552.409838][T30174] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5060'. [ 1552.426282][T30174] fuse: Bad value for 'fd' [ 1552.763244][T30188] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5065'. [ 1556.641694][T30194] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5067'. [ 1556.655876][T30194] fuse: Bad value for 'fd' [ 1556.764779][T30197] sctp: [Deprecated]: syz.1.5068 (pid 30197) Use of int in max_burst socket option deprecated. [ 1556.764779][T30197] Use struct sctp_assoc_value instead [ 1557.090721][T20721] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 1557.281299][T20721] usb 2-1: Using ep0 maxpacket: 32 [ 1557.295635][T20721] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1557.310844][T20721] usb 2-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 1557.321469][T20721] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.332933][T20721] usb 2-1: config 0 descriptor?? [ 1557.342543][T20721] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1559.711542][T17394] usb 2-1: USB disconnect, device number 62 [ 1563.358485][T30108] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1563.369456][T30108] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.474495][T30108] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1563.485169][T30108] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.602621][T30108] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1563.609383][ T5107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1563.615268][T30108] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.623604][ T5107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1563.641655][ T5107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1563.650655][ T5107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1563.658432][ T5107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1563.665975][ T5107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1563.720118][T30108] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1563.730814][T30108] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1563.881910][T30108] bridge_slave_1: left allmulticast mode [ 1563.887613][T30108] bridge_slave_1: left promiscuous mode [ 1563.894686][T30108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1563.903699][T30108] bridge_slave_0: left allmulticast mode [ 1563.909340][T30108] bridge_slave_0: left promiscuous mode [ 1563.915192][T30108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1564.302716][T30108] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1564.313524][T30108] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1564.324119][T30108] bond0 (unregistering): Released all slaves [ 1564.390378][T30108] tipc: Disabling bearer [ 1564.396334][T30108] tipc: Left network mode [ 1564.586792][T30108] hsr_slave_0: left promiscuous mode [ 1564.593662][T30108] hsr_slave_1: left promiscuous mode [ 1564.599488][T30108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1564.606935][T30108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1564.615118][T30108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1564.623004][T30108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1564.641292][T30108] veth1_macvtap: left promiscuous mode [ 1564.646803][T30108] veth0_macvtap: left promiscuous mode [ 1564.652937][T30108] veth1_vlan: left promiscuous mode [ 1564.658219][T30108] veth0_vlan: left promiscuous mode [ 1565.039426][T30108] team0 (unregistering): Port device team_slave_1 removed [ 1565.084147][T30108] team0 (unregistering): Port device team_slave_0 removed [ 1565.740832][ T5107] Bluetooth: hci3: command tx timeout [ 1567.820821][ T5107] Bluetooth: hci3: command tx timeout [ 1569.900762][ T5107] Bluetooth: hci3: command tx timeout [ 1571.980783][ T5107] Bluetooth: hci3: command tx timeout [ 1585.617516][ T5104] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1585.626555][ T5104] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1585.634799][ T5104] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1585.646162][ T5104] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1585.654170][ T5104] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1585.661598][ T5104] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1585.790764][T30219] bond0 (unregistering): Released all slaves [ 1587.740959][ T5104] Bluetooth: hci1: command tx timeout [ 1589.615522][ T5107] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1589.624529][ T5107] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1589.633185][ T5107] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1589.646893][ T5107] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1589.654818][ T5107] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1589.663604][ T5107] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1589.789978][T30108] bond0 (unregistering): Released all slaves [ 1589.830740][ T5104] Bluetooth: hci1: command tx timeout [ 1591.740888][ T5104] Bluetooth: hci5: command tx timeout [ 1591.900827][ T5104] Bluetooth: hci1: command tx timeout [ 1593.111100][ T5107] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1593.123549][ T5107] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1593.132299][ T5107] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1593.140330][ T5107] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1593.149927][ T5107] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1593.157427][ T5107] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1593.383632][T30108] bond0 (unregistering): Released all slaves [ 1593.820809][ T5104] Bluetooth: hci5: command tx timeout [ 1593.980817][ T5104] Bluetooth: hci1: command tx timeout [ 1595.260920][ T5104] Bluetooth: hci6: command tx timeout [ 1595.900836][ T5104] Bluetooth: hci5: command tx timeout [ 1597.340770][ T5104] Bluetooth: hci6: command tx timeout [ 1597.980849][ T5104] Bluetooth: hci5: command tx timeout [ 1599.420749][ T5104] Bluetooth: hci6: command tx timeout [ 1600.632479][ T5107] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1600.641577][ T5107] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1600.649651][ T5107] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1600.658661][ T5107] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1600.667528][ T5107] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1600.674845][ T5107] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1600.778299][T30108] bond0 (unregistering): Released all slaves [ 1601.500811][ T5104] Bluetooth: hci6: command tx timeout [ 1602.700828][ T5104] Bluetooth: hci2: command tx timeout [ 1604.780659][ T5104] Bluetooth: hci2: command tx timeout [ 1606.860784][ T5104] Bluetooth: hci2: command tx timeout [ 1607.743255][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.749551][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.940825][ T5104] Bluetooth: hci2: command tx timeout [ 1624.176774][ T5107] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1624.189805][ T5107] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1624.199656][ T5107] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1624.209902][ T5107] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1624.219004][ T5107] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1624.226507][ T5107] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1624.382254][T30253] bond0 (unregistering): Released all slaves [ 1626.300850][ T5107] Bluetooth: hci3: command tx timeout [ 1628.380838][ T5107] Bluetooth: hci3: command tx timeout [ 1630.140814][ T30] INFO: task cmp:29877 blocked for more than 143 seconds. [ 1630.147952][ T30] Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 1630.155325][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1630.164138][ T30] task:cmp state:D stack:23680 pid:29877 tgid:29877 ppid:29848 flags:0x00004000 [ 1630.174391][ T30] Call Trace: [ 1630.177687][ T30] [ 1630.180764][ T30] __schedule+0x1800/0x4a60 [ 1630.185303][ T30] ? __pfx___schedule+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1630.190233][ T30] ? rcu_read_unlock_special+0x470/0x550 [ 1630.196729][ T30] ? __pfx_lock_release+0x10/0x10 [ 1630.201884][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1630.207811][ T30] ? __wait_on_freeing_inode+0x250/0x3f0 [ 1630.243832][ T30] ? schedule+0x90/0x320 [ 1630.248141][ T30] schedule+0x14b/0x320 [ 1630.270693][ T30] ? __wait_on_freeing_inode+0x250/0x3f0 [ 1630.276777][ T30] __wait_on_freeing_inode+0x2a4/0x3f0 [ 1630.282919][ T30] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 1630.288948][ T30] ? __pfx_wake_bit_function+0x10/0x10 [ 1630.294509][ T30] find_inode_fast+0x2a0/0x460 [ 1630.299304][ T30] ? find_inode_fast+0xcd/0x460 [ 1630.304267][ T30] iget_locked+0xab/0x820 [ 1630.308634][ T30] __ext4_iget+0x267/0x4090 [ 1630.313233][ T30] ? __pfx___ext4_find_entry+0x10/0x10 [ 1630.318732][ T30] ? ext4_fname_prepare_lookup+0x47b/0x610 [ 1630.324689][ T30] ? __pfx___ext4_iget+0x10/0x10 [ 1630.329740][ T30] ? ext4_fname_free_filename+0x89/0xb0 [ 1630.335359][ T30] ? rcu_is_watching+0x15/0xb0 [ 1630.340148][ T30] ? ext4_fname_free_filename+0x89/0xb0 [ 1630.345772][ T30] ? kfree+0x4e/0x360 [ 1630.349791][ T30] ext4_lookup+0x3e3/0x750 [ 1630.354374][ T30] ? __pfx_ext4_lookup+0x10/0x10 [ 1630.359346][ T30] ? __init_waitqueue_head+0xae/0x150 [ 1630.364781][ T30] __lookup_slow+0x28c/0x3f0 [ 1630.369398][ T30] ? __pfx___lookup_slow+0x10/0x10 [ 1630.374634][ T30] ? try_to_unlazy+0x35c/0x5b0 [ 1630.379423][ T30] lookup_slow+0x53/0x70 [ 1630.383822][ T30] link_path_walk+0x99b/0xea0 [ 1630.388531][ T30] path_openat+0x25d/0x3470 [ 1630.393096][ T30] ? mark_lock+0x9a/0x350 [ 1630.397444][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1630.402893][ T30] ? __lock_acquire+0x137a/0x2040 [ 1630.407941][ T30] ? __pfx_path_openat+0x10/0x10 [ 1630.412939][ T30] do_filp_open+0x235/0x490 [ 1630.417484][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1630.422598][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1630.427469][ T30] ? alloc_fd+0x5a1/0x640 [ 1630.431951][ T30] do_sys_openat2+0x13e/0x1d0 [ 1630.436661][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1630.441932][ T30] ? file_close_fd+0x67/0x80 [ 1630.446539][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1630.451793][ T30] __x64_sys_openat+0x247/0x2a0 [ 1630.456670][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1630.462193][ T30] ? do_syscall_64+0x100/0x230 [ 1630.466974][ T30] ? do_syscall_64+0xb6/0x230 [ 1630.470708][ T5107] Bluetooth: hci3: command tx timeout [ 1630.471695][ T30] do_syscall_64+0xf3/0x230 [ 1630.481546][ T30] ? clear_bhb_loop+0x35/0x90 [ 1630.486225][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.492157][ T30] RIP: 0033:0x7f2efd7aea46 [ 1630.496587][ T30] RSP: 002b:00007ffeb3279108 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 1630.505132][ T30] RAX: ffffffffffffffda RBX: 00007ffeb3279368 RCX: 00007f2efd7aea46 [ 1630.513157][ T30] RDX: 0000000000080000 RSI: 00007ffeb3279180 RDI: 00000000ffffff9c [ 1630.521341][ T30] RBP: 00007ffeb3279170 R08: 0000000000080000 R09: 00007ffeb3279180 [ 1630.529324][ T30] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffeb3279180 [ 1630.537342][ T30] R13: 0000000000000000 R14: 00007ffeb327934f R15: 00000000ffffffff [ 1630.545408][ T30] [ 1630.548466][ T30] INFO: task modprobe:29899 blocked for more than 143 seconds. [ 1630.556098][ T30] Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 1630.563428][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1630.572437][ T30] task:modprobe state:D stack:23680 pid:29899 tgid:29899 ppid:12 flags:0x00000000 [ 1630.582709][ T30] Call Trace: [ 1630.586013][ T30] [ 1630.588964][ T30] __schedule+0x1800/0x4a60 [ 1630.593596][ T30] ? __pfx___schedule+0x10/0x10 [ 1630.598484][ T30] ? __pfx_lock_release+0x10/0x10 [ 1630.603629][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1630.609563][ T30] ? schedule+0x90/0x320 [ 1630.613933][ T30] schedule+0x14b/0x320 [ 1630.618115][ T30] d_alloc_parallel+0xc16/0x1600 [ 1630.623326][ T30] ? d_alloc_parallel+0x311/0x1600 [ 1630.628470][ T30] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1630.633950][ T30] ? __pfx_default_wake_function+0x10/0x10 [ 1630.639791][ T30] ? __init_waitqueue_head+0xae/0x150 [ 1630.645249][ T30] __lookup_slow+0x117/0x3f0 [ 1630.649866][ T30] ? __pfx___lookup_slow+0x10/0x10 [ 1630.655073][ T30] ? try_to_unlazy+0x35c/0x5b0 [ 1630.659869][ T30] lookup_slow+0x53/0x70 [ 1630.664188][ T30] link_path_walk+0x99b/0xea0 [ 1630.668890][ T30] path_openat+0x25d/0x3470 [ 1630.673525][ T30] ? mark_lock+0x9a/0x350 [ 1630.677878][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1630.683294][ T30] ? __lock_acquire+0x137a/0x2040 [ 1630.688386][ T30] ? __pfx_path_openat+0x10/0x10 [ 1630.693438][ T30] do_filp_open+0x235/0x490 [ 1630.697968][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1630.703321][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1630.708213][ T30] ? alloc_fd+0x5a1/0x640 [ 1630.712627][ T30] do_sys_openat2+0x13e/0x1d0 [ 1630.717321][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1630.722586][ T30] ? file_close_fd+0x67/0x80 [ 1630.727187][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1630.732262][ T30] __x64_sys_openat+0x247/0x2a0 [ 1630.737131][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1630.742549][ T30] ? do_syscall_64+0x100/0x230 [ 1630.747346][ T30] ? do_syscall_64+0xb6/0x230 [ 1630.752094][ T30] do_syscall_64+0xf3/0x230 [ 1630.756624][ T30] ? clear_bhb_loop+0x35/0x90 [ 1630.761358][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1630.767273][ T30] RIP: 0033:0x7f1f15af5a46 [ 1630.771735][ T30] RSP: 002b:00007ffc8b9739e8 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 1630.780171][ T30] RAX: ffffffffffffffda RBX: 00007ffc8b973c48 RCX: 00007f1f15af5a46 [ 1630.788205][ T30] RDX: 0000000000080000 RSI: 00007ffc8b973a60 RDI: 00000000ffffff9c [ 1630.796448][ T30] RBP: 00007ffc8b973a50 R08: 0000000000080000 R09: 00007ffc8b973a60 [ 1630.804459][ T30] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffc8b973a60 [ 1630.812490][ T30] R13: 0000000000000000 R14: 00007ffc8b973c2f R15: 00000000ffffffff [ 1630.820487][ T30] [ 1630.823613][ T30] INFO: task modprobe:29909 blocked for more than 144 seconds. [ 1630.860623][ T30] Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 1630.867968][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1630.890650][ T30] task:modprobe state:D stack:23680 pid:29909 tgid:29909 ppid:13850 flags:0x00000000 [ 1630.920618][ T30] Call Trace: [ 1630.923954][ T30] [ 1630.926907][ T30] __schedule+0x1800/0x4a60 [ 1630.940614][ T30] ? __pfx___schedule+0x10/0x10 [ 1630.945519][ T30] ? __pfx_lock_release+0x10/0x10 [ 1630.970660][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1630.976630][ T30] ? schedule+0x90/0x320 [ 1631.000596][ T30] schedule+0x14b/0x320 [ 1631.004813][ T30] d_alloc_parallel+0xc16/0x1600 [ 1631.009779][ T30] ? d_alloc_parallel+0x311/0x1600 [ 1631.041570][ T30] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1631.047012][ T30] ? __pfx_default_wake_function+0x10/0x10 [ 1631.080608][ T30] ? __init_waitqueue_head+0xae/0x150 [ 1631.086056][ T30] __lookup_slow+0x117/0x3f0 [ 1631.110675][ T30] ? __pfx___lookup_slow+0x10/0x10 [ 1631.115866][ T30] ? try_to_unlazy+0x35c/0x5b0 [ 1631.130892][ T30] lookup_slow+0x53/0x70 [ 1631.135177][ T30] link_path_walk+0x99b/0xea0 [ 1631.139860][ T30] path_openat+0x25d/0x3470 [ 1631.145043][ T30] ? mark_lock+0x9a/0x350 [ 1631.149414][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1631.155095][ T30] ? __lock_acquire+0x137a/0x2040 [ 1631.160164][ T30] ? __pfx_path_openat+0x10/0x10 [ 1631.165632][ T30] do_filp_open+0x235/0x490 [ 1631.170169][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1631.175686][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1631.180896][ T30] ? alloc_fd+0x5a1/0x640 [ 1631.185265][ T30] do_sys_openat2+0x13e/0x1d0 [ 1631.189967][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1631.196154][ T30] ? file_close_fd+0x67/0x80 [ 1631.201094][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1631.206167][ T30] __x64_sys_openat+0x247/0x2a0 [ 1631.211592][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1631.217104][ T30] ? do_syscall_64+0x100/0x230 [ 1631.222806][ T30] ? do_syscall_64+0xb6/0x230 [ 1631.227521][ T30] do_syscall_64+0xf3/0x230 [ 1631.232497][ T30] ? clear_bhb_loop+0x35/0x90 [ 1631.237209][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.244983][ T30] RIP: 0033:0x7fcafbe56a46 [ 1631.249428][ T30] RSP: 002b:00007ffe3ed17028 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 1631.257968][ T30] RAX: ffffffffffffffda RBX: 00007ffe3ed17288 RCX: 00007fcafbe56a46 [ 1631.266029][ T30] RDX: 0000000000080000 RSI: 00007ffe3ed170a0 RDI: 00000000ffffff9c [ 1631.274224][ T30] RBP: 00007ffe3ed17090 R08: 0000000000080000 R09: 00007ffe3ed170a0 [ 1631.282328][ T30] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffe3ed170a0 [ 1631.290292][ T30] R13: 0000000000000000 R14: 00007ffe3ed1726f R15: 00000000ffffffff [ 1631.298468][ T30] [ 1631.301544][ T30] INFO: task modprobe:29925 blocked for more than 144 seconds. [ 1631.309151][ T30] Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 1631.316963][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1631.325994][ T30] task:modprobe state:D stack:23680 pid:29925 tgid:29925 ppid:10390 flags:0x00000000 [ 1631.336385][ T30] Call Trace: [ 1631.339681][ T30] [ 1631.342694][ T30] __schedule+0x1800/0x4a60 [ 1631.347232][ T30] ? __pfx___schedule+0x10/0x10 [ 1631.352144][ T30] ? __pfx_lock_release+0x10/0x10 [ 1631.357191][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1631.363253][ T30] ? schedule+0x90/0x320 [ 1631.367513][ T30] schedule+0x14b/0x320 [ 1631.371725][ T30] d_alloc_parallel+0xc16/0x1600 [ 1631.376682][ T30] ? d_alloc_parallel+0x311/0x1600 [ 1631.381871][ T30] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1631.387259][ T30] ? __pfx_default_wake_function+0x10/0x10 [ 1631.393125][ T30] ? __init_waitqueue_head+0xae/0x150 [ 1631.398523][ T30] __lookup_slow+0x117/0x3f0 [ 1631.403191][ T30] ? __pfx___lookup_slow+0x10/0x10 [ 1631.408331][ T30] ? try_to_unlazy+0x35c/0x5b0 [ 1631.413490][ T30] lookup_slow+0x53/0x70 [ 1631.417770][ T30] link_path_walk+0x99b/0xea0 [ 1631.422707][ T30] path_openat+0x25d/0x3470 [ 1631.427236][ T30] ? mark_lock+0x9a/0x350 [ 1631.431628][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1631.437028][ T30] ? __lock_acquire+0x137a/0x2040 [ 1631.442176][ T30] ? __pfx_path_openat+0x10/0x10 [ 1631.447241][ T30] do_filp_open+0x235/0x490 [ 1631.451813][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1631.456863][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1631.461792][ T30] ? alloc_fd+0x5a1/0x640 [ 1631.466142][ T30] do_sys_openat2+0x13e/0x1d0 [ 1631.470871][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1631.476088][ T30] ? file_close_fd+0x67/0x80 [ 1631.480753][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1631.485791][ T30] __x64_sys_openat+0x247/0x2a0 [ 1631.490694][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1631.496081][ T30] ? do_syscall_64+0x100/0x230 [ 1631.500910][ T30] ? do_syscall_64+0xb6/0x230 [ 1631.505607][ T30] do_syscall_64+0xf3/0x230 [ 1631.510099][ T30] ? clear_bhb_loop+0x35/0x90 [ 1631.514838][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.520946][ T30] RIP: 0033:0x7f97881e1a46 [ 1631.525365][ T30] RSP: 002b:00007ffc25a5b468 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 1631.534250][ T30] RAX: ffffffffffffffda RBX: 00007ffc25a5b6c8 RCX: 00007f97881e1a46 [ 1631.542323][ T30] RDX: 0000000000080000 RSI: 00007ffc25a5b4e0 RDI: 00000000ffffff9c [ 1631.550290][ T30] RBP: 00007ffc25a5b4d0 R08: 0000000000080000 R09: 00007ffc25a5b4e0 [ 1631.558359][ T30] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffc25a5b4e0 [ 1631.566393][ T30] R13: 0000000000000000 R14: 00007ffc25a5b6af R15: 00000000ffffffff [ 1631.574459][ T30] [ 1631.577935][ T30] INFO: task modprobe:29953 blocked for more than 144 seconds. [ 1631.585551][ T30] Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 1631.592873][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1631.601572][ T30] task:modprobe state:D stack:23680 pid:29953 tgid:29953 ppid:2427 flags:0x00000000 [ 1631.611779][ T30] Call Trace: [ 1631.615070][ T30] [ 1631.617993][ T30] __schedule+0x1800/0x4a60 [ 1631.622553][ T30] ? __pfx___schedule+0x10/0x10 [ 1631.627422][ T30] ? __pfx_lock_release+0x10/0x10 [ 1631.632491][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 1631.638402][ T30] ? schedule+0x90/0x320 [ 1631.642686][ T30] schedule+0x14b/0x320 [ 1631.646861][ T30] d_alloc_parallel+0xc16/0x1600 [ 1631.651853][ T30] ? d_alloc_parallel+0x311/0x1600 [ 1631.656980][ T30] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1631.662442][ T30] ? __pfx_default_wake_function+0x10/0x10 [ 1631.668266][ T30] ? __init_waitqueue_head+0xae/0x150 [ 1631.673730][ T30] __lookup_slow+0x117/0x3f0 [ 1631.678345][ T30] ? __pfx___lookup_slow+0x10/0x10 [ 1631.683556][ T30] ? try_to_unlazy+0x35c/0x5b0 [ 1631.688355][ T30] lookup_slow+0x53/0x70 [ 1631.692689][ T30] link_path_walk+0x99b/0xea0 [ 1631.697423][ T30] path_openat+0x25d/0x3470 [ 1631.701988][ T30] ? mark_lock+0x9a/0x350 [ 1631.706327][ T30] ? __pfx_stack_trace_save+0x10/0x10 [ 1631.711750][ T30] ? __lock_acquire+0x137a/0x2040 [ 1631.716795][ T30] ? __pfx_path_openat+0x10/0x10 [ 1631.721882][ T30] do_filp_open+0x235/0x490 [ 1631.726403][ T30] ? __pfx_do_filp_open+0x10/0x10 [ 1631.731484][ T30] ? _raw_spin_unlock+0x28/0x50 [ 1631.736346][ T30] ? alloc_fd+0x5a1/0x640 [ 1631.740741][ T30] do_sys_openat2+0x13e/0x1d0 [ 1631.745434][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 1631.750686][ T30] ? file_close_fd+0x67/0x80 [ 1631.755290][ T30] ? do_raw_spin_lock+0x14f/0x370 [ 1631.760309][ T30] __x64_sys_openat+0x247/0x2a0 [ 1631.765209][ T30] ? __pfx___x64_sys_openat+0x10/0x10 [ 1631.770654][ T30] ? do_syscall_64+0x100/0x230 [ 1631.775415][ T30] ? do_syscall_64+0xb6/0x230 [ 1631.780079][ T30] do_syscall_64+0xf3/0x230 [ 1631.784612][ T30] ? clear_bhb_loop+0x35/0x90 [ 1631.789310][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.795292][ T30] RIP: 0033:0x7f52c9213a46 [ 1631.799764][ T30] RSP: 002b:00007ffe2f5a3c28 EFLAGS: 00000287 ORIG_RAX: 0000000000000101 [ 1631.808244][ T30] RAX: ffffffffffffffda RBX: 00007ffe2f5a3e88 RCX: 00007f52c9213a46 [ 1631.816290][ T30] RDX: 0000000000080000 RSI: 00007ffe2f5a3ca0 RDI: 00000000ffffff9c [ 1631.824325][ T30] RBP: 00007ffe2f5a3c90 R08: 0000000000080000 R09: 00007ffe2f5a3ca0 [ 1631.832361][ T30] R10: 0000000000000000 R11: 0000000000000287 R12: 00007ffe2f5a3ca0 [ 1631.840361][ T30] R13: 0000000000000000 R14: 00007ffe2f5a3e6f R15: 00000000ffffffff [ 1631.848413][ T30] [ 1631.851521][ T30] [ 1631.851521][ T30] Showing all locks held in the system: [ 1631.859316][ T30] 2 locks held by kworker/u8:1/12: [ 1631.864532][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1631.876313][ T30] #1: ffffc90000117d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1631.888520][ T30] 1 lock held by khungtaskd/30: [ 1631.893453][ T30] #0: ffffffff8e336e60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 1631.903366][ T30] 2 locks held by kworker/u8:2/35: [ 1631.908489][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1631.920216][ T30] #1: ffffc90000ab7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1631.932378][ T30] 2 locks held by kworker/u8:3/52: [ 1631.937483][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1631.949217][ T30] #1: ffffc90000bc7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1631.961509][ T30] 2 locks held by kworker/u8:7/2427: [ 1631.966819][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1631.978610][ T30] #1: ffffc90009037d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1631.990785][ T30] 2 locks held by kworker/u8:8/2441: [ 1631.996153][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1632.007892][ T30] #1: ffffc900093c7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1632.020077][ T30] 2 locks held by getty/4855: [ 1632.025170][ T30] #0: ffff88802aad90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1632.034988][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 1632.045140][ T30] 2 locks held by kworker/u8:4/10390: [ 1632.050535][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1632.062357][ T30] #1: ffffc90004447d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1632.074711][ T30] 2 locks held by kworker/u8:6/13850: [ 1632.080089][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1632.091811][ T30] #1: ffffc90004b7fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1632.104155][ T30] 2 locks held by kworker/u8:11/13851: [ 1632.109628][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1632.121371][ T30] #1: ffffc90004da7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1632.134327][ T30] 2 locks held by kworker/u8:12/13852: [ 1632.140401][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1632.152179][ T30] #1: ffffc90004057d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1632.164352][ T30] 1 lock held by cmp/29877: [ 1632.168861][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1632.178860][ T30] 1 lock held by modprobe/29899: [ 1632.183834][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1632.193815][ T30] 1 lock held by modprobe/29909: [ 1632.198760][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1632.208912][ T30] 1 lock held by modprobe/29925: [ 1632.213918][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1632.224261][ T30] 2 locks held by kworker/u8:0/29927: [ 1632.229733][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1632.241492][ T30] #1: ffffc90009307d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1632.253653][ T30] 1 lock held by modprobe/29953: [ 1632.258594][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1632.268565][ T30] 1 lock held by modprobe/30081: [ 1632.273543][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1632.283521][ T30] 1 lock held by modprobe/30092: [ 1632.288469][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1632.298464][ T30] 1 lock held by modprobe/30096: [ 1632.303498][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1632.313465][ T30] 1 lock held by modprobe/30097: [ 1632.318409][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1632.328370][ T30] 2 locks held by kworker/u8:5/30098: [ 1632.333797][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1632.345562][ T30] #1: ffffc9000944fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1632.357729][ T30] 1 lock held by modprobe/30099: [ 1632.362713][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1632.372714][ T30] 2 locks held by kworker/u8:9/30102: [ 1632.378091][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1632.389875][ T30] #1: ffffc90004a6fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1632.402036][ T30] 1 lock held by modprobe/30103: [ 1632.406959][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1632.416949][ T30] 2 locks held by kworker/u8:10/30104: [ 1632.422685][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1632.434414][ T30] #1: ffffc90004a1fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1632.446861][ T30] 1 lock held by modprobe/30105: [ 1632.452004][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1632.462177][ T30] 2 locks held by kworker/u8:14/30116: [ 1632.467651][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1632.479395][ T30] #1: ffffc90003d77d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1632.491821][ T30] 1 lock held by modprobe/30117: [ 1632.496861][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1632.506967][ T30] 2 locks held by kworker/u8:15/30118: [ 1632.512456][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1632.524256][ T30] #1: ffffc90003667d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1632.536437][ T30] 1 lock held by modprobe/30139: [ 1632.540700][ T5107] Bluetooth: hci3: command tx timeout [ 1632.541496][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1632.556759][ T30] 2 locks held by kworker/u8:16/30140: [ 1632.562256][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1632.574001][ T30] #1: ffffc90004d2fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1632.586143][ T30] 1 lock held by modprobe/30143: [ 1632.591127][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1632.601212][ T30] 2 locks held by kworker/u8:17/30145: [ 1632.606693][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1632.618620][ T30] #1: ffffc90003fa7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1632.631061][ T30] 1 lock held by modprobe/30146: [ 1632.636015][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1632.645998][ T30] 2 locks held by kworker/u8:18/30175: [ 1632.651485][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1632.663176][ T30] #1: ffffc9000313fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1632.675320][ T30] 1 lock held by modprobe/30216: [ 1632.680246][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1632.690226][ T30] 2 locks held by kworker/u8:19/30219: [ 1632.695712][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1632.707639][ T30] #1: ffffc90003f27d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1632.719996][ T30] 3 locks held by syz-executor/30224: [ 1632.725417][ T30] #0: ffff88805fc80d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1632.735424][ T30] #1: ffff88805fc80078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1632.745247][ T30] #2: ffffffff8f774968 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1632.755386][ T30] 1 lock held by modprobe/30227: [ 1632.760340][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1632.770360][ T30] 4 locks held by syz-executor/30232: [ 1632.775802][ T30] #0: ffff8880687bcd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1632.785869][ T30] #1: ffff8880687bc078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1632.795734][ T30] #2: ffffffff8f774968 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1632.805828][ T30] #3: ffffffff8e33c238 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 1632.816785][ T30] 2 locks held by kworker/u8:20/30234: [ 1632.822356][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1632.834104][ T30] #1: ffffc900097f7d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1632.846640][ T30] 1 lock held by modprobe/30236: [ 1632.851899][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1632.861971][ T30] 3 locks held by syz-executor/30240: [ 1632.867368][ T30] #0: ffff8880677ecd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1632.877414][ T30] #1: ffff8880677ec078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1632.887198][ T30] #2: ffffffff8f774968 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1632.897371][ T30] 1 lock held by modprobe/30243: [ 1632.902372][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1632.912366][ T30] 3 locks held by syz-executor/30249: [ 1632.917746][ T30] #0: ffff88802ab4cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1632.927749][ T30] #1: ffff88802ab4c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1632.937478][ T30] #2: ffffffff8f774968 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1632.948267][ T30] 1 lock held by modprobe/30252: [ 1632.953383][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1632.963656][ T30] 2 locks held by kworker/u8:23/30254: [ 1632.969106][ T30] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 1632.980845][ T30] #1: ffffc90009777d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 1632.993000][ T30] 3 locks held by syz-executor/30259: [ 1632.998355][ T30] #0: ffff88806539cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 1633.008411][ T30] #1: ffff88806539c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 1633.018166][ T30] #2: ffffffff8f774968 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 1633.028371][ T30] 1 lock held by modprobe/30262: [ 1633.033353][ T30] #0: ffff8880253797e8 (&type->i_mutex_dir_key#3){++++}-{3:3}, at: lookup_slow+0x45/0x70 [ 1633.043693][ T30] [ 1633.046070][ T30] ============================================= [ 1633.046070][ T30] [ 1633.054575][ T30] NMI backtrace for cpu 1 [ 1633.058903][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 1633.068524][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1633.078577][ T30] Call Trace: [ 1633.081855][ T30] [ 1633.084857][ T30] dump_stack_lvl+0x241/0x360 [ 1633.089609][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1633.094799][ T30] ? __pfx__printk+0x10/0x10 [ 1633.099381][ T30] ? vprintk_emit+0x631/0x770 [ 1633.104077][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 1633.109098][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 1633.114027][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1633.119470][ T30] ? _printk+0xd5/0x120 [ 1633.123615][ T30] ? __pfx__printk+0x10/0x10 [ 1633.128191][ T30] ? __wake_up_klogd+0xcc/0x110 [ 1633.133027][ T30] ? __pfx__printk+0x10/0x10 [ 1633.137610][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 1633.142627][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1633.148599][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 1633.154582][ T30] watchdog+0xfde/0x1020 [ 1633.158812][ T30] ? watchdog+0x1ea/0x1020 [ 1633.163220][ T30] ? __pfx_watchdog+0x10/0x10 [ 1633.167882][ T30] kthread+0x2f0/0x390 [ 1633.171940][ T30] ? __pfx_watchdog+0x10/0x10 [ 1633.176599][ T30] ? __pfx_kthread+0x10/0x10 [ 1633.181212][ T30] ret_from_fork+0x4b/0x80 [ 1633.185620][ T30] ? __pfx_kthread+0x10/0x10 [ 1633.190214][ T30] ret_from_fork_asm+0x1a/0x30 [ 1633.194988][ T30] [ 1633.198170][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1633.203452][ C0] NMI backtrace for cpu 0 [ 1633.203464][ C0] CPU: 0 PID: 30244 Comm: kworker/u8:21 Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 1633.203483][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1633.203494][ C0] Workqueue: events_unbound toggle_allocation_gate [ 1633.203516][ C0] RIP: 0010:call_function_single_prep_ipi+0xa5/0x240 [ 1633.203542][ C0] Code: fa de 8d 4c 89 f8 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 ff e8 7c 20 96 00 48 c7 c3 a0 f2 03 00 49 03 1f 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 5c 20 96 00 44 89 74 24 14 4c 8d [ 1633.203556][ C0] RSP: 0018:ffffc9000968f640 EFLAGS: 00000a02 [ 1633.203569][ C0] RAX: 1ffff110172a7e54 RBX: ffff8880b953f2a0 RCX: ffff88801776da00 [ 1633.203582][ C0] RDX: ffff88801776da00 RSI: 0000000000000001 RDI: 0000000000000001 [ 1633.203593][ C0] RBP: ffffc9000968f6f0 R08: ffffffff81872d13 R09: 1ffff11017287f3a [ 1633.203605][ C0] R10: dffffc0000000000 R11: ffffed1017287f3b R12: dffffc0000000000 [ 1633.203617][ C0] R13: 1ffff920012d1ecc R14: 0000000000000001 R15: ffffffff8ddefa48 [ 1633.203629][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 1633.203647][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1633.203659][ C0] CR2: 00007fb2b0423442 CR3: 000000000e134000 CR4: 00000000003506f0 [ 1633.203673][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1633.203683][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1633.203693][ C0] Call Trace: [ 1633.203700][ C0] [ 1633.203707][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 1633.203726][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 1633.203748][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 1633.203767][ C0] ? nmi_handle+0x2a/0x5a0 [ 1633.203790][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1633.203810][ C0] ? nmi_handle+0x14f/0x5a0 [ 1633.203825][ C0] ? nmi_handle+0x2a/0x5a0 [ 1633.203841][ C0] ? call_function_single_prep_ipi+0xa5/0x240 [ 1633.203863][ C0] ? default_do_nmi+0x63/0x160 [ 1633.203883][ C0] ? exc_nmi+0x123/0x1f0 [ 1633.203900][ C0] ? end_repeat_nmi+0xf/0x53 [ 1633.203923][ C0] ? smp_call_function_many_cond+0x11e3/0x29d0 [ 1633.203942][ C0] ? call_function_single_prep_ipi+0xa5/0x240 [ 1633.203965][ C0] ? call_function_single_prep_ipi+0xa5/0x240 [ 1633.203988][ C0] ? call_function_single_prep_ipi+0xa5/0x240 [ 1633.204011][ C0] [ 1633.204016][ C0] [ 1633.204024][ C0] ? __pfx_call_function_single_prep_ipi+0x10/0x10 [ 1633.204048][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1633.204066][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1633.204083][ C0] ? trace_csd_queue_cpu+0x95/0x210 [ 1633.204107][ C0] smp_call_function_many_cond+0x11f5/0x29d0 [ 1633.204125][ C0] ? kmem_cache_alloc_bulk_noprof+0x146/0x770 [ 1633.204149][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1633.204167][ C0] ? kmem_cache_alloc_bulk_noprof+0x146/0x770 [ 1633.204192][ C0] ? kmem_cache_alloc_bulk_noprof+0x146/0x770 [ 1633.204214][ C0] ? perf_event_text_poke+0x258/0x330 [ 1633.204236][ C0] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 1633.204253][ C0] ? __pfx_perf_event_text_poke+0x10/0x10 [ 1633.204269][ C0] ? __mutex_trylock_common+0x183/0x2e0 [ 1633.204285][ C0] ? __pfx___might_resched+0x10/0x10 [ 1633.204306][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 1633.204324][ C0] on_each_cpu_cond_mask+0x3f/0x80 [ 1633.204342][ C0] text_poke_bp_batch+0x9ef/0xb30 [ 1633.204366][ C0] ? kmem_cache_alloc_bulk_noprof+0x147/0x770 [ 1633.204388][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 1633.204410][ C0] ? arch_jump_label_transform_queue+0x9b/0x100 [ 1633.204435][ C0] text_poke_finish+0x30/0x50 [ 1633.204453][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 1633.204474][ C0] static_key_enable_cpuslocked+0x136/0x260 [ 1633.204495][ C0] static_key_enable+0x1a/0x20 [ 1633.204514][ C0] toggle_allocation_gate+0xb5/0x250 [ 1633.204532][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 1633.204550][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1633.204576][ C0] ? process_scheduled_works+0x945/0x1830 [ 1633.204595][ C0] process_scheduled_works+0xa2c/0x1830 [ 1633.204628][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1633.204658][ C0] ? assign_work+0x364/0x3d0 [ 1633.204679][ C0] worker_thread+0x86d/0xd40 [ 1633.204706][ C0] ? __kthread_parkme+0x169/0x1d0 [ 1633.204728][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1633.204748][ C0] kthread+0x2f0/0x390 [ 1633.204770][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1633.204789][ C0] ? __pfx_kthread+0x10/0x10 [ 1633.204811][ C0] ret_from_fork+0x4b/0x80 [ 1633.204832][ C0] ? __pfx_kthread+0x10/0x10 [ 1633.204853][ C0] ret_from_fork_asm+0x1a/0x30 [ 1633.204882][ C0] [ 1633.205501][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1633.661634][ T30] CPU: 1 PID: 30 Comm: khungtaskd Not tainted 6.10.0-syzkaller-11323-g7846b618e0a4 #0 [ 1633.671168][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 1633.681209][ T30] Call Trace: [ 1633.684479][ T30] [ 1633.687405][ T30] dump_stack_lvl+0x241/0x360 [ 1633.692079][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1633.697264][ T30] ? __pfx__printk+0x10/0x10 [ 1633.701853][ T30] ? vscnprintf+0x5d/0x90 [ 1633.706174][ T30] panic+0x349/0x860 [ 1633.710068][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1633.716212][ T30] ? __pfx_panic+0x10/0x10 [ 1633.720627][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1633.725992][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 1633.732135][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 1633.738280][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 1633.744425][ T30] watchdog+0x101d/0x1020 [ 1633.748750][ T30] ? watchdog+0x1ea/0x1020 [ 1633.753159][ T30] ? __pfx_watchdog+0x10/0x10 [ 1633.757827][ T30] kthread+0x2f0/0x390 [ 1633.761891][ T30] ? __pfx_watchdog+0x10/0x10 [ 1633.766558][ T30] ? __pfx_kthread+0x10/0x10 [ 1633.771145][ T30] ret_from_fork+0x4b/0x80 [ 1633.775553][ T30] ? __pfx_kthread+0x10/0x10 [ 1633.780134][ T30] ret_from_fork_asm+0x1a/0x30 [ 1633.784900][ T30] [ 1633.788239][ T30] Kernel Offset: disabled [ 1633.792553][ T30] Rebooting in 86400 seconds..